.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:44:43.438409951Z | 47 | PC: 12a96 | Get disk transfer address |
| 2018-12-17T22:44:43.447471089Z | 26 | PC: 12aa8 | Set disk transfer address |
| 2018-12-17T22:44:43.44979706Z | 25 | PC: 12ab7 | Get default drive |
| 2018-12-17T22:44:43.451187318Z | 14 | PC: 12ac1 | Set default drive (Drive = 'C') |
| 2018-12-17T22:44:43.453210802Z | 78 | PC: 12ace | Find first file |
| 2018-12-17T22:44:43.461143048Z | 67 | PC: 12afb | Get or set file attributes |
| 2018-12-17T22:44:43.467919516Z | 67 | PC: 12b08 | Get or set file attributes |
| 2018-12-17T22:44:43.814542705Z | 61 | PC: 12b10 | Open file (Filename = 'COMMAND.COM') |
| 2018-12-17T22:44:43.82313355Z | 87 | PC: 12b17 | Get or set file date and time |
| 2018-12-17T22:44:43.824842929Z | 44 | PC: 12b25 | Get time 0x12b25: or dl, dl 0x12b27: je 0x12b21 0x12b29: mov byte ptr [bp + 0x161], dl 0x12b2d: mov ah, 0x3f 0x12b2f: lea dx, word ptr [bp + 0x154] 0x12b33: mov cx, 3 0x12b36: int 0x21 0x12b38: mov ax, 0x4202 0x12b3b: xor cx, cx 0x12b3d: xor dx, dx 0x12b3f: int 0x21 0x12b41: sub ax, 3 0x12b44: mov word ptr cs:[0xfb2d], ax 0x12b48: mov byte ptr cs:[0xfb2c], 0xe9 0x12b4e: lea si, word ptr [bp - 3] 0x12b51: mov di, 0xfcbc 0x12b54: mov cx, 0x167 0x12b57: cld 0x12b58: rep movsb byte ptr es:[di], byte ptr [si] 0x12b5a: mov si, 0xfcd8 |
| 2018-12-17T22:44:43.827285947Z | 63 | PC: 12b38 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:44:43.830918539Z | 66 | PC: 12b41 | Move file pointer |
| 2018-12-17T22:44:43.833327058Z | 64 | PC: 12b6a | Write file or device (Write 359 bytes on handle 5) |
| 2018-12-17T22:44:43.840788715Z | 66 | PC: 12b73 | Move file pointer |
| 2018-12-17T22:44:43.844821627Z | 64 | PC: 12b7d | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:44:43.849771872Z | 87 | PC: 12b92 | Get or set file date and time |
| 2018-12-17T22:44:43.851504384Z | 62 | PC: 12b96 | Close file |
| 2018-12-17T22:44:43.85897953Z | 67 | PC: 12ba3 | Get or set file attributes |
| 2018-12-17T22:44:43.871234766Z | 26 | PC: 12bb2 | Set disk transfer address |
| 2018-12-17T22:44:43.872516292Z | 14 | PC: 12bbc | Set default drive (Drive = 'A') |
| 2018-12-17T22:44:43.874792908Z | 9 | PC: 12a4a | Display string (String= 'This is a fake virus for IX-BBS') |