.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T21:58:36.820694203Z | 44 | PC: 13e8a | Get time 0x13e8a: mov word ptr [bp + 0x110], dx 0x13e8e: mov ah, 0x1a 0x13e90: lea dx, word ptr [bp + 0x4aa] 0x13e94: int 0x21 0x13e96: mov ah, 0x19 0x13e98: int 0x21 0x13e9a: mov dl, al 0x13e9c: add dl, 1 0x13e9f: mov ah, 0x47 0x13ea1: lea si, word ptr [bp + 0x464] 0x13ea5: int 0x21 0x13ea7: mov ah, 0x4e 0x13ea9: mov cx, 3 0x13eac: lea dx, word ptr [bp + 0x44e] 0x13eb0: int 0x21 0x13eb2: jb 0x13ed0 0x13eb4: cmp word ptr [bp + 0x4c8], 0x4f43 0x13eba: je 0x13ecc 0x13ebc: cmp word ptr [bp + 0x4c4], 0xf568 0x13ec2: jb 0x13ee0 |
| 2018-12-17T21:58:36.822745463Z | 26 | PC: 13e96 | Set disk transfer address |
| 2018-12-17T21:58:36.824058582Z | 25 | PC: 13e9a | Get default drive |
| 2018-12-17T21:58:36.826027311Z | 71 | PC: 13ea7 | Get current directory |
| 2018-12-17T21:58:36.828569861Z | 78 | PC: 13eb2 | Find first file |
| 2018-12-17T21:58:36.832994525Z | 67 | PC: 13ef9 | Get or set file attributes |
| 2018-12-17T21:58:36.836950998Z | 67 | PC: 13f08 | Get or set file attributes |
| 2018-12-17T21:58:36.85209899Z | 61 | PC: 13f13 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T21:58:36.856791815Z | 63 | PC: 13f24 | Read file or device (Read 5 bytes on handle 5) |
| 2018-12-17T21:58:36.860840702Z | 66 | PC: 13fc6 | Move file pointer |
| 2018-12-17T21:58:36.862547627Z | 64 | PC: 14281 | Write file or device (Write 860 bytes on handle 5) |
| 2018-12-17T21:58:36.871394551Z | 66 | PC: 13fc6 | Move file pointer |
| 2018-12-17T21:58:36.872386341Z | 64 | PC: 13f5b | Write file or device (Write 5 bytes on handle 5) |
| 2018-12-17T21:58:36.876862768Z | 87 | PC: 13f68 | Get or set file date and time |
| 2018-12-17T21:58:36.878901592Z | 62 | PC: 13f6c | Close file |
| 2018-12-17T21:58:36.884147014Z | 67 | PC: 13f7b | Get or set file attributes |
| 2018-12-17T21:58:37.212008483Z | 26 | PC: 13f8b | Set disk transfer address |
| 2018-12-17T21:58:37.214924984Z | 59 | PC: 13f93 | Change current directory |
| 2018-12-17T21:58:37.219151349Z | 59 | PC: 13f9b | Change current directory |
| 2018-12-17T21:58:37.22079247Z | 9 | PC: 12a85 | Display string (String= 'Sophos Ltd, Oxford sacrificial COM goat 1400H bytes long ') |
| 2018-12-17T21:58:37.226538794Z | 0 | PC: 12a89 | Program terminate |