.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:15:37.809602085Z | 26 | PC: 15178 | Set disk transfer address |
| 2018-12-17T23:15:37.81299259Z | 78 | PC: 1518c | Find first file |
| 2018-12-17T23:15:37.819841195Z | 61 | PC: 15199 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T23:15:37.826856459Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.830028178Z | 62 | PC: 151c0 | Close file |
| 2018-12-17T23:15:37.832619878Z | 79 | PC: 1518c | Find next file |
| 2018-12-17T23:15:37.83464378Z | 61 | PC: 15199 | Open file (Filename = 'PRINT.COM') |
| 2018-12-17T23:15:37.843027688Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.844457348Z | 62 | PC: 151c0 | Close file |
| 2018-12-17T23:15:37.846617428Z | 79 | PC: 1518c | Find next file |
| 2018-12-17T23:15:37.849517661Z | 61 | PC: 15199 | Open file (Filename = 'HELLO.COM') |
| 2018-12-17T23:15:37.857330244Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.859594238Z | 62 | PC: 151c0 | Close file |
| 2018-12-17T23:15:37.861633795Z | 79 | PC: 1518c | Find next file |
| 2018-12-17T23:15:37.865496857Z | 61 | PC: 15199 | Open file (Filename = 'PHANG.COM') |
| 2018-12-17T23:15:37.872544265Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.87359137Z | 62 | PC: 151c0 | Close file |
| 2018-12-17T23:15:37.882434893Z | 79 | PC: 1518c | Find next file |
| 2018-12-17T23:15:37.884961387Z | 61 | PC: 15199 | Open file (Filename = 'PRINTA~1.COM') |
| 2018-12-17T23:15:37.889612346Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.891375643Z | 62 | PC: 151c0 | Close file |
| 2018-12-17T23:15:37.893066201Z | 79 | PC: 1518c | Find next file |
| 2018-12-17T23:15:37.89560198Z | 61 | PC: 15199 | Open file (Filename = 'MANDEL.COM') |
| 2018-12-17T23:15:37.901647547Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.90294798Z | 62 | PC: 151c0 | Close file |
| 2018-12-17T23:15:37.904737964Z | 79 | PC: 1518c | Find next file |
| 2018-12-17T23:15:37.907707018Z | 61 | PC: 15199 | Open file (Filename = 'PAH.COM') |
| 2018-12-17T23:15:37.916380575Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.917435566Z | 62 | PC: 151c0 | Close file |
| 2018-12-17T23:15:37.919592538Z | 79 | PC: 1518c | Find next file |
| 2018-12-17T23:15:37.92145045Z | 61 | PC: 15199 | Open file (Filename = 'TEST.COM') |
| 2018-12-17T23:15:37.926697792Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.928357236Z | 87 | PC: 151b0 | Get or set file date and time |
| 2018-12-17T23:15:37.929504753Z | 44 | PC: 151d0 | Get time 0x151d0: or dx, dx 0x151d2: je 0x151cc 0x151d4: mov word ptr [bp + 0x216], dx 0x151d8: mov ax, 0x4200 0x151db: call 0x1523c 0x151de: mov ah, 0x3f 0x151e0: lea dx, word ptr [bp + 0x1fb] 0x151e4: mov cx, 3 0x151e7: int 0x21 0x151e9: mov ax, 0x4202 0x151ec: call 0x1523c 0x151ef: sub ax, 3 0x151f2: mov word ptr cs:[bp + 0x1f9], ax 0x151f7: lea si, word ptr [bp + 0x105] 0x151fb: mov di, 0xfb90 0x151fe: mov cx, 0x114 0x15201: cld 0x15202: rep movsb byte ptr es:[di], byte ptr [si] 0x15204: mov si, 0xfbb1 0x15207: call 0x25161 |
| 2018-12-17T23:15:37.931168837Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.932348164Z | 63 | PC: 151e9 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:15:37.939813987Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.941241701Z | 64 | PC: 15214 | Write file or device (Write 276 bytes on handle 5) |
| 2018-12-17T23:15:37.948122633Z | 66 | PC: 15242 | Move file pointer |
| 2018-12-17T23:15:37.949678598Z | 64 | PC: 15225 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:15:37.952231066Z | 87 | PC: 1522c | Get or set file date and time |
| 2018-12-17T23:15:37.953801392Z | 62 | PC: 15230 | Close file |
| 2018-12-17T23:15:40.376869616Z | 26 | PC: 15237 | Set disk transfer address |
| 2018-12-17T23:15:40.380319141Z | 9 | PC: 12bb5 | Display string (String= '') |
| 2018-12-17T23:15:40.382586642Z | 9 | PC: 12bbc | Display string (Could not find end pointer) |
| 2018-12-17T23:15:40.401848458Z | 76 | PC: 12bd2 | Terminate with return code (Return code = '0') |