.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:44:56.757110523Z | 47 | PC: 12a74 | Get disk transfer address |
| 2018-12-17T22:44:56.758362505Z | 26 | PC: 12a86 | Set disk transfer address |
| 2018-12-17T22:44:56.760312859Z | 25 | PC: 12a95 | Get default drive |
| 2018-12-17T22:44:56.761849008Z | 14 | PC: 12a9f | Set default drive (Drive = 'C') |
| 2018-12-17T22:44:56.763607886Z | 78 | PC: 12aac | Find first file |
| 2018-12-17T22:44:56.771142818Z | 67 | PC: 12ad9 | Get or set file attributes |
| 2018-12-17T22:44:56.778180828Z | 67 | PC: 12ae6 | Get or set file attributes |
| 2018-12-17T22:44:57.454274017Z | 61 | PC: 12aee | Open file (Filename = 'COMMAND.COM') |
| 2018-12-17T22:44:57.465965538Z | 87 | PC: 12af5 | Get or set file date and time |
| 2018-12-17T22:44:57.467934013Z | 44 | PC: 12b03 | Get time 0x12b03: or dl, dl 0x12b05: je 0x12aff 0x12b07: mov byte ptr [bp + 0x18c], dl 0x12b0b: mov ah, 0x3f 0x12b0d: lea dx, word ptr [bp + 0x15a] 0x12b11: mov cx, 3 0x12b14: int 0x21 0x12b16: mov ax, 0x4202 0x12b19: xor cx, cx 0x12b1b: xor dx, dx 0x12b1d: int 0x21 0x12b1f: sub ax, 3 0x12b22: mov word ptr cs:[0xfb2d], ax 0x12b26: mov byte ptr cs:[0xfb2c], 0xe9 0x12b2c: lea si, word ptr [bp - 3] 0x12b2f: nop 0x12b30: mov di, 0xfcbc 0x12b33: mov cx, 0x192 0x12b36: cld 0x12b37: rep movsb byte ptr es:[di], byte ptr [si] |
| 2018-12-17T22:44:57.470699754Z | 63 | PC: 12b16 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:44:57.487490668Z | 66 | PC: 12b1f | Move file pointer |
| 2018-12-17T22:44:57.489287398Z | 64 | PC: 12b49 | Write file or device (Write 402 bytes on handle 5) |
| 2018-12-17T22:44:57.496775267Z | 66 | PC: 12b52 | Move file pointer |
| 2018-12-17T22:44:57.503721533Z | 64 | PC: 12b5c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:44:57.508310931Z | 87 | PC: 12b71 | Get or set file date and time |
| 2018-12-17T22:44:57.511282205Z | 62 | PC: 12b75 | Close file |
| 2018-12-17T22:44:57.51895881Z | 67 | PC: 12b82 | Get or set file attributes |
| 2018-12-17T22:44:57.550888713Z | 26 | PC: 12b91 | Set disk transfer address |
| 2018-12-17T22:44:57.552459099Z | 14 | PC: 12b9b | Set default drive (Drive = 'A') |