{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":12111,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:32:04.660228152Z | 37 | PC: 12bde | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:32:04.662437791Z | 26 | PC: 12be8 | Set disk transfer address |
| 2018-12-25T12:32:04.664485283Z | 42 | PC: 12c0c | Get date 0x12c0c: cmp dh, 9 0x12c0f: jne 0x12c7f 0x12c11: nop 0x12c12: nop 0x12c13: cmp dl, 0xd 0x12c16: jne 0x12c7f 0x12c18: nop 0x12c19: nop 0x12c1a: mov ax, 3 0x12c1d: int 0x10 0x12c1f: lea ax, word ptr [bp + 0xa0] 0x12c23: push ax 0x12c24: mov ah, 9 0x12c26: lea dx, word ptr [bp + 0x3e9] 0x12c2a: int 0x21 0x12c2c: ret 0x12c2d: mov al, 0x82 0x12c2f: out 0x21, al 0x12c31: mov dx, 0x3d4 0x12c34: mov al, 0xa |
| 2018-12-25T12:32:04.666896214Z | 78 | PC: 12c89 | Find first file |
| 2018-12-25T12:32:04.673820685Z | 61 | PC: 12d04 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:32:04.691111365Z | 63 | PC: 12d14 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T12:32:04.698536087Z | 66 | PC: 12e98 | Move file pointer |
| 2018-12-25T12:32:04.699962241Z | 44 | PC: 12e21 | Get time 0x12e21: cmp dx, 0 0x12e24: je 0x12e1d 0x12e26: mov word ptr [bp + 0x1e], dx 0x12e2a: call 0x12e67 0x12e2d: mov ah, 0x40 0x12e2f: mov cx, 0x43b 0x12e32: lea dx, word ptr [bp] 0x12e36: int 0x21 0x12e38: call 0x12e67 0x12e3b: call 0x12e8a 0x12e3e: mov ah, 0x40 0x12e40: mov cx, 4 0x12e43: lea dx, word ptr [bp + 0x3d9] 0x12e47: int 0x21 0x12e49: call 0x12e78 0x12e4c: mov ah, 0x3e 0x12e4e: int 0x21 0x12e50: mov ah, 0x4f 0x12e52: int 0x21 0x12e54: jae 0x12cfb |
| 2018-12-25T12:32:04.70270683Z | 64 | PC: 12e38 | Write file or device (Write 1083 bytes on handle 5) |
| 2018-12-25T12:32:04.718063447Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.719408811Z | 64 | PC: 12e49 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-25T12:32:04.728030097Z | 87 | PC: 12e89 | Get or set file date and time |
| 2018-12-25T12:32:04.729980654Z | 62 | PC: 12e50 | Close file |
| 2018-12-25T12:32:04.737103509Z | 79 | PC: 12e54 | Find next file |
| 2018-12-25T12:32:04.739951552Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:04.74573582Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:04.751493244Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.753411933Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:04.755461405Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:04.763089994Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.764877916Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:04.771186537Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:04.772568585Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:04.780441633Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:04.783017244Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:04.789150693Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:04.795063315Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.805651309Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:04.808033599Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:04.815605426Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.81728564Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:04.82309429Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:04.824475762Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:04.83156562Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:04.833918041Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:04.839554013Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:04.845830962Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.847135466Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:04.848991926Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:04.857278712Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.858441388Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:04.863680811Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:04.865917957Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:04.878581005Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:04.881355756Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:04.888930972Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:04.896181693Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.898919699Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:04.904756138Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:04.914772396Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.916197799Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:04.923349166Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:04.925040595Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:04.93371477Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:04.936525288Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:04.943700607Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:04.950629952Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.952087152Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:04.954865822Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:04.964728387Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:04.966163591Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:04.972500616Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:04.974218288Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:04.981197278Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:04.984423905Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:04.991914576Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:04.999035442Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.001272998Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.004028007Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.013461536Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.016012534Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.023186623Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.024571581Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.032557203Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.035537824Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.043505898Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.046290746Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.048840128Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.051369971Z | 78 | PC: 12c9c | Find first file |
| 2018-12-25T12:32:05.057023729Z | 37 | PC: 12ca9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:32:05.059957064Z | 26 | PC: 12cb3 | Set disk transfer address |
| 2018-12-25T12:32:05.061178265Z | 9 | PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ') |
| 2018-12-25T12:32:05.066055929Z | 76 | PC: 12a86 | Terminate with return code (Return code = '36') |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":12111,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:32:05.247147302Z | 37 | PC: 12bde | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:32:05.248667936Z | 26 | PC: 12be8 | Set disk transfer address |
| 2018-12-25T12:32:05.250085757Z | 42 | PC: 12c0c | Get date 0x12c0c: cmp dh, 9 0x12c0f: jne 0x12c7f 0x12c11: nop 0x12c12: nop 0x12c13: cmp dl, 0xd 0x12c16: jne 0x12c7f 0x12c18: nop 0x12c19: nop 0x12c1a: mov ax, 3 0x12c1d: int 0x10 0x12c1f: lea ax, word ptr [bp + 0xa0] 0x12c23: push ax 0x12c24: mov ah, 9 0x12c26: lea dx, word ptr [bp + 0x3e9] 0x12c2a: int 0x21 0x12c2c: ret 0x12c2d: mov al, 0x82 0x12c2f: out 0x21, al 0x12c31: mov dx, 0x3d4 0x12c34: mov al, 0xa |
| 2018-12-25T12:32:05.252660466Z | 78 | PC: 12c89 | Find first file |
| 2018-12-25T12:32:05.261424798Z | 61 | PC: 12d04 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:32:05.270678011Z | 63 | PC: 12d14 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T12:32:05.282142278Z | 66 | PC: 12e98 | Move file pointer |
| 2018-12-25T12:32:05.284058851Z | 44 | PC: 12e21 | Get time 0x12e21: cmp dx, 0 0x12e24: je 0x12e1d 0x12e26: mov word ptr [bp + 0x1e], dx 0x12e2a: call 0x12e67 0x12e2d: mov ah, 0x40 0x12e2f: mov cx, 0x43b 0x12e32: lea dx, word ptr [bp] 0x12e36: int 0x21 0x12e38: call 0x12e67 0x12e3b: call 0x12e8a 0x12e3e: mov ah, 0x40 0x12e40: mov cx, 4 0x12e43: lea dx, word ptr [bp + 0x3d9] 0x12e47: int 0x21 0x12e49: call 0x12e78 0x12e4c: mov ah, 0x3e 0x12e4e: int 0x21 0x12e50: mov ah, 0x4f 0x12e52: int 0x21 0x12e54: jae 0x12cfb |
| 2018-12-25T12:32:05.290079598Z | 64 | PC: 12e38 | Write file or device (Write 1083 bytes on handle 5) |
| 2018-12-25T12:32:05.309546358Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.311531178Z | 64 | PC: 12e49 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-25T12:32:05.320484435Z | 87 | PC: 12e89 | Get or set file date and time |
| 2018-12-25T12:32:05.323069143Z | 62 | PC: 12e50 | Close file |
| 2018-12-25T12:32:05.332573811Z | 79 | PC: 12e54 | Find next file |
| 2018-12-25T12:32:05.336024868Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.343739133Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.350761101Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.35241398Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.36498598Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.374072667Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.375561829Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.384300017Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.385994705Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.394575301Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.404327603Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.412875657Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.420417635Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.42283911Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.425586796Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.435570036Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.437547381Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.445387573Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.447119722Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.455825511Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.459304309Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.467420547Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.475776076Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.478183995Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.480941629Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.490787505Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.493029851Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.500375672Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.502112434Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.511419768Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.514418639Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.521616914Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.530533726Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.532221935Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.53474721Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.545138916Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.547315942Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.554476072Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.556696679Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.566268761Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.569186757Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.57635721Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.584657054Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.586156384Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.588525936Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.599186829Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.600677991Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.6078421Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.611349982Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.620682125Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.623926987Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.631645358Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.639892975Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.641915469Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.644818246Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.655258398Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.657175168Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.664633833Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.66718212Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.676430492Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.679335118Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.687142184Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.690197821Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.692651189Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.696375119Z | 78 | PC: 12c9c | Find first file |
| 2018-12-25T12:32:05.702788042Z | 37 | PC: 12ca9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:32:05.703819349Z | 26 | PC: 12cb3 | Set disk transfer address |
| 2018-12-25T12:32:05.705834948Z | 9 | PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ') |
| 2018-12-25T12:32:05.71197976Z | 76 | PC: 12a86 | Terminate with return code (Return code = '36') |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":1,"TimeBased":true,"OriginalID":12111,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:32:05.261603546Z | 37 | PC: 12bde | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:32:05.263745343Z | 26 | PC: 12be8 | Set disk transfer address |
| 2018-12-25T12:32:05.266188368Z | 42 | PC: 12c0c | Get date 0x12c0c: cmp dh, 9 0x12c0f: jne 0x12c7f 0x12c11: nop 0x12c12: nop 0x12c13: cmp dl, 0xd 0x12c16: jne 0x12c7f 0x12c18: nop 0x12c19: nop 0x12c1a: mov ax, 3 0x12c1d: int 0x10 0x12c1f: lea ax, word ptr [bp + 0xa0] 0x12c23: push ax 0x12c24: mov ah, 9 0x12c26: lea dx, word ptr [bp + 0x3e9] 0x12c2a: int 0x21 0x12c2c: ret 0x12c2d: mov al, 0x82 0x12c2f: out 0x21, al 0x12c31: mov dx, 0x3d4 0x12c34: mov al, 0xa |
| 2018-12-25T12:32:05.269684393Z | 78 | PC: 12c89 | Find first file |
| 2018-12-25T12:32:05.280930852Z | 61 | PC: 12d04 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:32:05.292006134Z | 63 | PC: 12d14 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T12:32:05.29863692Z | 66 | PC: 12e98 | Move file pointer |
| 2018-12-25T12:32:05.300549925Z | 44 | PC: 12e21 | Get time 0x12e21: cmp dx, 0 0x12e24: je 0x12e1d 0x12e26: mov word ptr [bp + 0x1e], dx 0x12e2a: call 0x12e67 0x12e2d: mov ah, 0x40 0x12e2f: mov cx, 0x43b 0x12e32: lea dx, word ptr [bp] 0x12e36: int 0x21 0x12e38: call 0x12e67 0x12e3b: call 0x12e8a 0x12e3e: mov ah, 0x40 0x12e40: mov cx, 4 0x12e43: lea dx, word ptr [bp + 0x3d9] 0x12e47: int 0x21 0x12e49: call 0x12e78 0x12e4c: mov ah, 0x3e 0x12e4e: int 0x21 0x12e50: mov ah, 0x4f 0x12e52: int 0x21 0x12e54: jae 0x12cfb |
| 2018-12-25T12:32:05.304001031Z | 64 | PC: 12e38 | Write file or device (Write 1083 bytes on handle 5) |
| 2018-12-25T12:32:05.319030351Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.321824919Z | 64 | PC: 12e49 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-25T12:32:05.329508546Z | 87 | PC: 12e89 | Get or set file date and time |
| 2018-12-25T12:32:05.331270643Z | 62 | PC: 12e50 | Close file |
| 2018-12-25T12:32:05.339914072Z | 79 | PC: 12e54 | Find next file |
| 2018-12-25T12:32:05.346189492Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.352298746Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.358154056Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.360160454Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.362279142Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.370773456Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.372687162Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.380784472Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.382517408Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.39117582Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.395096817Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.402792851Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.409918824Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.412239951Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.415003421Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.426527415Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.429290453Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.436979061Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.439045679Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.448796609Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.451841735Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.459410343Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.466979453Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.468937495Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.471560603Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.48137327Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.483989364Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.501746641Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.50396949Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.511136422Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.514938869Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.523088314Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.532132826Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.534186749Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.537161004Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.548039224Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.550174411Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.557733605Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.560338471Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.577217438Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.580017427Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.586831569Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.594061999Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.5959545Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.59895795Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.609881953Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.611745668Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.619516266Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.622380984Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.631912716Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.635195598Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.643815673Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.650260115Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.651818421Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.655232565Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.663589892Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.665286772Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.671493296Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.67408066Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.681380895Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.683902699Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.692204549Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.6945755Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.696355357Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.699373967Z | 78 | PC: 12c9c | Find first file |
| 2018-12-25T12:32:05.705212102Z | 37 | PC: 12ca9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:32:05.706311072Z | 26 | PC: 12cb3 | Set disk transfer address |
| 2018-12-25T12:32:05.708864864Z | 9 | PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ') |
| 2018-12-25T12:32:05.71409529Z | 76 | PC: 12a86 | Terminate with return code (Return code = '36') |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":1,"TimeBased":true,"OriginalID":12111,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T12:32:05.448210246Z | 37 | PC: 12bde | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:32:05.451060984Z | 26 | PC: 12be8 | Set disk transfer address |
| 2018-12-25T12:32:05.452488719Z | 42 | PC: 12c0c | Get date 0x12c0c: cmp dh, 9 0x12c0f: jne 0x12c7f 0x12c11: nop 0x12c12: nop 0x12c13: cmp dl, 0xd 0x12c16: jne 0x12c7f 0x12c18: nop 0x12c19: nop 0x12c1a: mov ax, 3 0x12c1d: int 0x10 0x12c1f: lea ax, word ptr [bp + 0xa0] 0x12c23: push ax 0x12c24: mov ah, 9 0x12c26: lea dx, word ptr [bp + 0x3e9] 0x12c2a: int 0x21 0x12c2c: ret 0x12c2d: mov al, 0x82 0x12c2f: out 0x21, al 0x12c31: mov dx, 0x3d4 0x12c34: mov al, 0xa |
| 2018-12-25T12:32:05.454790432Z | 78 | PC: 12c89 | Find first file |
| 2018-12-25T12:32:05.461674198Z | 61 | PC: 12d04 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T12:32:05.46996269Z | 63 | PC: 12d14 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T12:32:05.478517387Z | 66 | PC: 12e98 | Move file pointer |
| 2018-12-25T12:32:05.480427468Z | 44 | PC: 12e21 | Get time 0x12e21: cmp dx, 0 0x12e24: je 0x12e1d 0x12e26: mov word ptr [bp + 0x1e], dx 0x12e2a: call 0x12e67 0x12e2d: mov ah, 0x40 0x12e2f: mov cx, 0x43b 0x12e32: lea dx, word ptr [bp] 0x12e36: int 0x21 0x12e38: call 0x12e67 0x12e3b: call 0x12e8a 0x12e3e: mov ah, 0x40 0x12e40: mov cx, 4 0x12e43: lea dx, word ptr [bp + 0x3d9] 0x12e47: int 0x21 0x12e49: call 0x12e78 0x12e4c: mov ah, 0x3e 0x12e4e: int 0x21 0x12e50: mov ah, 0x4f 0x12e52: int 0x21 0x12e54: jae 0x12cfb |
| 2018-12-25T12:32:05.485505701Z | 64 | PC: 12e38 | Write file or device (Write 1083 bytes on handle 5) |
| 2018-12-25T12:32:05.501645671Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.50364851Z | 64 | PC: 12e49 | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-25T12:32:05.512530394Z | 87 | PC: 12e89 | Get or set file date and time |
| 2018-12-25T12:32:05.514030618Z | 62 | PC: 12e50 | Close file |
| 2018-12-25T12:32:05.523180489Z | 79 | PC: 12e54 | Find next file |
| 2018-12-25T12:32:05.527477063Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.5355392Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.542638395Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.546588841Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.549056755Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.558470075Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.560122478Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.568362322Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.570782246Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.579339788Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.583025256Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.590257498Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.597384985Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.599668311Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.60256944Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.612100847Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.61499237Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.622479697Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.624513508Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.633962875Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.638568737Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.646672342Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.654778174Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.656448246Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.659074448Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.669094134Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.671799004Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.679238999Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.681266414Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.690480483Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.693313823Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.700752106Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.709230031Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.710902524Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.713640827Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.725244751Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.726925492Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.735198447Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.738335831Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.747542321Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.750929311Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.758929961Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.767513696Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.769363908Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.772727729Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.783543596Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.785166375Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.792830672Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.7956348Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:05.805437684Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:05.808439786Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:05.816497734Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:05.828120848Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.829704523Z | 44 | PC: 12e21 | Get time (See above) |
| 2018-12-25T12:32:05.832220888Z | 64 | PC: 12e38 | Write file or device (See above) |
| 2018-12-25T12:32:05.924648714Z | 66 | PC: 12e98 | Move file pointer (See above) |
| 2018-12-25T12:32:05.926669124Z | 64 | PC: 12e49 | Write file or device (See above) |
| 2018-12-25T12:32:05.934916296Z | 87 | PC: 12e89 | Get or set file date and time (See above) |
| 2018-12-25T12:32:05.938145677Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:06.064582831Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:06.068214066Z | 61 | PC: 12d04 | Open file (See above) |
| 2018-12-25T12:32:06.077203936Z | 63 | PC: 12d14 | Read file or device (See above) |
| 2018-12-25T12:32:06.080603656Z | 62 | PC: 12e50 | Close file (See above) |
| 2018-12-25T12:32:06.082797726Z | 79 | PC: 12e54 | Find next file (See above) |
| 2018-12-25T12:32:06.087012884Z | 78 | PC: 12c9c | Find first file |
| 2018-12-25T12:32:06.093762109Z | 37 | PC: 12ca9 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-25T12:32:06.095142593Z | 26 | PC: 12cb3 | Set disk transfer address |
| 2018-12-25T12:32:06.09781396Z | 9 | PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ') |
| 2018-12-25T12:32:06.104129138Z | 76 | PC: 12a86 | Terminate with return code (Return code = '36') |