{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:33.85261741Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:33.89541124Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:33.896777936Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:33.897859033Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:33.900830913Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:33.907994854Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:33.915180467Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:33.922396589Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:33.944330426Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:33.947336738Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:33.948758256Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:33.951762137Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:33.966161661Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:33.967690436Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:33.976246064Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:33.984368982Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:33.987259928Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:33.995543717Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.002604332Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.010704878Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.013874709Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.018694505Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.02120569Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.024284808Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.026527747Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.034730852Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.043212563Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.047299919Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.05455329Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.06179226Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.070039514Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.073159403Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.074806443Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.078534255Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.087921042Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.08952277Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.098216408Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.10673216Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.109533363Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.116767511Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.124814316Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.134339407Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.137351108Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.139953223Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.142436312Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.145472416Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.147713415Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.155948949Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.163088816Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.166793883Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.17490032Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.182172546Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.188179442Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.191199812Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.192812176Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.195370162Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.200157125Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.201692744Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.203574732Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.208626215Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.211346503Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.218175801Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.225651125Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.232702145Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.236384387Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.238111558Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.240458615Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.249234711Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.25126499Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.256783873Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.261000135Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.263859018Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.26839738Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.272514916Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.277669399Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.280892053Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.282355921Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.284904207Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.289409093Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.291477667Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.300122826Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.30954067Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.31256679Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.320129687Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.324588146Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.327523252Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:34.332311966Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:34.335566739Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:34.338076911Z | 42 | PC: 12b8e | Get date 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 0x12bab: int 0x13 0x12bad: jmp 0x12bc0 0x12baf: nop 0x12bb0: mov ax, 0x301 0x12bb3: sub bx, bx 0x12bb5: mov cx, 1 |
| 2018-12-25T11:58:34.340519578Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
{"DateBased":true,"Day":29,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:34.709582684Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:34.723326636Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:34.724981751Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:34.72621006Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:34.729246479Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:34.73481642Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:34.74078462Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:34.746587427Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.75362192Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:34.756928825Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:34.758683194Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:34.762838126Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:34.778089342Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:34.779782682Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:34.802030227Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.809628426Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.812517411Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.820204135Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.834712949Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.84262137Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.846199583Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.849123316Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.85182117Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.855492423Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.858052743Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.866591406Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.875452816Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.879967883Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.887478992Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.895185361Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.905272959Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.910823146Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.912388399Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.914686459Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.924655747Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.926113044Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.935325512Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.943698507Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.946457896Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.953506717Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.961375992Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.969038246Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.972274608Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.974635259Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.977762826Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.981518567Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.983955554Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.993500928Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.002125702Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.005428348Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.014118444Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.021473182Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.026860937Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.030471834Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.032268431Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.035176844Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.041432904Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.043303304Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.045595634Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.051168381Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.054482416Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.062252113Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.071113404Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.079571328Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.082769256Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.084518649Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.087866073Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.097318364Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.099140137Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.10944404Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.117327608Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.120546189Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.131106565Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.138526509Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.146259522Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.150849882Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.152646704Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.155527681Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.16053578Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.162340237Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.170732994Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.178596301Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.181628495Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.190189629Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.193912547Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.198221814Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:35.202949391Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:35.205144028Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:35.208756569Z | 25 | PC: 12b9f | Get default drive |
| 2018-12-25T11:58:35.213946505Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:34.786115284Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:34.831072317Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:34.834224758Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:34.836618297Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:34.841571226Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:34.853206542Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:34.86035193Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:34.867637766Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.876066301Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:34.879638807Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:34.881428459Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:34.884365234Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:34.9002353Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:34.901987665Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:34.912095678Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.936609973Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.939456768Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.946707919Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.954247005Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.961860438Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.965682214Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.968524107Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.971658098Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.974905114Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.9783124Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.991634169Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.99967557Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.004903099Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.012391657Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.019934277Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.028052532Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.031848865Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.033439701Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.035913462Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.044799727Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.04637924Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.054642923Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.076631592Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.07942102Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.086664098Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.09477502Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.102282966Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.105656168Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.108617721Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.111235497Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.114298055Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.116659473Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.125555814Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.132981455Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.136083993Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.143651743Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.151475692Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.157041963Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.161876912Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.163420277Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.16609871Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.172287705Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.17422438Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.176565992Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.182873717Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.187124193Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.194807792Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.2028692Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.210836942Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.214310528Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.216826864Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.219758636Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.225290394Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.227128518Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.232468623Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.236855641Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.238782011Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.244341579Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.248662275Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.256466804Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.263668107Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.265250127Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.267757416Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.271974321Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.273614955Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.281569604Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.289763296Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.293208032Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.300526203Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.308322504Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.311523741Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:35.316480445Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:35.319802321Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:35.322529295Z | 42 | PC: 12b8e | Get date 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 0x12bab: int 0x13 0x12bad: jmp 0x12bc0 0x12baf: nop 0x12bb0: mov ax, 0x301 0x12bb3: sub bx, bx 0x12bb5: mov cx, 1 |
| 2018-12-25T11:58:35.32494903Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
{"DateBased":true,"Day":1,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:34.866065929Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:34.8950247Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:34.897498252Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:34.899029372Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:34.902176815Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:34.908728975Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:34.913671532Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:34.918113295Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.923064419Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:34.925513808Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:34.926728739Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:34.929186866Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:34.940811535Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:34.942066317Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:34.947919908Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.953058435Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.955400376Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.959855967Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:34.965525021Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.97302817Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:34.976016093Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:34.97857433Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:34.980243729Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:34.98213892Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:34.983622762Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:34.988771608Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:34.993080475Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:34.995379059Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.002866296Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.010228787Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.01866261Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.021868373Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.023678578Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.026616388Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.038247893Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.040651503Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.049529608Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.05799038Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.060854968Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.068752588Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.076359324Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.084004331Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.087578418Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.089844177Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.092407361Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.095547597Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.098268823Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.110148893Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.117444816Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.121123021Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.128780736Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.135955381Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.14130103Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.144897457Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.147030309Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.149604365Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.15504723Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.158531913Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.160399928Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.166334109Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.169105213Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.177096616Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.185814901Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.193802356Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.196718781Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.19898342Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.201603961Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.210619197Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.212481642Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.220972713Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.230495243Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.233940921Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.243444995Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.250828461Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.258239122Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:35.261195598Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:35.262702225Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:35.264391631Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:35.267323018Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:35.269724036Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:35.274643159Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.280233835Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.282139472Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:35.287160994Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:35.289717308Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:35.291538651Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:35.298656573Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:35.300270541Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:35.302720795Z | 42 | PC: 12b8e | Get date 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 0x12bab: int 0x13 0x12bad: jmp 0x12bc0 0x12baf: nop 0x12bb0: mov ax, 0x301 0x12bb3: sub bx, bx 0x12bb5: mov cx, 1 |
| 2018-12-25T11:58:35.304800372Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
{"DateBased":true,"Day":10,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:36.082610887Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:36.11660027Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:36.117806424Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:36.11886343Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:36.122268143Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:36.128097681Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:36.134389337Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:36.141507024Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.148615963Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:36.151286163Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:36.152570758Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:36.161509817Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:36.420220087Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:36.421693974Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:36.428829427Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.434549793Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:36.436358161Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.442036493Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:36.446452764Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.451387553Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:36.454055461Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:36.455357364Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:36.457264826Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:36.460096166Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:36.462330409Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:36.467492564Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.472817945Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:36.474788367Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.479071015Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:36.483828628Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.492214003Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:36.496388682Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:36.497840812Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:36.500505279Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:36.510171481Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:36.512397849Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:36.520558034Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.527367574Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:36.530162677Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.537125101Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:36.543619589Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.550648041Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:36.554023407Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:36.555302524Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:36.557406658Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:36.560598012Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:36.562282576Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:36.569613502Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.577219245Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:36.57924257Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.585566986Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:36.592374545Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.595425037Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:36.597928896Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:36.599486096Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:36.601594965Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:36.605755637Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:36.60774144Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:36.609297611Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.613962048Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:36.61681058Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.622976741Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:36.629090003Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.63639733Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:36.638965332Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:36.640060175Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:36.642902384Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:36.651018025Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:36.652778525Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:36.660344884Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.666677373Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:36.669112622Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.676104216Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:36.680394828Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.685046927Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:36.687789749Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:36.689530402Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:36.69174199Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:36.696142688Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:36.697675912Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:36.706047485Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.713479009Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:36.715797683Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:36.721888572Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:36.72875734Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:36.731683753Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:36.735537414Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:36.737900491Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:36.740306903Z | 42 | PC: 12b8e | Get date 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 0x12bab: int 0x13 0x12bad: jmp 0x12bc0 0x12baf: nop 0x12bb0: mov ax, 0x301 0x12bb3: sub bx, bx 0x12bb5: mov cx, 1 |
| 2018-12-25T11:58:37.065547268Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:37.031045479Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:37.063077997Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:37.064270195Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:37.065258005Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:37.071834929Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:37.078947627Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:37.085061178Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:37.091476187Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.097704917Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:37.100233601Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:37.10242124Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:37.105466061Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:37.120542687Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:37.122402465Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:37.129679722Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.13601102Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.139458649Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.145724203Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.151717201Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.158353974Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.161102859Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.162435373Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.164908645Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.167660965Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.168932685Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.176924573Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.183395932Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.185651277Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.192402017Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.198845437Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.210082663Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.216442036Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.218060312Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.220162557Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.228095642Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.229985299Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.237488005Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.244302263Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.246772014Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.25358391Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.260000162Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.267569559Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.270153971Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.271391788Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.273605629Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.276267727Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.277618683Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.285130448Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.291905947Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.294338927Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.301116538Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.306877547Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.31111814Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.313671734Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.314904717Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.3171216Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.321883441Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.323287655Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.324925524Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.329844018Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.33294443Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.338934755Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.345497124Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.352013136Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.354688369Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.356369855Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.358514572Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.366648866Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.369045681Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.376630819Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.383214651Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.386687664Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.392974094Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.399457756Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.406940674Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.409839498Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.411381505Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.415664298Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.41876276Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.420585124Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.428932806Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.435489659Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.437983463Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.444505397Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.450540537Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.452740853Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:37.462484069Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:37.464147411Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:37.466073928Z | 42 | PC: 12b8e | Get date 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 0x12bab: int 0x13 0x12bad: jmp 0x12bc0 0x12baf: nop 0x12bb0: mov ax, 0x301 0x12bb3: sub bx, bx 0x12bb5: mov cx, 1 |
| 2018-12-25T11:58:37.468972253Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
{"DateBased":true,"Day":29,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:37.3948686Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:37.420128761Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:37.421545591Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:37.422562919Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:37.425468596Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:37.43206307Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:37.438803303Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:37.445350204Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.452974316Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:37.456389293Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:37.458252992Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:37.461460872Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:37.816891289Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:37.819037517Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:37.82847553Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.836514059Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.839128185Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.846464611Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.853398255Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.860394809Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.863273372Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.865270583Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.868143217Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.87111814Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.873088323Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.88077539Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.887726148Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.890755936Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.898286105Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.905290544Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.912840691Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.91579671Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.917258637Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.920157257Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.928800922Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.930381519Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.939021537Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.946232644Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.949092668Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.956653128Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.961549315Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.966117092Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.968267314Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.969660866Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.971384527Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.973461919Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.974897406Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.98090232Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.989048705Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.992832229Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.999985902Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.007398167Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.018564302Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.022665427Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.024574249Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.029039775Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.034345508Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.035874617Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.038214296Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.043170549Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.050027275Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.057324093Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.06299095Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.069952668Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.072941493Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.074405525Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.076703069Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.085706818Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.087637362Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.095900883Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.102894622Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.106351835Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.113933447Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.12912426Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.138732318Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.142056588Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.143773239Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.147004185Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.150940804Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.15261161Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.161202237Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.168427475Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.171162309Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.178881977Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.185935462Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.18845339Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:38.193264869Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:38.195093272Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:38.19738039Z | 25 | PC: 12b9f | Get default drive |
| 2018-12-25T11:58:38.202655361Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
{"DateBased":true,"Day":1,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:37.616372857Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:37.656400332Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:37.657436109Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:37.659964665Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:37.663455811Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:37.669848567Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:37.676220326Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:37.683003717Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.689826212Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:37.691907333Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:37.693061154Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:37.696646957Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:37.711384231Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:37.712849432Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:37.720885936Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.727505282Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.730945796Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.738193392Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.745062382Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.751860085Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.756141416Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.757259458Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.758996292Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.762076161Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.763584872Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.771243718Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.778251448Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.781012269Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.787526949Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.794616047Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.801423779Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.804478193Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.806246143Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.814482476Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.822769894Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.824615004Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.832952142Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.83959171Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.842417402Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.849450143Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.855869971Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.862944633Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.867582341Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.869017413Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.871667347Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.874526923Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.875825108Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.880911053Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.887871272Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.890387365Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.896818596Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.903847328Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.908317625Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.910813729Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.912876555Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.915188357Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.919471637Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.922078165Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.923894884Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.928478642Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.931608005Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.938521333Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.944651247Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.951604621Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.954394936Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.955882663Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.958585419Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.966537327Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.968206082Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.98156665Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.988591371Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.991559486Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.99925539Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.005793617Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.012526969Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.016130799Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.017689462Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.019810907Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.023917239Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.025574504Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.032611655Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.03956205Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.041900563Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.047925004Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.051354084Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.053930992Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:38.062198762Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:38.064656592Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:38.067146625Z | 42 | PC: 12b8e | Get date 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 0x12bab: int 0x13 0x12bad: jmp 0x12bc0 0x12baf: nop 0x12bb0: mov ax, 0x301 0x12bb3: sub bx, bx 0x12bb5: mov cx, 1 |
| 2018-12-25T11:58:38.06919452Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
{"DateBased":true,"Day":10,"Month":12,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:37.666065905Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:37.703975438Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:37.705734046Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:37.707158722Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:37.711230466Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:37.717289832Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:37.723740736Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:37.73037519Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.737022895Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:37.739641282Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:37.740999019Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:37.743769235Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:37.757118234Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:37.758732233Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:37.766870594Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.77346088Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.776831458Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.783908514Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.790460845Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.797357399Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.800991014Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.80251804Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.804859034Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.80822909Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.809638185Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.816858408Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.824232433Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.83693399Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.843871696Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.850681967Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.857800598Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.8604177Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.86288294Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.865576817Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.873709431Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.876186942Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.883644149Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.890212366Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.893366641Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.899925058Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.906748937Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.913641485Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.916403823Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.917675904Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.920578018Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.923693632Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.925234323Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.932698146Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.939416489Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.94185205Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.948226365Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:37.954683781Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.963931912Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:37.967445074Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:37.969462704Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:37.972015136Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:37.976649862Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:37.979556117Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:37.981512443Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.986171843Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:37.993004821Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:37.999588599Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.005933772Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.013626114Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.016674533Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.01815193Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.021820546Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.028168039Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.02935645Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.038597968Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.045207056Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.047764636Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.055027902Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.061463848Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.068043773Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.072010541Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.074093887Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.076535321Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.0800846Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.081193783Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.086472467Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.097219423Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.099274304Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.10578549Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.112756782Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.115385816Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:38.119332364Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:38.121300226Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:38.123563673Z | 42 | PC: 12b8e | Get date 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 0x12bab: int 0x13 0x12bad: jmp 0x12bc0 0x12baf: nop 0x12bb0: mov ax, 0x301 0x12bb3: sub bx, bx 0x12bb5: mov cx, 1 |
| 2018-12-25T11:58:38.438745707Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":6138,"SideJobID":0}
.
GIF
Syscalls:
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-25T11:58:38.17532955Z | 26 | PC: 12a83 | Set disk transfer address |
| 2018-12-25T11:58:38.208539425Z | 37 | PC: 12b63 | Set interrupt vector (Interrupt = '3' AKA 'Auxiliary input') |
| 2018-12-25T11:58:38.209758424Z | 26 | PC: 12a83 | Set disk transfer address (See above) |
| 2018-12-25T11:58:38.210739409Z | 71 | PC: 12ab5 | Get current directory |
| 2018-12-25T11:58:38.213256752Z | 78 | PC: 12ac9 | Find first file |
| 2018-12-25T11:58:38.217929997Z | 61 | PC: 12b52 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-25T11:58:38.223434795Z | 63 | PC: 12ae0 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-25T11:58:38.227823189Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.236458956Z | 64 | PC: 12b22 | Write file or device (Write 5 bytes on handle 6) |
| 2018-12-25T11:58:38.240404286Z | 66 | PC: 12b2a | Move file pointer |
| 2018-12-25T11:58:38.242368517Z | 44 | PC: 12b2e | Get time 0x12b2e: mov word ptr ds:[bp + 0x118], dx 0x12b33: call 0x22a5a 0x12b36: mov ax, 0x5701 0x12b39: mov cx, word ptr ds:[bp + 0x2ad] 0x12b3e: mov dx, word ptr ds:[bp + 0x2af] 0x12b43: int 0x21 0x12b45: mov ah, 0x3e 0x12b47: int 0x21 0x12b49: mov ax, 0x3d02 0x12b4c: lea dx, word ptr [bp + 0x2bb] 0x12b50: int 0x21 0x12b52: xchg ax, bx 0x12b53: ret 0x12b54: mov cx, 0x9eb 0x12b57: mov ax, 0xfe05 0x12b5a: jmp 0x12b58 0x12b5c: add ah, 0x3b 0x12b5f: jmp 0x12b55 0x12b61: int 0x21 0x12b63: ret |
| 2018-12-25T11:58:38.246715209Z | 64 | PC: 12a68 | Write file or device (Write 465 bytes on handle 6) |
| 2018-12-25T11:58:38.262850283Z | 87 | PC: 12b45 | Get or set file date and time |
| 2018-12-25T11:58:38.265286742Z | 62 | PC: 12b49 | Close file |
| 2018-12-25T11:58:38.274230336Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.281527882Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.285082196Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.292905096Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.300134235Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.307679681Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.311183214Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.313255267Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.315742274Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.319249364Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.32141094Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.33079779Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.335169629Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.337504019Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.341734295Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.351964835Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.357261107Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.359636236Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.360827886Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.36332716Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.368997136Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.370160541Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.37604478Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.384269254Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.387215254Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.400149169Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.407423063Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.414869346Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.419396848Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.421130439Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.423733868Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.427071538Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.429074394Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.437270989Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.44446756Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.447618791Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.455255124Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.462768461Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.473454495Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.476621634Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.478719026Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.481873611Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.486920677Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.489429276Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.492244493Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.497662327Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.500839011Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.509089936Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.516616673Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.524640742Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.52857421Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.530634569Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.533774644Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.543686297Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.545921084Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.554737426Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.563102574Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.566667186Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.574589527Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.582534741Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.591130975Z | 64 | PC: 12b22 | Write file or device (See above) |
| 2018-12-25T11:58:38.594361279Z | 66 | PC: 12b2a | Move file pointer (See above) |
| 2018-12-25T11:58:38.596264044Z | 44 | PC: 12b2e | Get time (See above) |
| 2018-12-25T11:58:38.59967163Z | 64 | PC: 12a68 | Write file or device (See above) |
| 2018-12-25T11:58:38.603524835Z | 87 | PC: 12b45 | Get or set file date and time (See above) |
| 2018-12-25T11:58:38.605867382Z | 62 | PC: 12b49 | Close file (See above) |
| 2018-12-25T11:58:38.901170711Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.909331471Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.912216006Z | 61 | PC: 12b52 | Open file (See above) |
| 2018-12-25T11:58:38.920112367Z | 63 | PC: 12ae0 | Read file or device (See above) |
| 2018-12-25T11:58:38.92325372Z | 79 | PC: 12ac9 | Find next file (See above) |
| 2018-12-25T11:58:38.926477341Z | 59 | PC: 12b73 | Change current directory |
| 2018-12-25T11:58:38.931514612Z | 59 | PC: 12b7d | Change current directory |
| 2018-12-25T11:58:38.934034806Z | 42 | PC: 12b82 | Get date 0x12b82: cmp dl, 0x1d 0x12b85: jge 0x12b9b 0x12b87: jmp 0x12b8a 0x12b89: nop 0x12b8a: mov ah, 0x2a 0x12b8c: int 0x21 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 |
| 2018-12-25T11:58:38.936463494Z | 42 | PC: 12b8e | Get date 0x12b8e: cmp dh, 0xc 0x12b91: jne 0x12bc0 0x12b93: cmp dl, 0xa 0x12b96: jne 0x12bc0 0x12b98: jge 0x12bb0 0x12b9a: ret 0x12b9b: mov ah, 0x19 0x12b9d: int 0x21 0x12b9f: mov dl, al 0x12ba1: mov ah, 5 0x12ba3: mov cl, 1 0x12ba5: mov ch, 0 0x12ba7: mov dh, 0 0x12ba9: mov al, 0x10 0x12bab: int 0x13 0x12bad: jmp 0x12bc0 0x12baf: nop 0x12bb0: mov ax, 0x301 0x12bb3: sub bx, bx 0x12bb5: mov cx, 1 |
| 2018-12-25T11:58:38.938880679Z | 26 | PC: 12a83 | Set disk transfer address (See above) |