Sample viewer

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:34.48514278Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.487411754Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:34.488250935Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:34.489281725Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.490510495Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.491231305Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.491925639Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.493269102Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.494740894Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:34.495599496Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.497621071Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:34.498585906Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.500141936Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:34.501463689Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.503015891Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:34.504505651Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.507477216Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:34.50852241Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.510628303Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:34.515927059Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.518285954Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:34.519362171Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.526613311Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:34.545688936Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.547820501Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:34.549743106Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.551770031Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:34.552809678Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.555510646Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:34.55659931Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.559262197Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:34.561362944Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.563476947Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:34.564897088Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.567982612Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:34.569300085Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.571608335Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:34.573914122Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.576014664Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:34.577095071Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.579768847Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:34.580773463Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.582700569Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:34.584193797Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.586880951Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:34.588253211Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.591058768Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:34.592439245Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.59457238Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:34.596523529Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.59896956Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:34.600038404Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.602480695Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:34.603654559Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.606019521Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:34.607583445Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.609530763Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:34.610802661Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.613361538Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:34.61457299Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.616833509Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:34.619161464Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.62133333Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:34.622604653Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.625712369Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:34.627111198Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.629381685Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:34.630913133Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.633740165Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:34.634823664Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.636743882Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:34.638322657Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.640642057Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:34.641939834Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.645266921Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:34.647009033Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.649086188Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:34.650551095Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.652818144Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:34.653692674Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:34.658929679Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:34.430093452Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.433486508Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:34.434901209Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:34.436417563Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.437985319Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.445757409Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.447056827Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.448626867Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.451990289Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:34.453439143Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.455623943Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:34.457710939Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.459696794Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:34.460803034Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.463400983Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:34.464507029Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.466676572Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:34.468702176Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.471377445Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:34.473058039Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.475999497Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:34.477183394Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.47926021Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:34.480754546Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.483202914Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:34.484509537Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.487510985Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:34.489233541Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.492008134Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:34.493698548Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.497792732Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:34.502684503Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.505448619Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:34.508523864Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.510902258Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:34.512311308Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.516177889Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:34.518301752Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.521802973Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:34.524000024Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.52637799Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:34.527618989Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.530864446Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:34.532555064Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.535396569Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:34.537153165Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.540504924Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:34.542224886Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.546516496Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:34.548943949Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.551697758Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:34.553288287Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.556879141Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:34.55900248Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.561367282Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:34.563515599Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.565464194Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:34.566963586Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.570264206Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:34.571924225Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.574341782Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:34.577380241Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.580396333Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:34.58161053Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.584659495Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:34.586006306Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.58839104Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:34.590772433Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.592574695Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:34.593920085Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.59708053Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:34.598533005Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.60117558Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:34.603201597Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.61775487Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:34.619693615Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.622551781Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:34.624162631Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.627183743Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:34.628851799Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:34.635259487Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:34.788057542Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.790795513Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:34.79249041Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:34.794342968Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.796425218Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.797651804Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.798849849Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.800677381Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.803011191Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:34.804324266Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.807304672Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:34.8158914Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.818299737Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:34.820383498Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.82298194Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:34.824441765Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.827106298Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:34.832673641Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.834849765Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:34.835949397Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.838874268Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:34.840498412Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.842958276Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:34.848598047Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.851551203Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:34.853161571Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.856247732Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:34.857928498Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.86066984Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:34.876358433Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.878802719Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:34.880179634Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.883873812Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:34.885309109Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.887695758Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:34.889861311Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.89225988Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:34.893545434Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.896666933Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:34.898156622Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.900681497Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:34.902146737Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.904811722Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:34.906025523Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.90820973Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:34.90968046Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.912192189Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:34.913599016Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.916897712Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:34.918623792Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.921410642Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:34.923623014Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.926328705Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:34.927593005Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.930795771Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:34.932525198Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.935007626Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:34.936814611Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.939413171Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:34.940733971Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.944141221Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:34.945452718Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.9478253Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:34.950188564Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.953065412Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:34.954812492Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.957750573Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:34.959042605Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.961410651Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:34.963194186Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.966557654Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:34.96821963Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.971362573Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:34.972736741Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.975107861Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:34.978801373Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.981147838Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:34.982349743Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.985455721Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:34.986808466Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:34.993007901Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:35.121525665Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.124889998Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.126190777Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:35.127680198Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.129579352Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.130888483Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.132182193Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.135346431Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:35.136616808Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.138751554Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:35.139882244Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.142710209Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:35.143596912Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.145177406Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.146492659Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.148074211Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:35.149133385Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.151206201Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:35.152130165Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.153620783Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:35.155012774Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.156565249Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:35.157471178Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.159927864Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:35.161076291Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.162567316Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:35.164396472Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.166003753Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:35.167222594Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.178799229Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:35.180088692Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.182445955Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:35.183534471Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.186081686Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:35.187104497Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.189245563Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:35.190773484Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.192909431Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:35.194046723Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.197043909Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:35.198184251Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.200356313Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:35.202392756Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.205190865Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:35.206830828Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.210869141Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:35.212330618Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.215152469Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:35.217333809Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.219845611Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:35.221253577Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.230762262Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:35.232094302Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.234341776Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:35.236340202Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.239145327Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:35.240671442Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.243293727Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:35.245049636Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.247458463Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:35.24878504Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.251499762Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:35.253167063Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.255961937Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:35.257966888Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.260771529Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:35.262829148Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.266008207Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:35.26711446Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.269557397Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:35.271228731Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.273561994Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:35.274774749Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.277716465Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:35.2789244Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.281270469Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:35.282845108Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.285229744Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:35.286366693Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:35.29327814Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:35.276301648Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.280781967Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.282513137Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:35.284115547Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.286099582Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.288158901Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.289527961Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.291082479Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.298781174Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:35.300793467Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.30388682Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:35.3065807Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.309013148Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:35.310437688Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.31349229Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.314744451Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.31698489Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:35.31853308Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.321268221Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:35.322558675Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.325945785Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:35.327344441Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.329864807Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:35.33168315Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.333872124Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:35.335121599Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.33809773Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:35.340300939Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.34279672Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:35.344222931Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.352275707Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:35.354028678Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.356679263Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:35.358623473Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.360514948Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:35.361973615Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.364541574Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:35.36555276Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.367209124Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:35.368827683Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.370527307Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:35.371558443Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.373700309Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:35.374933342Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.377003165Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:35.39224679Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.393997193Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:35.394995563Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.39729883Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:35.398802095Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.400574794Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:35.402138321Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.405421597Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:35.406979897Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.409978121Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:35.411306864Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.413766521Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:35.416310403Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.419110209Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:35.420761436Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.424982051Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:35.426655181Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.429490452Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:35.431407607Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.435096748Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:35.436808397Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.439667582Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:35.442437563Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.445267496Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:35.446598766Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.450049041Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:35.451684988Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.454420559Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:35.457286763Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.459890087Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:35.461486082Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.465228806Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:35.466918126Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.469765358Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:35.4726877Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:35.47989879Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:35.426895927Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.430631319Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.432098261Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:35.434119564Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.437019705Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.438414042Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.439809545Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.441633558Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.443948482Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:35.445027421Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.44755704Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:35.449102594Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.451470621Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:35.452769249Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.455237265Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.456505344Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.458900555Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:35.46072097Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.463066947Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:35.464331354Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.467503687Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:35.468924028Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.471361937Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:35.473444549Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.476119951Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:35.477496526Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.480532948Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:35.481952024Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.484401961Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:35.488891964Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.491480052Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:35.492795129Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.495715162Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:35.497523404Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.499935783Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:35.501647947Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.504232122Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:35.505846385Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.508495183Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:35.511349566Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.513810317Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:35.515357233Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.518776261Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:35.520048199Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.521823888Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:35.523769846Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.526060524Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:35.527262304Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.529637704Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:35.530775796Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.532422683Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:35.534054398Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.535675597Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:35.536664532Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.539254131Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:35.540466216Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.542857837Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:35.544521854Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.547298787Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:35.548657809Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.556462697Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:35.559512738Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.562018786Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:35.563267543Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.565328592Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:35.566243751Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.567767356Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:35.569085314Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.570709444Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:35.571725803Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.573738025Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:35.574707842Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.576267199Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:35.577672526Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.579194711Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:35.580133186Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.581928977Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:35.582918139Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.58455158Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:35.586214698Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:35.592381977Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:35.6086104Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.612333686Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.613703886Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:35.615274731Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.61791017Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.620124484Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.621592322Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.624241395Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.628165443Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:35.630766941Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.634480794Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:35.636031496Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.638337487Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:35.640988728Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.644139333Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.646178385Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.649380276Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:35.652049563Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.655803772Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:35.660701376Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.664482291Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:35.665554379Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.667226796Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:35.669013171Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.671872338Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:35.673293897Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.676295981Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:35.677854426Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.680650254Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:35.68292037Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.685688847Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:35.687341263Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.690419437Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:35.692336846Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.695303688Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:35.697485732Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.700114611Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:35.701518632Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.704493065Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:35.706672948Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.709049683Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:35.710668737Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.71344077Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:35.715168569Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.717984658Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:35.719783198Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.72237242Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:35.724085854Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.727245352Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:35.728494637Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.730691013Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:35.732797919Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.735451463Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:35.73708738Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.740528657Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:35.741795147Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.744000249Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:35.760381676Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.763342065Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:35.765262989Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.769271248Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:35.771561134Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.774534891Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:35.777331835Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.780246037Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:35.781972588Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.785524202Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:35.787510777Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.790332999Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:35.792204869Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.794958478Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:35.796314825Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.798882706Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:35.800793938Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.803078939Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:35.80518582Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.808709081Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:35.810361399Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.813178067Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:35.815333607Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:35.822119742Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:35.814672595Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.818387867Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.820246772Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:35.822010146Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.823933506Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.825706653Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.82705769Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.829527441Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:35.831598417Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.834029837Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:35.835480166Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.838716611Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:35.840341392Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.842897821Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.848550332Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.851245075Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:35.853714302Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.858413407Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:35.86014876Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.863179485Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:35.866127085Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.868526796Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:35.869800139Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.872633309Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:35.874741961Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.880847159Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:35.882317507Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.886687862Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:35.88827921Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.890907693Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:35.892971443Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.895576066Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:35.89708734Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.907142291Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:35.908635293Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.911182247Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:35.913449578Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.91635237Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:35.917939308Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.921312001Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:35.923020755Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.925963628Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:35.930682378Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.93321079Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:35.934529591Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.936981502Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:35.938832402Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.941645017Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:35.943340339Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.946569409Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:35.948410706Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.950987035Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:35.953445999Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.955950512Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:35.957792344Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.960882264Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:35.962590003Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.965451084Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:35.967621794Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.970055256Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:35.971375889Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.974692511Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:35.976570587Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.978894235Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:35.980760394Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.983411857Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:35.984943167Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.989244128Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:35.99045166Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.992770988Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:35.994512531Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.996934933Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:35.997992646Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.000716563Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:36.001780834Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.003387716Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:36.00498674Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.008076462Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:36.0093985Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.015843379Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:35.973064359Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.974931646Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.975879548Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:35.977083575Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.978161059Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.979218905Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.980507839Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.982209042Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.984945671Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:35.986246357Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.988465671Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:35.989640612Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.991903612Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:35.99312361Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.995156023Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.996368864Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.998466348Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:35.999596046Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.001781393Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:36.003001396Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.005078234Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:36.006287933Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.008587112Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:36.009558478Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.01167274Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:36.012996577Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.01485207Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:36.015965923Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.018262819Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:36.01916312Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.021156657Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:36.022484657Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.024556765Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:36.025682187Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.027908439Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:36.028894498Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.030932466Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:36.035281488Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.037216134Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:36.038330725Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.040394873Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:36.041187285Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.042644136Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:36.043946965Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.045852724Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:36.047143229Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.049452061Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:36.050600695Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.052967395Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:36.054341234Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.056253147Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:36.057353475Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.059697801Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:36.060772331Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.063165987Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:36.065837216Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.068110751Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:36.069479916Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.072118684Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:36.073205442Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.075198085Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:36.076807038Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.07908307Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:36.080422139Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.083126292Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:36.08421593Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.086165575Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:36.087700703Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.08965568Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:36.090639404Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.09492414Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:36.096103148Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.098330538Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:36.100016488Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.102200843Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:36.103557032Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.10695546Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:36.108223164Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.110406577Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:36.111947327Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.117204011Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:36.100442655Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.110877305Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.112055677Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:36.113429646Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.115326206Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.11667839Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.118013936Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.120440981Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.122881014Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:36.124324536Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.127765082Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:36.128926253Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.131256361Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:36.146827062Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.155440877Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.156635259Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.159146401Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:36.160880861Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.163300964Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:36.164697285Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.16738141Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:36.168464416Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.170742094Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:36.17177672Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.173425185Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:36.174838937Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.17697089Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:36.177988423Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.181522082Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:36.186057296Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.188270395Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:36.190989377Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.193382851Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:36.194866303Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.208015786Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:36.209264179Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.211634784Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:36.214178086Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.216444061Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:36.217824028Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.220343117Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:36.222888704Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.225115549Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:36.226096324Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.228119144Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:36.229043616Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.231136698Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:36.232285234Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.233682808Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:36.23450046Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.236444644Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:36.237329773Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.238776921Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:36.24022434Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.24172762Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:36.243018036Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.245140567Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:36.24595964Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.248063921Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:36.250012716Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.251468751Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:36.252295922Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.254282769Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:36.255409331Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.257026823Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:36.258421602Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.260025255Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:36.260913296Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.262772217Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:36.263729719Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.265844819Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:36.268057174Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.270711889Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:36.272257435Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.275138466Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:36.276344386Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.278425359Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:36.280421705Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.282374598Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:36.28324571Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.289617621Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:36.107189795Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.10981184Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.110975329Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:36.112583256Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.11486973Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.116331521Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.117734382Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.120198582Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.122368669Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:36.123481675Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.126218857Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:36.127387206Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.129404166Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:36.131588394Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.133950094Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.135369711Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.138217546Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:36.139534479Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.141807249Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:36.143746324Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.145867605Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:36.146881734Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.14915803Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:36.15481339Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.157153791Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:36.165701472Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.167886138Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:36.16896682Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.172088621Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:36.173515605Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.175879223Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:36.177519017Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.180638059Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:36.182113547Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.184599847Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:36.187222584Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.190301424Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:36.193025425Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.195923429Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:36.197302477Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.199623538Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:36.201839532Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.204184269Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:36.205523222Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.208053181Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:36.209367507Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.211736607Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:36.21378783Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.216143856Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:36.217490184Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.220766456Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:36.222131704Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.223621264Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:36.225056056Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.227144387Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:36.228402556Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.231258452Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:36.232619326Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.234858604Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:36.236569565Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.238880439Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:36.240222184Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.242900822Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:36.243998798Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.246220462Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:36.248616283Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.252955288Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:36.253974998Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.259019383Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:36.260571966Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.263053082Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:36.264705712Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.26765924Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:36.268796189Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.271129518Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:36.272616231Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.274765311Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:36.276375369Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.2784865Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:36.279532049Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.285587029Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:36.228008395Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.229667325Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.230547108Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:36.23168601Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.233418576Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.234293211Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.235296118Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.237204856Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:36.238077707Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.239532977Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:36.240772434Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.242184622Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:36.24297388Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.245378936Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.246293563Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.247992378Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:36.249415963Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.251957327Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:36.253978951Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.258879976Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:36.259657041Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.261400069Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:36.26319176Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.264855858Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:36.267937727Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.27103941Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:36.273248019Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.275301396Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:36.276801942Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.27877995Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:36.279656912Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.282039734Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:36.282894962Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.284257656Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:36.285521618Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.287476543Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:36.288342311Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.290775076Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:36.291803742Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.293653165Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:36.29493792Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.296906963Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:36.297874302Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.300247364Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:36.301225411Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.303090475Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:36.304454954Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.306456241Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:36.307307959Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.309641265Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:36.310618106Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.3124421Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:36.313846422Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.315819022Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:36.316674967Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.319034462Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:36.320129694Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.322095967Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:36.323415959Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.325413137Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:36.326449728Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.328695935Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:36.329653204Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.331513959Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:36.332894844Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.334746986Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:36.335636411Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.337886873Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:36.339654944Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.341497228Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:36.342920262Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.344989566Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:36.345887403Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.348098256Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:36.348978077Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.350808771Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:36.351993003Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.353961927Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:36.35497378Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.360339002Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:36.250873956Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.254845563Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.256341253Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:36.257997087Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.260074382Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.262232954Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.263966266Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.26649626Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.269640243Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:36.271376028Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.274160414Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:36.288804472Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.291812354Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:36.293583816Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.297346964Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.299305921Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.302137735Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:36.304736489Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.30757308Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:36.309318594Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.31273476Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:36.314481257Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.317309268Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:36.31931181Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.322028029Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:36.323457264Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.326519921Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:36.327851142Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.330262919Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:36.332220209Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.335076133Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:36.336622526Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.340040078Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:36.342471077Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.345492293Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:36.347235155Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.350206332Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:36.351716368Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.354364859Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:36.356607314Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.359241161Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:36.360821442Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.364247407Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:36.365956552Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.368934327Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:36.371859894Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.375531542Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:36.377413974Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.381643449Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:36.383556812Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.386733133Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:36.388218874Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.390914316Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:36.392664716Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.395553508Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:36.398006523Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.400565637Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:36.401842705Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.405072581Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:36.406550345Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.409130224Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:36.411377155Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.414257973Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:36.416090865Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.419935144Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:36.421351118Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.426053723Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:36.429212033Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.431821821Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:36.433425857Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.436459383Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:36.438515854Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.441171509Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:36.443114918Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.445814407Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:36.447086294Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.449787147Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:36.453681355Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.456316436Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:36.457849195Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.464550841Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:36.54424686Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.54679777Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.547802575Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:36.549173667Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.558609626Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.559635067Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.560592734Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.562258418Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.564225004Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:36.565212888Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.567816519Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:36.568806432Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.570732685Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:36.572554863Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.574624342Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.575639225Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.578126374Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:36.579138832Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.581098447Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:36.590505512Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.592965929Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:36.593944223Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.59669458Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:36.59774007Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.599801031Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:36.601767401Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.604220614Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:36.60529425Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.608005065Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:36.609908606Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.61280254Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:36.615797265Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.617841609Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:36.619709279Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.623981488Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:36.625201372Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.627569471Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:36.629370733Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.63140644Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:36.6323986Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.635376206Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:36.636642671Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.639028034Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:36.64083625Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.642921234Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:36.644037112Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.646366186Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:36.6474462Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.649402075Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:36.651161173Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.653192852Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:36.654266194Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.656780243Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:36.657875288Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.65986286Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:36.661289748Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.663349914Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:36.666738493Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.669261631Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:36.670290331Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.67218634Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:36.673913159Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.675875165Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:36.676812986Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.682189898Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:36.683231122Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.685330547Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:36.687109145Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.689442638Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:36.690838422Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.693447207Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:36.695288218Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.697402557Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:36.699364706Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.701722034Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:36.703104507Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.706096565Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:36.707258122Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.709630639Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:36.711851111Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.717706699Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:36.691782619Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.694070518Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.695119678Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:36.696249935Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.697764656Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.698717169Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.699662309Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.701176428Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.702674327Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:36.703588105Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.706211631Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:36.70740126Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.708924377Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:36.718935553Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.721016299Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.722419447Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.724710993Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:36.725733218Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.727305103Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:36.729000057Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.73056534Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:36.731517724Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.733645679Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:36.734607564Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.736122511Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:36.737903129Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.73968314Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:36.740567556Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.742704274Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:36.74393775Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.745517947Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:36.754397927Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.755886964Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:36.756846112Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.758855202Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:36.759874373Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.76171304Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:36.763482817Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.765635356Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:36.766797249Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.769901062Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:36.771096135Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.773162792Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:36.774392773Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.776597321Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:36.777622409Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.780109736Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:36.787433026Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.789676966Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:36.791448079Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.793690574Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:36.794784167Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.797531285Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:36.799079543Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.802888291Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:36.805627468Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.808004784Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:36.809086452Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.811680141Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:36.813386154Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.815833025Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:36.81761403Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.820242156Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:36.821329538Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.823685943Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:36.82504865Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.827274447Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:36.83047847Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.832900556Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:36.834207071Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.836581582Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:36.837840326Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.839882188Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:36.841066104Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.843570683Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:36.844614724Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.846744142Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:36.847822338Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.84927256Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:36.850330998Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.854332728Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:36.884795139Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.887303129Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.888771517Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:36.890500303Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.893060879Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.89436673Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.895494872Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.897340292Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.89969715Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:36.900943009Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.903719879Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:36.905164349Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.907642086Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:36.910106142Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.912265047Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.913384318Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.916776623Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:36.917996022Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.920224994Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:36.922635481Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.925001209Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:36.926481337Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.929504524Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:36.930643208Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.932537069Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:36.934208901Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.936761347Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:36.938352746Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.94187445Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:36.943166129Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.945430797Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:36.947269946Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.949587642Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:36.951293436Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.954429422Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:36.955556956Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.957550241Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:36.958758545Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.960988242Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:36.961985791Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.964220437Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:36.965527935Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.967869791Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:36.973803045Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.976481589Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:36.978610769Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.981157103Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:36.982611473Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.984759188Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:36.986101578Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.992139719Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:36.993223725Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.995282252Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:36.996957464Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.999132989Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:37.000348842Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.002669513Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:37.003772798Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.005840672Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:37.007187758Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.009446413Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:37.010987282Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.014446418Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:37.015606182Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.017705802Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:37.019304571Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.021746331Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:37.023205674Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.026294366Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:37.027728277Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.030129313Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:37.031931048Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.034564279Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:37.036114753Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.039173184Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:37.040345078Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.042575591Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:37.044332108Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.046402817Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:37.047533082Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:37.053449776Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:37.613081487Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.617140864Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:37.619629552Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:37.621937462Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:37.624183322Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:37.626568384Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:37.628460857Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:37.63042649Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.633820446Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:37.636225949Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.638893684Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:37.644010469Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.646645449Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:37.648299472Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.652500602Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:37.653910908Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.656679012Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:37.658962709Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.66230363Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:37.664158277Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.668526139Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:37.670185514Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.673465098Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:37.675441016Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.678312854Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:37.68036899Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.683282536Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:37.68564923Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.688328285Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:37.689830636Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.700939176Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:37.70277999Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.705821089Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:37.708636192Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.724950916Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:37.727591384Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.730959435Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:37.732897977Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.735783625Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:37.738375971Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.741968819Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:37.743995622Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.747423819Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:37.749095189Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.751741512Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:37.754351784Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.756871059Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:37.758230862Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.761659028Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:37.763492136Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.766076633Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:37.767675417Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.770797532Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:37.772489116Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.775418995Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:37.77852319Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.781387317Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:37.783095983Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.786735152Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:37.78869698Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.791895951Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:37.794178542Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.797292576Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:37.798834335Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.80191764Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:37.803599376Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.806232032Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:37.807930902Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.810930527Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:37.812335149Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.814769382Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:37.817591464Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.821071856Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:37.823139358Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.826772458Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:37.828465688Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.831285294Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:37.834227247Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.837214271Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:37.838987964Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:37.846730292Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:37.999641958Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.003062231Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.005053095Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:38.006982948Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.009445035Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.010793393Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.012164522Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.015156927Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:38.01681358Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.019274393Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:38.021098193Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.024136786Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:38.025499018Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.028180576Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.029845655Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.032326255Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:38.033698428Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.036983525Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:38.038653447Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.041552156Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:38.04443188Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.047236056Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:38.050158905Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.053668758Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:38.056636513Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.059520314Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:38.071455192Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.0743411Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:38.075751266Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.078615493Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:38.084603145Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.087435287Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:38.089370991Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.092743516Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:38.094892793Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.101655249Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:38.103872759Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.106686199Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:38.108330329Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.111803778Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:38.113571998Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.116453087Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:38.118433017Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.121745091Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:38.123191337Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.126202557Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:38.127994994Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.13089237Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:38.133146029Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.13663852Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:38.13831472Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.141862867Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:38.144173211Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.147177066Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:38.148837412Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.152197498Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:38.153689856Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.15626973Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:38.158926534Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.161812744Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:38.16358106Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.167046748Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:38.168745588Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.171559377Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:38.174232015Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.177451442Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:38.179206736Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.182761659Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:38.19023611Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.193180354Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:38.195647533Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.198707378Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:38.200523405Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.204630851Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:38.206642968Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.209530582Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:38.212012834Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.215142338Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:38.216866647Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.224287974Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:38.148543663Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.151039672Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.152153655Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:38.153367616Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.155073423Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.156126621Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.157116355Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.158717561Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.160747701Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:38.162016988Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.16450657Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:38.165611032Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.167714775Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:38.170087886Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.17218976Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.173281564Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.176049096Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:38.17765742Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.180172767Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:38.182221714Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.184908231Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:38.186039892Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.188042884Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:38.189680853Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.19197194Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:38.193231204Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.195955652Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:38.197024472Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.199031851Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:38.200741118Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.202752774Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:38.203780125Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.206213944Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:38.207289262Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.209300252Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:38.210838351Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.212852334Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:38.213870424Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.21703627Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:38.21842538Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.221013505Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:38.223611829Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.22578732Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:38.227217209Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.229688183Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:38.231222801Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.23331219Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:38.234601895Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.237060177Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:38.238096699Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.240820242Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:38.24290463Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.24505332Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:38.246132523Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.24852946Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:38.249712682Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.251721059Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:38.252912811Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.254216083Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:38.25496054Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.257147759Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:38.258313612Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.260259161Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:38.26246247Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.265110692Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:38.266682117Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.26952758Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:38.270633696Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.272674151Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:38.274073194Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.27619237Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:38.277337847Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.279616226Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:38.280712228Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.282783613Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:38.284511086Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.286994256Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:38.288472561Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.291498661Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:38.292614074Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.29872105Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:38.234213909Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.23940883Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.24067466Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:38.242091309Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.244275684Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.245549937Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.246909461Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.250596422Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:38.251972748Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.253987005Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:38.255114695Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.257518569Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:38.258675501Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.260936836Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.262364999Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.264491147Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:38.265896611Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.270608107Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:38.2716191Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.273518089Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:38.274897182Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.276937386Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:38.277977738Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.28057435Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:38.281626672Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.283674085Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:38.285157908Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.287224997Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:38.288354456Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.290626342Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:38.291657542Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.293566731Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:38.294803715Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.296705218Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:38.298474718Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.300444719Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:38.301432086Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.303342296Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:38.304662233Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.306566627Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:38.307432869Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.309656056Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:38.310714435Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.312746344Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:38.313891589Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.315953493Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:38.317003777Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.319666499Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:38.320761688Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.322866495Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:38.324319251Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.326425713Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:38.327548075Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.330856298Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:38.332012809Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.33396867Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:38.335498645Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.337533985Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:38.338590768Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.340710042Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:38.341852099Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.343869101Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:38.345480908Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.34780335Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:38.348675375Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.35097084Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:38.351959121Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.353848919Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:38.355374029Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.357327579Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:38.35820839Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.361227794Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:38.362373028Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.364389854Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:38.366037102Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.368366148Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:38.369694281Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.372092796Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:38.373435625Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.379508809Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:38.5077405Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.510182981Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.511080969Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:38.512157618Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.513811318Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.514891142Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.515927951Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.517429817Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.520046015Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:38.521098511Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.526960228Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:38.527987038Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.529978907Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:38.532553384Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.53505052Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.536515806Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.538672004Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:38.539660548Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.541189443Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:38.542976122Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.545180027Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:38.546592191Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.562679324Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:38.563876466Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.565855475Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:38.567746377Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.569715496Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:38.570737273Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.5732638Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:38.57450732Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.576859142Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:38.57809074Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.580416765Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:38.581417546Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.583539505Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:38.584541865Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.586614007Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:38.587855804Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.589780498Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:38.590758648Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.592844433Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:38.594484009Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.596350178Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:38.597504502Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.599380523Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:38.600334296Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.602422466Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:38.603461992Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.605449625Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:38.606764603Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.608743803Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:38.609641082Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.611407113Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:38.612254544Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.613648374Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:38.615731881Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.617183413Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:38.618015573Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.620130486Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:38.621009092Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.622433524Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:38.623786741Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.625302164Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:38.626080822Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.628032021Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:38.628881543Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.630512727Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:38.632110835Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.633633658Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:38.634588067Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.636551627Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:38.637672889Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.640031694Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:38.642394066Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.644740903Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:38.646036105Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.64905298Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:38.650047808Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.651496701Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:38.652907501Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.656301192Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:38.613941372Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.616620654Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.617731443Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:38.619029042Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.621534507Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.623182206Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.624845856Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.630321149Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.633002411Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:38.63476533Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.637904815Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:38.639274114Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.641639322Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:38.643654866Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.645831907Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.646939314Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.651596646Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:38.65599341Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.657620313Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:38.659715154Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.662083227Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:38.663523219Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.667206582Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:38.668582321Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.670916948Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:38.682597229Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.685448206Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:38.686714411Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.693462421Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:38.695035751Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.697529036Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:38.699422767Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.702262658Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:38.703612069Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.706666828Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:38.70785542Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.709965968Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:38.711538261Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.713643762Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:38.714765741Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.71763646Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:38.719003426Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.721109966Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:38.722681585Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.724814425Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:38.726131201Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.729881128Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:38.731423187Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.73447416Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:38.73837704Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.740534841Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:38.741677483Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.743947256Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:38.745398209Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.74818336Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:38.749741026Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.752376625Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:38.753452799Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.755966461Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:38.757267367Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.758842446Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:38.760085633Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.762762573Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:38.764234295Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.766563259Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:38.768075244Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.770140613Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:38.77135218Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.775235685Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:38.776540335Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.77963797Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:38.781153112Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.78341683Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:38.7847361Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.788131107Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:38.790007759Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.792373002Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:38.794647797Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.796107467Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:38.797004868Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.800743367Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:38.762987792Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.765711273Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.766930175Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:38.768024143Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.769517984Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.770515581Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.771571526Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.773825705Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.77551119Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:38.776327371Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.778024957Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:38.778882746Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.780359503Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:38.781679827Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.783672112Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.784677281Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.787009289Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:38.788091107Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.790060721Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:38.791453482Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.793632274Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:38.794839448Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.797727866Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:38.799327526Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.801737753Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:38.804729667Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.810516381Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:38.811659324Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.813171522Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:38.814800408Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.816988213Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:38.818062515Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.820610555Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:38.82193883Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.824174688Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:38.826285076Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.828229888Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:38.829213339Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.831525309Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:38.832521873Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.834286865Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:38.835666769Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.837595554Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:38.838604899Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.840790364Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:38.841897605Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.843840059Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:38.845262748Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.847181832Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:38.848494389Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.850793037Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:38.851894468Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.853850188Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:38.861745336Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.864107272Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:38.865069758Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.867376448Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:38.868394472Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.870272809Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:38.871626612Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.873558372Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:38.874502201Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.876613698Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:38.877577418Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.879333037Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:38.880619156Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.882540281Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:38.883475941Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.88575376Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:38.886761946Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.888517102Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:38.889794638Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.891648913Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:38.892507351Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.894626854Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:38.895587094Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.897359415Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:38.898643658Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.90051963Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:38.902036203Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.907294505Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:38.900356761Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.902821327Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.90403746Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:38.905357754Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.906842971Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.908034838Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.909175492Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.912704664Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:38.914722151Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.917415602Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:38.919161857Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.921134296Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:38.922108005Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.924339696Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.925390012Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.927204458Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:38.92869329Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.930665761Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:38.931636947Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.94065475Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:38.941700185Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.943591628Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:38.945350217Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.946995301Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:38.947873575Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.949986216Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:38.951142032Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.952594797Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:38.954240888Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.955797632Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:38.956789941Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.958991878Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:38.95990162Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.961329036Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:38.962774394Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.964889257Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:38.965943701Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.968397944Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:38.969717419Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.971263623Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:38.97263305Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.974201252Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:38.97519946Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.977200901Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:38.978181896Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.979681024Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:38.981016029Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.982579257Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:38.983461174Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.985359594Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:38.986512757Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.987969335Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:38.989384672Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.99091218Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:38.991765417Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.993588549Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:38.994700388Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.99693873Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:38.998430342Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.002131563Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:39.003248997Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.005436763Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:39.006776196Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.009114156Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:39.010292219Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.015989567Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:39.016884057Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.018548084Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:39.019580038Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.021787481Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:39.023017615Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.032434699Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:39.033504716Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.035663826Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:39.037406944Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.039497305Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:39.040713497Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.043205365Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:39.044370525Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:39.049805008Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:39.236218886Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.239092942Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:39.240240446Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:39.241526112Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:39.243837228Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:39.244983837Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:39.246042313Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:39.248024925Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.250318823Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:39.251405118Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.253819515Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:39.254815866Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.256771461Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:39.258407189Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.260996057Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:39.262031623Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.264595964Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:39.265751545Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.267836098Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:39.269467266Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.27173686Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:39.272763021Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.27527952Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:39.276353828Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.278331817Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:39.280367657Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.283091352Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:39.284671752Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.287762303Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:39.288915407Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.291042541Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:39.292777239Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.294834048Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:39.295908405Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.298669626Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:39.300015097Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.302126768Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:39.30382748Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.306115526Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:39.307287892Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.309916821Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:39.311048909Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.313131Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:39.314917706Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.317063876Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:39.318115517Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.321687096Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:39.322798355Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.324930134Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:39.327015699Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.329186248Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:39.330199743Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.332504523Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:39.334171072Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.336487011Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:39.337754014Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.340714198Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:39.341788823Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.343821391Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:39.346283574Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.34834009Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:39.350135277Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.352554078Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:39.353562834Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.355695945Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:39.357459676Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.359556551Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:39.360608688Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.364300605Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:39.365373413Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.367358624Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:39.368542324Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.370558009Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:39.371627156Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.373816971Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:39.374865541Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.37686443Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:39.378425307Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.380473239Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:39.38170191Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:39.387567428Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:39.803979891Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.806561106Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:39.807782986Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:39.809143361Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:39.810722268Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:39.811805161Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:39.81284866Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:39.814331264Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.816360321Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:39.817479082Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.819836135Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:39.820898994Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.822968075Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:39.82471809Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.827030662Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:39.828529056Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.831377022Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:39.832727096Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.835041333Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:39.836921256Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.839229071Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:39.840549656Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.843450767Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:39.844961272Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.847408916Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:39.849101799Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.851241325Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:39.852360909Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.855593409Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:39.858501902Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.860925477Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:39.86308864Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.865514669Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:39.867005309Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.869863031Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:39.871815788Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.875360161Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:39.877425412Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.879679222Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:39.880869434Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.88349937Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:39.884943934Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.887545132Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:39.889441663Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.891492893Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:39.892503389Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.895199104Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:39.896377253Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.898434405Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:39.900389227Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.902371575Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:39.903495413Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.906378144Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:39.907622918Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.90982006Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:39.911511749Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.913908296Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:39.91531131Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.918245171Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:39.919635182Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.922004972Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:39.923651109Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.925762491Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:39.926874495Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.929544942Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:39.931060238Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.93309121Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:39.935009811Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.93709735Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:39.938175358Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.940667255Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:39.941746469Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.943786874Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:39.945379795Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.947453436Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:39.94850063Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.951432848Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:39.952591945Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.954548825Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:39.956228338Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:39.961970621Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:40.256535987Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.258851114Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:40.262168737Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:40.263222Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:40.264652029Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:40.265649798Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:40.266561462Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:40.268083669Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.270145736Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:40.271153618Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.273492899Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:40.274564638Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.27648463Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:40.277740006Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.279735677Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:40.280746993Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.283381364Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:40.284451593Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.286397904Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:40.287795215Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.289765523Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:40.291040855Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.294052974Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:40.29502684Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.296843266Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:40.302759111Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.304859218Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:40.306585426Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.313379149Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:40.314600702Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.316705299Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:40.318377748Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.320508509Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:40.321765985Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.324598357Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:40.325723829Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.32777624Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:40.329365157Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.331427214Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:40.332510811Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.335519732Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:40.336931291Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.339286772Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:40.351143762Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.353425329Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:40.354690214Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.36871797Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:40.370658634Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.373166619Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:40.375296087Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.377743187Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:40.379200467Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.382281594Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:40.383707135Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.386081504Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:40.388001025Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.39050295Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:40.391877384Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.394914039Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:40.396128254Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.398283252Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:40.409557666Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.412532109Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:40.413839568Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.416405823Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:40.417790846Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.420285852Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:40.422108489Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.424416495Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:40.425929107Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.428968782Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:40.430178366Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.432549044Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:40.434627046Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.437641346Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:40.439099225Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.44207625Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:40.443279602Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.445407408Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:40.447109624Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:40.452730815Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:40.409706395Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.412874755Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:40.41440285Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:40.416082186Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:40.418937408Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:40.42019561Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:40.421375144Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:40.423500031Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.426277808Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:40.427738119Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.430551Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:40.431777172Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.434268735Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:40.435630752Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.442826289Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:40.444230484Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.446626906Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:40.451713893Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.454512617Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:40.455570867Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.475734046Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:40.476954226Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.479068048Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:40.481019258Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.483123843Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:40.484261046Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.488119084Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:40.48915484Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.491217418Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:40.49316703Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.495739353Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:40.497267377Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.500394546Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:40.501941727Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.504570559Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:40.506881121Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.508606856Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:40.509600941Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.511619284Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:40.512782471Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.514315701Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:40.515805935Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.517248265Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:40.518114856Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.520253653Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:40.521391793Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.524075838Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:40.526486197Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.528899328Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:40.530329813Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.533816867Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:40.535191967Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.538132337Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:40.540282864Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.54241034Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:40.543533262Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.546777354Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:40.548229883Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.550650279Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:40.553133728Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.555646216Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:40.557124038Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.560546279Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:40.562106995Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.564541815Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:40.566697059Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.570106264Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:40.57158017Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.574456045Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:40.576661111Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.579108749Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:40.580821039Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.583106218Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:40.584257456Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.58701281Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:40.588358051Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.590456583Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:40.591780111Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.594736Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:40.595969536Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:40.601358101Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:41.016204729Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.020949717Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:41.022347458Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:41.023873504Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.027977135Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.03030914Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.032600996Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.034909656Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.038612606Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:41.040636555Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.043483448Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:41.048857953Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.051622491Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:41.053265682Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.056904855Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:41.05834316Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.060816376Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:41.062817078Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.076787748Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:41.07817157Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.081026992Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:41.082678942Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.08602413Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:41.087719756Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.090528949Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:41.092016856Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.094661293Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:41.096755377Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.099403513Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:41.101029867Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.104473672Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:41.106104863Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.108822412Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:41.111336932Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.114089222Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:41.115375416Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.118102027Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:41.119374097Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.122020327Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:41.124364845Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.126816657Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:41.128231103Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.131270512Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:41.132666855Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.14431633Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:41.158276894Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.161111205Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:41.162493942Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.164951023Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:41.166177384Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.167756939Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:41.16872525Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.171086059Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:41.172036956Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.173773433Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:41.175099564Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.176542629Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:41.177335635Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.179183188Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:41.180166974Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.181676862Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:41.182924225Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.184594634Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:41.185640158Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.187752222Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:41.188901254Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.190526359Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:41.192175494Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.193871369Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:41.194727436Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.196909565Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:41.197872171Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.199361611Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:41.200887452Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.202519518Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:41.203394482Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.206096935Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:41.207403841Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.210081784Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:41.211853552Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:41.217138661Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:41.068917706Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.072186484Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:41.073536615Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:41.075084185Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.080341216Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.094200265Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.095635037Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.099175615Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:41.101680271Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.10475343Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:41.107506789Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.109558459Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:41.110503544Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.112853359Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:41.114436958Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.116681073Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:41.118311398Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.121193381Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:41.122508865Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.124351196Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:41.125836058Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.127581501Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:41.128628697Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.130871591Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:41.131914471Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.133580859Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:41.135355892Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.137014905Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:41.138025505Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.140462718Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:41.141554861Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.143167963Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:41.157527072Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.16000374Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:41.161291207Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.16673945Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:41.167910328Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.170590136Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:41.172344211Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.175127634Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:41.176539101Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.179627098Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:41.180971235Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.183242017Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:41.185069157Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.187534817Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:41.18889273Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.191632858Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:41.193139657Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.195405372Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:41.196961889Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.199905687Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:41.201022335Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.204293207Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:41.206673363Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.209362059Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:41.21102998Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.214786307Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:41.216181823Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.21878156Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:41.222699158Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.225967001Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:41.228574908Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.232544183Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:41.235214988Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.23807933Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:41.240387752Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.243250759Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:41.245015958Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.248421455Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:41.250129919Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.252952924Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:41.255274142Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.258184807Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:41.259889905Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.263614437Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:41.265394544Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.268248287Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:41.270833468Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:41.277392157Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:41.261989988Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.265474477Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:41.267165714Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:41.269058251Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.271905646Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.273362293Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.274762289Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.276436806Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.286174419Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:41.287720519Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.290659743Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:41.293016968Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.295879397Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:41.297611903Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.312871522Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:41.314598766Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.317494403Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:41.320183387Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.332944096Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:41.334686944Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.337963688Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:41.339617099Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.342320221Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:41.344151756Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.34731592Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:41.349079977Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.351893594Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:41.354465485Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.356887904Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:41.358159824Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.376108635Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:41.378496752Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.382000098Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:41.384899972Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.387467335Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:41.38885454Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.392308085Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:41.393661407Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.396097464Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:41.397862806Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.400574935Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:41.402198954Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.405148529Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:41.408106785Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.410860959Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:41.412516485Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.416487794Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:41.418153939Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.420965521Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:41.422840481Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.425302763Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:41.426617889Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.429584506Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:41.431033747Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.433839758Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:41.436181705Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.438640327Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:41.440003203Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.44431024Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:41.445797107Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.448364138Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:41.456022402Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.462988214Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:41.464786675Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.468494665Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:41.471397785Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.474505482Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:41.478215546Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.481042425Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:41.483023595Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.486014383Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:41.488285237Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.49083616Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:41.492716607Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.496263486Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:41.497631742Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.500105801Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:41.503374817Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.506285567Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:41.508120396Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:41.515959879Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:42.457243847Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.461134372Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:42.462514171Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:42.464188657Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:42.467026799Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:42.469281129Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:42.470707563Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:42.477654528Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.480166108Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:42.481568104Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.484411961Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:42.486731474Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.489756311Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:42.491701057Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.496676909Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:42.498571034Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.501587379Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:42.503898993Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.50741704Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:42.509898093Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.513559967Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:42.515037929Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.517544858Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:42.523329755Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.525971465Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:42.527433297Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.530187879Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:42.53227006Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.536367273Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:42.53834393Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.551179808Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:42.552968565Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.555883103Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:42.559751185Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.56298007Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:42.564848411Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.568730731Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:42.570063911Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.572448898Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:42.574739975Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.577224302Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:42.578568253Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.58174973Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:42.583164406Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.585748987Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:42.588605572Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.59111021Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:42.592492323Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.595763559Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:42.597483974Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.600240005Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:42.602649401Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.605445328Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:42.606844655Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.609304956Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:42.611252661Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.613922062Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:42.615342366Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.618587317Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:42.62042367Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.624228475Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:42.626550993Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.629111934Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:42.630649588Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.633516439Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:42.634751908Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.637059121Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:42.638760948Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.641181643Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:42.642514655Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.645393736Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:42.646791225Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.649243001Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:42.651077859Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.653393924Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:42.654471001Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.65764299Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:42.659247983Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.661968764Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:42.66451058Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:42.670621602Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:42.718766531Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.720485742Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:42.721483202Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:42.72287715Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:42.723889507Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:42.724628031Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:42.725840904Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.727992301Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:42.728969141Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.731217711Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:42.742706879Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.745912208Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:42.748447804Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.751029325Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:42.752640034Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.755800982Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:42.757228686Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.759532909Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:42.765634661Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.767856016Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:42.769127234Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.771530522Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:42.772767242Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.774804242Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:42.775946036Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.782215651Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:42.783291308Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.785319809Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:42.797261035Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.798722067Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:42.799812855Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.802067303Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:42.803128706Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.805169059Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:42.806475425Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.808426695Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:42.809358621Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.81181241Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:42.812836578Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.814894219Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:42.816186187Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.818144998Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:42.819156953Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.821301877Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:42.822311897Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.824327872Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:42.826006176Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.827894367Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:42.828931072Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.831878575Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:42.832886545Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.834945045Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:42.836906115Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.838951084Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:42.840101662Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.842745056Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:42.844518573Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.846599078Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:42.847981517Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.84989516Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:42.851037486Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.853784596Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:42.855237613Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.857474662Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:42.859218913Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.861260103Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:42.86227866Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.864947363Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:42.865826734Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.86773472Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:42.869369784Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.871516075Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:42.872717369Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.875138325Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:42.876273231Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.878275351Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:42.879777355Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.881759555Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:42.882881779Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:42.888432589Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:43.121224168Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.124106043Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:43.125939125Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:43.127844676Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.129900292Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:43.131297876Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.132658915Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:43.134540767Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.137026264Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:43.138646206Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.141801998Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:43.143129658Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.145608079Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:43.147551744Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.150077032Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:43.151402722Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.154108798Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:43.155793205Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.158314717Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:43.160187674Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.162621505Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:43.163809213Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.165957602Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:43.167954746Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.170777189Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:43.172513734Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.180420722Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:43.182031084Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.18431721Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:43.18636493Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.189278032Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:43.191050005Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.194399206Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:43.195872998Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.198429582Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:43.20031033Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.202970348Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:43.204522228Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.208219174Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:43.209531905Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.211882965Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:43.213656776Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.216362424Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:43.21841274Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.221649874Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:43.223596743Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.226067469Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:43.227383783Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.231212416Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:43.23328296Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.236354687Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:43.239265899Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.241902169Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:43.243257315Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.246266314Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:43.24747598Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.249803493Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:43.252253642Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.25450997Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:43.255582135Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.258702957Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:43.260284803Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.263005842Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:43.265594609Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.268153073Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:43.269524564Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.272997807Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:43.274363221Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.277215545Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:43.279152736Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.281659222Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:43.283107093Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.285552258Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:43.28648641Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.288060264Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:43.289563203Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.291666155Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:43.292967134Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.295558017Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:43.296543286Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:43.300034882Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:43.309654222Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.316989688Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:43.318784241Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:43.320682304Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.322475602Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:43.323837632Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.325504479Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:43.327886215Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.330460945Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:43.331783583Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.335040687Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:43.336844374Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.33985561Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:43.34786361Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.350259848Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:43.35178057Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.355077173Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:43.356683276Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.358932927Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:43.361089549Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.363529996Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:43.364919023Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.368851971Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:43.370408117Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.372895704Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:43.379322914Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.383074727Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:43.384403853Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.388306118Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:43.389653154Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.392026172Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:43.394626119Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.396841048Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:43.398093039Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.402556242Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:43.403808169Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.405977859Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:43.407911664Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.410319734Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:43.411819583Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.414753331Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:43.416174474Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.418224644Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:43.420042134Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.42248511Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:43.42369647Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.426885752Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:43.428062351Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.430154488Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:43.432128563Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.434232153Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:43.435236367Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.437720127Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:43.439208071Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.441194341Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:43.442863712Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.444951439Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:43.446075141Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.448806294Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:43.450432147Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.452281706Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:43.454077212Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.455857972Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:43.45676791Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.458499016Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:43.459978477Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.46188129Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:43.463269643Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.465167393Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:43.466126042Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.467836872Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:43.468858639Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.470946183Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:43.472833655Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.475038796Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:43.476237388Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.478984819Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:43.480451737Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.482548613Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:43.483855872Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:43.489441538Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:43.324776178Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.327701157Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:43.328835051Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:43.330105075Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.332232996Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:43.33332877Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.334450649Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.336933626Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:43.338087455Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.340835642Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:43.342433528Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.344736048Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:43.346066315Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.34916255Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:43.351280438Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.353795337Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:43.356016317Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.358413599Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:43.359799027Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.36294981Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:43.364211127Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.366779Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:43.368308709Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.370330859Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:43.371289578Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.373573807Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:43.374841703Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.376755109Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:43.378016869Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.380194533Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:43.381153445Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.383526724Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:43.384615509Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.386657836Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:43.388601289Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.390722752Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:43.391596151Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.3936694Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:43.395434898Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.398489827Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:43.40118351Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.404250678Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:43.405648669Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.407919506Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:43.40988468Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.411997884Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:43.413023877Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.415840581Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:43.416814977Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.418759069Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:43.42032148Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.422364272Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:43.423421585Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.425875928Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:43.427137495Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.429448307Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:43.431217154Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.433537624Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:43.435608644Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.438473021Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:43.439840195Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.442147846Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:43.444448158Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.446780284Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:43.448486103Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.451769925Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:43.453190924Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.455752231Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:43.457748228Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.461286787Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:43.462822589Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.465846582Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:43.467092314Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.469178315Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:43.473067727Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.475292913Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:43.476496857Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.479293313Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:43.480719157Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:43.485885947Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:44.549525245Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.562872359Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:44.563951563Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:44.565306129Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:44.572033823Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:44.573109373Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:44.574098349Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:44.578858906Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.581000567Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:44.582120566Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.585109607Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:44.586202131Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.588282642Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:44.590549681Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.592623162Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:44.593722643Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.59683597Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:44.597942013Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.600002163Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:44.602111429Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.60453203Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:44.605855809Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.608387051Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:44.610386822Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.612729051Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:44.614094983Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.617000815Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:44.61838876Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.620735928Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:44.622209037Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.624231732Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:44.625526465Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.629936186Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:44.631308121Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.633656645Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:44.635849242Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.63824841Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:44.639609936Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.642967879Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:44.644321978Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.646659788Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:44.648990291Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.651346203Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:44.652685728Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.655988466Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:44.657553963Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.659894914Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:44.661776218Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.663892987Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:44.664973986Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.667269872Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:44.669031892Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.671441458Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:44.673263346Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.675323906Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:44.676413792Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.679220352Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:44.680399759Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.682465237Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:44.684456649Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.686742274Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:44.688077978Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.69095289Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:44.692259392Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.694435184Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:44.696083532Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.69813913Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:44.69920538Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.701608482Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:44.703025826Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.705338274Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:44.707633977Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.709965098Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:44.712028494Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.714515841Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:44.716620172Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.718706734Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:44.71957216Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:44.721351078Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:44.72221447Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:44.725330882Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:46.710139893Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.713380974Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:46.715088707Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:46.717236513Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:46.719283536Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:46.720502041Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:46.721648827Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:46.723412089Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.725732794Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:46.726767594Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.729515029Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:46.730876417Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.733534588Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:46.73602031Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.738571171Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:46.739767613Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.742073578Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:46.743560168Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.745870383Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:46.747325189Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.750577643Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:46.751667241Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.753964625Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:46.755801233Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.757760267Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:46.759009144Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.76192908Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:46.763467011Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.76574435Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:46.76740392Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.769806832Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:46.771282947Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.774438485Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:46.775704045Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.778681471Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:46.794485492Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.797967229Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:46.799987779Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.802922575Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:46.805055762Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.808049028Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:46.809960666Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.812957145Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:46.814469748Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.817527875Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:46.819986843Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.822709042Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:46.824261643Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.827397109Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:46.828727864Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.831580743Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:46.834770709Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.837386537Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:46.839057655Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.842641641Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:46.844366685Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.847126524Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:46.849561436Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.852324925Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:46.854024223Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.857358057Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:46.85880554Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.861300257Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:46.867032368Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.869681276Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:46.87142979Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.875236537Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:46.876996209Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.879541719Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:46.880882742Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.883131565Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:46.884277401Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.886697057Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:46.887781427Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.88945123Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:46.890580705Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.893595044Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:46.894727344Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.8965733Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:46.897980244Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:46.901719311Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:46.782393739Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.78606346Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:46.787462788Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:46.789090169Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:46.790629554Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:46.792249523Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:46.793712308Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:46.795179609Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.800716321Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:46.802221832Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.804756333Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:46.806756558Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.809556068Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:46.811267752Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.817250593Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:46.81895139Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.822266951Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:46.825284313Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.828075334Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:46.829565406Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.833194759Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:46.835119055Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.838093161Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:46.840424583Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.843319119Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:46.844706631Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.847151457Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:46.849447809Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.851883803Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:46.852935434Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.856477427Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:46.857685526Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.859809885Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:46.863081538Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.86576286Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:46.867947965Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.871506792Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:46.873327279Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.876185966Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:46.878957038Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.881887379Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:46.883534065Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.886783716Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:46.888836056Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.891980498Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:46.893969205Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.896662212Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:46.898499052Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.901623779Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:46.904271873Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.907137719Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:46.908875439Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.912585675Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:46.914252977Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.916671638Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:46.918865391Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.921342557Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:46.922689588Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.925598023Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:46.92730729Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.930151409Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:46.932478116Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.935977217Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:46.937834163Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.941585686Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:46.944247992Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.947056004Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:46.948916862Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.951772083Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:46.953230733Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.955965961Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:46.957374579Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.959553005Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:46.961194627Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.964265574Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:46.966166007Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.969358375Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:46.97097117Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.97432493Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:46.97634204Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:46.983482624Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:46.958515667Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.961925295Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:46.964544254Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:46.965995115Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:46.970119268Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:46.980545389Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:46.98214981Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.990101266Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:46.993372705Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:46.996233568Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:46.998218063Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.002008542Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:47.003729979Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.007236567Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:47.01059202Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.014428847Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:47.016311202Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.019653249Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:47.021074982Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.023811404Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:47.026865359Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.042591336Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:47.044805238Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.048073552Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:47.060418394Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.063215235Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:47.065488428Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.068020807Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:47.074749955Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.083393307Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:47.084836976Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.087746435Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:47.08973408Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.09317714Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:47.095791271Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.10301785Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:47.104509628Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.106505614Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:47.107527434Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.109829585Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:47.111241996Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.113079502Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:47.114390836Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.116598234Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:47.117693168Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.119671054Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:47.121073719Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.122739192Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:47.124097077Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.125964402Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:47.12703686Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.130350801Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:47.131859665Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.134137737Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:47.135296591Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.138655864Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:47.139970587Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.142600966Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:47.144631207Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.147320876Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:47.148775212Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.152152688Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:47.153470115Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.155691275Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:47.157724135Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.160064706Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:47.16133386Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.164504374Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:47.166198845Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.168717651Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:47.170990601Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.174043024Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:47.175394723Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.178181378Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:47.179933985Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.182468947Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:47.184529986Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.186884951Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:47.187965726Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:47.195105009Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:47.150187511Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.153745652Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:47.156275342Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:47.157951462Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.160292289Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.161635901Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.163042234Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.165283225Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.167700706Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:47.16892471Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.171208553Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:47.172976903Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.175298451Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:47.176507918Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.182392121Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:47.184013692Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.186375166Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:47.188717762Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.191225204Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:47.192611349Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.196191151Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:47.198143252Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.201070044Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:47.203504357Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.207547548Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:47.209373466Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.212915664Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:47.214117553Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.216551244Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:47.218520535Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.220851974Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:47.222365452Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.225110278Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:47.226811601Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.229319196Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:47.230704184Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.233660581Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:47.235179706Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.237655451Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:47.240396895Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.242757906Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:47.243922945Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.247898314Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:47.249294204Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.251714486Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:47.253800411Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.25615004Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:47.257618105Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.260528941Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:47.26171272Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.264035558Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:47.265752653Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.268317442Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:47.270057846Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.273834815Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:47.275545658Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.277511374Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:47.278973594Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.286123895Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:47.28761912Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.291098527Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:47.292403219Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.294736741Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:47.297088437Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.299497192Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:47.300778568Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.303441546Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:47.305638308Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.308522105Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:47.315328015Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.317721109Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:47.319129339Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.321529127Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:47.322955206Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.324900552Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:47.326511316Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.328546375Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:47.329575896Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.331950428Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:47.33344887Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:47.337712555Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:47.419624592Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.422951085Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:47.424154848Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:47.425362202Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.42692443Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.428050948Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.429203523Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.431165237Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.43903923Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:47.440883604Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.445905083Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:47.446862507Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.448397711Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:47.449728899Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.451164753Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:47.452029599Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.454723273Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:47.455547748Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.457587477Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:47.459185291Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.46139894Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:47.46253197Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.465880411Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:47.466925443Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.468898502Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:47.470369805Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.472489426Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:47.473526915Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.478531155Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:47.480028399Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.482000671Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:47.48355451Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.485904709Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:47.486944228Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.489292372Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:47.499077207Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.50107312Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:47.502508199Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.504526239Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:47.505409145Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.516511997Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:47.517531412Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.519493708Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:47.521420907Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.523686267Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:47.52812262Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.530962195Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:47.532342387Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.534687263Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:47.53659749Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.53869223Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:47.539748516Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.542565506Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:47.544040903Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.546394026Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:47.54843658Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.551082651Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:47.552226214Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.554287288Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:47.555828825Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.55818536Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:47.559712786Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.56275657Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:47.564105839Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.566407095Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:47.568201988Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.570548104Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:47.57187321Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.575132697Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:47.576485985Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.579431331Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:47.581720626Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.584065661Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:47.585389112Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.588588026Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:47.589752223Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.592180097Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:47.594124116Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.596132665Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:47.597171373Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:47.603340008Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:47.398419305Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.401095979Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:47.40239898Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:47.403871995Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.40583271Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.407612978Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.409099946Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.410890659Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.413279166Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:47.41469964Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.417594353Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:47.418761688Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.420858272Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:47.422985402Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.425129782Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:47.426297426Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.430390792Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:47.432113339Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.43501117Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:47.437024893Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.439234668Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:47.440446516Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.446476116Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:47.447882388Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.450291451Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:47.452084172Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.454781027Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:47.456127336Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.46013558Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:47.461621125Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.463956989Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:47.466068855Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.468227526Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:47.469613968Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.473617187Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:47.475192471Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.477722348Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:47.479509205Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.481647057Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:47.482663552Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.493597294Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:47.494975774Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.497088811Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:47.499299153Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.501736712Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:47.503167716Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.506252377Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:47.508408875Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.510906471Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:47.513021881Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.515216184Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:47.516400749Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.519777216Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:47.522189008Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.524769402Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:47.526769166Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.52915477Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:47.530491135Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.533954588Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:47.535267188Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.537940605Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:47.540268983Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.542620004Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:47.544212743Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.547478327Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:47.549312904Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.551749863Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:47.553975582Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.55671479Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:47.558162213Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.561280949Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:47.563056414Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.565439058Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:47.567085462Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.569857833Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:47.572009554Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.574602388Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:47.576641819Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.578693076Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:47.579802088Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:47.585595739Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:47.575504157Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.578512396Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:47.579631137Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:47.580904225Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.582509519Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.583630594Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.584726284Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.587803092Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:47.589095141Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.591403098Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:47.593700102Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.595778739Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:47.596947933Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.602520438Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:47.60397647Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.606442555Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:47.60954865Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.614716879Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:47.616965728Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.620817469Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:47.622355543Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.624797689Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:47.626560998Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.629779268Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:47.631223243Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.63366585Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:47.646294672Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.649394478Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:47.650819627Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.660873395Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:47.661975234Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.664179359Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:47.669472627Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.671700163Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:47.672902273Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.675680744Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:47.677171181Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.679650085Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:47.681394267Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.683496639Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:47.68566867Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.687730224Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:47.688688525Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.690287972Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:47.692055398Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.69364846Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:47.694614852Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.697172468Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:47.698246702Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.699752702Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:47.706700978Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.709198663Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:47.710462858Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.713569193Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:47.714819377Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.716983884Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:47.722504106Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.72492538Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:47.726327914Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.729414246Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:47.730734234Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.732993616Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:47.735159763Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.739441406Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:47.745119304Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.748846132Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:47.750680739Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.753279783Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:47.755131605Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.758485723Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:47.759690538Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.762390148Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:47.763849881Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.765963118Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:47.767302503Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.770091067Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:47.771245325Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.773359752Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:47.775344085Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:47.780649423Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T13:06:48.67545564Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.678704997Z	48	PC: 1bc52 | Get DOS version
2018-12-25T13:06:48.680554155Z	38	PC: 1bc95 | Create PSP
2018-12-25T13:06:48.682505097Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T13:06:48.704166Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T13:06:48.706732392Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T13:06:48.709252911Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T13:06:48.712237831Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.718371505Z	48	PC: 1b852 | Get DOS version
2018-12-25T13:06:48.720105173Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.722862979Z	48	PC: 1b452 | Get DOS version
2018-12-25T13:06:48.725760214Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.729071816Z	48	PC: 1b052 | Get DOS version
2018-12-25T13:06:48.730773902Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.73438332Z	48	PC: 1ac52 | Get DOS version
2018-12-25T13:06:48.735861765Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.73832811Z	48	PC: 1a852 | Get DOS version
2018-12-25T13:06:48.747738817Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.751920745Z	48	PC: 1a452 | Get DOS version
2018-12-25T13:06:48.753649042Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.757050985Z	48	PC: 1a052 | Get DOS version
2018-12-25T13:06:48.758615679Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.761226437Z	48	PC: 19c52 | Get DOS version
2018-12-25T13:06:48.762890894Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.766440045Z	48	PC: 19852 | Get DOS version
2018-12-25T13:06:48.767867517Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.770931719Z	48	PC: 19452 | Get DOS version
2018-12-25T13:06:48.788348376Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.792539822Z	48	PC: 19052 | Get DOS version
2018-12-25T13:06:48.796486944Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.799790583Z	48	PC: 18c52 | Get DOS version
2018-12-25T13:06:48.80148812Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.804354929Z	48	PC: 18852 | Get DOS version
2018-12-25T13:06:48.807549489Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.810741493Z	48	PC: 18452 | Get DOS version
2018-12-25T13:06:48.812136555Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.815819011Z	48	PC: 18052 | Get DOS version
2018-12-25T13:06:48.817405977Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.820442291Z	48	PC: 17c52 | Get DOS version
2018-12-25T13:06:48.822967167Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.825634004Z	48	PC: 17852 | Get DOS version
2018-12-25T13:06:48.82717666Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.829850548Z	48	PC: 17452 | Get DOS version
2018-12-25T13:06:48.832249715Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.834855273Z	48	PC: 17052 | Get DOS version
2018-12-25T13:06:48.836391722Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.839597829Z	48	PC: 16c52 | Get DOS version
2018-12-25T13:06:48.841384815Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.844305029Z	48	PC: 16852 | Get DOS version
2018-12-25T13:06:48.846693163Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.849435242Z	48	PC: 16452 | Get DOS version
2018-12-25T13:06:48.851128981Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.855695044Z	48	PC: 16052 | Get DOS version
2018-12-25T13:06:48.857233056Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.860011271Z	48	PC: 15c52 | Get DOS version
2018-12-25T13:06:48.862264438Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.865085739Z	48	PC: 15852 | Get DOS version
2018-12-25T13:06:48.866769334Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.870494127Z	48	PC: 15452 | Get DOS version
2018-12-25T13:06:48.87197213Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.874727984Z	48	PC: 15052 | Get DOS version
2018-12-25T13:06:48.876854599Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.879421721Z	48	PC: 14c52 | Get DOS version
2018-12-25T13:06:48.880714187Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.883456825Z	48	PC: 14852 | Get DOS version
2018-12-25T13:06:48.885516002Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.888291534Z	48	PC: 14452 | Get DOS version
2018-12-25T13:06:48.889951048Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.893389118Z	48	PC: 14052 | Get DOS version
2018-12-25T13:06:48.895117301Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.897990679Z	48	PC: 13c52 | Get DOS version
2018-12-25T13:06:48.900497659Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.902893952Z	48	PC: 13852 | Get DOS version
2018-12-25T13:06:48.904129534Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.907605427Z	48	PC: 13452 | Get DOS version
2018-12-25T13:06:48.908987857Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.911374836Z	48	PC: 13052 | Get DOS version
2018-12-25T13:06:48.915289934Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:48.917976232Z	48	PC: 12c52 | Get DOS version
2018-12-25T13:06:48.919765093Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T13:06:48.927983913Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:47.815221732Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.817498708Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:47.819750765Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:47.821319345Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.822648774Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.826490644Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.828314357Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.830377271Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.832746663Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:47.833772321Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.835415086Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:47.837024359Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.838701113Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:47.839709051Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.84174606Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:47.842948184Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.844496486Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:47.845694826Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.847501208Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:47.848381313Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.85050861Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:47.851472436Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.852915144Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:47.854356546Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.855865517Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:47.856708477Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.858867783Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:47.859854546Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.861507586Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:47.863452711Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.865066741Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:47.865976587Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.867554123Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:47.869191707Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.871535515Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:47.872987683Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.875597431Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:47.877143308Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.879816584Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:47.882094766Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.884574391Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:47.886948205Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.890160672Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:47.891139029Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.892779962Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:47.894548626Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.896178832Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:47.897189054Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.899405486Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:47.900307044Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.901815491Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:47.903325098Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.904834112Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:47.905679033Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.907547037Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:47.908435089Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.909912426Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:47.911247884Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.912726185Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:47.913629479Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.915693107Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:47.916613118Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.918121868Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:47.919512028Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.921358598Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:47.922268661Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.924393042Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:47.92530816Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.926787348Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:47.928473842Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.930058418Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:47.934889517Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.937228761Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:47.938217366Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.939785424Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:47.941147131Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.943022716Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:47.944425846Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.947244057Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:47.948651291Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:47.954189879Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:47.925719872Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.929038843Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:47.930729877Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:47.932695685Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.935240484Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.936820234Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:47.938287669Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:47.940134311Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.942857617Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:47.944272244Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.947079232Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:47.949484948Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.952493115Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:47.95433092Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.957719013Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:47.959418908Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.969652222Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:47.972026131Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.974785694Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:47.976440587Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.980474373Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:47.982332552Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.985100454Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:47.987566845Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.992743651Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:47.994134626Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:47.997620094Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:47.999230747Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.001739738Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:48.003135705Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.006481805Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:48.008361009Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.011218809Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:48.014138557Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.016727803Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:48.018014862Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.021096072Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:48.022510432Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.025063674Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:48.027292346Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.029762728Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:48.031152176Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.034683764Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:48.036026467Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.038400338Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:48.040014164Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.042641553Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:48.043930393Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.046484053Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:48.048294818Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.051188342Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:48.052581058Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.055751606Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:48.057130434Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.059568769Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:48.062030165Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.064911771Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:48.066269837Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.070824135Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:48.072048871Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.074369226Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:48.07644555Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.079427847Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:48.081218177Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.084975007Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:48.086776119Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.089372042Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:48.092315958Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.09496882Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:48.096306194Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.099244547Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:48.100673814Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.103592288Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:48.105357284Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.107978495Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:48.109722615Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.113548006Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:48.114905917Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.117310588Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:48.119453629Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:48.125622712Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:48.570099496Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.573481444Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:48.574992755Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:48.576522633Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:48.578688062Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:48.580871969Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:48.582394074Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:48.584202934Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.587166416Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:48.588585408Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.5911665Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:48.601842504Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.604614641Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:48.606118975Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.609358358Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:48.610926194Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.613398907Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:48.61553417Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.618454368Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:48.620354024Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.623785808Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:48.625438332Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.627899866Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:48.629870229Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.632414673Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:48.633721579Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.636995298Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:48.638847488Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.641740206Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:48.643523318Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.647097676Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:48.648273227Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.650024074Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:48.65203237Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.653988359Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:48.654807662Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.656723991Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:48.657790228Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.659382927Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:48.661052446Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.66269379Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:48.663748002Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.669487855Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:48.671103102Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.673848559Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:48.676465509Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.678830102Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:48.68010168Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.682416416Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:48.689368023Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.691846502Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:48.693301019Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.696452896Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:48.697842848Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.700256125Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:48.702021681Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.70454775Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:48.70619562Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.70970043Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:48.711503304Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.71435611Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:48.716755062Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.719194781Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:48.720654384Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.723331481Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:48.724837298Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.727300038Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:48.72983334Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.732364684Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:48.733752894Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.736971941Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:48.738641549Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.741305705Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:48.748807013Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.751212726Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:48.752419285Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.755346303Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:48.757767433Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.76104007Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:48.763026396Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:48.769101263Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:48.986579377Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.989427033Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:48.990784465Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:48.992312959Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:48.994433158Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:48.995600686Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:48.996773972Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:48.999660323Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:49.001048543Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.003418129Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:49.005434668Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.007558774Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:49.008658405Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.012085196Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:49.013765379Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.016099323Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:49.018369283Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.02093704Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:49.022506982Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.025348223Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:49.026626605Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.028913383Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:49.0311967Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.033566391Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:49.035018825Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.037767758Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:49.039636677Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.042146563Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:49.04405958Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.047062492Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:49.048578435Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.051410756Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:49.052621201Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.055204145Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:49.057792309Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.060483114Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:49.061801291Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.064431863Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:49.065615687Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.067739817Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:49.069064508Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.071584037Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:49.07314183Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.075702357Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:49.077104347Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.07947118Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:49.081222234Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.083822545Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:49.085146896Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.088171463Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:49.089778142Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.092107839Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:49.094106241Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.097092141Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:49.098503979Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.101001653Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:49.102747739Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.10419056Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:49.105040642Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.107411333Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:49.108708922Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.110952028Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:49.112754328Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.114902172Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:49.116057672Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.118902585Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:49.120077722Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.12221433Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:49.123912819Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.126048345Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:49.127212238Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.129824414Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:49.131012978Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.133134923Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:49.135354397Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.137490845Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:49.138686606Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.146694522Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:49.14880237Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:49.154296873Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:49.15530644Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.161337257Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:49.162462028Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:49.163967726Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:49.165463106Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:49.16731774Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:49.168391918Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:49.169465774Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.171687128Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:49.172831528Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.174549789Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:49.176249953Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.178301868Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:49.179491269Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.18273504Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:49.184273384Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.186921581Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:49.189019081Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.190689946Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:49.19165653Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.193601127Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:49.194684463Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.196459228Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:49.198063695Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.199690119Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:49.200782087Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.202927506Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:49.205162517Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.207182068Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:49.208944362Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.211059978Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:49.212205863Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.213950095Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:49.215677923Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.219068974Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:49.22291835Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.226008067Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:49.227133388Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.229401851Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:49.232372873Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.23478552Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:49.236021573Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.238680894Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:49.240583778Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.243384109Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:49.246452946Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.249169411Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:49.251047598Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.254282553Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:49.255571879Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.257831132Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:49.259374645Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.261681365Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:49.263188728Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.265355927Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:49.266809529Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.268700917Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:49.269860869Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.272277149Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:49.27414211Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.277341126Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:49.279860371Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.28273447Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:49.284461191Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.288066242Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:49.289919268Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.292574213Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:49.295547111Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.29806782Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:49.299423859Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.303475829Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:49.305082931Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.307875926Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:49.310140567Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.313434181Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:49.314862333Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.318486617Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:49.320006775Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.322569039Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:49.32516531Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:49.336716786Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:49.385030573Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.388486627Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:49.389807025Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:49.391280548Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:49.393283014Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:49.394612383Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:49.39575202Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:49.400553888Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.402997523Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:49.404441092Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.407828462Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:49.409170022Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.411372023Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:49.41952528Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.422004657Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:49.42345542Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.426517983Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:49.428051141Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.430923312Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:49.433356086Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.435673049Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:49.437116311Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.439790932Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:49.441307798Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.443574805Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:49.444918794Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.449480019Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:49.451393664Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.453867002Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:49.456431183Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.45873053Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:49.459970522Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.462784442Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:49.46389248Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.465948188Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:49.468063777Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.470537976Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:49.472035608Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.475001504Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:49.476138154Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.478216408Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:49.480174782Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.482450567Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:49.483775397Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.486431072Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:49.487510839Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.491736624Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:49.493285406Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.495375732Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:49.496525181Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.499603822Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:49.501379205Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.504216445Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:49.509020234Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.511763102Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:49.513448707Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.516913376Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:49.518524036Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.521269206Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:49.523346843Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.52654793Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:49.528207369Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.531378409Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:49.532690531Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.535175354Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:49.538301438Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.540487121Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:49.541883862Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.545179905Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:49.547502393Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.550060982Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:49.552595943Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.55508278Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:49.556527615Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.559394745Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:49.560612096Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.562766412Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:49.564611768Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.567045848Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:49.568577696Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:49.574437357Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:49.47002615Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.473350781Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:49.474762346Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:49.476365401Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:49.479039198Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:49.48057016Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:49.482413855Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.486278351Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:49.487787838Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.490834902Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:49.492608003Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.496080518Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:49.497419322Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.500323243Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:49.502580476Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.505062541Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:49.506761764Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.515810261Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:49.521110336Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.52433193Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:49.526290581Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.529198445Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:49.530998842Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.534684018Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:49.536211267Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.538784151Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:49.540048427Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.54338283Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:49.545210619Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.548106859Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:49.551017148Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.553570948Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:49.554894528Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.558191201Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:49.559756008Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.56247168Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:49.565083267Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.567521675Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:49.568828917Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.572376694Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:49.573761071Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.576265973Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:49.577853688Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.581255757Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:49.583272347Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.586296814Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:49.589018165Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.591836639Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:49.593539585Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.59697284Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:49.598703187Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.60153493Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:49.604125053Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.606608647Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:49.60796831Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.612225621Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:49.613607924Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.616775417Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:49.619843121Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.622318822Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:49.623669445Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.626181432Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:49.628781931Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.631632564Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:49.632992162Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.636105019Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:49.637743679Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.640931261Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:49.643534606Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.646292267Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:49.647973256Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.651572736Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:49.652932872Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.655371132Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:49.657750798Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.660572696Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:49.662165041Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.665981384Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:49.667764281Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:49.674620927Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:49.914518028Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.917214656Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:49.918753342Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:49.920431179Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:49.923008908Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:49.924503862Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:49.926027544Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:49.929341857Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.931836177Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:49.933334297Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.937045565Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:49.938760904Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.941097745Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:49.943353382Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.945713319Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:49.947459912Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.950459422Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:49.953353256Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.959007626Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:49.961113362Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.96362548Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:49.964997677Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.968517525Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:49.970095768Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.972424211Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:49.974072088Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:49.992831743Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:49.999476595Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.014460025Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:50.016124832Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.018293636Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:50.019388187Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.022506648Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:50.023988608Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.026570115Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:50.029584577Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.032541752Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:50.034527965Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.037871531Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:50.039350302Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.042374904Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:50.044811838Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.047244497Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:50.048667975Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.051894397Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:50.053408509Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.055545041Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:50.057707058Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.059796645Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:50.060913666Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.063960076Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:50.065094042Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.067173101Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:50.068949016Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.07109833Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:50.072221619Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.074784389Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:50.076172112Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.078262877Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:50.079601439Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.082460389Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:50.083566937Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.085614785Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:50.095098592Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.097140692Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:50.098210621Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.101456814Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:50.103131744Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.105433079Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:50.107588449Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.109893046Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:50.111237818Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.114498509Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:50.115850766Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.118166064Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:50.120462729Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.122527765Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:50.123672771Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.127624901Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:50.129072401Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:50.134548907Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:50.476546735Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.479995049Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:50.481127491Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:50.482494061Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:50.484538492Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:50.486028668Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:50.487394159Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:50.490042427Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.492406819Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:50.493695248Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.497067964Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:50.498525328Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.501013313Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:50.503192678Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.505376922Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:50.506638378Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.51064839Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:50.51805007Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.520671227Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:50.523274055Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.525470266Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:50.526625684Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.529114407Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:50.530642408Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.533436165Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:50.535371049Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.537991708Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:50.539492601Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.543027183Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:50.544463856Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.546701018Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:50.548200045Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.551614842Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:50.553121671Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.555641939Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:50.558213022Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.561148477Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:50.562932648Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.566211243Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:50.567514138Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.569819049Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:50.572344407Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.574735761Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:50.576066911Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.579299973Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:50.580535002Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.582666431Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:50.584925685Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.587073076Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:50.588223792Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.591767685Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:50.593228439Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.595621735Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:50.598095526Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.600857673Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:50.602331686Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.605302941Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:50.606632023Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.608825153Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:50.610927969Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.613127446Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:50.614320488Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.616634113Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:50.618255322Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.620376329Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:50.621560145Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.624120326Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:50.625280978Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.628011693Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:50.630118327Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.632737665Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:50.633880354Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.645029067Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:50.646489095Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.648847937Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:50.650962351Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.653546743Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:50.655047826Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:50.658263908Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:50.659723938Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:50.665284618Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:51.410110524Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.41341027Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:51.414581717Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:51.41628682Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.418728914Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:51.41997356Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.421120586Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:51.423308154Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.425579096Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:51.42697141Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.440573471Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:51.442341144Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.44493843Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:51.447225807Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.4501596Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:51.45210092Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.455224206Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:51.457546407Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.460448791Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:51.462789775Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.465925513Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:51.467062227Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.470094199Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:51.471259275Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.473439197Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:51.474926566Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.48048294Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:51.481792248Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.484439693Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:51.492297085Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.494562542Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:51.496203741Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.498383578Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:51.499814163Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.502966522Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:51.5043306Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.506822054Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:51.508431571Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.511321179Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:51.512724783Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.515323631Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:51.517457166Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.519774905Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:51.521135233Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.524279506Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:51.525626881Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.528377953Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:51.530536171Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.532864459Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:51.534220906Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.53753028Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:51.538733693Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.540821092Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:51.542787251Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.545498815Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:51.546656896Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.549120779Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:51.550488119Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.552887018Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:51.554518398Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.556647855Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:51.557755022Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.560341972Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:51.561499472Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.563903371Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:51.566390069Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.568788033Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:51.570208399Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.573403428Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:51.574534955Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.576697024Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:51.578495941Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.580588267Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:51.581680119Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.584363643Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:51.585854697Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.588339423Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:51.590872831Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.59364234Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:51.59511538Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:51.601491524Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:51.497242739Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.499935738Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:51.500907184Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:51.502055113Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.503675562Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:51.504671189Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.505638602Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:51.507296469Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.509307529Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:51.510364401Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.512829764Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:51.51397915Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.516080858Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:51.517675091Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.519892046Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:51.521057641Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.525126616Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:51.526258914Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.528329182Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:51.538730066Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.548383009Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:51.5499194Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.553128471Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:51.55471649Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.557217662Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:51.558951687Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.562285945Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:51.563729061Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.56632657Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:51.568313706Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.570895026Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:51.572709046Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.57530969Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:51.576605867Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.579208148Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:51.580886252Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.583028316Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:51.584646774Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.587362832Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:51.588813145Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.591451543Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:51.593195117Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.595318539Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:51.596610078Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.599375735Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:51.600503238Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.602646293Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:51.604201149Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.606434586Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:51.607689936Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.609982374Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:51.611279616Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.613571519Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:51.62368059Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.626013559Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:51.627409858Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.630699633Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:51.63207171Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.634449217Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:51.636646222Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.639577153Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:51.640926782Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.64367683Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:51.644734187Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.649608275Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:51.651459659Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.653580008Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:51.654789009Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.657667932Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:51.658913724Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.661315117Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:51.663254405Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.665388812Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:51.666571538Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.669172617Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:51.670541755Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.672918627Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:51.674530077Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.676645843Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:51.677584471Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:51.683501366Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:51.463287491Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.465987496Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:51.467339486Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:51.469170219Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.471001878Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:51.472398212Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.473733103Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:51.475580516Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.477852986Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:51.478987758Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.48199029Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:51.484119886Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.486727666Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:51.488389963Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.494448271Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:51.495775707Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.49842545Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:51.502904094Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.505494006Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:51.506959994Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.509926415Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:51.511904671Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.514976889Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:51.518257361Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.521340807Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:51.523292673Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.526502658Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:51.531263424Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.534005064Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:51.536134281Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.538508308Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:51.539740508Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.542620023Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:51.54407298Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.547052556Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:51.548378871Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.550300434Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:51.55132271Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.552950782Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:51.554393616Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.555985452Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:51.55694456Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.559162038Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:51.560010646Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.562295147Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:51.56473143Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.567613827Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:51.569406809Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.572695694Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:51.574165578Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.576647526Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:51.578677566Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.58112542Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:51.582337478Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.585492189Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:51.587069409Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.589535074Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:51.590971173Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.593382322Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:51.594322643Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.596182305Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:51.597819999Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.599635481Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:51.600868239Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.609949189Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:51.611397241Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.614476188Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:51.616697057Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.619104012Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:51.620334348Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.627190525Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:51.628132115Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.629924596Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:51.631901362Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.634712059Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:51.636424694Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.639434207Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:51.640738652Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.643074809Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:51.64511479Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:51.650979301Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:51.559879766Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.561996892Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:51.562860807Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:51.563810627Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.565568097Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:51.5665771Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.567590663Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:51.569403714Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.571509995Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:51.57273823Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.575661944Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:51.577103693Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.579481061Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:51.58140544Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.584114762Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:51.585435044Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.588037871Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:51.589132079Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.591158401Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:51.59360923Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.595642722Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:51.596718389Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.599332741Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:51.600404775Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.602431135Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:51.60450165Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.606753339Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:51.608077816Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.610956959Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:51.612246579Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.614393265Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:51.615797181Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.6178644Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:51.619040881Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.621816629Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:51.622922786Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.624925137Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:51.627032214Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.629274784Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:51.630875365Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.634007137Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:51.635267035Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.637426964Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:51.639179398Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.641817122Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:51.643122947Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.646190129Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:51.648262038Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.651429452Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:51.653138607Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.655731829Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:51.6569983Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.660041427Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:51.661087506Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.663468233Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:51.665054581Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.66742373Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:51.668549024Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.67181423Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:51.672905686Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.674925571Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:51.676281412Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.678282505Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:51.679194716Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.681978311Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:51.682987305Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.684951516Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:51.686595285Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.688705481Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:51.689842336Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.692656869Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:51.69380339Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.695816038Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:51.697364613Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.699431725Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:51.70049882Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.70330401Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:51.704317689Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.706328585Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:51.707965997Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:51.71302376Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:51.769440831Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.773249033Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:51.774419229Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:51.77583005Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.777525463Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:51.778747708Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:51.779996687Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.78324206Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:51.784855604Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.787663027Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:51.790209321Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.792812862Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:51.794046748Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.796391438Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:51.797825401Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.800128112Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:51.801380367Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.804167634Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:51.805346071Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.807617891Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:51.809027209Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.812612394Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:51.813800765Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.816563187Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:51.817792022Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.820234825Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:51.821990947Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.824316866Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:51.825624337Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.828463087Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:51.829590285Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.831791711Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:51.834071029Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.83671488Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:51.837994324Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.841534556Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:51.842948965Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.845343783Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:51.846889413Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.849420312Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:51.850872103Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.853346297Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:51.85465629Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.856905907Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:51.857927152Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.876302943Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:51.878015103Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.880465048Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:51.882575256Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.885234364Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:51.886819462Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.891653611Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:51.893471996Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.896355582Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:51.898413409Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.900966352Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:51.902343464Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.91025546Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:51.912586626Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.914257371Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:51.91945212Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.921356478Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:51.922419608Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.924926709Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:51.926012188Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.927757382Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:51.929909365Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.933501556Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:51.935030418Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.93849086Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:51.94026639Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.943157742Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:51.953573248Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.957228829Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:51.959948699Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.963647658Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:51.965608976Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:51.968427717Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:51.970357451Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:51.97689529Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:52.043620184Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.048001683Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:52.049792292Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:52.051726416Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.064319727Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:52.065797602Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.067120426Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.072159563Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:52.074760527Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.078086707Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:52.079569158Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.08250834Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:52.083759152Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.086118191Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:52.088023843Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.089770252Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:52.093274644Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.096632904Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:52.099567651Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.103321603Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:52.106249494Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.110111024Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:52.11206762Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.116273976Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:52.118094012Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.120988352Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:52.123677057Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.131158403Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:52.132427084Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.134953415Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:52.137135748Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.139708913Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:52.141072479Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.144748202Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:52.146251063Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.148751255Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:52.151221916Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.155313636Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:52.156485244Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.159282531Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:52.161435588Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.163828299Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:52.165833533Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.168806286Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:52.17052974Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.173576945Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:52.175675754Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.178340992Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:52.179726299Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.182289643Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:52.183540214Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.185982477Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:52.187869284Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.19038924Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:52.191795718Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.19633117Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:52.197620486Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.199988675Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:52.202453227Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.204934035Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:52.206263028Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.210509649Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:52.212066045Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.214500975Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:52.216632978Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.219232813Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:52.220780396Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.224184627Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:52.22587562Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.228707071Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:52.230573472Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.233938401Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:52.235637263Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.23861742Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:52.240867165Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.243438579Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:52.244830651Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.248678783Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:52.250382014Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:52.256882834Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:52.18234969Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.18454159Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:52.185518727Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:52.186709769Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.188368215Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:52.18933939Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.190334352Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:52.191890018Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.194396878Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:52.195906237Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.199298232Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:52.200359235Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.202383105Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:52.203830936Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.205789929Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:52.206775644Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.209308853Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:52.210334762Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.212412412Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:52.226813973Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.229276583Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:52.23031339Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.233429708Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:52.234553178Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.236612732Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:52.238778191Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.240876791Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:52.241953753Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.244670745Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:52.245824275Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.247998935Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:52.249691093Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.252166232Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:52.25359689Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.256411165Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:52.258242171Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.260544782Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:52.270422437Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.272455978Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:52.273470333Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.276018172Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:52.277169705Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.279906431Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:52.282163224Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.284261156Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:52.285311109Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.288054269Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:52.289378548Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.291425947Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:52.292686589Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.295395257Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:52.297040577Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.299086333Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:52.300331789Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.302411859Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:52.30447996Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.30735311Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:52.308437879Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.310475558Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:52.312191095Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.314165752Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:52.31513965Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.317213396Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:52.318165619Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.320140068Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:52.321322737Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.323400974Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:52.324484275Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.326925682Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:52.328023757Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.330081043Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:52.331418952Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.333643095Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:52.335036449Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.338110499Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:52.339525746Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.341914506Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:52.343964863Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.346314052Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:52.347684714Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:52.354110269Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:52.384488081Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.388160263Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:52.389631532Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:52.391268182Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.393813649Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:52.394933627Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.395931484Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:52.399147822Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.400932515Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:52.401926623Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.408090836Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:52.409260461Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.411867202Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:52.41411289Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.416104392Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:52.416993004Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.41952428Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:52.421249874Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.42543274Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:52.427298756Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.429524126Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:52.430741125Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.434669017Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:52.435940335Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.438142253Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:52.440246388Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.44251371Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:52.443643646Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.446533758Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:52.448015852Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.451293192Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:52.453254997Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.455730665Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:52.457143Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.459713012Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:52.460911938Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.463143797Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:52.464801019Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.467173649Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:52.468786649Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.472179655Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:52.473617727Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.476151134Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:52.478094893Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.480519833Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:52.481871451Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.484757028Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:52.487367447Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.489493823Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:52.491459377Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.494444942Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:52.495973428Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.499431832Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:52.500649168Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.502801088Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:52.504113684Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.506662584Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:52.507846106Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.522923845Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:52.526811133Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.529403235Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:52.530934909Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.534905389Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:52.536514048Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.539001577Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:52.541458645Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.543959085Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:52.5454124Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.548762984Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:52.550205364Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.55278492Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:52.555004635Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.558690406Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:52.560227665Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.563218999Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:52.571145276Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.57296677Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:52.574582413Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.576212352Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:52.577274377Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:52.581542543Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:52.372501215Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.375701551Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:52.376861874Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:52.378129353Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.380205779Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:52.381299155Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.382371328Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:52.394396279Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.397615119Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:52.400791465Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.409167902Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:52.410410445Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.412417058Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:52.414301295Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.416805356Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:52.417926829Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.420960266Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:52.422160723Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.424311731Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:52.426224298Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.428755377Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:52.431457022Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.434931549Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:52.441639477Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.443385417Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:52.445261812Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.446894711Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:52.447925816Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.450132413Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:52.451172941Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.452785657Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:52.467018453Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.468545743Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:52.469782381Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.47199726Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:52.473018848Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.47464109Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:52.47682246Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.47858755Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:52.479529164Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.481818873Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:52.48279369Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.484329311Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:52.49075217Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.493422364Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:52.495133483Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.49852718Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:52.500014779Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.502508092Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:52.504607124Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.507083595Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:52.508542188Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.511500559Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:52.512657798Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.514682598Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:52.516500726Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.518653692Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:52.519830367Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.522686432Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:52.523876705Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.526072514Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:52.52833275Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.530470131Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:52.531569883Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.534354658Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:52.535484725Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.537537103Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:52.538828342Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.54208774Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:52.543260173Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.545606331Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:52.547927119Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.550043494Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:52.551211953Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.553451493Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:52.554605421Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.556720006Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:52.558878738Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.561367488Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:52.562914434Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:52.57110667Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T13:06:49.099090886Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.101172926Z	48	PC: 1bc52 | Get DOS version
2018-12-25T13:06:49.102200581Z	38	PC: 1bc95 | Create PSP
2018-12-25T13:06:49.10377685Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T13:06:49.105425421Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T13:06:49.107632566Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T13:06:49.109282762Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T13:06:49.110752612Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.112841482Z	48	PC: 1b852 | Get DOS version
2018-12-25T13:06:49.114120374Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.116310372Z	48	PC: 1b452 | Get DOS version
2018-12-25T13:06:49.117411769Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.119477227Z	48	PC: 1b052 | Get DOS version
2018-12-25T13:06:49.120790439Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.122840795Z	48	PC: 1ac52 | Get DOS version
2018-12-25T13:06:49.123936982Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.126592144Z	48	PC: 1a852 | Get DOS version
2018-12-25T13:06:49.1280849Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.130547812Z	48	PC: 1a452 | Get DOS version
2018-12-25T13:06:49.13261119Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.13484733Z	48	PC: 1a052 | Get DOS version
2018-12-25T13:06:49.136092559Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.138571488Z	48	PC: 19c52 | Get DOS version
2018-12-25T13:06:49.139752278Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.141839721Z	48	PC: 19852 | Get DOS version
2018-12-25T13:06:49.145318078Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.14737474Z	48	PC: 19452 | Get DOS version
2018-12-25T13:06:49.148439118Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.150663455Z	48	PC: 19052 | Get DOS version
2018-12-25T13:06:49.151717951Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.153715316Z	48	PC: 18c52 | Get DOS version
2018-12-25T13:06:49.155471241Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.158205576Z	48	PC: 18852 | Get DOS version
2018-12-25T13:06:49.159961771Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.162661644Z	48	PC: 18452 | Get DOS version
2018-12-25T13:06:49.164384238Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.166719033Z	48	PC: 18052 | Get DOS version
2018-12-25T13:06:49.168254309Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.170697619Z	48	PC: 17c52 | Get DOS version
2018-12-25T13:06:49.172144333Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.174605942Z	48	PC: 17852 | Get DOS version
2018-12-25T13:06:49.175668594Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.177677229Z	48	PC: 17452 | Get DOS version
2018-12-25T13:06:49.179228198Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.181260993Z	48	PC: 17052 | Get DOS version
2018-12-25T13:06:49.182372874Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.184610208Z	48	PC: 16c52 | Get DOS version
2018-12-25T13:06:49.185692651Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.188045833Z	48	PC: 16852 | Get DOS version
2018-12-25T13:06:49.189596611Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.191613919Z	48	PC: 16452 | Get DOS version
2018-12-25T13:06:49.192677054Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.194879693Z	48	PC: 16052 | Get DOS version
2018-12-25T13:06:49.196622428Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.19862032Z	48	PC: 15c52 | Get DOS version
2018-12-25T13:06:49.200290683Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.202322027Z	48	PC: 15852 | Get DOS version
2018-12-25T13:06:49.203241272Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.205748957Z	48	PC: 15452 | Get DOS version
2018-12-25T13:06:49.206775234Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.208752767Z	48	PC: 15052 | Get DOS version
2018-12-25T13:06:49.210257493Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.212306486Z	48	PC: 14c52 | Get DOS version
2018-12-25T13:06:49.213319939Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.225497821Z	48	PC: 14852 | Get DOS version
2018-12-25T13:06:49.226963862Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.229326586Z	48	PC: 14452 | Get DOS version
2018-12-25T13:06:49.231705492Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.233714745Z	48	PC: 14052 | Get DOS version
2018-12-25T13:06:49.234761907Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.237254259Z	48	PC: 13c52 | Get DOS version
2018-12-25T13:06:49.238251115Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.24020327Z	48	PC: 13852 | Get DOS version
2018-12-25T13:06:49.242193Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.244273176Z	48	PC: 13452 | Get DOS version
2018-12-25T13:06:49.245359372Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.248360485Z	48	PC: 13052 | Get DOS version
2018-12-25T13:06:49.249354978Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T13:06:49.251326158Z	48	PC: 12c52 | Get DOS version
2018-12-25T13:06:49.253049794Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T13:06:49.258209255Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:52.720861543Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.72315473Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:52.724201887Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:52.725392641Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.727412136Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:52.728532859Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:52.729860208Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:52.731940384Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.734115665Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:52.735543109Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.739012457Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:52.740828705Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.744592778Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:52.74786779Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.750260152Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:52.75164994Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.75504061Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:52.757625584Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.760692847Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:52.762212301Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.764666689Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:52.765941573Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.768126093Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:52.769792925Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.771936977Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:52.772959692Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.775415454Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:52.776505709Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.778951529Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:52.780828384Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.782870366Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:52.783937685Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.786346068Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:52.787426802Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.789386309Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:52.790814136Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.793468704Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:52.794501345Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.796981006Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:52.797793151Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.799149558Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:52.801054467Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.803166702Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:52.804241585Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.811052097Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:52.8119471Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.813327382Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:52.814551656Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.815962089Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:52.816694802Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.81861555Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:52.819657275Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.821628468Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:52.823147624Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.8252161Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:52.82634559Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.828728398Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:52.830345877Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.832336285Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:52.833621846Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.835605013Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:52.836574351Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.838895692Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:52.839865469Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.841789321Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:52.843281783Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.845279936Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:52.846309062Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.848609268Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:52.84960546Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.851541304Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:52.852850961Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.854788784Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:52.855763334Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.85841855Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:52.859391102Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.86133387Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:52.862748428Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:52.864777509Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:52.865867212Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:52.87107111Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:54.186112547Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.194439777Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:54.196084704Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:54.197756091Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:54.200912592Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:54.205872984Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:54.207486458Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:54.210483324Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.212793917Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:54.214356605Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.217750399Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:54.219193757Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.221553184Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:54.223899761Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.227025446Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:54.228456575Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.23196834Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:54.233475467Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.235882613Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:54.237927506Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.240059585Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:54.241158359Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.244372726Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:54.245705175Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.248093944Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:54.250693457Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.25307174Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:54.254436036Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.25783596Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:54.259398771Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.26172036Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:54.263286225Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.266212048Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:54.267311645Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.269456137Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:54.271710294Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.273978417Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:54.275325371Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.278540871Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:54.279868521Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.282127968Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:54.284352448Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.286642488Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:54.287942632Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.291180386Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:54.292576676Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.295236669Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:54.296993097Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.299151455Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:54.300283873Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.302713919Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:54.303836295Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.306018196Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:54.307829704Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.30987931Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:54.311055361Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.316021905Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:54.317688697Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.320031172Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:54.321585866Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.324718009Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:54.32583327Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.327862659Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:54.329816822Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.332200806Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:54.333548353Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.336303912Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:54.337491706Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.339542847Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:54.341427011Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.343466849Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:54.344820121Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.347764564Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:54.348836012Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.351298206Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:54.35327236Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.355426174Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:54.356797351Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.359666404Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:54.360797461Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:54.366012834Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:54.212818053Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.215735836Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:54.217450627Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:54.219361731Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:54.222010327Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:54.223931678Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:54.225451815Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.229239191Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:54.231285809Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.233844324Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:54.236703648Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.239230439Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:54.240673762Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.244172413Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:54.24567392Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.247866352Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:54.250616157Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.253013624Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:54.254252481Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.256805397Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:54.259423937Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.262730224Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:54.265024436Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.268171532Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:54.269670744Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.2724692Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:54.274743481Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.27717411Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:54.278573014Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.281419998Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:54.282540745Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.284651959Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:54.286758146Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.28902163Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:54.290402427Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.293436565Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:54.294792689Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.297104527Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:54.299422443Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.301724438Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:54.303055855Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.306223441Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:54.307338254Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.309381141Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:54.311447004Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.314248199Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:54.315560269Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.318821459Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:54.32039828Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.322940839Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:54.325644056Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.328186215Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:54.329288463Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.332076541Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:54.333212314Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.335325824Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:54.337008089Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.339132578Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:54.340170826Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.343939534Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:54.345032225Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.346538159Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:54.348188356Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.349675296Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:54.350588826Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.353039385Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:54.353954106Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.355373915Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:54.356742619Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.358224248Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:54.359103226Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.361005445Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:54.36188788Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.363337131Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:54.364639814Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.366111052Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:54.366999342Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.369041368Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:54.369947823Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:54.373082649Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:54.635935853Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.639908834Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:54.641038727Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:54.642368581Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:54.643977217Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:54.64510642Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:54.646249248Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.649164191Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:54.650356834Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.652626778Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:54.654560215Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.65672112Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:54.657798723Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.660378003Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:54.661478068Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.663450029Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:54.665019414Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.667135688Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:54.668229409Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.670781935Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:54.67196242Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.674096771Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:54.675611845Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.677802682Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:54.678985216Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.681541077Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:54.682995542Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.685067595Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:54.689141725Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.697807202Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:54.699375512Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.702479056Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:54.70382786Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.715225465Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:54.718205149Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.720350016Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:54.721418472Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.723930579Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:54.725887548Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.727381051Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:54.731904194Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.734305108Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:54.735693583Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.738186662Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:54.739972362Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.742454963Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:54.74450285Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.748439885Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:54.750065822Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.753530432Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:54.755205854Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.757702842Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:54.759844913Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.762379138Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:54.763904846Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.7670928Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:54.768539011Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.770870884Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:54.773452576Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.775731748Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:54.777142095Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.780529155Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:54.781615818Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.784112992Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:54.786153907Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.788411906Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:54.789683996Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.792701122Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:54.79421783Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.796675456Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:54.798663498Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.801212593Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:54.802679409Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.806468052Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:54.807909744Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.810338037Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:54.812319252Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:54.814714995Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:54.816142934Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:54.822056016Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:55.245316778Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.24935718Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:55.250663043Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:55.252101547Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:55.253993185Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:55.255572855Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:55.256891521Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:55.258686992Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.261412392Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:55.262738474Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.265491878Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:55.267413476Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.269796552Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:55.27102963Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.274343923Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:55.275878486Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.278189975Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:55.280103423Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.283070068Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:55.284872813Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.288762901Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:55.290093443Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.292521737Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:55.294447319Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.296870936Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:55.298145715Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.301312409Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:55.302605744Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.30524824Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:55.307223417Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.309822964Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:55.311293127Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.314313584Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:55.315798232Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.318390566Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:55.320982151Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.323387329Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:55.32587219Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.328583348Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:55.330674007Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.333128243Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:55.334295052Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.337372757Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:55.342056233Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.344562878Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:55.346560546Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.348887468Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:55.349956635Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.352876844Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:55.354681862Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.35746052Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:55.359840199Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.362161322Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:55.363562211Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.367290091Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:55.368958368Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.371636574Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:55.3737061Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.376409397Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:55.377928699Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.380877467Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:55.382509626Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.385280884Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:55.386906358Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.389488126Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:55.390934438Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.393563362Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:55.394973303Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.397319142Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:55.39879807Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.401716536Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:55.40294951Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.40629271Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:55.40760858Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.410650209Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:55.412158574Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.415316598Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:55.417106795Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.420197341Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:55.422422792Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:55.428607541Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:55.761594716Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.763923536Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:55.765005336Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:55.766243719Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:55.767840791Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:55.768874478Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:55.769907647Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:55.771506354Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.773628245Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:55.774793425Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.777270334Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:55.778372056Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.780397761Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:55.781806284Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.783776129Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:55.784777895Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.787043099Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:55.788044406Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.790062652Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:55.791738085Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.793790237Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:55.794965153Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.802160533Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:55.803554003Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.805872393Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:55.814577852Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.816481178Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:55.817388543Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.820101561Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:55.821263673Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.823364509Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:55.833550252Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.835693725Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:55.836801844Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.83937865Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:55.840424499Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.84309498Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:55.844884604Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.846419583Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:55.847254842Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.84934412Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:55.850185211Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.851590737Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:55.852982101Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.85446001Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:55.855289144Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.857312237Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:55.85831051Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.859873544Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:55.861434986Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.863015611Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:55.864223769Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.866856513Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:55.867984485Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.870065237Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:55.871937413Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.873989961Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:55.875053574Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.877533769Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:55.878659376Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.880682421Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:55.882329395Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.884351333Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:55.885373861Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.888057421Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:55.889060333Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.891045414Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:55.892187174Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.894215102Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:55.895251506Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.897452066Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:55.898495182Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.900464605Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:55.90188224Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.903866781Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:55.904893996Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.907279717Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:55.908334129Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:55.91033923Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:55.911526959Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:55.916867921Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:56.109946816Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.112705646Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:56.114095909Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:56.115302697Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.116844531Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:56.117817266Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.118806099Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:56.12073801Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.123006972Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:56.124080563Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.126567205Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:56.128709348Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.130924486Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:56.13248097Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.134546102Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:56.135580028Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.138463346Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:56.139718872Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.142286045Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:56.144103686Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.1461926Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:56.147442702Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.150425331Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:56.152137153Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.154434788Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:56.156065269Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.158399314Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:56.159926128Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.163340337Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:56.164478103Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.166442417Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:56.168257433Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.170542947Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:56.171869831Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.174577016Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:56.175741591Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.177716303Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:56.179502442Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.181508147Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:56.182524037Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.185533506Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:56.186774587Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.1887997Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:56.190912493Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.193051299Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:56.194085939Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.197214421Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:56.208734056Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.210819076Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:56.212262699Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.214541167Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:56.215640537Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.21833043Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:56.219373658Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.222071843Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:56.223378372Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.226159239Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:56.227178845Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.229481281Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:56.231013979Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.233507853Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:56.23845131Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.239997181Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:56.240793112Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.242751185Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:56.243620042Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.244994913Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:56.246282818Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.247768546Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:56.248695845Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.2625157Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:56.263368869Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.264738512Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:56.266891968Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.269057327Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:56.270150969Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.272764279Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:56.274074904Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.276416388Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:56.278688035Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:56.284017503Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:56.663489748Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.666971262Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:56.668363588Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:56.670361677Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.671913192Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:56.67431833Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.67616771Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.679132004Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:56.688816472Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.695058588Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:56.697238914Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.701291573Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:56.702682947Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.705213684Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:56.707146139Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.709627886Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:56.710860407Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.713970126Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:56.715266189Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.717714113Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:56.722324673Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.725388217Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:56.727066693Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.729838828Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:56.736598305Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.739776005Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:56.741216831Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.745253062Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:56.747646869Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.751158223Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:56.761801116Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.764552333Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:56.768516508Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.771598063Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:56.773032808Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.775540864Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:56.777690865Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.780260049Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:56.781579458Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.784925209Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:56.78631977Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.78882009Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:56.790344157Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.793019512Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:56.794107046Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.796274733Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:56.797935173Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.800407088Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:56.801760232Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.805499431Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:56.807186736Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.809939561Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:56.812035683Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.814525856Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:56.816454986Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.819141423Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:56.820834631Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.823341599Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:56.825491827Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.828630342Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:56.829748629Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.832710356Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:56.834166237Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.836557301Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:56.838671684Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.841593498Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:56.843324307Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.846727703Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:56.86424401Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.866925329Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:56.869785312Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.872920241Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:56.874776917Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.878638163Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:56.88082992Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.883799175Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:56.885882434Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.889723881Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:56.891616593Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:56.897457988Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:56.722072841Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.73186788Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:56.733104195Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:56.734541258Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.736534794Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:56.737745819Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.738871705Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:56.740755318Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.743277274Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:56.744750974Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.747526942Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:56.748599504Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.750623546Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:56.752695149Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.754803521Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:56.755868748Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.758412958Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:56.759529981Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.762193854Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:56.771304247Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.773356253Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:56.774407438Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.776920247Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:56.779000208Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.781527893Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:56.783402125Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.785563293Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:56.786913712Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.789772313Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:56.790814093Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.792364673Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:56.793745338Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.79579929Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:56.796812657Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.799351533Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:56.800823007Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.802824065Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:56.804172747Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.806356968Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:56.807428602Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.809814529Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:56.810849755Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.813039573Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:56.816507098Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.818706685Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:56.819852526Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.823065769Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:56.824832929Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.827405041Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:56.829533191Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.832286589Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:56.833890786Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.836849391Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:56.838693599Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.84109525Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:56.843324364Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.845692753Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:56.846870147Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.849965795Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:56.851038095Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.853116594Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:56.855613389Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.857980652Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:56.859341264Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.862541749Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:56.863803656Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.86589301Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:56.867641114Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.875972291Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:56.87756037Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.881187648Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:56.883412671Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.885941158Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:56.887984721Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.89027823Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:56.891899541Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.894747704Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:56.896068857Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.898315191Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:56.900310438Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:56.906252248Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:56.67653371Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.689038798Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:56.690453897Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:56.692039543Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.694278752Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:56.697186245Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.699021786Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:56.70144891Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.703976524Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:56.705868099Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.709536192Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:56.711257756Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.714238136Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:56.716281331Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.719763571Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:56.72150504Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.724412677Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:56.744741793Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.750043372Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:56.752569631Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.756812631Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:56.759185569Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.762192584Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:56.764638682Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.767255265Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:56.769027738Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.772556741Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:56.774884629Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.778364689Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:56.78092669Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.792965863Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:56.801630601Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.804581082Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:56.807039956Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.809596085Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:56.810954878Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.814521105Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:56.815937053Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.819143676Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:56.82104779Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.823793626Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:56.825130527Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.827737722Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:56.829941351Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.83255026Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:56.834036203Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.837673422Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:56.839342214Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.842115997Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:56.844792255Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.84726606Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:56.848598979Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.851824958Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:56.85322292Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.855634804Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:56.857837244Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.860526082Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:56.862190929Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.86518702Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:56.866717977Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.869453209Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:56.871295108Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.874044095Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:56.875392849Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.878137642Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:56.879973357Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.882829497Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:56.88475381Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.888307677Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:56.890028704Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.892859186Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:56.894769111Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.897518389Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:56.899136775Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.90278617Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:56.904034362Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.906390948Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:56.908638859Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.910983457Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:56.912247721Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:56.918941556Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:56.870508195Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.873859472Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:56.874973917Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:56.87634541Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.878319987Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:56.87961602Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:56.880853168Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:56.883050976Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.885181477Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:56.886248391Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.890715015Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:56.89505673Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.897255968Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:56.900179765Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.902371895Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:56.903650012Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.906498608Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:56.907929414Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.910545871Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:56.913369373Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.917460845Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:56.919666835Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.922311989Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:56.924526852Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.927011209Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:56.928554316Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.931533991Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:56.932690816Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.934865163Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:56.944500094Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.946683961Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:56.948252234Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.95104263Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:56.952279885Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.95484574Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:56.957517135Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.959654685Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:56.960865824Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.963783767Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:56.965436139Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.967737514Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:56.969537371Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.971725631Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:56.972883998Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.97617808Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:56.977356717Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.979488018Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:56.981296143Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.983422374Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:56.984508365Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.987579261Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:56.988690715Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.991722637Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:56.993688251Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:56.996106272Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:56.997633555Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.000392838Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:57.001844347Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.00424268Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:57.006185162Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.009740374Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:57.011250147Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.01454702Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:57.015769997Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.019571266Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:57.023246338Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.026091992Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:57.027368262Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.031214818Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:57.032450673Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.0345111Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:57.03600664Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.038115579Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:57.03928255Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.041659677Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:57.043043141Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.046155498Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:57.048467587Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.051119916Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:57.052567021Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:57.058667918Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:57.651133817Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.655151268Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:57.657266293Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:57.65914501Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:57.661573872Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:57.663234334Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:57.664946609Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.668162065Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:57.669598084Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.672201717Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:57.675184323Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.678614445Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:57.680217278Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.682880387Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:57.685648507Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.688316242Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:57.689900593Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.693473181Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:57.694873416Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.697347812Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:57.699688709Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.702419482Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:57.704118044Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.707679543Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:57.709611845Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.712345742Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:57.714002874Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.720332223Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:57.721958652Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.724663438Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:57.72784782Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.730437708Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:57.73188456Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.735733296Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:57.74178249Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.744814597Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:57.751228489Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.754038456Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:57.755720661Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.759229254Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:57.760883401Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.763362948Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:57.764737974Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.76759795Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:57.768995553Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.771447734Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:57.773491788Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.776795433Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:57.778095194Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.780898612Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:57.782238481Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.784666223Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:57.786481127Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.789230863Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:57.79102258Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.794915073Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:57.796461204Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.799138715Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:57.801472633Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.804387292Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:57.806147865Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.809974494Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:57.811584876Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.815494607Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:57.821298069Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.82502994Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:57.826809902Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.829764621Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:57.832527428Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.835394825Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:57.837177273Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.841014136Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:57.84277422Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.845623672Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:57.848162761Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.851338371Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:57.853102698Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:57.856657088Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:57.858321906Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:57.865507037Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:58.461863048Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.464700558Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:58.46580593Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:58.467039773Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:58.468623328Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:58.469728149Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:58.470834483Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:58.472959472Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.475361743Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:58.476694991Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.479820542Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:58.481062262Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.483119118Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:58.484835842Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.487051426Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:58.488231796Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.491278547Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:58.492673872Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.494844109Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:58.499886458Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.50243826Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:58.504062771Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.507315131Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:58.508544635Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.510713368Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:58.512556048Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.514658516Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:58.515707641Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.518313467Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:58.519478796Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.521498036Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:58.523134451Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.525311292Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:58.526396449Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.528969855Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:58.530197867Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.532352146Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:58.533981974Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.536764758Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:58.537896442Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.541279307Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:58.542586089Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.544637811Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:58.546466223Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.548544592Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:58.549683336Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.55277861Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:58.554067224Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.556175092Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:58.557490803Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.559907006Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:58.560973503Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.563216068Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:58.564903986Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.567380148Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:58.569421123Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.571999293Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:58.573418676Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.576066589Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:58.577378563Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.57959847Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:58.580989875Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.583894192Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:58.58527692Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.588071887Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:58.58916887Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.591165037Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:58.592779491Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.595419569Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:58.596997303Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.59977804Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:58.601278057Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.603413119Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:58.604929506Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.606976068Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:58.607963834Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.610597451Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:58.612231396Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.61467829Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:58.617150771Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:58.623043372Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:58.782745474Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.784903492Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:58.786338313Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:58.787834449Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:58.789991256Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:58.791139279Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:58.792184317Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:58.794299659Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.796710132Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:58.798143217Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.80076506Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:58.802934485Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.805101949Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:58.806739426Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.809127879Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:58.81062534Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.813764823Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:58.815056676Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.817800901Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:58.820159893Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.822179587Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:58.823226507Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.825839636Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:58.827102071Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.829214854Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:58.830897278Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.83291919Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:58.833933045Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.836554435Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:58.837794086Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.839839122Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:58.841386896Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.843475795Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:58.844542044Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.847482855Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:58.848992289Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.851189621Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:58.860445709Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.862672664Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:58.863750269Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.865946349Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:58.867583025Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.869720548Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:58.871764946Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.880095889Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:58.881408678Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.883707324Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:58.88555209Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.888034178Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:58.889609394Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.892625682Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:58.894104162Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.896398745Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:58.897607249Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.899645735Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:58.900650502Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.903296071Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:58.904658168Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.907024072Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:58.913362783Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.915613045Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:58.916688234Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.918936924Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:58.91994913Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.921920835Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:58.923938955Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.925865403Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:58.92682964Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.929124121Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:58.929936311Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.931241481Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:58.932607258Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.934563179Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:58.935588672Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.937802697Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:58.938857693Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.940858042Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:58.942110634Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:58.944113458Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:58.94514626Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:58.950370267Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:59.341693559Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.345564951Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:59.347327464Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:59.349244058Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.351499111Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:59.353194743Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.354889786Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:59.357249268Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.360069571Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:59.361807186Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.365272909Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:59.366874938Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.369284257Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:59.371714521Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.374653657Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:59.376355848Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.379169949Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:59.382102Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.384536547Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:59.38588352Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.389142774Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:59.390406246Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.392752785Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:59.3949477Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.397738198Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:59.399297243Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.402706775Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:59.404141279Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.406676587Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:59.411464255Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.413979999Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:59.415401047Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.419474097Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:59.421214683Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.424802334Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:59.426604626Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.430552842Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:59.432019912Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.434519735Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:59.436382124Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.43871456Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:59.439986079Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.443408402Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:59.4451603Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.447960332Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:59.450705549Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.453200967Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:59.454600424Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.457647977Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:59.459303228Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.461856985Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:59.463770032Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.466306247Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:59.467686449Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.471024147Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:59.472549736Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.475105199Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:59.476595553Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.479875751Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:59.481678678Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.484583323Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:59.487170851Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.489945142Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:59.491796325Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.495640244Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:59.497493974Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.500408858Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:59.502912614Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.505834442Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:59.507685645Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.511606856Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:59.513600012Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.517144538Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:59.519568411Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.52230796Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:59.523793688Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.527046023Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:59.528328718Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.530600644Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:59.532484613Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:59.538691985Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:59.485037762Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.486831644Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:59.487650013Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:59.488603555Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.502644532Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:59.503698831Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.50479399Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.507868807Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:59.509306785Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.51169158Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:59.514329668Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.516469966Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:59.517523513Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.524903452Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:59.525974425Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.527876665Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:59.529547236Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.531788292Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:59.532956722Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.535981499Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:59.537187455Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.539281886Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:59.540812915Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.542842619Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:59.543833153Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.546714058Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:59.548105729Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.550393213Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:59.552444931Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.554431631Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:59.562017066Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.565688226Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:59.567087987Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.568686446Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:59.570267967Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.571840643Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:59.572824479Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.575271515Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:59.577857277Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.579347976Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:59.581011685Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.584161837Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:59.585681042Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.589037515Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:59.590314263Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.593071422Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:59.595911668Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.598282943Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:59.5996545Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.602739445Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:59.605664559Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.620470726Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:59.6229432Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.625770049Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:59.627619245Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.630803881Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:59.63225861Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.634643802Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:59.636913194Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.638890428Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:59.639941648Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.642503932Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:59.644537195Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.646840538Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:59.64865902Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.652948542Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:59.653877848Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.656823961Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:59.658214222Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.660607198Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:59.662522087Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.666020621Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:59.667728358Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.670567225Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:59.67286036Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.675518055Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:59.677187913Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.68081908Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:59.682543659Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:59.689109447Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:59.614923736Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.626304014Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:59.627464725Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:59.628756351Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.630410693Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:59.631848313Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.633221943Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:59.635380665Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.637501813Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:59.638701101Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.641697235Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:59.642946991Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.64523482Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:59.647318393Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.650078015Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:59.65173614Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.65403654Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:59.65614151Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.658174951Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:59.65906368Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.661986045Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:59.663126309Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.665175538Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:59.667049433Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.672286662Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:59.673750785Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.684525455Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:59.685923269Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.688255619Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:59.689886809Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.692126313Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:59.693450449Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.696359115Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:59.697471462Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.699534915Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:59.701117617Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.703212069Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:59.704281195Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.706699374Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:59.707685929Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.70949618Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:59.711182663Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.713849046Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:59.714929338Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.717353968Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:59.718463007Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.720605524Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:59.72228951Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.724273092Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:59.725239631Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.727791815Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:59.728844254Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.730863451Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:59.738777079Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.740773889Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:59.741772986Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.75225749Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:59.753318304Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.755376689Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:59.757073756Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.759261197Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:59.760312286Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.763193879Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:59.764224997Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.766183955Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:59.767811212Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.769745759Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:59.770642836Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.773029067Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:59.774025826Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.775851005Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:59.777487792Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.779568715Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:59.780575617Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.783190241Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:59.784196093Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.786151335Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:59.78753932Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.789618544Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:59.790737083Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:59.796829004Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:59.587199815Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.589988852Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:59.591686819Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:59.593696056Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.596270782Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:59.598024924Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.599738961Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:59.60257726Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.606303975Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:59.607845065Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.61066373Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:59.612602889Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.615514543Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:59.617618562Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.621271875Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:59.623130261Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.624930187Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:59.626729764Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.62842828Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:59.629486483Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.631821322Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:59.632794995Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.634427181Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:59.636034704Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.637777687Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:59.638862956Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.64126428Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:59.642303918Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.643959041Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:59.645601484Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.64732143Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:59.648467441Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.653715272Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:59.654932148Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.656604148Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:59.657805734Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.660460462Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:59.661616757Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.663717983Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:59.670744027Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.675788445Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:59.67717356Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.680609518Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:59.682595487Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.685676883Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:59.688680606Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.691257454Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:59.692645636Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.695575482Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:59.697521898Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.700574366Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:59.702679096Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.706100406Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:59.708038348Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.710717451Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:59.712988317Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.715967847Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:59.71783362Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.721369504Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:59.723105762Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.725942217Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:59.727861566Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.730675531Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:59.732374168Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.735987392Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:59.738616082Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.741093014Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:59.743227667Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.746617006Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:59.748261603Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.752520588Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:59.75428963Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.757134556Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:59.759539734Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.762352727Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:59.764078868Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.767421566Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:59.768988551Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.77157983Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:59.776510394Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:59.782594142Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:46:59.711731015Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.714975206Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:46:59.716736928Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:46:59.718706276Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.726593234Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:59.729326047Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:59.731915087Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:59.734614024Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.738348646Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:46:59.740900334Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.745143825Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:46:59.748070014Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.751220335Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:46:59.752911374Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.758844267Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:46:59.760600528Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.763456158Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:46:59.766253907Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.769038599Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:46:59.770762395Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.774505935Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:46:59.776007652Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.779087812Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:46:59.781199166Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.78498375Z	48	PC: 19852 | Get DOS version
2018-12-25T11:46:59.786753602Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.789653752Z	48	PC: 19452 | Get DOS version
2018-12-25T11:46:59.792646508Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.795349328Z	48	PC: 19052 | Get DOS version
2018-12-25T11:46:59.797285892Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.800458677Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:46:59.802114974Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.80550549Z	48	PC: 18852 | Get DOS version
2018-12-25T11:46:59.807520783Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.810199595Z	48	PC: 18452 | Get DOS version
2018-12-25T11:46:59.811957258Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.815186775Z	48	PC: 18052 | Get DOS version
2018-12-25T11:46:59.816637203Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.819140752Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:46:59.821470618Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.824401162Z	48	PC: 17852 | Get DOS version
2018-12-25T11:46:59.826240001Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.829366443Z	48	PC: 17452 | Get DOS version
2018-12-25T11:46:59.831852469Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.835421437Z	48	PC: 17052 | Get DOS version
2018-12-25T11:46:59.837164417Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.840969487Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:46:59.842853793Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.845832574Z	48	PC: 16852 | Get DOS version
2018-12-25T11:46:59.847684691Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.850268538Z	48	PC: 16452 | Get DOS version
2018-12-25T11:46:59.852012955Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.855395275Z	48	PC: 16052 | Get DOS version
2018-12-25T11:46:59.8568686Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.859462622Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:46:59.86187694Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.864857197Z	48	PC: 15852 | Get DOS version
2018-12-25T11:46:59.866153128Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.869260027Z	48	PC: 15452 | Get DOS version
2018-12-25T11:46:59.870667297Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.873079745Z	48	PC: 15052 | Get DOS version
2018-12-25T11:46:59.875090647Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.877961445Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:46:59.879702184Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.882773779Z	48	PC: 14852 | Get DOS version
2018-12-25T11:46:59.885050524Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.887798624Z	48	PC: 14452 | Get DOS version
2018-12-25T11:46:59.889459679Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.892632033Z	48	PC: 14052 | Get DOS version
2018-12-25T11:46:59.89406422Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.89654502Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:46:59.897991158Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.900187143Z	48	PC: 13852 | Get DOS version
2018-12-25T11:46:59.901237768Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.903715761Z	48	PC: 13452 | Get DOS version
2018-12-25T11:46:59.905019715Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.907483065Z	48	PC: 13052 | Get DOS version
2018-12-25T11:46:59.909320914Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:59.912427707Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:46:59.913720009Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:59.921425547Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:00.513479922Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.515831754Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:00.519597522Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:00.520924616Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:00.522526483Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:00.524319037Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:00.525722768Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.528117725Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:00.530649775Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.532878587Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:00.534091876Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.537391289Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:00.538827947Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.541307827Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:00.543514975Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.552670977Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:00.553878491Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.557155942Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:00.558747832Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.561257244Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:00.563388307Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.565833364Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:00.567105591Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.570315644Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:00.571720436Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.573954115Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:00.576239215Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.578527692Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:00.580122748Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.598379523Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:00.599804399Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.602567755Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:00.604360289Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.608613445Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:00.61085073Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.61436259Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:00.618663312Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.630672335Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:00.632376557Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.635399471Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:00.636645353Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.638831551Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:00.640704149Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.643128068Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:00.644556689Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.647630331Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:00.64915768Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.652299445Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:00.65419322Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.656765622Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:00.659196261Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.662702721Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:00.664216309Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.666758618Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:00.669204222Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.67173741Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:00.673194953Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.677019728Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:00.678890309Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.681350703Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:00.683584824Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.686842285Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:00.688322311Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.691535821Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:00.693299092Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.695762224Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:00.697928021Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.700392863Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:00.701510473Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.703770625Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:00.705369095Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.707387284Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:00.708405138Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.710498259Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:00.712267294Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.714366125Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:00.716454909Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.718743501Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:00.719852515Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:00.725841047Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:00.486306302Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.4898047Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:00.490765993Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:00.492119095Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:00.512778275Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:00.514514769Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:00.516077006Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:00.518516066Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.521036353Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:00.522576165Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.52625668Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:00.528098714Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.530950911Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:00.532498687Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.535338917Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:00.536532796Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.538810716Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:00.54100144Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.543673256Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:00.545107618Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.548198557Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:00.549514153Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.551924043Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:00.554285299Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.557071726Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:00.558601053Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.561634795Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:00.563461154Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.566368794Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:00.569146107Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.572493168Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:00.574139718Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.578023726Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:00.579817776Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.582835613Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:00.584362152Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.587772428Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:00.589268354Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.591851985Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:00.594289787Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.59703628Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:00.598659139Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.602407077Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:00.604309499Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.607097432Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:00.609218103Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.611662327Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:00.612927382Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.62824952Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:00.629707118Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.632228812Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:00.634095872Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.636453382Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:00.637528043Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.640452255Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:00.642267054Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.645294896Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:00.647417992Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.650686191Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:00.652532528Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.655736581Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:00.658330351Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.660911491Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:00.662382238Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.665078477Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:00.666272364Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.669911017Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:00.671247202Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.673633013Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:00.675095548Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.678132322Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:00.680068708Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.683916517Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:00.685515505Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.68812092Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:00.689799944Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.693297239Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:00.695205646Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.698249602Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:00.700609259Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:00.707579252Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:00.649655682Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.652501257Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:00.65386803Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:00.655546453Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:00.6576022Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:00.659091125Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:00.660731449Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:00.663353518Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.666362251Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:00.667830617Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.674927484Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:00.676282689Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.679100376Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:00.681113345Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.684759806Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:00.68630453Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.689346636Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:00.691188967Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.693594047Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:00.696151006Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.698438131Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:00.707514725Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.710893536Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:00.712585132Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.71507356Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:00.717426072Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.721683718Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:00.723848875Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.726519176Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:00.732441465Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.748548369Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:00.749935064Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.75295227Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:00.754108985Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.756253143Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:00.758573393Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.760832227Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:00.7621265Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.765715403Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:00.76723728Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.769724998Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:00.773646781Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.776087896Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:00.777394213Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.786624975Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:00.787941192Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.790343085Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:00.792598842Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.795017917Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:00.796402313Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.799636818Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:00.801073178Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.803315745Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:00.807098Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.816711955Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:00.819087639Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.822702469Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:00.824036518Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.826305559Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:00.828252494Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.830767906Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:00.832040371Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.835226368Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:00.836495016Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.838686586Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:00.840108738Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.842669265Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:00.844184472Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.846425879Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:00.847696995Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.849748885Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:00.850841407Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.85421952Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:00.855860069Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.858437384Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:00.860847568Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.863212874Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:00.864783123Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:00.868027915Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:00.869611049Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:00.8753296Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:01.220508048Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.229190619Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:01.230479344Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:01.232134398Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:01.246060211Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:01.247714188Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:01.249285966Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:01.252095387Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.254745998Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:01.256276437Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.259222833Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:01.261654379Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.264589278Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:01.266463412Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.270353455Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:01.271633113Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.274026344Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:01.27619018Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.279864851Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:01.281626606Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.284974997Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:01.286444434Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.28879004Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:01.290632706Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.293145857Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:01.29476754Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.297865509Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:01.300255092Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.303305753Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:01.305285109Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.307819196Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:01.309815046Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.312241936Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:01.313777391Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.316504315Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:01.318560727Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.322501214Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:01.324137573Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.326884106Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:01.328820835Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.331020811Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:01.332229482Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.335514679Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:01.337168099Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.339866192Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:01.344357059Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.347363496Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:01.349278132Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.352816959Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:01.354325247Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.356814526Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:01.358834886Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.361347604Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:01.362672631Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.365596029Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:01.367112719Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.369860598Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:01.37173211Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.37647021Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:01.378178217Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.380762098Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:01.382278951Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.384898724Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:01.386642675Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.389572926Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:01.391176021Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.393898752Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:01.395579708Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.411213505Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:01.413643536Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.41639128Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:01.428505246Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.431074088Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:01.433234442Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.4363891Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:01.438903072Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.441892293Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:01.443303922Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.44622233Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:01.447851408Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:01.454064172Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:01.513517263Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.51622739Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:01.517440752Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:01.518630372Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:01.520155435Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:01.521324329Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:01.522484896Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.524922031Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:01.526130249Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.52829272Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:01.529650539Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.531999595Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:01.53312984Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.534990403Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:01.536294347Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.538699608Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:01.539763178Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.542305764Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:01.543340257Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.545500977Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:01.546972032Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.549414645Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:01.550741887Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.5541138Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:01.555826862Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.558677109Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:01.56130367Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.564029823Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:01.565309663Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.568157853Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:01.570005633Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.572564385Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:01.574159507Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.577813806Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:01.57945445Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.582592168Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:01.58446847Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.587224751Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:01.589076249Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.592004335Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:01.593633153Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.596454328Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:01.59823842Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.600459753Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:01.601544065Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.604275978Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:01.605561649Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.607962933Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:01.609752779Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.612125877Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:01.613457842Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.616718899Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:01.618361718Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.621106547Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:01.623081275Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.625530089Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:01.62680237Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.629464943Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:01.630993119Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.633741971Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:01.636260777Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.639002908Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:01.640663439Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.643888415Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:01.645209556Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.64756567Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:01.64964039Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.651929549Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:01.653084334Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.656733963Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:01.657931584Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.660168089Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:01.662455029Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.664772085Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:01.66595523Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.6688824Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:01.67023039Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:01.672665335Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:01.675013854Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:01.680985136Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:02.170336029Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.173449954Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:02.174853125Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:02.178330509Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:02.181195405Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:02.182634835Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:02.183988896Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:02.186211954Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.188911367Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:02.190707433Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.19453053Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:02.196226366Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.199128971Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:02.200973448Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.204576525Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:02.206352925Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.209264051Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:02.21188955Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.214361135Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:02.215351176Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.217691841Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:02.218960637Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.221052221Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:02.223046542Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.226647367Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:02.229103004Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.233097858Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:02.234792055Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.237633437Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:02.240613694Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.243772326Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:02.245080579Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.247704883Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:02.249655771Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.251741347Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:02.254133336Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.257113938Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:02.258543701Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.260973093Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:02.263411899Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.266247379Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:02.26799263Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.271686073Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:02.273236583Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.275748447Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:02.278276187Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.280892142Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:02.282311087Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.285850962Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:02.287152137Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.289845538Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:02.291716722Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.294828554Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:02.296146514Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.298493593Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:02.30008217Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.302554273Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:02.30408803Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.306480347Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:02.30751384Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.309185941Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:02.31088638Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.312877219Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:02.314600878Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.317890862Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:02.319327287Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.321759925Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:02.324342591Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.326505681Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:02.327581289Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.330026304Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:02.331237697Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.33343915Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:02.334796797Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.337594251Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:02.33866328Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.340335055Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:02.342520327Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.344301261Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:02.345569736Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:02.349850063Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:02.441224186Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.444749263Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:02.446204076Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:02.447877725Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:02.459562471Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:02.461050356Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:02.462442244Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:02.464121538Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.467385295Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:02.468748348Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.47117981Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:02.473383242Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.475911342Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:02.477335564Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.481535298Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:02.483290091Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.486173737Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:02.491655349Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.496809741Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:02.498179779Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.501255965Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:02.502624233Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.505085257Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:02.507749313Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.510423811Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:02.512055367Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.515573619Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:02.517276556Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.519984522Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:02.522763207Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.525422164Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:02.526643267Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.529162689Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:02.530845407Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.533702126Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:02.535050751Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.538589346Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:02.540207284Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.542881303Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:02.54490082Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.54810503Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:02.549718352Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.553114845Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:02.554715145Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.557487307Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:02.559787145Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.562618868Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:02.564228715Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.567432378Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:02.568933485Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.571605242Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:02.573845907Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.590577333Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:02.592274314Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.595562654Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:02.597060204Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.600982133Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:02.603007677Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.605938759Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:02.607577467Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.610751841Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:02.612405486Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.615161283Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:02.617361148Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.619950307Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:02.621591763Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.625103691Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:02.626711622Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.629977995Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:02.632218071Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.634937751Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:02.636667638Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.639886858Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:02.641678875Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.644443236Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:02.646459904Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.649068572Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:02.650493205Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:02.654021011Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:02.655492198Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:02.664182872Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:03.965547999Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:03.968446676Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:03.969817211Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:03.971421595Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:03.973821117Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:03.975147123Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:03.976435591Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:03.978149758Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:03.980582675Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:03.982291648Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:03.984830516Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:03.986245045Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:03.988583615Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:03.989887498Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:03.992620155Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:03.993976766Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:03.996404518Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:03.999434517Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.001940557Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:04.003269693Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.00732879Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:04.008985463Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.011497398Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:04.013444907Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.016150222Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:04.017893419Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.021245764Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:04.022814868Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.025274508Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:04.026910263Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.02965561Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:04.03096285Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.033375196Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:04.035276558Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.037381663Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:04.038415015Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.041303909Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:04.042680046Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.044995166Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:04.047060704Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.050173276Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:04.051518443Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.054679267Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:04.056169302Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.058708147Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:04.060502205Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.063560054Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:04.065338656Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.069129162Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:04.070705531Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.073372625Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:04.075165781Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.078184313Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:04.079900997Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.083005695Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:04.085613026Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.088436172Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:04.090337492Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.106471502Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:04.107837229Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.110323191Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:04.119807379Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.122700083Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:04.124375991Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.127633199Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:04.129241901Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.131839618Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:04.142194702Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.144724842Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:04.146182172Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.155740516Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:04.15700552Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.159305599Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:04.161506303Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.164404048Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:04.166224574Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.169978453Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:04.171646008Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.17505516Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:04.18238326Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:04.18897049Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:04.287298738Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.289888215Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:04.291067232Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:04.292302862Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.294079609Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.295504475Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.296899167Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.300962878Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:04.302158499Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.304277367Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:04.311869446Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.314013905Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:04.31517848Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.318132005Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:04.319865657Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.322198561Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:04.32448263Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.327045149Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:04.328661088Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.331455016Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:04.33312917Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.335516042Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:04.337623427Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.34023442Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:04.341461034Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.344019634Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:04.346316575Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.348506547Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:04.350677134Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.352906506Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:04.354049806Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.356213829Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:04.3582569Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.360451111Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:04.362000372Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.37129236Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:04.372807171Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.375228056Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:04.377304606Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.379519587Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:04.380686591Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.385094694Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:04.386528669Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.388948792Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:04.390983439Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.393204898Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:04.394557662Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.398043715Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:04.399559085Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.401660367Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:04.403712337Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.406403571Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:04.407874764Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.410877905Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:04.412286574Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.414949095Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:04.417089362Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.419319251Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:04.420464205Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.423574938Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:04.424750478Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.426894084Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:04.42989321Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.432160486Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:04.433264836Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.436013557Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:04.437153935Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.439159602Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:04.440760095Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.442900627Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:04.44440976Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.447499349Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:04.449043539Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.451541602Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:04.453567323Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.455855525Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:04.457088546Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.460689471Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:04.466841839Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:04.472781032Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:04.226294948Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.229894767Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:04.231220594Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:04.232946805Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.235280652Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.237885434Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.239550593Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.241795312Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.244483763Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:04.24604758Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.249641641Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:04.251428927Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.254969914Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:04.257221743Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.260925844Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:04.26311901Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.26608732Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:04.268497227Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.271789167Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:04.27357322Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.27760732Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:04.279381633Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.282225102Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:04.284523927Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.287630693Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:04.289560937Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.292619926Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:04.294512173Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.297578973Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:04.304935382Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.311663673Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:04.313092957Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.316738015Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:04.318351327Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.321158921Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:04.323194753Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.32616374Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:04.328421771Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.332320102Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:04.334204466Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.336794233Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:04.338748398Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.341462648Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:04.342846339Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.346292173Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:04.348044239Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.350623076Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:04.353568721Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.370592159Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:04.37194998Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.37475429Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:04.377620397Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.380528288Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:04.382311672Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.386016626Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:04.388124059Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.390973157Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:04.393249632Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.396208559Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:04.397836609Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.401371467Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:04.403374283Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.406137632Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:04.407795149Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.41162559Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:04.413282172Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.416031968Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:04.418708516Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.421452624Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:04.423095431Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.426678958Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:04.428657091Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.431412007Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:04.433834854Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.437779372Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:04.439502928Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.443083314Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:04.445049267Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.44787601Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:04.449838522Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:04.456621781Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:04.214318801Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.217892008Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:04.219818119Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:04.221711883Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.223765644Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.225475149Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.226945599Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.228655022Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.232190829Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:04.233728204Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.236414537Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:04.247009233Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.249840437Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:04.251485376Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.255167495Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:04.256842939Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.259609282Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:04.261791305Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.264444593Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:04.266365829Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.27001915Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:04.272164888Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.274596363Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:04.277018034Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.279780108Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:04.281199746Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.284575539Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:04.287919497Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.292336219Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:04.295360507Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.299488983Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:04.302512151Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.305303999Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:04.307336498Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.309929266Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:04.311539869Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.317900583Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:04.319189927Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.321481812Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:04.328391371Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.331253757Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:04.333107584Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.337019419Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:04.338781843Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.341624461Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:04.34439685Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.347519897Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:04.349640688Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.35338429Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:04.355318035Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.358128601Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:04.359802051Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.362893528Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:04.364544748Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.367387984Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:04.369703855Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.37256265Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:04.375141205Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.378481126Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:04.380225734Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.383088664Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:04.385165226Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.38987051Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:04.391247253Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.396112063Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:04.39799882Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.40079797Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:04.403070295Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.405927478Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:04.407750166Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.411145493Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:04.412913815Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.4157873Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:04.418447967Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.421707581Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:04.423433812Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.426878812Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:04.428260158Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.431273659Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:04.433934403Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:04.442653898Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:04.349271095Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.352869114Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:04.35430194Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:04.356198878Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.358342874Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.359916378Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.361506253Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.373661757Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.376431897Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:04.377893165Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.380881949Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:04.385555147Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.388455847Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:04.390194184Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.393629714Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:04.395264922Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.398006552Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:04.400264165Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.403084415Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:04.404800835Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.408223586Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:04.409669766Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.412409468Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:04.41498004Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.417753895Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:04.419385135Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.422751032Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:04.424207345Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.42733374Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:04.429818056Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.432262341Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:04.433598267Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.436892129Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:04.438537088Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.441318695Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:04.443154764Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.446535688Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:04.447954101Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.450296793Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:04.457501142Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.460007378Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:04.461546858Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.466121032Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:04.467830878Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.470466284Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:04.472373957Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.475064129Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:04.477718366Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.480718573Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:04.482693889Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.485849385Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:04.487934021Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.4905008Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:04.491834804Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.494892036Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:04.496255795Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.498665302Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:04.501085951Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.503832474Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:04.505257734Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.508744385Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:04.510216075Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.512707413Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:04.514093375Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.517503875Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:04.519294131Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.522509572Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:04.5251723Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.527857433Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:04.529351984Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.532640493Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:04.534173414Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.536428224Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:04.538761901Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.541189118Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:04.542552315Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.546103967Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:04.547461214Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.550041123Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:04.552261986Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:04.559200647Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:04.406306001Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.410260242Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:04.411988514Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:04.413900752Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.416490631Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.418540902Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.420242595Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.423079343Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:04.42538644Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.428740404Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:04.429958717Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.43298916Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:04.434354454Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.437129491Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:04.439418049Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.441942589Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:04.443307291Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.44640676Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:04.448072196Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.450878811Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:04.453028491Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.456617017Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:04.459196799Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.463044617Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:04.465947935Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.469327787Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:04.470961415Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.474076213Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:04.475699129Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.47847981Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:04.482583904Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.484995834Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:04.486186196Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.489059101Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:04.497545388Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.500097028Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:04.502971008Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.514483966Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:04.515973434Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.519369811Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:04.520863967Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.523316351Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:04.524871703Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.527229402Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:04.528506326Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.53081139Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:04.532373829Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.53467797Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:04.535779938Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.539088139Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:04.540550182Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.543084321Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:04.545561989Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.54820144Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:04.549592362Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.553568709Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:04.555024723Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.557514911Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:04.559183065Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.562257034Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:04.563924215Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.567344055Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:04.568954239Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.572364626Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:04.574151415Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.577749633Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:04.579366895Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.582131985Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:04.584721236Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.587174413Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:04.588488311Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.591836032Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:04.593450087Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.596381459Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:04.598061402Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.600537153Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:04.6018872Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.605534596Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:04.607917863Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:04.616634259Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:04.66156436Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.665629295Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:04.66736708Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:04.669280117Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.671471168Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.672867003Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.674067709Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.675696861Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.67902349Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:04.680771686Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.683580046Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:04.685647187Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.687900542Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:04.689051381Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.692501859Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:04.693926423Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.696606397Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:04.699836848Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.702996367Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:04.704875429Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.711464985Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:04.714131072Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.717363252Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:04.724841856Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.727472841Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:04.728975877Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.733870969Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:04.735179148Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.737583239Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:04.740015545Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.745566509Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:04.748134185Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.751202306Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:04.753250055Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.755783763Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:04.757168362Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.761027971Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:04.762583123Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.765131803Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:04.767121121Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.769913237Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:04.771245163Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.774571664Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:04.776008738Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.779405786Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:04.781295408Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.783809791Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:04.7851938Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.788172465Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:04.789452116Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.791630034Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:04.793343604Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.796167415Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:04.797849452Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.801023662Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:04.802370312Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.805079516Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:04.806877166Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.809882704Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:04.811009115Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.813342953Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:04.815192986Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.818123984Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:04.819327869Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.821717038Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:04.822786418Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.824947823Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:04.828686479Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.831115599Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:04.83336267Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.836577894Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:04.838615948Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.841890012Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:04.844300315Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.847141048Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:04.84884119Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.851917025Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:04.853928184Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.856684695Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:04.859516333Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:04.865836212Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:04.955841679Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.958826177Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:04.960330952Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:04.961679672Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.963775551Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.964921805Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:04.966019988Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:04.967832988Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.970578181Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:04.9726935Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.975480409Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:04.986784136Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.990398173Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:04.991945091Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:04.994419677Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:05.002102327Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.004657214Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:05.006173675Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.01114444Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:05.012735585Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.015313812Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:05.016983968Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.019748901Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:05.02120233Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.02382012Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:05.025609269Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.027900482Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:05.029262055Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.031953741Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:05.033518181Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.036066328Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:05.037852093Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.041443387Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:05.043572697Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.047146495Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:05.04866232Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.051120703Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:05.053676777Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.056597306Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:05.058077585Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.062948582Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:05.064313817Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.067168929Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:05.069424188Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.07187957Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:05.073329605Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.076509888Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:05.078726053Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.080932738Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:05.082560613Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.084935334Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:05.086448476Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.089419003Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:05.093095869Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.096611767Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:05.0988235Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.101380526Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:05.102952006Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.106310326Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:05.108072771Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.110477383Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:05.112564164Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.115222502Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:05.116611705Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.119688631Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:05.12137569Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.123823154Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:05.125400321Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.1287535Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:05.13033193Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.132417846Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:05.134099205Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.136142591Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:05.137259188Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.140259294Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:05.141340608Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.143833754Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:05.145944856Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.148031405Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:05.149448596Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:05.155358283Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:05.014721216Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.018193958Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:05.019809985Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:05.021585424Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.032212318Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.033682906Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.03523944Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.037304092Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.039884188Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:05.041389638Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.04534419Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:05.047059085Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.049769102Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:05.054754315Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.060907847Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:05.062447962Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.067580905Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:05.068970579Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.071475247Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:05.074154873Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.076624583Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:05.078070807Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.081638634Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:05.083078119Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.08556343Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:05.0881845Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.09076675Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:05.092387067Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.096080585Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:05.097812399Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.100232035Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:05.102088607Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.104450265Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:05.105802902Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.108610157Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:05.110392929Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.112902148Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:05.115165544Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.117649273Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:05.119094143Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.122370398Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:05.12398199Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.126635796Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:05.130011086Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.132513906Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:05.133936494Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.136936229Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:05.13829144Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.140715453Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:05.142876359Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.145412301Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:05.147346342Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.149796185Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:05.151447604Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.15440194Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:05.155791539Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.159233306Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:05.160962105Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.162439083Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:05.163883625Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.165404764Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:05.166311994Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.168291618Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:05.169222309Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.171063584Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:05.172913899Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.175114945Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:05.176116104Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.178690232Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:05.179786721Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.181749266Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:05.18333426Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.18534442Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:05.186340699Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.188844303Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:05.189896853Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.192096913Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:05.193780961Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.195774865Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:05.196950247Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:05.203068762Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:05.023567166Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.032164159Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:05.033610034Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:05.035086616Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.037830955Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.038792919Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.039715127Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.041228497Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.042885015Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:05.044008253Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.046073958Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:05.047005962Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.048460724Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:05.04998646Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.052279058Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:05.053911258Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.055813964Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:05.058580041Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.060052921Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:05.060897852Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.063161874Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:05.064699977Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.067510949Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:05.069692404Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.071502374Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:05.072575371Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.07525369Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:05.076412274Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.078257031Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:05.080934112Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.08360224Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:05.085840238Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.08932904Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:05.09070448Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.09282275Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:05.094887284Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.096975838Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:05.098128226Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.100825224Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:05.101941967Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.106684358Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:05.108413728Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.109989633Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:05.110950741Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.113308574Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:05.114302617Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.115965329Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:05.11779336Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.11946702Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:05.120442399Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.122673227Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:05.123715537Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.125281111Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:05.127377773Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.128877777Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:05.130093375Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.132167079Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:05.133174721Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.134686009Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:05.136164079Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.137712648Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:05.138666231Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.140764211Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:05.141646451Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.143164282Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:05.144675632Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.146208639Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:05.152694386Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.154911438Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:05.155945401Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.157622771Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:05.159191815Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.160724829Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:05.16160556Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.163785659Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:05.164783938Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.166306325Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:05.167814028Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.169655275Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:05.170955163Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:05.183187375Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:05.443709491Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.4468464Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:05.447796158Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:05.448883423Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.450209792Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.451096916Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.452146568Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.453524221Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.455110556Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:05.456051591Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.458226883Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:05.459176681Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.460584156Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:05.462094737Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.463600623Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:05.46450111Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.466706814Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:05.467679793Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.469101103Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:05.47049764Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.471976578Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:05.472777128Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.474763896Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:05.475686481Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.477177439Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:05.478757684Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.480352057Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:05.481270132Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.483501748Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:05.484373113Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.485840741Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:05.487620829Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.489277001Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:05.490139412Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.492162725Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:05.493023782Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.494633127Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:05.496279485Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.498037923Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:05.498943775Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.501282881Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:05.502636668Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.50410492Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:05.505536322Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.507083102Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:05.507985709Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.509828119Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:05.5109747Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.513264464Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:05.515477229Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.51775471Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:05.519123845Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.522303769Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:05.52357209Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.525909195Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:05.527811373Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.529898649Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:05.530974159Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.533973052Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:05.535082507Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.537119262Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:05.538891032Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.542118498Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:05.543205457Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.545919146Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:05.547179442Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.549675472Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:05.55094603Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.553714232Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:05.554839953Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.556870878Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:05.558686333Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.560939913Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:05.562228843Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.565395334Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:05.566503114Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.568529976Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:05.571188548Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.573372906Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:05.574579481Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:05.588570021Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:05.40607614Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.408959866Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:05.410200732Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:05.411707232Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.4133778Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.414577467Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.416082208Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.418863874Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:05.420598661Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.423061192Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:05.42465794Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.427526697Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:05.42895766Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.43131856Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:05.433270253Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.436016921Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:05.437645513Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.441299199Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:05.442521066Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.445137583Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:05.447771776Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.450342085Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:05.451805065Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.45548427Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:05.457693124Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.461767353Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:05.463028376Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.466531814Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:05.467765456Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.470091339Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:05.47279741Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.475112216Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:05.476263385Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.479046824Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:05.480609103Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.482848847Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:05.48448053Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.486382629Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:05.488341993Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.491836944Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:05.493124086Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.495483827Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:05.497187184Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.499496063Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:05.500726639Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.503535695Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:05.504716264Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.506855859Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:05.507997635Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.510762494Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:05.512138201Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.514601616Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:05.516256277Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.518710032Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:05.52007345Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.522949593Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:05.524132916Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.526391094Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:05.528181762Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.530621378Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:05.531788212Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.534463076Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:05.535671883Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.537951701Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:05.540884836Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.543201597Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:05.544373748Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.547041645Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:05.548280555Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.550391664Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:05.55171864Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.554073579Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:05.555232461Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.557830563Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:05.558981646Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.561358291Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:05.576273013Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.579359673Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:05.580719858Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:05.587343546Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:05.423648595Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.427060512Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:05.428832483Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:05.430691007Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.433001176Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.434395774Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.435702203Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.438076092Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.440652177Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:05.442036755Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.444497151Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:05.446719197Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.449619041Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:05.451099819Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.455099338Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:05.456449929Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.458930347Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:05.460826661Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.46438502Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:05.466316259Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.470535962Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:05.472456381Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.475364818Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:05.477365337Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.480973264Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:05.48273817Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.485607081Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:05.488159604Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.490614829Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:05.492201461Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.496126535Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:05.497609545Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.499972255Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:05.501805743Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.504716615Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:05.50634051Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.509157592Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:05.510672813Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.51300961Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:05.514427499Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.5173585Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:05.518831987Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.521460835Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:05.523116144Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.526042415Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:05.527230064Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.530394033Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:05.531543822Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.533983515Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:05.536720323Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.539557837Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:05.541182747Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.545451481Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:05.546987483Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.549693336Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:05.551401683Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.554351522Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:05.555754522Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.558283282Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:05.565553866Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.568160003Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:05.569628772Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.572743584Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:05.573982661Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.576912808Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:05.579060954Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.581829888Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:05.583441107Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.587600308Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:05.58918783Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.591995715Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:05.5943426Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.596920239Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:05.598461986Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.60221163Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:05.603750946Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.606825077Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:05.609648001Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.612265346Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:05.613746999Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:05.62140703Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:05.685089186Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.688026521Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:05.68933416Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:05.690784661Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.701635963Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.702919994Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.704129935Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.711927113Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:05.713283267Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.715546459Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:05.717640482Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.72025076Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:05.721675822Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.724455903Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:05.725986814Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.72857061Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:05.730206499Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.733179707Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:05.734881608Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.737678401Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:05.745434289Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.747871944Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:05.749167845Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.752356132Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:05.754090996Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.756858212Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:05.758961279Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.761834215Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:05.763528285Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.767038112Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:05.768610256Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.772265131Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:05.77613572Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.778617268Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:05.780150557Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.782983072Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:05.784660266Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.787546812Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:05.790388652Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.792814467Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:05.793910771Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.796372607Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:05.798362459Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.801312767Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:05.80295423Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.80635481Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:05.807559171Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.809963129Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:05.812023472Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.834251768Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:05.835524256Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.838389267Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:05.839934104Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.841513678Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:05.84329029Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.845663029Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:05.847702209Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.851227581Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:05.852216687Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.853742367Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:05.85570148Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.857440861Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:05.858641482Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.861601208Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:05.862598512Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.864150916Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:05.866040404Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.867668407Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:05.868549009Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.870532703Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:05.873521806Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.876579083Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:05.87914041Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.882045935Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:05.883771593Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.887492806Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:05.888994808Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.891501787Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:05.893110362Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:05.89939149Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:05.933780778Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.936436126Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:05.937513227Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:05.939056883Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.94079401Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.942176198Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.943537762Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.948274984Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.950763419Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:05.952259674Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.962520326Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:05.963800252Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.96590316Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:05.967738143Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.969427082Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:05.970580737Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.972814207Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:05.973752961Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.975255674Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:05.976419905Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.978023966Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:05.979293395Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.982081567Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:05.983826819Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.986183442Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:05.988075394Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.990262892Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:05.992169332Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.998734371Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:05.999965096Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.002077901Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:06.003988585Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.006938438Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:06.008709585Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.011821868Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:06.013428477Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.015899118Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:06.018165141Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.020449906Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:06.021671318Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.024707645Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:06.02584283Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.027923633Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:06.030283895Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.032423979Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:06.033576795Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.03609101Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:06.037716651Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.040161953Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:06.042220933Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.044617489Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:06.046095154Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.049230509Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:06.051008184Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.053141992Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:06.05481397Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.056923019Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:06.058037085Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.060788007Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:06.062009079Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.064073934Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:06.065415681Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.067811224Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:06.069006057Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.071536946Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:06.072973439Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.075109872Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:06.076472035Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.079000372Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:06.080425918Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.082745048Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:06.084299373Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.086449017Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:06.087818512Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.091118285Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:06.092567703Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.095294822Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:06.097912745Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.100044913Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:06.101063533Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:06.106737861Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:05.932074175Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.935047126Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:05.936939227Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:05.938507142Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.941805593Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.943358244Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:05.944991269Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:05.947492866Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.949883526Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:05.951053635Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.953708315Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:05.961231609Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.963602248Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:05.964826285Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.967694628Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:05.968991546Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.971314629Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:05.973183965Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.975605186Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:05.976896118Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.980121358Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:05.982375104Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.984889208Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:05.987098114Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.989467459Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:05.991508489Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.99427919Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:05.995807469Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:05.998259147Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:06.000079475Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.002664706Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:06.003935202Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.006521529Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:06.008134365Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.010617357Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:06.011862032Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.014277283Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:06.015527205Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.018207477Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:06.019858629Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.021455269Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:06.022375778Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.024717438Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:06.026145272Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.02867704Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:06.034062871Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.036402732Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:06.037435431Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.040041177Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:06.041673596Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.044036602Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:06.05603961Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.058393736Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:06.059407309Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.062956763Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:06.06418131Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.066529129Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:06.067779063Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.070311232Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:06.071506639Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.073880984Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:06.075763265Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.078183845Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:06.079476182Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.082449443Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:06.084223196Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.087833355Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:06.089788332Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.092171956Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:06.094063245Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.097278907Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:06.098900178Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.10179764Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:06.103850831Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.106616334Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:06.108044152Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.110807359Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:06.112204479Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.114533011Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:06.116399143Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:06.122406072Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:06.284781766Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.287633748Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:06.28922554Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:06.291390825Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:06.29313969Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:06.294570496Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:06.295991391Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:06.297776086Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.300172343Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:06.3014614Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.304489969Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:06.306425591Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.308926899Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:06.310608465Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.313195528Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:06.314956619Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.317568201Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:06.319313545Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.322144924Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:06.323851418Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.32648976Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:06.327526432Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.329846086Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:06.33192633Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.334225194Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:06.335422761Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.338426206Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:06.339752313Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.342053172Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:06.343543228Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.346869491Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:06.348526815Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.351809626Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:06.354183202Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.356916812Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:06.358989494Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.36164483Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:06.362901627Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.3657948Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:06.367508905Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.369945319Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:06.372092535Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.375279625Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:06.376544704Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.379350633Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:06.380866475Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.383354195Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:06.385139865Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.387471561Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:06.388635358Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.3913886Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:06.392649117Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.394784851Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:06.396271383Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.398916387Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:06.400496776Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.403129402Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:06.404444716Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.406691839Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:06.408285804Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.410647182Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:06.411873303Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.414652301Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:06.416167267Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.418571597Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:06.420387551Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.422682862Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:06.42398286Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.427253098Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:06.428731803Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.431266259Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:06.432838869Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.435267999Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:06.436441631Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.439135992Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:06.44101235Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.443836303Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:06.446007308Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.44854113Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:06.449652357Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:06.456878812Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:06.639085816Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.641688248Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:06.642591934Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:06.643593477Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:06.644905209Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:06.645780682Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:06.646658776Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.649302058Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:06.65010471Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.651469642Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:06.660594112Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.662629389Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:06.663890226Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.666726638Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:06.668072864Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.670382879Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:06.682592203Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.68464538Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:06.685557296Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.688035261Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:06.689093244Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.691124179Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:06.692708269Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.694976982Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:06.696045376Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.698869306Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:06.700007643Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.702096554Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:06.703730091Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.705829462Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:06.707177Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.709895811Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:06.711960384Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.714969583Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:06.71697161Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.719520599Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:06.722047897Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.725013791Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:06.726376459Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.729366572Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:06.730394622Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.732719458Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:06.734448637Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.73648869Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:06.737560611Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.740506205Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:06.741529889Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.743941323Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:06.745506655Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.747580242Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:06.74862273Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.751189581Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:06.752412098Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.754443375Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:06.756148401Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.758323373Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:06.759378299Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.762091545Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:06.763325858Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.765347535Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:06.767480184Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.769824754Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:06.771177389Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.77435253Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:06.775608416Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.777715343Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:06.778961478Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.781375733Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:06.782516629Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.7847819Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:06.786328058Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.788399077Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:06.790086961Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.792221986Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:06.793218482Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.795842327Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:06.796965995Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.799018392Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:06.800739671Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:06.815225971Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:06.641309885Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.643837506Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:06.645059515Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:06.64641705Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:06.647572953Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:06.648701888Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:06.649808369Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:06.650972335Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.653513646Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:06.654980591Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.666356988Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:06.667765029Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.670041312Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:06.671388484Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.675038655Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:06.676781795Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.679620843Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:06.681397352Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.683548133Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:06.684719611Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.69525335Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:06.696502025Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.69874792Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:06.700262613Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.702916785Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:06.704146904Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.706894411Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:06.707915324Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.710090202Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:06.711643927Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.713250485Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:06.71446351Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.71692203Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:06.718644477Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.720105972Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:06.720937715Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.723872385Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:06.725079365Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.727323599Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:06.728802099Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.731006321Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:06.732115451Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.734650962Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:06.735795074Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.737911539Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:06.739524069Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.74159657Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:06.742741435Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.745291326Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:06.746473282Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.748760197Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:06.750409382Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.751929945Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:06.752787126Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.754721742Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:06.755596712Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.756942402Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:06.758095241Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.761090198Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:06.76210704Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.764594286Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:06.76578035Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.767894141Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:06.779110563Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.781458486Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:06.782680066Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.785285434Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:06.786439773Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.788543148Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:06.790007646Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.791532834Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:06.792310364Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.794234854Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:06.795183944Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.796671799Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:06.79786518Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.799407212Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:06.800296059Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.802183588Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:06.803206734Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:06.806664858Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:06.933317129Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.936323367Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:06.937837879Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:06.939506268Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:06.941475647Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:06.942847304Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:06.944036949Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:06.945517331Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.948368535Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:06.949614674Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.951955528Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:06.95416768Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.956687781Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:06.958088492Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.96119553Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:06.962879905Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.965541184Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:06.967640731Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.970152799Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:06.971337871Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.976385977Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:06.977719507Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.980072175Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:06.981777412Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.984180329Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:06.985369492Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.988165698Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:06.989444201Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.991594191Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:06.993116595Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.9949051Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:06.996354037Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:06.998995022Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:07.000380282Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.002215607Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:07.003220063Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.00515718Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:07.007194932Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.009740801Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:07.011107213Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.013446265Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:07.014647194Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.016967444Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:07.018432053Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.020768445Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:07.022816215Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.025145458Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:07.026203393Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.028810011Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:07.030144101Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.032445171Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:07.03425439Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.036586472Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:07.037654148Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.0404133Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:07.041570572Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.044159634Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:07.046268485Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.049182847Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:07.050243597Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.053055637Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:07.054585242Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.056783699Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:07.080884408Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.083967357Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:07.08519263Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.08846224Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:07.089686376Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.092149402Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:07.093748216Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.096168588Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:07.097397654Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.100247329Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:07.101590318Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.103999691Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:07.105929342Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.108833878Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:07.110109359Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.124351739Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:07.125644144Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:07.131770302Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:07.290968639Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.296379319Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:07.29744527Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:07.298577995Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:07.299812816Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:07.301602995Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:07.302877597Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:07.304009707Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.306660364Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:07.307948483Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.310731605Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:07.313810431Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.31613377Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:07.317182478Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.320257383Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:07.321604Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.323971599Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:07.325721665Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.328084249Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:07.329317609Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.332083523Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:07.333343303Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.335717482Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:07.337632852Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.340025151Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:07.341179737Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.344030885Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:07.345403929Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.347720384Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:07.349116964Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.351914553Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:07.353131335Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.355426617Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:07.357152745Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.359434092Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:07.361471825Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.364404359Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:07.365659328Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.367990643Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:07.369818444Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.372820254Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:07.374044143Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.377606155Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:07.378793107Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.381130346Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:07.382988651Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.385552376Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:07.386898424Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.389927572Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:07.391182811Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.393468151Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:07.39515974Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.397478704Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:07.398581708Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.401867258Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:07.403157827Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.405585085Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:07.40722847Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.409992317Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:07.411256488Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.413989256Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:07.425256651Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.427568169Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:07.428814891Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.431580351Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:07.43268678Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.434994914Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:07.436276101Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.438599221Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:07.439756712Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.442416664Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:07.443456419Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.445719647Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:07.44700238Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.449319338Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:07.45130406Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.453667546Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:07.455093617Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.457457242Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:07.459390307Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:07.465535946Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:07.620343001Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.623609974Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:07.624982235Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:07.626549226Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:07.628379696Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:07.629594093Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:07.630647298Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.634017216Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:07.635334726Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.637613023Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:07.638786432Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.640701323Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:07.641685288Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.64358967Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:07.649774054Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.651454578Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:07.652476852Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.65508067Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:07.65612596Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.658499724Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:07.660145229Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.662443235Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:07.663467129Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.666188396Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:07.667546232Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.669896049Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:07.671401438Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.673738556Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:07.674757749Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.677383793Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:07.67832546Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.679819934Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:07.680977754Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.684891963Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:07.686070454Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.687769075Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:07.68926282Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.691574384Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:07.692750716Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.695386009Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:07.696388652Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.698872745Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:07.700665032Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.702756055Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:07.704599832Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.707843818Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:07.70897263Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.7111013Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:07.713302963Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.715584458Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:07.71674288Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.720088008Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:07.721502246Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.72429042Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:07.726550026Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.729382065Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:07.73107333Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.734270662Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:07.735529139Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.738254083Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:07.740423278Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.74199248Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:07.742897401Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.745208955Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:07.746189239Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.747656943Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:07.749160679Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.750740237Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:07.751564389Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.753788676Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:07.754921869Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.75641775Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:07.758319025Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.760488679Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:07.762121023Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.764236486Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:07.765868338Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.768244609Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:07.769603451Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:07.775643641Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:07.973120509Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.975734542Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:07.976887589Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:07.978260308Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:07.979824272Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:07.980955906Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:07.981895694Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:07.983905946Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.986312654Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:07.987593323Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.993689364Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:07.995325519Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:07.99820267Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:08.000160477Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.003935276Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:08.011140199Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.013818732Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:08.015956686Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.018427076Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:08.019752398Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.022694499Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:08.024024507Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.026724797Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:08.029201069Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.033130425Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:08.034898538Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.03885767Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:08.040099611Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.04277376Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:08.044377393Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.046857323Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:08.048109966Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.050773539Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:08.052296132Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.054741634Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:08.056264748Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.059275562Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:08.061650057Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.064559255Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:08.066352371Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.069246824Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:08.085034106Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.087709902Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:08.08907595Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.091433193Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:08.093449991Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.096125272Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:08.097816846Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.101274895Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:08.102480776Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.104643228Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:08.106174455Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.108499887Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:08.109703239Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.112417137Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:08.113783332Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.116134714Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:08.117832489Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.120054869Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:08.121259634Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.124637067Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:08.125890191Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.128190251Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:08.12995945Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.133259691Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:08.134881334Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.137870278Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:08.139115221Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.141432233Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:08.143825837Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.146313205Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:08.147534443Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.150705389Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:08.152498754Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.155400613Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:08.157507007Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.159848905Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:08.16106128Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.164487192Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:08.165792678Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:08.171856785Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:08.388775673Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.391388253Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:08.392487465Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:08.393741683Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.395580317Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:08.397264956Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.398892721Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:08.401657172Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.406916374Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:08.408012231Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.41075835Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:08.412877332Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.415303997Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:08.418660009Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.421140262Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:08.422810928Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.425714552Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:08.426880499Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.42883419Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:08.430476663Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.432541488Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:08.433593928Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.436205003Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:08.437307233Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.439303719Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:08.440879879Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.442893123Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:08.444606334Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.447354423Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:08.448445054Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.450390071Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:08.452569197Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.455417779Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:08.456888024Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.45959484Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:08.460906826Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.463080107Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:08.464640687Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.466908741Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:08.468258362Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.471219394Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:08.472583654Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.474853183Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:08.490362378Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.492640264Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:08.493953515Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.496775974Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:08.498063309Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.50032359Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:08.502005748Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.504189341Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:08.505304596Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.507807202Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:08.509214801Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.511572543Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:08.513431367Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.51595524Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:08.517507514Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.520855508Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:08.522080868Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.524178376Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:08.525463964Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.528280517Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:08.529925214Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.532548447Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:08.533751399Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.535777033Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:08.536776845Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.538958235Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:08.540056049Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.54211105Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:08.543703071Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.54674015Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:08.548138817Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.550939773Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:08.552125182Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.554215716Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:08.556229223Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.558372443Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:08.559491097Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:08.565066955Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:08.298085111Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.301429007Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:08.302950052Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:08.304505746Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.3072302Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:08.308879895Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.310453233Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:08.312116626Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.314993906Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:08.316457993Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.319001597Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:08.321399693Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.324123132Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:08.325765218Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.329488143Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:08.331133805Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.337903701Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:08.340933991Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.343465907Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:08.344851768Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.347735846Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:08.349622377Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.352648352Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:08.354485165Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.363655985Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:08.365174524Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.3676289Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:08.370014792Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.373490123Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:08.375134656Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.379014754Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:08.380705016Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.383606401Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:08.385998682Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.388766494Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:08.390307051Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.393389572Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:08.395125346Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.397907191Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:08.403449708Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.406358769Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:08.407462701Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.410446685Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:08.412169241Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.414906471Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:08.416756183Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.420264115Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:08.421932482Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.424695853Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:08.427091429Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.429530076Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:08.430894781Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.434734707Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:08.436265288Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.438841924Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:08.440757921Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.443242368Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:08.444587084Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.447835364Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:08.449335328Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.451837578Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:08.453636981Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.456246248Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:08.457721883Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.461600493Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:08.463075237Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.465630694Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:08.468749274Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.471284792Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:08.472638557Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.47562906Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:08.477192012Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.479982945Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:08.484522334Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.487387809Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:08.489123488Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.492178437Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:08.49466903Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.497568121Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:08.499348387Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:08.506298177Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:08.668230266Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.670682317Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:08.67163953Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:08.67290766Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.674285561Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:08.67526149Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.676222863Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.683244844Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:08.684080823Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.685698882Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:08.686892777Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.688287746Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:08.68906876Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.690735242Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:08.691496169Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.692861356Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:08.694268917Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.695630975Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:08.696361171Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.698974462Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:08.699973858Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.701493879Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:08.703227079Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.704888962Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:08.705997366Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.714315344Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:08.715471598Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.717455123Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:08.719179149Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.72122109Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:08.722179173Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.724569052Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:08.725871391Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.728198812Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:08.730711564Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.735412576Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:08.739770847Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.746530155Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:08.747648418Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.749723467Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:08.751276723Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.75331937Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:08.754521722Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.757287249Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:08.758324276Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.760360348Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:08.762100604Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.764291157Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:08.765465583Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.76825552Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:08.769442023Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.771972438Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:08.773773634Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.791397701Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:08.793272896Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.796251543Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:08.797169003Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.798763319Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:08.800189208Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.801756433Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:08.802841408Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.804986098Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:08.805929703Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.807671277Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:08.809886878Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.811974844Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:08.813324355Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.816789916Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:08.817897506Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.820400834Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:08.822009722Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.824218832Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:08.825693095Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.828814163Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:08.830259558Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.832444356Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:08.839111552Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.841189528Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:08.842298475Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:08.848426549Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:08.633529116Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.636976659Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:08.638397252Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:08.640125176Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.642123684Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:08.643754489Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.645318425Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:08.64792739Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.651027573Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:08.653085454Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.655548153Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:08.65743992Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.660225117Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:08.66196007Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.671679423Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:08.673380383Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.675166771Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:08.677023822Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.678907288Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:08.679947263Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.682317Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:08.683464882Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.68520293Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:08.687017261Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.690084228Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:08.691922903Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.695472821Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:08.697703776Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.700273572Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:08.702331111Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.705330686Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:08.70687733Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.710449801Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:08.712055357Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.714642319Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:08.716123892Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.71987585Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:08.722228616Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.726355265Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:08.729814039Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.732252888Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:08.733942457Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.737431488Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:08.738758308Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.741043406Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:08.743026785Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.745711202Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:08.747158908Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.750916546Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:08.752359537Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.755156152Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:08.757730589Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.760196501Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:08.76151408Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.764253448Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:08.765911555Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.768283825Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:08.769540757Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.772620178Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:08.774258763Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.777043055Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:08.77936465Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.782183368Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:08.783925002Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.787875245Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:08.789128719Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.791804768Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:08.793577242Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.796239878Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:08.797600455Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.800669576Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:08.802513992Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.804879281Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:08.806835231Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.80919472Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:08.811107841Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.814538177Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:08.816380341Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.819252983Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:08.821117085Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:08.827680924Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:08.891680282Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.89477762Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:08.89589534Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:08.897169348Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.898730713Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:08.899763215Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:08.90080882Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:08.90217664Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.904249641Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:08.90535668Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.908299174Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:08.909534805Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.911663442Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:08.920755506Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.92300311Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:08.924318779Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.927621867Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:08.928724607Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.930694192Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:08.932384445Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.939542371Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:08.940694094Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.944032879Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:08.945943632Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.948833137Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:08.950718336Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.952899094Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:08.95521393Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.96426454Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:08.965713987Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.968453129Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:08.971459979Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.973782578Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:08.9749812Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.977250265Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:08.978602346Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.981283296Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:08.984393352Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.995357001Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:08.996867629Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:08.999652086Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:09.002151029Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.004259597Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:09.005346851Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.010670488Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:09.011871367Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.014259035Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:09.015823128Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.017492239Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:09.018465567Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.020388984Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:09.021334545Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.022737312Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:09.024107091Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.025548757Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:09.026833217Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.02969819Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:09.031075581Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.033566514Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:09.035680676Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.037776111Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:09.039361469Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.041729027Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:09.042626912Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.045291433Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:09.047445919Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.049276179Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:09.050799742Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.053756795Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:09.067384651Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.069523871Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:09.071187313Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.073467929Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:09.074701779Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.077879714Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:09.079048294Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.081164858Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:09.08268116Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.084664808Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:09.085724311Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:09.091437224Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:09.350375525Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.352488504Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:09.35374045Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:09.355499282Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.364277076Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.36579053Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.367832819Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.369751212Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.372622768Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:09.375991367Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.379360809Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:09.381637085Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.384116012Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:09.386182875Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.388688045Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:09.390311904Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.393200814Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:09.395057325Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.405549335Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:09.407916724Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.410327475Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:09.411837409Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.415430169Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:09.420244312Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.422452932Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:09.423654864Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.426093121Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:09.427126431Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.429122045Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:09.430478025Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.432526104Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:09.43399678Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.437023245Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:09.438983711Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.4421881Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:09.444445933Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.447401964Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:09.449394231Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.451981722Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:09.453345689Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.455714699Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:09.458643708Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.461081169Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:09.46219919Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.465184764Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:09.466382159Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.468636534Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:09.470629357Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.472998536Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:09.474419638Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.477758084Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:09.4791828Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.481589289Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:09.483788471Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.486548177Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:09.488887903Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.492240602Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:09.493450168Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.49573132Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:09.498436843Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.501049125Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:09.503122447Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.506931617Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:09.508433971Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.510870386Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:09.513259463Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.516165852Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:09.517657817Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.521226123Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:09.523111183Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.525536801Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:09.527733256Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.530529102Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:09.532029089Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.534690401Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:09.536872636Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.539201911Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:09.54087582Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.54336446Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:09.544658364Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:09.550143726Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:09.345040705Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.348842223Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:09.350678082Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:09.352676207Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.354795478Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.356980915Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.358950664Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.362977524Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:09.370458336Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.373430919Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:09.375362158Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.378708325Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:09.380035479Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.382972343Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:09.385516961Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.391205866Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:09.392974689Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.396544715Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:09.398466278Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.401348777Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:09.4123522Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.41516221Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:09.417001629Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.420381783Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:09.422429342Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.425310415Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:09.42787234Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.431376948Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:09.43377688Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.437490155Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:09.440122999Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.443091869Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:09.445033351Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.448440172Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:09.449916165Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.452504244Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:09.455051374Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.457583156Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:09.45903646Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.471899464Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:09.473384172Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.475687471Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:09.477416972Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.481450526Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:09.483776803Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.486746979Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:09.489191171Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.492239551Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:09.494137842Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.500056669Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:09.506624777Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.509795408Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:09.513077279Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.515897881Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:09.517587557Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.52171819Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:09.523439332Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.526566438Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:09.528936424Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.53209439Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:09.53400973Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.537521554Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:09.539164535Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.542259196Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:09.544958576Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.548324433Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:09.550122909Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.553406542Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:09.555068931Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.557724922Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:09.560270331Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.56305549Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:09.564873227Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.583423755Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:09.585247311Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.587923451Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:09.589812861Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.594047822Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:09.596488542Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:09.603304407Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:09.413371305Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.419083282Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:09.420540857Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:09.422170453Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.424389384Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.42589212Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.427353914Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.435720328Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.443128832Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:09.444645934Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.448019437Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:09.449506356Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.451978769Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:09.454528215Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.456960758Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:09.458433117Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.461657919Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:09.464246773Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.466734365Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:09.468796467Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.471278108Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:09.473428509Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.476261005Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:09.477747616Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.483104109Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:09.485417254Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.487489794Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:09.488550039Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.49152457Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:09.492742395Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.494891479Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:09.496583021Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.498723977Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:09.499903853Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.503058629Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:09.504281058Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.506506084Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:09.508779286Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.511121603Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:09.512507485Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.514956518Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:09.516776933Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.519466246Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:09.520976321Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.523800789Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:09.524761202Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.526866584Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:09.528639609Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.532306707Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:09.533645198Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.5363939Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:09.53768646Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.540120988Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:09.542027465Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.544050197Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:09.545149704Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.547398597Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:09.548384317Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.55049605Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:09.552292517Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.554923139Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:09.556505317Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.559733773Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:09.561196614Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.564108566Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:09.566761866Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.569232976Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:09.570650235Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.57392691Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:09.575517684Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.578064649Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:09.580657814Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.583044753Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:09.584462058Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.58786777Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:09.589293526Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.591733896Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:09.593674791Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.596148038Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:09.597272941Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:09.603575347Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:09.443682143Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.446806999Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:09.448171773Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:09.449762019Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.451858772Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.452984997Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.454304675Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.457128938Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.459430862Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:09.460846748Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.466470279Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:09.467975105Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.470444099Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:09.473590565Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.476087087Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:09.477530352Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.481857971Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:09.483354742Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.485720695Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:09.488220538Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.490659267Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:09.491878951Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.495071641Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:09.497079944Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.500319646Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:09.503139302Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.505441537Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:09.506573066Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.50884429Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:09.510160498Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.511876615Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:09.512966875Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.515478163Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:09.516262957Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.517897271Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:09.519106368Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.521543452Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:09.522918754Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.525587786Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:09.526949113Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.529378669Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:09.531030215Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.533686767Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:09.534861372Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.537091504Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:09.538116704Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.54029183Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:09.542271332Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.544520541Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:09.546661846Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.548930174Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:09.549935049Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.552055984Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:09.553349907Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.55535498Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:09.556535442Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.558914653Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:09.560089515Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.562215708Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:09.563806356Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.56599553Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:09.568146674Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.571383774Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:09.572882938Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.575538313Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:09.577839744Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.580192176Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:09.581780567Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.585180078Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:09.587233043Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.590010252Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:09.591748581Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.595039224Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:09.596482662Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.600955368Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:09.602119093Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.604353824Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:09.60649084Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.608554727Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:09.609664256Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:09.615783431Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:09.686987055Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.702996723Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:09.704345904Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:09.705925657Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.710856729Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.711946258Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.713012641Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.715614409Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.717674202Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:09.718795668Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.721793522Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:09.723186908Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.725528753Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:09.727731106Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.729802223Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:09.731152715Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.733251156Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:09.734058906Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.735375343Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:09.741261999Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.743450878Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:09.74458172Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.74738529Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:09.748674578Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.750826378Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:09.753045946Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.755327358Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:09.756544963Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.759603Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:09.761520188Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.764384751Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:09.766634525Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.76929809Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:09.77066114Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.773249892Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:09.77541449Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.777728098Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:09.779409989Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.781953716Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:09.783528901Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.788025771Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:09.789854485Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.792564385Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:09.794558522Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.797247778Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:09.798516346Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.800905683Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:09.802574998Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.805151218Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:09.806890137Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.809259485Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:09.810371443Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.812568002Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:09.813791214Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.815786911Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:09.823528815Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.825784523Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:09.826954774Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.829216219Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:09.830780449Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.832871458Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:09.834050313Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.836594604Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:09.83844047Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.840989799Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:09.842837472Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.844831993Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:09.846016077Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.848918498Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:09.850309857Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.852568032Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:09.854508747Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.856568579Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:09.857636464Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.860468654Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:09.861547121Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.863518143Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:09.865389283Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.86739416Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:09.868438089Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:09.874149235Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:09.747145627Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.750191172Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:09.751967215Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:09.754064496Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.756289128Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:09.757976548Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:09.759705589Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.763152628Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:09.76462213Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.767092079Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:09.768869417Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.771489002Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:09.773012281Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.775826615Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:09.777656128Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.780159107Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:09.781507784Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.785262067Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:09.787608338Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.791084268Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:09.797176517Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.799825154Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:09.80120547Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.804318539Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:09.805710993Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.809148263Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:09.812059155Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.814760719Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:09.816401811Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.819929275Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:09.821859648Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.824840674Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:09.826973202Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.829307267Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:09.830397401Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.833241107Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:09.834517071Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.836868558Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:09.838884093Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.841413823Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:09.842861943Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.857225927Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:09.859346825Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.862069439Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:09.863918734Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.867563704Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:09.869224735Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.871989527Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:09.874562666Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.877120658Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:09.878508965Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.881987084Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:09.883497295Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.886059129Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:09.888133122Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.891430206Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:09.893139378Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.896686406Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:09.898094256Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.900599601Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:09.902789875Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.905756735Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:09.907563066Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.910614163Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:09.912312943Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.914811415Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:09.916382833Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.919441111Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:09.920847945Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.923529586Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:09.925382049Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.92787706Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:09.929475091Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.932434035Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:09.933815382Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.936512607Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:09.938528534Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:09.941038048Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:09.942442984Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:09.956730144Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:10.295465475Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.297599033Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:10.298598332Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:10.299784379Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.300971662Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:10.301818113Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.30268379Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:10.304197819Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.306143693Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:10.307232304Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.30988405Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:10.311256897Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.313611546Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:10.315501489Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.317541227Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:10.318670063Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.321425868Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:10.322600574Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.324621252Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:10.326408332Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.328513682Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:10.329595446Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.33210179Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:10.333228167Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.335236614Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:10.337250011Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.339228188Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:10.340229354Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.343142043Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:10.344233418Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.346909248Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:10.349390809Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.351988558Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:10.353582819Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.356701284Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:10.358151128Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.360513904Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:10.362926939Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.365288572Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:10.366683421Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.370802166Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:10.373057927Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.375690494Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:10.378146975Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.380415234Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:10.381704668Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.384948416Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:10.386490661Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.38898495Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:10.390711149Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.393431478Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:10.394456674Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.396539115Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:10.397828597Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.399830576Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:10.400854575Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.403602391Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:10.404753779Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.406864248Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:10.408351818Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.410490471Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:10.411663588Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.414501512Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:10.416059079Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.422582881Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:10.42457881Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.426744176Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:10.427866439Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.430490547Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:10.431630756Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.433648517Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:10.435628Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.437689437Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:10.438696316Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.441630584Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:10.442757833Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.44484189Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:10.446529799Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.448913999Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:10.450013569Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:10.455790628Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:10.354569214Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.357198214Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:10.35824396Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:10.359387835Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.360997456Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:10.362004206Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.363016932Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:10.364705108Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.367032899Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:10.368351773Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.37105544Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:10.372081969Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.373931824Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:10.377015661Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.379060546Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:10.380496527Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.383283023Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:10.384470619Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.386547138Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:10.388260751Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.391119113Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:10.392128056Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.396514945Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:10.397973001Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.400360704Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:10.402624869Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.40450986Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:10.405394629Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.407863364Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:10.409491089Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.412085371Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:10.413642352Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.415898971Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:10.41741003Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.419480971Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:10.420589854Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.424822217Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:10.425861115Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.427820789Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:10.429239273Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.43300234Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:10.434265757Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.436897258Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:10.438220302Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.440504542Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:10.442087813Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.444228993Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:10.44522693Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.447690404Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:10.449006097Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.451046406Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:10.45271949Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.455005611Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:10.456279083Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.458902303Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:10.46024847Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.462359932Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:10.463929482Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.466341015Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:10.467728987Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.470349934Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:10.471805316Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.47368722Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:10.475611192Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.47769989Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:10.478862833Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.48141519Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:10.482639461Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.488152704Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:10.48974942Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.491823358Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:10.492825362Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.49582649Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:10.49713283Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.499209018Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:10.500979607Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.503054979Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:10.504066919Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.506709524Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:10.507777239Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:10.513627827Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:10.638610267Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.640273742Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:10.641145822Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:10.642858967Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.643901105Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:10.64489451Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.646242558Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:10.647356568Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.648838049Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:10.650223874Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.651990253Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:10.652944812Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.6551295Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:10.656122293Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.657794198Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:10.659367357Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.661030647Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:10.661914989Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.663751692Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:10.665519268Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.667189108Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:10.669288792Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.671082108Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:10.672063606Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.674947688Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:10.679793994Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.682441897Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:10.683985116Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.687581946Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:10.689102375Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.691533345Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:10.702162243Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.704467535Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:10.705616873Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.708493253Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:10.709650235Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.711838432Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:10.713716874Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.71629812Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:10.717736267Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.72031228Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:10.72138328Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.723763341Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:10.725331598Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.727386864Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:10.728540909Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.73491063Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:10.736059913Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.738149697Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:10.740393582Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.743326815Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:10.7455618Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.748885415Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:10.750122585Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.752265377Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:10.754382686Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.757176593Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:10.758693343Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.762094744Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:10.763696828Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.766050738Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:10.76930687Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.77201394Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:10.77383734Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.777428344Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:10.778583538Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.781402875Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:10.783172752Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.785956658Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:10.787640664Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.790986446Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:10.792712217Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.795386587Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:10.797505824Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.799975388Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:10.801347151Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.806672495Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:10.810799665Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.812453019Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:10.814088802Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:10.817565149Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:10.779149921Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.781285636Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:10.782489585Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:10.783696278Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.785284899Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:10.786252368Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.787231961Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.789877658Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:10.792414149Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.795155918Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:10.796814895Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.799658757Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:10.8005989Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.802028484Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:10.803385727Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.805553843Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:10.806774729Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.808671372Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:10.809888919Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.811540331Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:10.813086714Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.814556058Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:10.815442757Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.817349768Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:10.818485523Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.820241267Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:10.821618509Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.830738807Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:10.83165627Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.83471099Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:10.83563401Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.837524137Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:10.83951371Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.841063317Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:10.842078609Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.846331107Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:10.847345363Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.84922048Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:10.850409738Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.853735162Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:10.854775352Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.857038747Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:10.85816499Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.860087627Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:10.861458661Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.863495849Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:10.864454033Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.866908476Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:10.867856968Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.86984211Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:10.871121814Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.883050001Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:10.884304869Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.894371237Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:10.895690263Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.897851533Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:10.900557688Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.903038183Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:10.904465015Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.907490388Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:10.909128371Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.911545619Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:10.913264502Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.915829497Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:10.9171997Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.92027944Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:10.922732621Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.925093725Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:10.926676921Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.929962358Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:10.931337202Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.933653185Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:10.935663232Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.938452262Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:10.939496006Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.94259715Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:10.944190191Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.946708742Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:10.954033967Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:10.959468867Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:10.898303508Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.901456301Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:10.903014412Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:10.90466642Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.907300068Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:10.908938097Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:10.910327657Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:10.911993876Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.914139018Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:10.915274394Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.918018854Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:10.919321411Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.921397276Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:10.923028149Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.925159213Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:10.926231107Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.929778145Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:10.931292195Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.933742262Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:10.935828725Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.938158725Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:10.93954Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.944483795Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:10.94551779Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.954321787Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:10.959145715Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.961861494Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:10.962959685Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.966679785Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:10.967817628Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.970038237Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:10.972327914Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.974832363Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:10.976335061Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.979566177Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:10.98105811Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.983251999Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:10.990621837Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.99283448Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:10.994051768Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:10.996965662Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:10.998367945Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.000771125Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:11.002935756Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.005401531Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:11.00718223Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.009820208Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:11.011464625Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.014273001Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:11.01602938Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.01925599Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:11.021083893Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.023248828Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:11.02427384Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.025814723Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:11.027075407Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.028670206Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:11.029495976Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.031347016Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:11.032386338Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.033921944Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:11.035279904Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.036737104Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:11.037461355Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.039684539Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:11.040880749Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.042487778Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:11.044358481Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.045921599Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:11.047088939Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.048697307Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:11.049914319Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.05142012Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:11.052424226Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.054096268Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:11.054927173Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.056540479Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:11.057667141Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.059684381Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:11.060925249Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:11.06720548Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:11.037430823Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.04015512Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:11.041765968Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:11.043298382Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:11.04526039Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:11.046634767Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:11.047943031Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:11.04986152Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.052244862Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:11.053581299Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.056338094Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:11.057457959Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.059554567Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:11.061093378Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.063112753Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:11.064105364Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.066679515Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:11.067634614Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.069539623Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:11.071150332Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.073167188Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:11.074160825Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.076626769Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:11.077877036Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.079970132Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:11.081656469Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.083640852Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:11.084518864Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.087606278Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:11.088659697Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.090633738Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:11.091967532Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.09425434Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:11.095200491Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.09755643Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:11.098546593Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.100377934Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:11.101808935Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.103763241Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:11.10470362Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.107053999Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:11.108034391Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.10985959Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:11.111272215Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.113321337Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:11.114359423Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.116866498Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:11.118011649Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.120246169Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:11.122062296Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.124195023Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:11.125191433Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.127649372Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:11.128670405Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.130615862Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:11.131974363Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.134182924Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:11.135169142Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.137565874Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:11.138738211Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.140868748Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:11.142455147Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.144826356Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:11.146189881Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.149073855Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:11.150200232Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.152246384Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:11.154716512Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.157008199Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:11.158296902Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.160753002Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:11.16188618Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.163884994Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:11.165566497Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.168218736Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:11.169513767Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.172030691Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:11.173238889Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.175299852Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:11.176910703Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:11.182038674Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:11.360033058Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.36293982Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:11.3640229Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:11.365289736Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:11.366942455Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:11.367982693Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:11.369397283Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:11.371980524Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.374353162Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:11.375439171Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.377707364Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:11.378831289Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.381520867Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:11.386435688Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.388605538Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:11.389722107Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.392651213Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:11.393974184Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.396257725Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:11.398055127Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.400468755Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:11.401909681Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.404609393Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:11.406106746Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.409241295Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:11.411254337Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.413393086Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:11.414577486Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.417733479Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:11.419685228Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.422360109Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:11.424428703Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.426686818Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:11.427847702Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.430522375Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:11.431814266Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.433777759Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:11.435295142Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.4374009Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:11.438522935Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.441418161Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:11.442677623Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.444768398Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:11.446088053Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.448641981Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:11.449777211Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.452468968Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:11.454214118Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.456395851Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:11.457748555Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.460612021Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:11.462027187Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.464471878Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:11.466201232Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.468353139Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:11.470333018Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.473328618Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:11.475036675Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.477735708Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:11.479398977Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.481500627Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:11.482727987Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.485007738Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:11.486269275Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.488497627Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:11.491002407Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.49313599Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:11.494350977Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.497587236Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:11.498793334Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.50089767Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:11.502664989Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.50508936Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:11.5060632Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.508869288Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:11.50989386Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.511915759Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:11.513457938Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:11.51548022Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:11.516584635Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:11.521910892Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:12.430290466Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.432486755Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:12.433521122Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:12.434742307Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.436788306Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:12.438110647Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.439136041Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:12.440628082Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.442604174Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:12.443593153Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.452763441Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:12.454006953Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.456055874Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:12.45835252Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.460487563Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:12.461598997Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.464082703Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:12.465476442Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.467932499Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:12.470093821Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.472298675Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:12.473395997Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.475993186Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:12.477800016Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.480071273Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:12.481609496Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.484471689Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:12.485855155Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.488346351Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:12.489751968Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.491837481Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:12.501606064Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.504554932Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:12.505981434Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.508549067Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:12.511244834Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.513635009Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:12.51499429Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.518183574Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:12.520270421Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.522594459Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:12.524807552Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.527169851Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:12.528503407Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.531695542Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:12.532807676Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.535101564Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:12.537226814Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.540144875Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:12.541522377Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.544661658Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:12.546326379Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.548721399Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:12.550840587Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.553550853Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:12.554971538Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.557893176Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:12.559888949Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.562760324Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:12.564773194Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.567667479Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:12.568885282Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.571292199Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:12.578716461Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.583631881Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:12.586294114Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.590781665Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:12.592172907Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.595371401Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:12.597525901Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.60333209Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:12.604758092Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.607044435Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:12.608076347Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.609596954Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:12.610934702Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.612655116Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:12.613600435Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.615443936Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:12.61625022Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:12.620457444Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:12.553034201Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.55628587Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:12.55794768Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:12.560153489Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.563617002Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:12.565039315Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.566963597Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.570431702Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:12.571966189Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.57438788Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:12.576797891Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.579395308Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:12.580623801Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.58374961Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:12.584828264Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.586559749Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:12.589114983Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.590555209Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:12.591356052Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.59418922Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:12.595573787Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.597691197Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:12.599863866Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.602048485Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:12.603535191Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.606490679Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:12.607893595Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.610038401Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:12.611423504Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.613911427Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:12.615076568Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.618108278Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:12.619295624Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.621984249Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:12.624050195Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.626336387Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:12.627678655Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.633680389Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:12.635081768Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.637440095Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:12.639072466Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.641636182Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:12.642786118Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.645438474Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:12.65087678Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.660821954Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:12.662348387Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.666750753Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:12.66806351Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.670705596Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:12.672939356Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.675337801Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:12.676735721Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.679869017Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:12.681245788Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.683605934Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:12.687023474Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.689370428Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:12.690773935Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.693600109Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:12.694905183Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.697067211Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:12.698898369Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.701234314Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:12.702548631Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.705488059Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:12.706610395Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.708654692Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:12.71052137Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.713251009Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:12.714448784Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.716918688Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:12.718046822Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.72004576Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:12.721710235Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.723794067Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:12.724777373Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.727524336Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:12.728630981Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:12.734257597Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:12.755280844Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.758650846Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:12.759688707Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:12.760783533Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.768114134Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:12.769439444Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.770448096Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:12.77146674Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.773618517Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:12.774792722Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.776424441Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:12.778007171Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.779819891Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:12.780850407Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.783038633Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:12.784077202Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.785689062Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:12.787487832Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.789091423Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:12.790029181Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.792467554Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:12.793931218Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.79592166Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:12.797000529Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.799644499Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:12.800664892Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.802267126Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:12.803857472Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.806003623Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:12.807154091Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.810032266Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:12.811035885Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.813171594Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:12.814761169Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.817099591Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:12.818251924Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.821132694Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:12.822364407Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.824612046Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:12.826055072Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.828440439Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:12.829579704Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.832400088Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:12.833779445Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.836069126Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:12.83754456Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.840018464Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:12.841150182Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.844258062Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:12.845753519Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.847985963Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:12.848990179Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.851557603Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:12.852724365Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.854966246Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:12.856521089Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.858808701Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:12.859924988Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.863155551Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:12.864086834Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.865679987Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:12.867392043Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.874288194Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:12.875402294Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.877485175Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:12.87861632Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.880228466Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:12.881579519Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.883242513Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:12.884269768Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.886344058Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:12.88737055Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.889064728Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:12.890654103Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.892297489Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:12.893403583Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.895766798Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:12.896697864Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.898337004Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:12.899962063Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:12.903543513Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:12.826083553Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.830407381Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:12.844431632Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:12.846585678Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.849229432Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:12.851059538Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.852727501Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:12.854424977Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.857902Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:12.859798349Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.863068801Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:12.865716077Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.868473914Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:12.870117528Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.873674358Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:12.875170025Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.877961516Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:12.885251557Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.887856795Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:12.889379324Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.904073552Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:12.906058804Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.909155371Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:12.911031593Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.915230918Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:12.91790715Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.920818828Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:12.923599093Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.926431578Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:12.927805474Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.931631364Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:12.93331099Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.936191704Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:12.938472344Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.941486397Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:12.943203679Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.947014173Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:12.948782253Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.951611024Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:12.953760759Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.95665293Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:12.958400132Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.961444868Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:12.963415285Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.966265823Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:12.96802237Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.971914951Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:12.973627762Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.976474687Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:12.979125593Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.982009122Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:12.98370631Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.987336141Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:12.98925031Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.992067074Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:12.997975371Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.002013459Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:13.008225677Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.011367145Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:13.020648303Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.023611181Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:13.025451123Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.02856796Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:13.034362519Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.040607702Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:13.043179338Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.046090216Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:13.047721231Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.051537335Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:13.053264273Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.056108497Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:13.058826079Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.061674035Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:13.063400673Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.067122871Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:13.069542146Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.072408951Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:13.074898507Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.078701863Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:13.080450008Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:13.087695503Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:12.942206159Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.946392352Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:12.948022177Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:12.949762244Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.951696582Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:12.953595503Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:12.955292097Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.958986244Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:12.960946133Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.963683155Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:12.965323715Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.969146304Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:12.971033028Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.97382871Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:12.978034666Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.98057951Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:12.981962489Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.984876818Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:12.986242998Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:12.988744734Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:12.997302211Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.002833258Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:13.004739576Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.00846875Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:13.009812112Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.012624347Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:13.015386565Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.020575573Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:13.02229389Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.026006106Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:13.033219253Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.040806097Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:13.042718265Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.045978556Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:13.047601427Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.050080805Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:13.052265852Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.054862087Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:13.056340639Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.060345983Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:13.062415022Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.065618915Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:13.068701367Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.071738913Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:13.073734287Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.077393355Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:13.079193769Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.082310091Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:13.084398189Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.088148685Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:13.089915189Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.092667215Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:13.094787781Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.097566654Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:13.099202806Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.102421647Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:13.104146376Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.106988173Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:13.109803465Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.113540312Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:13.1152984Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.11896647Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:13.121808108Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.124672768Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:13.126598956Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.130136445Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:13.131846133Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.134678433Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:13.136948039Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.139263337Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:13.140321382Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.142957233Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:13.144091406Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.146799409Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:13.149513244Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.152495283Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:13.154113475Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.156979673Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:13.158745749Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:13.164991279Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:13.161929009Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.164538663Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:13.165672915Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:13.167076425Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:13.168648995Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:13.169602832Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:13.170461725Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:13.172219411Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.17381381Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:13.17467568Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.177195468Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:13.178264389Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.179934572Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:13.181521416Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.183020365Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:13.183870723Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.186185592Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:13.187227066Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.188703044Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:13.194470353Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.196109495Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:13.197215329Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.19936154Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:13.200308814Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.201773375Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:13.203196509Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.204695027Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:13.205609517Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.208787971Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:13.210100021Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.211586381Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:13.212816677Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.215708642Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:13.217061909Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.220339986Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:13.221512122Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.223606821Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:13.22527298Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.227581548Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:13.228762492Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.232229485Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:13.233616025Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.235785464Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:13.237402953Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.240232583Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:13.242127374Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.245205669Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:13.246475257Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.248606781Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:13.250268019Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.252705166Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:13.254591579Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.258639906Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:13.260272715Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.263510922Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:13.265568133Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.267863078Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:13.269310532Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.272319635Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:13.273495824Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.275972847Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:13.277856745Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.280423385Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:13.281854652Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.284583506Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:13.286083863Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.288282008Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:13.290374683Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.292615855Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:13.29381229Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.297042991Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:13.298132031Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.300196345Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:13.301685452Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.304179789Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:13.30539487Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.308372161Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:13.309511978Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:13.311602768Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:13.312928945Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:13.319610319Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:15.132705337Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.136836949Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:15.138694637Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:15.140790764Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.144483125Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:15.147223703Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.148993833Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:15.150783001Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.155261778Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:15.15705822Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.164362953Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:15.167190407Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.1701607Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:15.171986123Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.175965113Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:15.177354887Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.180827477Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:15.182949656Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.185442596Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:15.186760894Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.189529947Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:15.19213341Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.194762521Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:15.196591593Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.199412811Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:15.201588167Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.204521258Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:15.206719615Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.209833234Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:15.211806047Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.21614461Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:15.218173209Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.221466957Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:15.224093785Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.227483569Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:15.229085097Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.232248498Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:15.233449627Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.235746878Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:15.237715686Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.240381867Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:15.242013579Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.245279582Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:15.246512486Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.248833924Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:15.250770061Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.253574737Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:15.255222327Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.25861657Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:15.26000423Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.262616239Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:15.267617994Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.270088604Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:15.271352154Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.274089177Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:15.275441981Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.277860447Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:15.279438782Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.281937246Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:15.283254094Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.286181558Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:15.28827514Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.291051245Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:15.293477384Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.296437894Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:15.29809512Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.316056901Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:15.31893035Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.321604353Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:15.323426682Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.326290914Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:15.327683571Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.330541107Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:15.33214191Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.334737547Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:15.336378831Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.339129242Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:15.340494975Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.343700568Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:15.345526512Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:15.351830986Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:15.525702183Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.528669056Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:15.530766676Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:15.533698831Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.535476356Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:15.536893911Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.538094144Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:15.540226494Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.542405335Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:15.543571538Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.546769971Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:15.547870006Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.549909357Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:15.552231199Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.554302641Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:15.555418026Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.562943029Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:15.564511618Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.566590571Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:15.568312661Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.570859814Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:15.572048097Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.582334617Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:15.583597391Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.585757497Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:15.587688672Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.590270157Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:15.591748317Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.594387132Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:15.596340461Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.59910348Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:15.600644497Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.602910704Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:15.60409046Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.606314299Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:15.608672923Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.611187389Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:15.612712191Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.615671374Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:15.61723532Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.619618043Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:15.621933042Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.624289557Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:15.625677196Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.628437845Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:15.629514997Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.631547585Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:15.633060591Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.635359019Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:15.636686327Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.639646573Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:15.640946385Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.643245592Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:15.645253051Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.647584639Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:15.648919528Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.651843365Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:15.652997323Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.655089733Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:15.656728969Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.658844995Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:15.659916666Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.662846673Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:15.663886417Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.665897745Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:15.667567054Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.669586006Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:15.67052715Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.673007035Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:15.674111687Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.676149465Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:15.678060033Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.680404156Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:15.681435608Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.684570344Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:15.685718715Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.687797007Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:15.689841099Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.691913453Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:15.693029989Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:15.698707667Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:15.517468622Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.520532196Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:15.522030275Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:15.523711331Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.526023025Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:15.527129848Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.528257483Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.531518019Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:15.533197942Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.536007485Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:15.53853709Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.54061398Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:15.541625011Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.543693072Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:15.544917847Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.546522928Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:15.548200041Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.551475297Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:15.552672458Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.554765008Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:15.555694005Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.557164705Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:15.558708294Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.560205653Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:15.561084297Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.563144048Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:15.564443014Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.566210955Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:15.567811183Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.569449069Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:15.570431729Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.583517926Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:15.585354968Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.588586659Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:15.590813073Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.593338162Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:15.594477977Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.597303396Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:15.598971737Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.601427846Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:15.603509371Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.605721359Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:15.607650271Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.610632782Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:15.612047871Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.61441067Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:15.616430556Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.618611913Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:15.619724198Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.622572669Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:15.623756129Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.625814153Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:15.627828038Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.629985611Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:15.631101297Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.633360357Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:15.634807674Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.63692636Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:15.638246774Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.641401331Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:15.6425125Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.644571329Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:15.646254423Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.648290404Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:15.649357601Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.652083381Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:15.653391893Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.655679083Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:15.657485894Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.659393133Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:15.660269556Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.662644455Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:15.663668894Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.665786894Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:15.667243534Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.669209013Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:15.670220993Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.672707698Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:15.673696032Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:15.678661359Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:15.596332919Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.599350487Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:15.601460851Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:15.603153941Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.605035394Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:15.607107282Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.608849853Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:15.610631225Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.61425095Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:15.615718105Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.618121004Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:15.619993288Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.622844455Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:15.624580259Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.628162534Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:15.629953995Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.632860248Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:15.64826694Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.650929089Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:15.652339983Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.656884031Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:15.658526532Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.66125713Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:15.664327493Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.672561Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:15.674888413Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.678696644Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:15.68105071Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.68391473Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:15.685653932Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.688911884Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:15.690390856Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.692944592Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:15.695326048Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.698213579Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:15.699982541Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.704023965Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:15.705669658Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.708427966Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:15.710688589Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.713357822Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:15.714886871Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.718566395Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:15.720242071Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.723182214Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:15.725189695Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.728433589Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:15.73023348Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.733346406Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:15.735367074Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.738264076Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:15.740403572Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.747023874Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:15.748646511Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.752127659Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:15.753942906Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.756449744Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:15.757832188Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.761820086Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:15.763372196Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.766773872Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:15.769420952Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.772199443Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:15.774161539Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.77739828Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:15.778888636Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.781450164Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:15.78364291Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.786464782Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:15.788139085Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.791633199Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:15.793347782Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.796105262Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:15.798467554Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.801150382Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:15.802840016Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.80679841Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:15.808511518Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.81144639Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:15.813935365Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:15.820260272Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:15.961894242Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.965347372Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:15.966852254Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:15.968392605Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.970762851Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:15.971918938Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:15.973050254Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:15.975339853Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.977433135Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:15.978518613Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.981077598Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:15.982293994Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.984362262Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:15.986046528Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.988168133Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:15.989222867Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.991659742Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:15.993129046Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.99572122Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:15.996921783Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:15.999349357Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:16.000831649Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.003790043Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:16.005904354Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.008410638Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:16.023556122Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.02867343Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:16.029800591Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.032715375Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:16.033852443Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.036589614Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:16.039244373Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.041344666Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:16.042504694Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.045951171Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:16.047617924Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.050324413Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:16.052747803Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.055251837Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:16.05676797Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.060263897Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:16.061504574Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.06370658Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:16.066349666Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.068767122Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:16.07030887Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.073726686Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:16.075304541Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.078138303Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:16.079656334Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.082694536Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:16.08406346Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.08650473Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:16.088486235Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.090994353Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:16.092476657Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.095646468Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:16.096869882Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.099052701Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:16.101582904Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.104156079Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:16.106181308Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.109328521Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:16.11165976Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.114180153Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:16.11661174Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.119126409Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:16.120698926Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.124134728Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:16.126016487Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.132455535Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:16.134935309Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.137477611Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:16.139037584Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.142574858Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:16.144025832Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.146546171Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:16.148308535Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.150703254Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:16.152192242Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:16.158192245Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:16.674971499Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.677867342Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:16.679338318Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:16.680956105Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:16.683098634Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:16.684632041Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:16.685798335Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:16.687854729Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.690775853Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:16.692686828Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.695905493Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:16.697791412Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.700585726Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:16.702936007Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.705252102Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:16.706593763Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.714338135Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:16.715598769Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.717771402Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:16.720196592Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.722935015Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:16.724620603Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.727372468Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:16.729469561Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.735512898Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:16.737730816Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.739875846Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:16.741042007Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.744151113Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:16.745837605Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.748558291Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:16.750564681Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.753176436Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:16.754814471Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.757882857Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:16.759878033Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.762361685Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:16.765292098Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.768334692Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:16.769833837Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.773130652Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:16.774713259Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.776989715Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:16.779273237Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.785812572Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:16.787349122Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.789983043Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:16.792312827Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.795193432Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:16.797010159Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.800188771Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:16.801772463Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.805019469Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:16.807027575Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.809489537Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:16.81119423Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.8146584Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:16.816256248Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.8194986Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:16.822373865Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.825049699Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:16.826630218Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.829945921Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:16.831208772Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.833406703Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:16.835646051Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.837900682Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:16.839369954Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.842728136Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:16.844699478Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.84724379Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:16.849794549Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.853120622Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:16.854721921Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.858059075Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:16.859793545Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.862338278Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:16.864698585Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:16.867812551Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:16.869318901Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:16.87569214Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:19.349403058Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.351820297Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:19.352973827Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:19.354172538Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:19.355881851Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:19.356902681Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:19.35788679Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:19.359554347Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.361384233Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:19.362766986Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.364739378Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:19.366400447Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.368788337Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:19.369824058Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.371972611Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:19.37317732Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.374771162Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:19.376269375Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.37795649Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:19.379013551Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.381603346Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:19.396077664Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.399001581Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:19.401471206Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.404087547Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:19.405496888Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.435846838Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:19.437381625Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.440480593Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:19.44413326Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.447157678Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:19.448737571Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.452820161Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:19.454271174Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.456819378Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:19.458205823Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.461077925Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:19.462557245Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.465458107Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:19.467523335Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.47060141Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:19.471828498Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.47499772Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:19.476778826Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.479649625Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:19.48187565Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.484527924Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:19.486526812Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.491108773Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:19.492667495Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.495445695Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:19.497645009Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.500227315Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:19.50166871Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.508109285Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:19.509622337Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.51255801Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:19.514358594Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.51740748Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:19.518892444Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.521683582Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:19.523934806Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.526414264Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:19.528276669Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.531783735Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:19.5335824Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.536399066Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:19.538843365Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.541765327Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:19.543714278Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.547426734Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:19.549479028Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.552382578Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:19.554874163Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.558049015Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:19.560157886Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.564636894Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:19.566062829Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.568530621Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:19.570193055Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:19.577000536Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:19.3884063Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.3923291Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:19.393693439Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:19.395570694Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:19.398231967Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:19.399720451Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:19.401066998Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:19.402538669Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.405664136Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:19.407486501Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.410415373Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:19.413196879Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.415903778Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:19.417652942Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.420951739Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:19.422393194Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.424885651Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:19.427412324Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.429920162Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:19.431283658Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.444026178Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:19.446332476Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.44967765Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:19.451052064Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.453871023Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:19.455188629Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.457513529Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:19.459318294Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.461592624Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:19.462905498Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.465907099Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:19.467619887Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.470394771Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:19.472650409Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.475318149Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:19.477048097Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.480347272Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:19.481948662Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.484630937Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:19.487226586Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.489803278Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:19.49124043Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.500078157Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:19.502043419Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.504964442Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:19.50674572Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.510618737Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:19.512528461Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.515535138Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:19.518421213Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.521309574Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:19.523095801Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.5268294Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:19.528976217Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.531958916Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:19.546915416Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.549570675Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:19.551239769Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.553641167Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:19.555743679Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.558443762Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:19.560044215Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.56334839Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:19.565030689Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.567767144Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:19.570070189Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.572817692Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:19.574490019Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.578193556Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:19.579879886Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.582620317Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:19.58505635Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.588116724Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:19.589784351Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.593006667Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:19.594178505Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.595825054Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:19.597353382Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.59907909Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:19.600106313Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:19.604129538Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:19.510425518Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.516441964Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:19.518948334Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:19.521446012Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:19.531790563Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:19.53342731Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:19.535050117Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.538553721Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:19.540106364Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.542594907Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:19.544648664Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.547166081Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:19.548560862Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.551200143Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:19.55269796Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.555740206Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:19.55866316Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.563106776Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:19.565057708Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.567772313Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:19.569867594Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.572694245Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:19.574335212Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.580293632Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:19.582219064Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.584877718Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:19.586731009Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.589851365Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:19.591449213Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.5946439Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:19.59673735Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.599556716Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:19.604428453Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.60745263Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:19.609252912Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.612162672Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:19.614555752Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.617546367Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:19.619264949Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.622795707Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:19.62460053Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.62752895Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:19.629701336Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.632415974Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:19.634123068Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.637357218Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:19.638744575Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.641496974Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:19.643952483Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.646793786Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:19.648477141Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.652925361Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:19.654605704Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.657362979Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:19.659367563Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.662276743Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:19.663990667Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.667576139Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:19.669210563Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.671962145Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:19.674457324Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.676930998Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:19.678023348Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.681621108Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:19.683380942Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.68618718Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:19.688028896Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.690996328Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:19.692656629Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.69565788Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:19.697299765Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.700210506Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:19.702178085Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.705261477Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:19.706943266Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.709987017Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:19.7120008Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.714788224Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:19.716683858Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:19.723762717Z	76	PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time	Syscall Op	Syscall Name
2018-12-25T11:47:19.596274117Z	42	PC: 1bc36 | Get date 0x1bc36: cmp al, 1 0x1bc38: je 0x1bc48 0x1bc3a: cmp al, 3 0x1bc3c: je 0x1bc48 0x1bc3e: cmp al, 5 0x1bc40: je 0x1bc48 0x1bc42: call 0x1bf69 0x1bc45: jmp 0x1bc4b 0x1bc47: nop 0x1bc48: call 0x1bf62 0x1bc4b: mov si, 0xafdf 0x1bc4e: mov ah, 0x30 0x1bc50: int 0x21 0x1bc52: cmp di, 0xc3c3 0x1bc56: jne 0x1bc74 0x1bc58: mov bx, cs 0x1bc5a: mov ax, word ptr cs:[0x362] 0x1bc5e: sub bx, ax 0x1bc60: mov word ptr cs:[0x362], bx 0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.598975396Z	48	PC: 1bc52 | Get DOS version
2018-12-25T11:47:19.600365754Z	38	PC: 1bc95 | Create PSP
2018-12-25T11:47:19.601935387Z	53	PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:19.604794755Z	53	PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:19.606033683Z	37	PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:47:19.607291105Z	37	PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:47:19.609275138Z	42	PC: 1b836 | Get date 0x1b836: cmp al, 1 0x1b838: je 0x1b848 0x1b83a: cmp al, 3 0x1b83c: je 0x1b848 0x1b83e: cmp al, 5 0x1b840: je 0x1b848 0x1b842: call 0x1bb69 0x1b845: jmp 0x1b84b 0x1b847: nop 0x1b848: call 0x1bb62 0x1b84b: mov si, 0xafdf 0x1b84e: mov ah, 0x30 0x1b850: int 0x21 0x1b852: cmp di, 0xc3c3 0x1b856: jne 0x1b874 0x1b858: mov bx, cs 0x1b85a: mov ax, word ptr cs:[0x362] 0x1b85e: sub bx, ax 0x1b860: mov word ptr cs:[0x362], bx 0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.611814072Z	48	PC: 1b852 | Get DOS version
2018-12-25T11:47:19.613283459Z	42	PC: 1b436 | Get date 0x1b436: cmp al, 1 0x1b438: je 0x1b448 0x1b43a: cmp al, 3 0x1b43c: je 0x1b448 0x1b43e: cmp al, 5 0x1b440: je 0x1b448 0x1b442: call 0x1b769 0x1b445: jmp 0x1b44b 0x1b447: nop 0x1b448: call 0x1b762 0x1b44b: mov si, 0xafdf 0x1b44e: mov ah, 0x30 0x1b450: int 0x21 0x1b452: cmp di, 0xc3c3 0x1b456: jne 0x1b474 0x1b458: mov bx, cs 0x1b45a: mov ax, word ptr cs:[0x362] 0x1b45e: sub bx, ax 0x1b460: mov word ptr cs:[0x362], bx 0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.616019514Z	48	PC: 1b452 | Get DOS version
2018-12-25T11:47:19.617185582Z	42	PC: 1b036 | Get date 0x1b036: cmp al, 1 0x1b038: je 0x1b048 0x1b03a: cmp al, 3 0x1b03c: je 0x1b048 0x1b03e: cmp al, 5 0x1b040: je 0x1b048 0x1b042: call 0x1b369 0x1b045: jmp 0x1b04b 0x1b047: nop 0x1b048: call 0x1b362 0x1b04b: mov si, 0xafdf 0x1b04e: mov ah, 0x30 0x1b050: int 0x21 0x1b052: cmp di, 0xc3c3 0x1b056: jne 0x1b074 0x1b058: mov bx, cs 0x1b05a: mov ax, word ptr cs:[0x362] 0x1b05e: sub bx, ax 0x1b060: mov word ptr cs:[0x362], bx 0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.619305339Z	48	PC: 1b052 | Get DOS version
2018-12-25T11:47:19.621532424Z	42	PC: 1ac36 | Get date 0x1ac36: cmp al, 1 0x1ac38: je 0x1ac48 0x1ac3a: cmp al, 3 0x1ac3c: je 0x1ac48 0x1ac3e: cmp al, 5 0x1ac40: je 0x1ac48 0x1ac42: call 0x1af69 0x1ac45: jmp 0x1ac4b 0x1ac47: nop 0x1ac48: call 0x1af62 0x1ac4b: mov si, 0xafdf 0x1ac4e: mov ah, 0x30 0x1ac50: int 0x21 0x1ac52: cmp di, 0xc3c3 0x1ac56: jne 0x1ac74 0x1ac58: mov bx, cs 0x1ac5a: mov ax, word ptr cs:[0x362] 0x1ac5e: sub bx, ax 0x1ac60: mov word ptr cs:[0x362], bx 0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.623739626Z	48	PC: 1ac52 | Get DOS version
2018-12-25T11:47:19.624962069Z	42	PC: 1a836 | Get date 0x1a836: cmp al, 1 0x1a838: je 0x1a848 0x1a83a: cmp al, 3 0x1a83c: je 0x1a848 0x1a83e: cmp al, 5 0x1a840: je 0x1a848 0x1a842: call 0x1ab69 0x1a845: jmp 0x1a84b 0x1a847: nop 0x1a848: call 0x1ab62 0x1a84b: mov si, 0xafdf 0x1a84e: mov ah, 0x30 0x1a850: int 0x21 0x1a852: cmp di, 0xc3c3 0x1a856: jne 0x1a874 0x1a858: mov bx, cs 0x1a85a: mov ax, word ptr cs:[0x362] 0x1a85e: sub bx, ax 0x1a860: mov word ptr cs:[0x362], bx 0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.628552783Z	48	PC: 1a852 | Get DOS version
2018-12-25T11:47:19.629986333Z	42	PC: 1a436 | Get date 0x1a436: cmp al, 1 0x1a438: je 0x1a448 0x1a43a: cmp al, 3 0x1a43c: je 0x1a448 0x1a43e: cmp al, 5 0x1a440: je 0x1a448 0x1a442: call 0x1a769 0x1a445: jmp 0x1a44b 0x1a447: nop 0x1a448: call 0x1a762 0x1a44b: mov si, 0xafdf 0x1a44e: mov ah, 0x30 0x1a450: int 0x21 0x1a452: cmp di, 0xc3c3 0x1a456: jne 0x1a474 0x1a458: mov bx, cs 0x1a45a: mov ax, word ptr cs:[0x362] 0x1a45e: sub bx, ax 0x1a460: mov word ptr cs:[0x362], bx 0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.632476477Z	48	PC: 1a452 | Get DOS version
2018-12-25T11:47:19.634786864Z	42	PC: 1a036 | Get date 0x1a036: cmp al, 1 0x1a038: je 0x1a048 0x1a03a: cmp al, 3 0x1a03c: je 0x1a048 0x1a03e: cmp al, 5 0x1a040: je 0x1a048 0x1a042: call 0x1a369 0x1a045: jmp 0x1a04b 0x1a047: nop 0x1a048: call 0x1a362 0x1a04b: mov si, 0xafdf 0x1a04e: mov ah, 0x30 0x1a050: int 0x21 0x1a052: cmp di, 0xc3c3 0x1a056: jne 0x1a074 0x1a058: mov bx, cs 0x1a05a: mov ax, word ptr cs:[0x362] 0x1a05e: sub bx, ax 0x1a060: mov word ptr cs:[0x362], bx 0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.640377975Z	48	PC: 1a052 | Get DOS version
2018-12-25T11:47:19.641436404Z	42	PC: 19c36 | Get date 0x19c36: cmp al, 1 0x19c38: je 0x19c48 0x19c3a: cmp al, 3 0x19c3c: je 0x19c48 0x19c3e: cmp al, 5 0x19c40: je 0x19c48 0x19c42: call 0x19f69 0x19c45: jmp 0x19c4b 0x19c47: nop 0x19c48: call 0x19f62 0x19c4b: mov si, 0xafdf 0x19c4e: mov ah, 0x30 0x19c50: int 0x21 0x19c52: cmp di, 0xc3c3 0x19c56: jne 0x19c74 0x19c58: mov bx, cs 0x19c5a: mov ax, word ptr cs:[0x362] 0x19c5e: sub bx, ax 0x19c60: mov word ptr cs:[0x362], bx 0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.644411045Z	48	PC: 19c52 | Get DOS version
2018-12-25T11:47:19.645514522Z	42	PC: 19836 | Get date 0x19836: cmp al, 1 0x19838: je 0x19848 0x1983a: cmp al, 3 0x1983c: je 0x19848 0x1983e: cmp al, 5 0x19840: je 0x19848 0x19842: call 0x19b69 0x19845: jmp 0x1984b 0x19847: nop 0x19848: call 0x19b62 0x1984b: mov si, 0xafdf 0x1984e: mov ah, 0x30 0x19850: int 0x21 0x19852: cmp di, 0xc3c3 0x19856: jne 0x19874 0x19858: mov bx, cs 0x1985a: mov ax, word ptr cs:[0x362] 0x1985e: sub bx, ax 0x19860: mov word ptr cs:[0x362], bx 0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.647532182Z	48	PC: 19852 | Get DOS version
2018-12-25T11:47:19.649499383Z	42	PC: 19436 | Get date 0x19436: cmp al, 1 0x19438: je 0x19448 0x1943a: cmp al, 3 0x1943c: je 0x19448 0x1943e: cmp al, 5 0x19440: je 0x19448 0x19442: call 0x19769 0x19445: jmp 0x1944b 0x19447: nop 0x19448: call 0x19762 0x1944b: mov si, 0xafdf 0x1944e: mov ah, 0x30 0x19450: int 0x21 0x19452: cmp di, 0xc3c3 0x19456: jne 0x19474 0x19458: mov bx, cs 0x1945a: mov ax, word ptr cs:[0x362] 0x1945e: sub bx, ax 0x19460: mov word ptr cs:[0x362], bx 0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.652533266Z	48	PC: 19452 | Get DOS version
2018-12-25T11:47:19.654802441Z	42	PC: 19036 | Get date 0x19036: cmp al, 1 0x19038: je 0x19048 0x1903a: cmp al, 3 0x1903c: je 0x19048 0x1903e: cmp al, 5 0x19040: je 0x19048 0x19042: call 0x19369 0x19045: jmp 0x1904b 0x19047: nop 0x19048: call 0x19362 0x1904b: mov si, 0xafdf 0x1904e: mov ah, 0x30 0x19050: int 0x21 0x19052: cmp di, 0xc3c3 0x19056: jne 0x19074 0x19058: mov bx, cs 0x1905a: mov ax, word ptr cs:[0x362] 0x1905e: sub bx, ax 0x19060: mov word ptr cs:[0x362], bx 0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.657511943Z	48	PC: 19052 | Get DOS version
2018-12-25T11:47:19.659446068Z	42	PC: 18c36 | Get date 0x18c36: cmp al, 1 0x18c38: je 0x18c48 0x18c3a: cmp al, 3 0x18c3c: je 0x18c48 0x18c3e: cmp al, 5 0x18c40: je 0x18c48 0x18c42: call 0x18f69 0x18c45: jmp 0x18c4b 0x18c47: nop 0x18c48: call 0x18f62 0x18c4b: mov si, 0xafdf 0x18c4e: mov ah, 0x30 0x18c50: int 0x21 0x18c52: cmp di, 0xc3c3 0x18c56: jne 0x18c74 0x18c58: mov bx, cs 0x18c5a: mov ax, word ptr cs:[0x362] 0x18c5e: sub bx, ax 0x18c60: mov word ptr cs:[0x362], bx 0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.661828268Z	48	PC: 18c52 | Get DOS version
2018-12-25T11:47:19.663560859Z	42	PC: 18836 | Get date 0x18836: cmp al, 1 0x18838: je 0x18848 0x1883a: cmp al, 3 0x1883c: je 0x18848 0x1883e: cmp al, 5 0x18840: je 0x18848 0x18842: call 0x18b69 0x18845: jmp 0x1884b 0x18847: nop 0x18848: call 0x18b62 0x1884b: mov si, 0xafdf 0x1884e: mov ah, 0x30 0x18850: int 0x21 0x18852: cmp di, 0xc3c3 0x18856: jne 0x18874 0x18858: mov bx, cs 0x1885a: mov ax, word ptr cs:[0x362] 0x1885e: sub bx, ax 0x18860: mov word ptr cs:[0x362], bx 0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.666223903Z	48	PC: 18852 | Get DOS version
2018-12-25T11:47:19.667420789Z	42	PC: 18436 | Get date 0x18436: cmp al, 1 0x18438: je 0x18448 0x1843a: cmp al, 3 0x1843c: je 0x18448 0x1843e: cmp al, 5 0x18440: je 0x18448 0x18442: call 0x18769 0x18445: jmp 0x1844b 0x18447: nop 0x18448: call 0x18762 0x1844b: mov si, 0xafdf 0x1844e: mov ah, 0x30 0x18450: int 0x21 0x18452: cmp di, 0xc3c3 0x18456: jne 0x18474 0x18458: mov bx, cs 0x1845a: mov ax, word ptr cs:[0x362] 0x1845e: sub bx, ax 0x18460: mov word ptr cs:[0x362], bx 0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.669823408Z	48	PC: 18452 | Get DOS version
2018-12-25T11:47:19.671745242Z	42	PC: 18036 | Get date 0x18036: cmp al, 1 0x18038: je 0x18048 0x1803a: cmp al, 3 0x1803c: je 0x18048 0x1803e: cmp al, 5 0x18040: je 0x18048 0x18042: call 0x18369 0x18045: jmp 0x1804b 0x18047: nop 0x18048: call 0x18362 0x1804b: mov si, 0xafdf 0x1804e: mov ah, 0x30 0x18050: int 0x21 0x18052: cmp di, 0xc3c3 0x18056: jne 0x18074 0x18058: mov bx, cs 0x1805a: mov ax, word ptr cs:[0x362] 0x1805e: sub bx, ax 0x18060: mov word ptr cs:[0x362], bx 0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.675149331Z	48	PC: 18052 | Get DOS version
2018-12-25T11:47:19.683366855Z	42	PC: 17c36 | Get date 0x17c36: cmp al, 1 0x17c38: je 0x17c48 0x17c3a: cmp al, 3 0x17c3c: je 0x17c48 0x17c3e: cmp al, 5 0x17c40: je 0x17c48 0x17c42: call 0x17f69 0x17c45: jmp 0x17c4b 0x17c47: nop 0x17c48: call 0x17f62 0x17c4b: mov si, 0xafdf 0x17c4e: mov ah, 0x30 0x17c50: int 0x21 0x17c52: cmp di, 0xc3c3 0x17c56: jne 0x17c74 0x17c58: mov bx, cs 0x17c5a: mov ax, word ptr cs:[0x362] 0x17c5e: sub bx, ax 0x17c60: mov word ptr cs:[0x362], bx 0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.693305092Z	48	PC: 17c52 | Get DOS version
2018-12-25T11:47:19.694997195Z	42	PC: 17836 | Get date 0x17836: cmp al, 1 0x17838: je 0x17848 0x1783a: cmp al, 3 0x1783c: je 0x17848 0x1783e: cmp al, 5 0x17840: je 0x17848 0x17842: call 0x17b69 0x17845: jmp 0x1784b 0x17847: nop 0x17848: call 0x17b62 0x1784b: mov si, 0xafdf 0x1784e: mov ah, 0x30 0x17850: int 0x21 0x17852: cmp di, 0xc3c3 0x17856: jne 0x17874 0x17858: mov bx, cs 0x1785a: mov ax, word ptr cs:[0x362] 0x1785e: sub bx, ax 0x17860: mov word ptr cs:[0x362], bx 0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.698150826Z	48	PC: 17852 | Get DOS version
2018-12-25T11:47:19.699725699Z	42	PC: 17436 | Get date 0x17436: cmp al, 1 0x17438: je 0x17448 0x1743a: cmp al, 3 0x1743c: je 0x17448 0x1743e: cmp al, 5 0x17440: je 0x17448 0x17442: call 0x17769 0x17445: jmp 0x1744b 0x17447: nop 0x17448: call 0x17762 0x1744b: mov si, 0xafdf 0x1744e: mov ah, 0x30 0x17450: int 0x21 0x17452: cmp di, 0xc3c3 0x17456: jne 0x17474 0x17458: mov bx, cs 0x1745a: mov ax, word ptr cs:[0x362] 0x1745e: sub bx, ax 0x17460: mov word ptr cs:[0x362], bx 0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.701814673Z	48	PC: 17452 | Get DOS version
2018-12-25T11:47:19.703102302Z	42	PC: 17036 | Get date 0x17036: cmp al, 1 0x17038: je 0x17048 0x1703a: cmp al, 3 0x1703c: je 0x17048 0x1703e: cmp al, 5 0x17040: je 0x17048 0x17042: call 0x17369 0x17045: jmp 0x1704b 0x17047: nop 0x17048: call 0x17362 0x1704b: mov si, 0xafdf 0x1704e: mov ah, 0x30 0x17050: int 0x21 0x17052: cmp di, 0xc3c3 0x17056: jne 0x17074 0x17058: mov bx, cs 0x1705a: mov ax, word ptr cs:[0x362] 0x1705e: sub bx, ax 0x17060: mov word ptr cs:[0x362], bx 0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.705478905Z	48	PC: 17052 | Get DOS version
2018-12-25T11:47:19.706628773Z	42	PC: 16c36 | Get date 0x16c36: cmp al, 1 0x16c38: je 0x16c48 0x16c3a: cmp al, 3 0x16c3c: je 0x16c48 0x16c3e: cmp al, 5 0x16c40: je 0x16c48 0x16c42: call 0x16f69 0x16c45: jmp 0x16c4b 0x16c47: nop 0x16c48: call 0x16f62 0x16c4b: mov si, 0xafdf 0x16c4e: mov ah, 0x30 0x16c50: int 0x21 0x16c52: cmp di, 0xc3c3 0x16c56: jne 0x16c74 0x16c58: mov bx, cs 0x16c5a: mov ax, word ptr cs:[0x362] 0x16c5e: sub bx, ax 0x16c60: mov word ptr cs:[0x362], bx 0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.708791894Z	48	PC: 16c52 | Get DOS version
2018-12-25T11:47:19.71039276Z	42	PC: 16836 | Get date 0x16836: cmp al, 1 0x16838: je 0x16848 0x1683a: cmp al, 3 0x1683c: je 0x16848 0x1683e: cmp al, 5 0x16840: je 0x16848 0x16842: call 0x16b69 0x16845: jmp 0x1684b 0x16847: nop 0x16848: call 0x16b62 0x1684b: mov si, 0xafdf 0x1684e: mov ah, 0x30 0x16850: int 0x21 0x16852: cmp di, 0xc3c3 0x16856: jne 0x16874 0x16858: mov bx, cs 0x1685a: mov ax, word ptr cs:[0x362] 0x1685e: sub bx, ax 0x16860: mov word ptr cs:[0x362], bx 0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.712922899Z	48	PC: 16852 | Get DOS version
2018-12-25T11:47:19.714822355Z	42	PC: 16436 | Get date 0x16436: cmp al, 1 0x16438: je 0x16448 0x1643a: cmp al, 3 0x1643c: je 0x16448 0x1643e: cmp al, 5 0x16440: je 0x16448 0x16442: call 0x16769 0x16445: jmp 0x1644b 0x16447: nop 0x16448: call 0x16762 0x1644b: mov si, 0xafdf 0x1644e: mov ah, 0x30 0x16450: int 0x21 0x16452: cmp di, 0xc3c3 0x16456: jne 0x16474 0x16458: mov bx, cs 0x1645a: mov ax, word ptr cs:[0x362] 0x1645e: sub bx, ax 0x16460: mov word ptr cs:[0x362], bx 0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.717245268Z	48	PC: 16452 | Get DOS version
2018-12-25T11:47:19.718343379Z	42	PC: 16036 | Get date 0x16036: cmp al, 1 0x16038: je 0x16048 0x1603a: cmp al, 3 0x1603c: je 0x16048 0x1603e: cmp al, 5 0x16040: je 0x16048 0x16042: call 0x16369 0x16045: jmp 0x1604b 0x16047: nop 0x16048: call 0x16362 0x1604b: mov si, 0xafdf 0x1604e: mov ah, 0x30 0x16050: int 0x21 0x16052: cmp di, 0xc3c3 0x16056: jne 0x16074 0x16058: mov bx, cs 0x1605a: mov ax, word ptr cs:[0x362] 0x1605e: sub bx, ax 0x16060: mov word ptr cs:[0x362], bx 0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.721300639Z	48	PC: 16052 | Get DOS version
2018-12-25T11:47:19.723309035Z	42	PC: 15c36 | Get date 0x15c36: cmp al, 1 0x15c38: je 0x15c48 0x15c3a: cmp al, 3 0x15c3c: je 0x15c48 0x15c3e: cmp al, 5 0x15c40: je 0x15c48 0x15c42: call 0x15f69 0x15c45: jmp 0x15c4b 0x15c47: nop 0x15c48: call 0x15f62 0x15c4b: mov si, 0xafdf 0x15c4e: mov ah, 0x30 0x15c50: int 0x21 0x15c52: cmp di, 0xc3c3 0x15c56: jne 0x15c74 0x15c58: mov bx, cs 0x15c5a: mov ax, word ptr cs:[0x362] 0x15c5e: sub bx, ax 0x15c60: mov word ptr cs:[0x362], bx 0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.725478134Z	48	PC: 15c52 | Get DOS version
2018-12-25T11:47:19.727185837Z	42	PC: 15836 | Get date 0x15836: cmp al, 1 0x15838: je 0x15848 0x1583a: cmp al, 3 0x1583c: je 0x15848 0x1583e: cmp al, 5 0x15840: je 0x15848 0x15842: call 0x15b69 0x15845: jmp 0x1584b 0x15847: nop 0x15848: call 0x15b62 0x1584b: mov si, 0xafdf 0x1584e: mov ah, 0x30 0x15850: int 0x21 0x15852: cmp di, 0xc3c3 0x15856: jne 0x15874 0x15858: mov bx, cs 0x1585a: mov ax, word ptr cs:[0x362] 0x1585e: sub bx, ax 0x15860: mov word ptr cs:[0x362], bx 0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.729829194Z	48	PC: 15852 | Get DOS version
2018-12-25T11:47:19.732013634Z	42	PC: 15436 | Get date 0x15436: cmp al, 1 0x15438: je 0x15448 0x1543a: cmp al, 3 0x1543c: je 0x15448 0x1543e: cmp al, 5 0x15440: je 0x15448 0x15442: call 0x15769 0x15445: jmp 0x1544b 0x15447: nop 0x15448: call 0x15762 0x1544b: mov si, 0xafdf 0x1544e: mov ah, 0x30 0x15450: int 0x21 0x15452: cmp di, 0xc3c3 0x15456: jne 0x15474 0x15458: mov bx, cs 0x1545a: mov ax, word ptr cs:[0x362] 0x1545e: sub bx, ax 0x15460: mov word ptr cs:[0x362], bx 0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.734477604Z	48	PC: 15452 | Get DOS version
2018-12-25T11:47:19.73691933Z	42	PC: 15036 | Get date 0x15036: cmp al, 1 0x15038: je 0x15048 0x1503a: cmp al, 3 0x1503c: je 0x15048 0x1503e: cmp al, 5 0x15040: je 0x15048 0x15042: call 0x15369 0x15045: jmp 0x1504b 0x15047: nop 0x15048: call 0x15362 0x1504b: mov si, 0xafdf 0x1504e: mov ah, 0x30 0x15050: int 0x21 0x15052: cmp di, 0xc3c3 0x15056: jne 0x15074 0x15058: mov bx, cs 0x1505a: mov ax, word ptr cs:[0x362] 0x1505e: sub bx, ax 0x15060: mov word ptr cs:[0x362], bx 0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.738994449Z	48	PC: 15052 | Get DOS version
2018-12-25T11:47:19.740865797Z	42	PC: 14c36 | Get date 0x14c36: cmp al, 1 0x14c38: je 0x14c48 0x14c3a: cmp al, 3 0x14c3c: je 0x14c48 0x14c3e: cmp al, 5 0x14c40: je 0x14c48 0x14c42: call 0x14f69 0x14c45: jmp 0x14c4b 0x14c47: nop 0x14c48: call 0x14f62 0x14c4b: mov si, 0xafdf 0x14c4e: mov ah, 0x30 0x14c50: int 0x21 0x14c52: cmp di, 0xc3c3 0x14c56: jne 0x14c74 0x14c58: mov bx, cs 0x14c5a: mov ax, word ptr cs:[0x362] 0x14c5e: sub bx, ax 0x14c60: mov word ptr cs:[0x362], bx 0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.743572103Z	48	PC: 14c52 | Get DOS version
2018-12-25T11:47:19.745071545Z	42	PC: 14836 | Get date 0x14836: cmp al, 1 0x14838: je 0x14848 0x1483a: cmp al, 3 0x1483c: je 0x14848 0x1483e: cmp al, 5 0x14840: je 0x14848 0x14842: call 0x14b69 0x14845: jmp 0x1484b 0x14847: nop 0x14848: call 0x14b62 0x1484b: mov si, 0xafdf 0x1484e: mov ah, 0x30 0x14850: int 0x21 0x14852: cmp di, 0xc3c3 0x14856: jne 0x14874 0x14858: mov bx, cs 0x1485a: mov ax, word ptr cs:[0x362] 0x1485e: sub bx, ax 0x14860: mov word ptr cs:[0x362], bx 0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.74775673Z	48	PC: 14852 | Get DOS version
2018-12-25T11:47:19.749225012Z	42	PC: 14436 | Get date 0x14436: cmp al, 1 0x14438: je 0x14448 0x1443a: cmp al, 3 0x1443c: je 0x14448 0x1443e: cmp al, 5 0x14440: je 0x14448 0x14442: call 0x14769 0x14445: jmp 0x1444b 0x14447: nop 0x14448: call 0x14762 0x1444b: mov si, 0xafdf 0x1444e: mov ah, 0x30 0x14450: int 0x21 0x14452: cmp di, 0xc3c3 0x14456: jne 0x14474 0x14458: mov bx, cs 0x1445a: mov ax, word ptr cs:[0x362] 0x1445e: sub bx, ax 0x14460: mov word ptr cs:[0x362], bx 0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.751590823Z	48	PC: 14452 | Get DOS version
2018-12-25T11:47:19.753212036Z	42	PC: 14036 | Get date 0x14036: cmp al, 1 0x14038: je 0x14048 0x1403a: cmp al, 3 0x1403c: je 0x14048 0x1403e: cmp al, 5 0x14040: je 0x14048 0x14042: call 0x14369 0x14045: jmp 0x1404b 0x14047: nop 0x14048: call 0x14362 0x1404b: mov si, 0xafdf 0x1404e: mov ah, 0x30 0x14050: int 0x21 0x14052: cmp di, 0xc3c3 0x14056: jne 0x14074 0x14058: mov bx, cs 0x1405a: mov ax, word ptr cs:[0x362] 0x1405e: sub bx, ax 0x14060: mov word ptr cs:[0x362], bx 0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.755988882Z	48	PC: 14052 | Get DOS version
2018-12-25T11:47:19.757327683Z	42	PC: 13c36 | Get date 0x13c36: cmp al, 1 0x13c38: je 0x13c48 0x13c3a: cmp al, 3 0x13c3c: je 0x13c48 0x13c3e: cmp al, 5 0x13c40: je 0x13c48 0x13c42: call 0x13f69 0x13c45: jmp 0x13c4b 0x13c47: nop 0x13c48: call 0x13f62 0x13c4b: mov si, 0xafdf 0x13c4e: mov ah, 0x30 0x13c50: int 0x21 0x13c52: cmp di, 0xc3c3 0x13c56: jne 0x13c74 0x13c58: mov bx, cs 0x13c5a: mov ax, word ptr cs:[0x362] 0x13c5e: sub bx, ax 0x13c60: mov word ptr cs:[0x362], bx 0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.759820011Z	48	PC: 13c52 | Get DOS version
2018-12-25T11:47:19.761429833Z	42	PC: 13836 | Get date 0x13836: cmp al, 1 0x13838: je 0x13848 0x1383a: cmp al, 3 0x1383c: je 0x13848 0x1383e: cmp al, 5 0x13840: je 0x13848 0x13842: call 0x13b69 0x13845: jmp 0x1384b 0x13847: nop 0x13848: call 0x13b62 0x1384b: mov si, 0xafdf 0x1384e: mov ah, 0x30 0x13850: int 0x21 0x13852: cmp di, 0xc3c3 0x13856: jne 0x13874 0x13858: mov bx, cs 0x1385a: mov ax, word ptr cs:[0x362] 0x1385e: sub bx, ax 0x13860: mov word ptr cs:[0x362], bx 0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.763488679Z	48	PC: 13852 | Get DOS version
2018-12-25T11:47:19.764873158Z	42	PC: 13436 | Get date 0x13436: cmp al, 1 0x13438: je 0x13448 0x1343a: cmp al, 3 0x1343c: je 0x13448 0x1343e: cmp al, 5 0x13440: je 0x13448 0x13442: call 0x13769 0x13445: jmp 0x1344b 0x13447: nop 0x13448: call 0x13762 0x1344b: mov si, 0xafdf 0x1344e: mov ah, 0x30 0x13450: int 0x21 0x13452: cmp di, 0xc3c3 0x13456: jne 0x13474 0x13458: mov bx, cs 0x1345a: mov ax, word ptr cs:[0x362] 0x1345e: sub bx, ax 0x13460: mov word ptr cs:[0x362], bx 0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.76733265Z	48	PC: 13452 | Get DOS version
2018-12-25T11:47:19.768458358Z	42	PC: 13036 | Get date 0x13036: cmp al, 1 0x13038: je 0x13048 0x1303a: cmp al, 3 0x1303c: je 0x13048 0x1303e: cmp al, 5 0x13040: je 0x13048 0x13042: call 0x13369 0x13045: jmp 0x1304b 0x13047: nop 0x13048: call 0x13362 0x1304b: mov si, 0xafdf 0x1304e: mov ah, 0x30 0x13050: int 0x21 0x13052: cmp di, 0xc3c3 0x13056: jne 0x13074 0x13058: mov bx, cs 0x1305a: mov ax, word ptr cs:[0x362] 0x1305e: sub bx, ax 0x13060: mov word ptr cs:[0x362], bx 0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.77082492Z	48	PC: 13052 | Get DOS version
2018-12-25T11:47:19.772054477Z	42	PC: 12c36 | Get date 0x12c36: cmp al, 1 0x12c38: je 0x12c48 0x12c3a: cmp al, 3 0x12c3c: je 0x12c48 0x12c3e: cmp al, 5 0x12c40: je 0x12c48 0x12c42: call 0x12f69 0x12c45: jmp 0x12c4b 0x12c47: nop 0x12c48: call 0x12f62 0x12c4b: mov si, 0xafdf 0x12c4e: mov ah, 0x30 0x12c50: int 0x21 0x12c52: cmp di, 0xc3c3 0x12c56: jne 0x12c74 0x12c58: mov bx, cs 0x12c5a: mov ax, word ptr cs:[0x362] 0x12c5e: sub bx, ax 0x12c60: mov word ptr cs:[0x362], bx 0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:47:19.774089878Z	48	PC: 12c52 | Get DOS version
2018-12-25T11:47:19.775411483Z	9	PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:47:19.781797168Z	76	PC: 12a86 | Terminate with return code (Return code = '36')