Sample viewer

vx.netlux.org/Virus.DOS.Andromeda.1024.e

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:15:24.727862966Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.730877954Z 48 PC: 1bc52 | Get DOS version
2018-12-17T22:15:24.732347421Z 38 PC: 1bc95 | Create PSP
2018-12-17T22:15:24.733987247Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:24.736449486Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:15:24.737907076Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:15:24.739309731Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:15:24.749618357Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.751905993Z 48 PC: 1b852 | Get DOS version
2018-12-17T22:15:24.753168924Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.756064328Z 48 PC: 1b452 | Get DOS version
2018-12-17T22:15:24.757609483Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.759748461Z 48 PC: 1b052 | Get DOS version
2018-12-17T22:15:24.769466137Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.77190442Z 48 PC: 1ac52 | Get DOS version
2018-12-17T22:15:24.773444587Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.777765542Z 48 PC: 1a852 | Get DOS version
2018-12-17T22:15:24.77997652Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.782675977Z 48 PC: 1a452 | Get DOS version
2018-12-17T22:15:24.785384244Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.78765184Z 48 PC: 1a052 | Get DOS version
2018-12-17T22:15:24.78917992Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.799940925Z 48 PC: 19c52 | Get DOS version
2018-12-17T22:15:24.81071655Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.813357405Z 48 PC: 19852 | Get DOS version
2018-12-17T22:15:24.823345132Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.825612732Z 48 PC: 19452 | Get DOS version
2018-12-17T22:15:24.826787927Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.837915998Z 48 PC: 19052 | Get DOS version
2018-12-17T22:15:24.839272619Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.841544579Z 48 PC: 18c52 | Get DOS version
2018-12-17T22:15:24.843834545Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.846572428Z 48 PC: 18852 | Get DOS version
2018-12-17T22:15:24.848225388Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.851850808Z 48 PC: 18452 | Get DOS version
2018-12-17T22:15:24.85343685Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.85598418Z 48 PC: 18052 | Get DOS version
2018-12-17T22:15:24.858485064Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.860948461Z 48 PC: 17c52 | Get DOS version
2018-12-17T22:15:24.862477393Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.866047022Z 48 PC: 17852 | Get DOS version
2018-12-17T22:15:24.869935815Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.873955098Z 48 PC: 17452 | Get DOS version
2018-12-17T22:15:24.875735326Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.878985606Z 48 PC: 17052 | Get DOS version
2018-12-17T22:15:24.880522324Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.882992417Z 48 PC: 16c52 | Get DOS version
2018-12-17T22:15:24.885101452Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.88719752Z 48 PC: 16852 | Get DOS version
2018-12-17T22:15:24.888327817Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.891985969Z 48 PC: 16452 | Get DOS version
2018-12-17T22:15:24.893140993Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.895276484Z 48 PC: 16052 | Get DOS version
2018-12-17T22:15:24.897305907Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.899808514Z 48 PC: 15c52 | Get DOS version
2018-12-17T22:15:24.901364492Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.904474078Z 48 PC: 15852 | Get DOS version
2018-12-17T22:15:24.906059385Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.908622581Z 48 PC: 15452 | Get DOS version
2018-12-17T22:15:24.911164669Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.913694133Z 48 PC: 15052 | Get DOS version
2018-12-17T22:15:24.915312525Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.919346626Z 48 PC: 14c52 | Get DOS version
2018-12-17T22:15:24.920929293Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.923480898Z 48 PC: 14852 | Get DOS version
2018-12-17T22:15:24.925856835Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.928543583Z 48 PC: 14452 | Get DOS version
2018-12-17T22:15:24.930102615Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.93326848Z 48 PC: 14052 | Get DOS version
2018-12-17T22:15:24.934574247Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.936744779Z 48 PC: 13c52 | Get DOS version
2018-12-17T22:15:24.939028663Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.941132751Z 48 PC: 13852 | Get DOS version
2018-12-17T22:15:24.942283712Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.945381922Z 48 PC: 13452 | Get DOS version
2018-12-17T22:15:24.946599851Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.949311487Z 48 PC: 13052 | Get DOS version
2018-12-17T22:15:24.951515815Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-17T22:15:24.953672517Z 48 PC: 12c52 | Get DOS version
2018-12-17T22:15:24.955196397Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-17T22:15:24.959991563Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:34.198245459Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.201183522Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:34.202725985Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:34.204509059Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.206358672Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.207584993Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.20894018Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.212261734Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:34.213703488Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.216205097Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:34.218158587Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.220692333Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:34.222064479Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.225052797Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:34.226449557Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.228786275Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:34.230491282Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.233067526Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:34.234183004Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.236792865Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:34.237976073Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.240215034Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:34.241708954Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.244101005Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:34.245287302Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.248000394Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:34.249236266Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.251503337Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:34.252931836Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.254763264Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:34.255614971Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.257545884Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:34.258552604Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.260031126Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:34.261026198Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.264138704Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:34.265954173Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.26890137Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:34.272252361Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.274800506Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:34.276249565Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.279500207Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:34.280597652Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.282795342Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:34.284867832Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.28723995Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:34.288332742Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.290914883Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:34.292160296Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.294467381Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:34.296472621Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.298834209Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:34.300087603Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.303102461Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:34.304557633Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.307424546Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:34.309426803Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.311802956Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:34.312875277Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.315509161Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:34.317023756Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.319484934Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:34.321156236Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.323607216Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:34.324856481Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.32776769Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:34.329127564Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.331517177Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:34.333121701Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.335416001Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:34.336692641Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.339475199Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:34.340688076Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.342843141Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:34.344313231Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.34731002Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:34.348522532Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.351136854Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:34.352319152Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:34.358317466Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:34.48514278Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.487411754Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:34.488250935Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:34.489281725Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.490510495Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.491231305Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.491925639Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.493269102Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.494740894Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:34.495599496Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.497621071Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:34.498585906Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.500141936Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:34.501463689Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.503015891Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:34.504505651Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.507477216Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:34.50852241Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.510628303Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:34.515927059Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.518285954Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:34.519362171Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.526613311Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:34.545688936Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.547820501Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:34.549743106Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.551770031Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:34.552809678Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.555510646Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:34.55659931Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.559262197Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:34.561362944Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.563476947Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:34.564897088Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.567982612Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:34.569300085Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.571608335Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:34.573914122Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.576014664Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:34.577095071Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.579768847Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:34.580773463Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.582700569Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:34.584193797Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.586880951Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:34.588253211Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.591058768Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:34.592439245Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.59457238Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:34.596523529Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.59896956Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:34.600038404Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.602480695Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:34.603654559Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.606019521Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:34.607583445Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.609530763Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:34.610802661Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.613361538Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:34.61457299Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.616833509Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:34.619161464Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.62133333Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:34.622604653Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.625712369Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:34.627111198Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.629381685Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:34.630913133Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.633740165Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:34.634823664Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.636743882Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:34.638322657Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.640642057Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:34.641939834Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.645266921Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:34.647009033Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.649086188Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:34.650551095Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.652818144Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:34.653692674Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:34.658929679Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:34.430093452Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.433486508Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:34.434901209Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:34.436417563Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.437985319Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.445757409Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.447056827Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.448626867Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.451990289Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:34.453439143Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.455623943Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:34.457710939Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.459696794Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:34.460803034Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.463400983Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:34.464507029Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.466676572Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:34.468702176Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.471377445Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:34.473058039Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.475999497Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:34.477183394Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.47926021Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:34.480754546Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.483202914Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:34.484509537Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.487510985Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:34.489233541Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.492008134Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:34.493698548Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.497792732Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:34.502684503Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.505448619Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:34.508523864Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.510902258Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:34.512311308Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.516177889Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:34.518301752Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.521802973Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:34.524000024Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.52637799Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:34.527618989Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.530864446Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:34.532555064Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.535396569Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:34.537153165Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.540504924Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:34.542224886Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.546516496Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:34.548943949Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.551697758Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:34.553288287Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.556879141Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:34.55900248Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.561367282Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:34.563515599Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.565464194Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:34.566963586Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.570264206Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:34.571924225Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.574341782Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:34.577380241Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.580396333Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:34.58161053Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.584659495Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:34.586006306Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.58839104Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:34.590772433Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.592574695Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:34.593920085Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.59708053Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:34.598533005Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.60117558Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:34.603201597Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.61775487Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:34.619693615Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.622551781Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:34.624162631Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.627183743Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:34.628851799Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:34.635259487Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:34.788057542Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.790795513Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:34.79249041Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:34.794342968Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.796425218Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.797651804Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:34.798849849Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:34.800677381Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.803011191Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:34.804324266Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.807304672Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:34.8158914Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.818299737Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:34.820383498Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.82298194Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:34.824441765Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.827106298Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:34.832673641Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.834849765Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:34.835949397Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.838874268Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:34.840498412Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.842958276Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:34.848598047Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.851551203Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:34.853161571Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.856247732Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:34.857928498Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.86066984Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:34.876358433Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.878802719Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:34.880179634Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.883873812Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:34.885309109Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.887695758Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:34.889861311Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.89225988Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:34.893545434Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.896666933Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:34.898156622Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.900681497Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:34.902146737Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.904811722Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:34.906025523Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.90820973Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:34.90968046Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.912192189Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:34.913599016Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.916897712Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:34.918623792Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.921410642Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:34.923623014Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.926328705Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:34.927593005Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.930795771Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:34.932525198Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.935007626Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:34.936814611Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.939413171Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:34.940733971Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.944141221Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:34.945452718Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.9478253Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:34.950188564Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.953065412Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:34.954812492Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.957750573Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:34.959042605Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.961410651Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:34.963194186Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.966557654Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:34.96821963Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.971362573Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:34.972736741Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.975107861Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:34.978801373Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.981147838Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:34.982349743Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:34.985455721Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:34.986808466Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:34.993007901Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:35.121525665Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.124889998Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.126190777Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:35.127680198Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.129579352Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.130888483Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.132182193Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.135346431Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:35.136616808Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.138751554Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:35.139882244Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.142710209Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:35.143596912Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.145177406Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.146492659Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.148074211Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:35.149133385Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.151206201Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:35.152130165Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.153620783Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:35.155012774Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.156565249Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:35.157471178Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.159927864Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:35.161076291Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.162567316Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:35.164396472Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.166003753Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:35.167222594Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.178799229Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:35.180088692Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.182445955Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:35.183534471Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.186081686Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:35.187104497Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.189245563Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:35.190773484Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.192909431Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:35.194046723Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.197043909Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:35.198184251Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.200356313Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:35.202392756Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.205190865Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:35.206830828Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.210869141Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:35.212330618Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.215152469Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:35.217333809Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.219845611Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:35.221253577Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.230762262Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:35.232094302Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.234341776Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:35.236340202Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.239145327Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:35.240671442Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.243293727Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:35.245049636Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.247458463Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:35.24878504Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.251499762Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:35.253167063Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.255961937Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:35.257966888Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.260771529Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:35.262829148Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.266008207Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:35.26711446Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.269557397Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:35.271228731Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.273561994Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:35.274774749Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.277716465Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:35.2789244Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.281270469Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:35.282845108Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.285229744Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:35.286366693Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:35.29327814Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:35.276301648Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.280781967Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.282513137Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:35.284115547Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.286099582Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.288158901Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.289527961Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.291082479Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.298781174Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:35.300793467Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.30388682Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:35.3065807Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.309013148Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:35.310437688Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.31349229Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.314744451Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.31698489Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:35.31853308Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.321268221Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:35.322558675Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.325945785Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:35.327344441Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.329864807Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:35.33168315Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.333872124Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:35.335121599Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.33809773Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:35.340300939Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.34279672Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:35.344222931Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.352275707Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:35.354028678Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.356679263Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:35.358623473Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.360514948Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:35.361973615Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.364541574Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:35.36555276Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.367209124Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:35.368827683Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.370527307Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:35.371558443Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.373700309Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:35.374933342Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.377003165Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:35.39224679Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.393997193Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:35.394995563Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.39729883Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:35.398802095Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.400574794Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:35.402138321Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.405421597Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:35.406979897Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.409978121Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:35.411306864Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.413766521Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:35.416310403Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.419110209Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:35.420761436Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.424982051Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:35.426655181Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.429490452Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:35.431407607Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.435096748Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:35.436808397Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.439667582Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:35.442437563Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.445267496Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:35.446598766Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.450049041Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:35.451684988Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.454420559Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:35.457286763Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.459890087Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:35.461486082Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.465228806Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:35.466918126Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.469765358Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:35.4726877Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:35.47989879Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:35.426895927Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.430631319Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.432098261Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:35.434119564Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.437019705Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.438414042Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.439809545Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.441633558Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.443948482Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:35.445027421Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.44755704Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:35.449102594Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.451470621Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:35.452769249Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.455237265Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.456505344Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.458900555Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:35.46072097Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.463066947Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:35.464331354Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.467503687Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:35.468924028Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.471361937Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:35.473444549Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.476119951Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:35.477496526Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.480532948Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:35.481952024Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.484401961Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:35.488891964Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.491480052Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:35.492795129Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.495715162Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:35.497523404Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.499935783Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:35.501647947Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.504232122Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:35.505846385Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.508495183Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:35.511349566Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.513810317Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:35.515357233Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.518776261Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:35.520048199Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.521823888Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:35.523769846Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.526060524Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:35.527262304Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.529637704Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:35.530775796Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.532422683Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:35.534054398Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.535675597Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:35.536664532Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.539254131Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:35.540466216Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.542857837Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:35.544521854Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.547298787Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:35.548657809Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.556462697Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:35.559512738Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.562018786Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:35.563267543Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.565328592Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:35.566243751Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.567767356Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:35.569085314Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.570709444Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:35.571725803Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.573738025Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:35.574707842Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.576267199Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:35.577672526Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.579194711Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:35.580133186Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.581928977Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:35.582918139Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.58455158Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:35.586214698Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:35.592381977Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:35.6086104Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.612333686Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.613703886Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:35.615274731Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.61791017Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.620124484Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.621592322Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.624241395Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.628165443Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:35.630766941Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.634480794Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:35.636031496Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.638337487Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:35.640988728Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.644139333Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.646178385Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.649380276Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:35.652049563Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.655803772Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:35.660701376Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.664482291Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:35.665554379Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.667226796Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:35.669013171Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.671872338Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:35.673293897Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.676295981Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:35.677854426Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.680650254Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:35.68292037Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.685688847Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:35.687341263Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.690419437Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:35.692336846Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.695303688Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:35.697485732Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.700114611Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:35.701518632Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.704493065Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:35.706672948Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.709049683Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:35.710668737Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.71344077Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:35.715168569Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.717984658Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:35.719783198Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.72237242Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:35.724085854Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.727245352Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:35.728494637Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.730691013Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:35.732797919Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.735451463Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:35.73708738Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.740528657Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:35.741795147Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.744000249Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:35.760381676Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.763342065Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:35.765262989Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.769271248Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:35.771561134Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.774534891Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:35.777331835Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.780246037Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:35.781972588Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.785524202Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:35.787510777Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.790332999Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:35.792204869Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.794958478Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:35.796314825Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.798882706Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:35.800793938Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.803078939Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:35.80518582Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.808709081Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:35.810361399Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.813178067Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:35.815333607Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:35.822119742Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:35.814672595Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.818387867Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.820246772Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:35.822010146Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.823933506Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.825706653Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.82705769Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.829527441Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:35.831598417Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.834029837Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:35.835480166Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.838716611Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:35.840341392Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.842897821Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.848550332Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.851245075Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:35.853714302Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.858413407Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:35.86014876Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.863179485Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:35.866127085Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.868526796Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:35.869800139Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.872633309Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:35.874741961Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.880847159Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:35.882317507Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.886687862Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:35.88827921Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.890907693Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:35.892971443Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.895576066Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:35.89708734Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.907142291Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:35.908635293Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.911182247Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:35.913449578Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.91635237Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:35.917939308Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.921312001Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:35.923020755Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.925963628Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:35.930682378Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.93321079Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:35.934529591Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.936981502Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:35.938832402Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.941645017Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:35.943340339Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.946569409Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:35.948410706Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.950987035Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:35.953445999Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.955950512Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:35.957792344Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.960882264Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:35.962590003Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.965451084Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:35.967621794Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.970055256Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:35.971375889Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.974692511Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:35.976570587Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.978894235Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:35.980760394Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.983411857Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:35.984943167Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.989244128Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:35.99045166Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.992770988Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:35.994512531Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.996934933Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:35.997992646Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.000716563Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:36.001780834Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.003387716Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:36.00498674Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.008076462Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:36.0093985Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.015843379Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:35.973064359Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.974931646Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:35.975879548Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:35.977083575Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.978161059Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.979218905Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:35.980507839Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:35.982209042Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.984945671Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:35.986246357Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.988465671Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:35.989640612Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.991903612Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:35.99312361Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.995156023Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:35.996368864Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:35.998466348Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:35.999596046Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.001781393Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:36.003001396Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.005078234Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:36.006287933Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.008587112Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:36.009558478Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.01167274Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:36.012996577Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.01485207Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:36.015965923Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.018262819Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:36.01916312Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.021156657Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:36.022484657Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.024556765Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:36.025682187Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.027908439Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:36.028894498Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.030932466Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:36.035281488Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.037216134Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:36.038330725Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.040394873Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:36.041187285Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.042644136Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:36.043946965Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.045852724Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:36.047143229Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.049452061Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:36.050600695Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.052967395Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:36.054341234Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.056253147Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:36.057353475Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.059697801Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:36.060772331Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.063165987Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:36.065837216Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.068110751Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:36.069479916Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.072118684Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:36.073205442Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.075198085Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:36.076807038Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.07908307Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:36.080422139Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.083126292Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:36.08421593Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.086165575Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:36.087700703Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.08965568Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:36.090639404Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.09492414Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:36.096103148Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.098330538Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:36.100016488Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.102200843Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:36.103557032Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.10695546Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:36.108223164Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.110406577Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:36.111947327Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.117204011Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:36.100442655Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.110877305Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.112055677Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:36.113429646Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.115326206Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.11667839Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.118013936Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.120440981Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.122881014Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:36.124324536Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.127765082Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:36.128926253Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.131256361Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:36.146827062Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.155440877Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.156635259Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.159146401Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:36.160880861Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.163300964Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:36.164697285Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.16738141Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:36.168464416Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.170742094Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:36.17177672Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.173425185Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:36.174838937Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.17697089Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:36.177988423Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.181522082Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:36.186057296Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.188270395Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:36.190989377Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.193382851Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:36.194866303Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.208015786Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:36.209264179Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.211634784Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:36.214178086Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.216444061Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:36.217824028Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.220343117Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:36.222888704Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.225115549Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:36.226096324Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.228119144Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:36.229043616Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.231136698Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:36.232285234Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.233682808Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:36.23450046Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.236444644Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:36.237329773Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.238776921Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:36.24022434Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.24172762Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:36.243018036Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.245140567Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:36.24595964Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.248063921Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:36.250012716Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.251468751Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:36.252295922Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.254282769Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:36.255409331Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.257026823Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:36.258421602Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.260025255Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:36.260913296Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.262772217Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:36.263729719Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.265844819Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:36.268057174Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.270711889Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:36.272257435Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.275138466Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:36.276344386Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.278425359Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:36.280421705Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.282374598Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:36.28324571Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.289617621Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:36.107189795Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.10981184Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.110975329Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:36.112583256Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.11486973Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.116331521Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.117734382Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.120198582Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.122368669Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:36.123481675Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.126218857Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:36.127387206Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.129404166Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:36.131588394Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.133950094Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.135369711Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.138217546Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:36.139534479Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.141807249Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:36.143746324Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.145867605Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:36.146881734Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.14915803Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:36.15481339Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.157153791Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:36.165701472Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.167886138Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:36.16896682Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.172088621Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:36.173515605Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.175879223Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:36.177519017Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.180638059Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:36.182113547Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.184599847Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:36.187222584Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.190301424Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:36.193025425Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.195923429Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:36.197302477Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.199623538Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:36.201839532Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.204184269Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:36.205523222Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.208053181Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:36.209367507Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.211736607Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:36.21378783Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.216143856Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:36.217490184Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.220766456Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:36.222131704Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.223621264Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:36.225056056Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.227144387Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:36.228402556Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.231258452Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:36.232619326Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.234858604Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:36.236569565Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.238880439Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:36.240222184Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.242900822Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:36.243998798Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.246220462Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:36.248616283Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.252955288Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:36.253974998Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.259019383Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:36.260571966Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.263053082Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:36.264705712Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.26765924Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:36.268796189Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.271129518Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:36.272616231Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.274765311Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:36.276375369Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.2784865Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:36.279532049Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.285587029Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:36.228008395Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.229667325Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.230547108Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:36.23168601Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.233418576Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.234293211Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.235296118Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.237204856Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:36.238077707Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.239532977Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:36.240772434Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.242184622Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:36.24297388Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.245378936Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.246293563Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.247992378Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:36.249415963Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.251957327Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:36.253978951Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.258879976Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:36.259657041Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.261400069Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:36.26319176Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.264855858Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:36.267937727Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.27103941Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:36.273248019Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.275301396Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:36.276801942Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.27877995Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:36.279656912Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.282039734Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:36.282894962Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.284257656Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:36.285521618Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.287476543Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:36.288342311Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.290775076Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:36.291803742Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.293653165Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:36.29493792Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.296906963Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:36.297874302Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.300247364Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:36.301225411Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.303090475Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:36.304454954Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.306456241Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:36.307307959Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.309641265Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:36.310618106Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.3124421Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:36.313846422Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.315819022Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:36.316674967Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.319034462Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:36.320129694Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.322095967Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:36.323415959Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.325413137Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:36.326449728Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.328695935Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:36.329653204Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.331513959Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:36.332894844Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.334746986Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:36.335636411Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.337886873Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:36.339654944Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.341497228Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:36.342920262Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.344989566Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:36.345887403Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.348098256Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:36.348978077Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.350808771Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:36.351993003Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.353961927Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:36.35497378Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.360339002Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:36.250873956Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.254845563Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.256341253Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:36.257997087Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.260074382Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.262232954Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.263966266Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.26649626Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.269640243Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:36.271376028Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.274160414Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:36.288804472Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.291812354Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:36.293583816Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.297346964Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.299305921Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.302137735Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:36.304736489Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.30757308Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:36.309318594Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.31273476Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:36.314481257Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.317309268Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:36.31931181Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.322028029Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:36.323457264Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.326519921Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:36.327851142Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.330262919Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:36.332220209Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.335076133Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:36.336622526Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.340040078Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:36.342471077Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.345492293Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:36.347235155Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.350206332Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:36.351716368Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.354364859Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:36.356607314Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.359241161Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:36.360821442Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.364247407Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:36.365956552Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.368934327Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:36.371859894Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.375531542Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:36.377413974Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.381643449Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:36.383556812Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.386733133Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:36.388218874Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.390914316Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:36.392664716Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.395553508Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:36.398006523Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.400565637Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:36.401842705Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.405072581Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:36.406550345Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.409130224Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:36.411377155Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.414257973Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:36.416090865Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.419935144Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:36.421351118Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.426053723Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:36.429212033Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.431821821Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:36.433425857Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.436459383Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:36.438515854Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.441171509Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:36.443114918Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.445814407Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:36.447086294Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.449787147Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:36.453681355Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.456316436Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:36.457849195Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.464550841Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:36.54424686Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.54679777Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.547802575Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:36.549173667Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.558609626Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.559635067Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.560592734Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.562258418Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.564225004Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:36.565212888Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.567816519Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:36.568806432Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.570732685Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:36.572554863Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.574624342Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.575639225Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.578126374Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:36.579138832Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.581098447Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:36.590505512Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.592965929Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:36.593944223Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.59669458Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:36.59774007Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.599801031Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:36.601767401Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.604220614Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:36.60529425Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.608005065Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:36.609908606Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.61280254Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:36.615797265Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.617841609Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:36.619709279Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.623981488Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:36.625201372Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.627569471Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:36.629370733Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.63140644Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:36.6323986Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.635376206Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:36.636642671Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.639028034Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:36.64083625Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.642921234Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:36.644037112Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.646366186Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:36.6474462Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.649402075Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:36.651161173Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.653192852Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:36.654266194Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.656780243Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:36.657875288Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.65986286Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:36.661289748Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.663349914Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:36.666738493Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.669261631Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:36.670290331Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.67218634Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:36.673913159Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.675875165Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:36.676812986Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.682189898Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:36.683231122Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.685330547Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:36.687109145Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.689442638Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:36.690838422Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.693447207Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:36.695288218Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.697402557Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:36.699364706Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.701722034Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:36.703104507Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.706096565Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:36.707258122Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.709630639Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:36.711851111Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.717706699Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:36.691782619Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.694070518Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.695119678Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:36.696249935Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.697764656Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.698717169Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.699662309Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.701176428Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.702674327Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:36.703588105Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.706211631Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:36.70740126Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.708924377Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:36.718935553Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.721016299Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.722419447Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.724710993Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:36.725733218Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.727305103Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:36.729000057Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.73056534Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:36.731517724Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.733645679Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:36.734607564Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.736122511Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:36.737903129Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.73968314Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:36.740567556Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.742704274Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:36.74393775Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.745517947Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:36.754397927Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.755886964Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:36.756846112Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.758855202Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:36.759874373Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.76171304Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:36.763482817Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.765635356Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:36.766797249Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.769901062Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:36.771096135Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.773162792Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:36.774392773Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.776597321Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:36.777622409Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.780109736Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:36.787433026Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.789676966Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:36.791448079Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.793690574Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:36.794784167Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.797531285Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:36.799079543Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.802888291Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:36.805627468Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.808004784Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:36.809086452Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.811680141Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:36.813386154Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.815833025Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:36.81761403Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.820242156Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:36.821329538Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.823685943Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:36.82504865Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.827274447Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:36.83047847Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.832900556Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:36.834207071Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.836581582Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:36.837840326Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.839882188Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:36.841066104Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.843570683Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:36.844614724Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.846744142Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:36.847822338Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.84927256Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:36.850330998Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:36.854332728Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:36.884795139Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.887303129Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:36.888771517Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:36.890500303Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.893060879Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.89436673Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:36.895494872Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:36.897340292Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.89969715Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:36.900943009Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.903719879Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:36.905164349Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.907642086Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:36.910106142Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.912265047Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:36.913384318Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.916776623Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:36.917996022Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.920224994Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:36.922635481Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.925001209Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:36.926481337Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.929504524Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:36.930643208Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.932537069Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:36.934208901Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.936761347Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:36.938352746Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.94187445Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:36.943166129Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.945430797Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:36.947269946Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.949587642Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:36.951293436Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.954429422Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:36.955556956Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.957550241Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:36.958758545Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.960988242Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:36.961985791Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.964220437Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:36.965527935Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.967869791Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:36.973803045Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.976481589Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:36.978610769Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.981157103Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:36.982611473Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.984759188Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:36.986101578Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.992139719Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:36.993223725Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.995282252Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:36.996957464Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:36.999132989Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:37.000348842Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.002669513Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:37.003772798Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.005840672Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:37.007187758Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.009446413Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:37.010987282Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.014446418Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:37.015606182Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.017705802Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:37.019304571Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.021746331Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:37.023205674Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.026294366Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:37.027728277Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.030129313Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:37.031931048Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.034564279Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:37.036114753Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.039173184Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:37.040345078Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.042575591Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:37.044332108Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.046402817Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:37.047533082Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:37.053449776Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:37.613081487Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.617140864Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:37.619629552Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:37.621937462Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:37.624183322Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:37.626568384Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:37.628460857Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:37.63042649Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.633820446Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:37.636225949Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.638893684Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:37.644010469Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.646645449Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:37.648299472Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.652500602Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:37.653910908Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.656679012Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:37.658962709Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.66230363Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:37.664158277Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.668526139Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:37.670185514Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.673465098Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:37.675441016Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.678312854Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:37.68036899Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.683282536Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:37.68564923Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.688328285Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:37.689830636Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.700939176Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:37.70277999Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.705821089Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:37.708636192Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.724950916Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:37.727591384Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.730959435Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:37.732897977Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.735783625Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:37.738375971Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.741968819Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:37.743995622Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.747423819Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:37.749095189Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.751741512Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:37.754351784Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.756871059Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:37.758230862Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.761659028Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:37.763492136Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.766076633Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:37.767675417Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.770797532Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:37.772489116Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.775418995Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:37.77852319Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.781387317Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:37.783095983Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.786735152Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:37.78869698Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.791895951Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:37.794178542Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.797292576Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:37.798834335Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.80191764Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:37.803599376Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.806232032Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:37.807930902Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.810930527Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:37.812335149Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.814769382Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:37.817591464Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.821071856Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:37.823139358Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.826772458Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:37.828465688Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.831285294Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:37.834227247Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:37.837214271Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:37.838987964Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:37.846730292Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:37.999641958Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.003062231Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.005053095Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:38.006982948Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.009445035Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.010793393Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.012164522Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.015156927Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:38.01681358Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.019274393Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:38.021098193Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.024136786Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:38.025499018Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.028180576Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.029845655Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.032326255Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:38.033698428Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.036983525Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:38.038653447Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.041552156Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:38.04443188Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.047236056Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:38.050158905Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.053668758Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:38.056636513Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.059520314Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:38.071455192Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.0743411Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:38.075751266Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.078615493Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:38.084603145Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.087435287Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:38.089370991Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.092743516Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:38.094892793Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.101655249Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:38.103872759Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.106686199Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:38.108330329Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.111803778Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:38.113571998Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.116453087Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:38.118433017Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.121745091Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:38.123191337Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.126202557Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:38.127994994Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.13089237Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:38.133146029Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.13663852Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:38.13831472Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.141862867Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:38.144173211Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.147177066Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:38.148837412Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.152197498Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:38.153689856Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.15626973Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:38.158926534Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.161812744Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:38.16358106Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.167046748Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:38.168745588Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.171559377Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:38.174232015Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.177451442Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:38.179206736Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.182761659Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:38.19023611Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.193180354Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:38.195647533Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.198707378Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:38.200523405Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.204630851Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:38.206642968Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.209530582Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:38.212012834Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.215142338Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:38.216866647Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.224287974Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:38.148543663Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.151039672Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.152153655Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:38.153367616Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.155073423Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.156126621Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.157116355Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.158717561Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.160747701Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:38.162016988Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.16450657Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:38.165611032Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.167714775Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:38.170087886Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.17218976Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.173281564Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.176049096Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:38.17765742Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.180172767Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:38.182221714Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.184908231Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:38.186039892Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.188042884Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:38.189680853Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.19197194Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:38.193231204Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.195955652Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:38.197024472Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.199031851Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:38.200741118Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.202752774Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:38.203780125Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.206213944Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:38.207289262Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.209300252Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:38.210838351Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.212852334Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:38.213870424Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.21703627Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:38.21842538Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.221013505Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:38.223611829Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.22578732Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:38.227217209Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.229688183Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:38.231222801Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.23331219Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:38.234601895Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.237060177Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:38.238096699Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.240820242Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:38.24290463Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.24505332Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:38.246132523Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.24852946Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:38.249712682Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.251721059Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:38.252912811Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.254216083Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:38.25496054Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.257147759Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:38.258313612Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.260259161Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:38.26246247Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.265110692Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:38.266682117Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.26952758Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:38.270633696Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.272674151Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:38.274073194Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.27619237Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:38.277337847Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.279616226Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:38.280712228Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.282783613Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:38.284511086Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.286994256Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:38.288472561Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.291498661Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:38.292614074Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.29872105Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:38.234213909Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.23940883Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.24067466Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:38.242091309Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.244275684Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.245549937Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.246909461Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.250596422Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:38.251972748Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.253987005Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:38.255114695Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.257518569Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:38.258675501Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.260936836Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.262364999Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.264491147Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:38.265896611Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.270608107Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:38.2716191Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.273518089Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:38.274897182Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.276937386Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:38.277977738Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.28057435Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:38.281626672Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.283674085Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:38.285157908Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.287224997Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:38.288354456Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.290626342Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:38.291657542Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.293566731Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:38.294803715Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.296705218Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:38.298474718Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.300444719Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:38.301432086Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.303342296Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:38.304662233Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.306566627Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:38.307432869Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.309656056Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:38.310714435Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.312746344Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:38.313891589Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.315953493Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:38.317003777Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.319666499Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:38.320761688Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.322866495Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:38.324319251Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.326425713Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:38.327548075Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.330856298Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:38.332012809Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.33396867Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:38.335498645Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.337533985Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:38.338590768Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.340710042Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:38.341852099Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.343869101Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:38.345480908Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.34780335Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:38.348675375Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.35097084Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:38.351959121Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.353848919Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:38.355374029Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.357327579Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:38.35820839Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.361227794Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:38.362373028Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.364389854Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:38.366037102Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.368366148Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:38.369694281Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.372092796Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:38.373435625Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.379508809Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:38.5077405Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.510182981Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.511080969Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:38.512157618Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.513811318Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.514891142Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.515927951Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.517429817Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.520046015Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:38.521098511Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.526960228Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:38.527987038Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.529978907Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:38.532553384Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.53505052Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.536515806Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.538672004Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:38.539660548Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.541189443Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:38.542976122Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.545180027Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:38.546592191Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.562679324Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:38.563876466Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.565855475Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:38.567746377Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.569715496Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:38.570737273Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.5732638Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:38.57450732Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.576859142Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:38.57809074Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.580416765Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:38.581417546Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.583539505Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:38.584541865Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.586614007Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:38.587855804Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.589780498Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:38.590758648Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.592844433Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:38.594484009Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.596350178Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:38.597504502Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.599380523Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:38.600334296Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.602422466Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:38.603461992Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.605449625Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:38.606764603Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.608743803Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:38.609641082Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.611407113Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:38.612254544Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.613648374Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:38.615731881Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.617183413Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:38.618015573Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.620130486Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:38.621009092Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.622433524Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:38.623786741Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.625302164Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:38.626080822Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.628032021Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:38.628881543Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.630512727Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:38.632110835Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.633633658Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:38.634588067Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.636551627Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:38.637672889Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.640031694Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:38.642394066Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.644740903Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:38.646036105Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.64905298Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:38.650047808Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.651496701Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:38.652907501Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.656301192Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:38.613941372Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.616620654Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.617731443Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:38.619029042Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.621534507Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.623182206Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.624845856Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.630321149Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.633002411Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:38.63476533Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.637904815Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:38.639274114Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.641639322Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:38.643654866Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.645831907Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.646939314Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.651596646Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:38.65599341Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.657620313Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:38.659715154Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.662083227Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:38.663523219Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.667206582Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:38.668582321Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.670916948Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:38.682597229Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.685448206Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:38.686714411Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.693462421Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:38.695035751Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.697529036Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:38.699422767Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.702262658Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:38.703612069Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.706666828Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:38.70785542Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.709965968Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:38.711538261Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.713643762Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:38.714765741Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.71763646Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:38.719003426Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.721109966Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:38.722681585Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.724814425Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:38.726131201Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.729881128Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:38.731423187Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.73447416Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:38.73837704Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.740534841Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:38.741677483Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.743947256Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:38.745398209Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.74818336Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:38.749741026Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.752376625Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:38.753452799Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.755966461Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:38.757267367Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.758842446Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:38.760085633Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.762762573Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:38.764234295Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.766563259Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:38.768075244Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.770140613Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:38.77135218Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.775235685Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:38.776540335Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.77963797Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:38.781153112Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.78341683Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:38.7847361Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.788131107Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:38.790007759Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.792373002Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:38.794647797Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.796107467Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:38.797004868Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.800743367Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:38.762987792Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.765711273Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.766930175Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:38.768024143Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.769517984Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.770515581Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.771571526Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.773825705Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.77551119Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:38.776327371Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.778024957Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:38.778882746Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.780359503Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:38.781679827Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.783672112Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.784677281Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.787009289Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:38.788091107Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.790060721Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:38.791453482Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.793632274Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:38.794839448Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.797727866Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:38.799327526Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.801737753Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:38.804729667Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.810516381Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:38.811659324Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.813171522Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:38.814800408Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.816988213Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:38.818062515Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.820610555Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:38.82193883Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.824174688Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:38.826285076Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.828229888Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:38.829213339Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.831525309Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:38.832521873Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.834286865Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:38.835666769Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.837595554Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:38.838604899Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.840790364Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:38.841897605Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.843840059Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:38.845262748Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.847181832Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:38.848494389Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.850793037Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:38.851894468Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.853850188Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:38.861745336Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.864107272Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:38.865069758Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.867376448Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:38.868394472Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.870272809Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:38.871626612Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.873558372Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:38.874502201Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.876613698Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:38.877577418Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.879333037Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:38.880619156Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.882540281Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:38.883475941Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.88575376Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:38.886761946Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.888517102Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:38.889794638Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.891648913Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:38.892507351Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.894626854Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:38.895587094Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.897359415Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:38.898643658Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.90051963Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:38.902036203Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:38.907294505Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:38.900356761Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.902821327Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:38.90403746Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:38.905357754Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.906842971Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:38.908034838Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:38.909175492Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.912704664Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:38.914722151Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.917415602Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:38.919161857Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.921134296Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:38.922108005Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.924339696Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:38.925390012Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.927204458Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:38.92869329Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.930665761Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:38.931636947Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.94065475Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:38.941700185Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.943591628Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:38.945350217Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.946995301Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:38.947873575Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.949986216Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:38.951142032Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.952594797Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:38.954240888Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.955797632Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:38.956789941Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.958991878Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:38.95990162Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.961329036Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:38.962774394Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.964889257Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:38.965943701Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.968397944Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:38.969717419Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.971263623Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:38.97263305Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.974201252Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:38.97519946Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.977200901Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:38.978181896Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.979681024Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:38.981016029Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.982579257Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:38.983461174Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.985359594Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:38.986512757Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.987969335Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:38.989384672Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.99091218Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:38.991765417Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.993588549Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:38.994700388Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:38.99693873Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:38.998430342Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.002131563Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:39.003248997Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.005436763Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:39.006776196Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.009114156Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:39.010292219Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.015989567Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:39.016884057Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.018548084Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:39.019580038Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.021787481Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:39.023017615Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.032434699Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:39.033504716Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.035663826Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:39.037406944Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.039497305Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:39.040713497Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.043205365Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:39.044370525Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:39.049805008Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:39.236218886Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.239092942Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:39.240240446Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:39.241526112Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:39.243837228Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:39.244983837Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:39.246042313Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:39.248024925Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.250318823Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:39.251405118Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.253819515Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:39.254815866Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.256771461Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:39.258407189Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.260996057Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:39.262031623Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.264595964Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:39.265751545Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.267836098Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:39.269467266Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.27173686Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:39.272763021Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.27527952Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:39.276353828Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.278331817Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:39.280367657Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.283091352Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:39.284671752Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.287762303Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:39.288915407Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.291042541Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:39.292777239Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.294834048Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:39.295908405Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.298669626Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:39.300015097Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.302126768Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:39.30382748Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.306115526Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:39.307287892Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.309916821Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:39.311048909Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.313131Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:39.314917706Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.317063876Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:39.318115517Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.321687096Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:39.322798355Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.324930134Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:39.327015699Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.329186248Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:39.330199743Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.332504523Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:39.334171072Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.336487011Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:39.337754014Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.340714198Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:39.341788823Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.343821391Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:39.346283574Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.34834009Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:39.350135277Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.352554078Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:39.353562834Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.355695945Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:39.357459676Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.359556551Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:39.360608688Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.364300605Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:39.365373413Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.367358624Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:39.368542324Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.370558009Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:39.371627156Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.373816971Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:39.374865541Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.37686443Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:39.378425307Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.380473239Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:39.38170191Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:39.387567428Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:39.803979891Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.806561106Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:39.807782986Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:39.809143361Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:39.810722268Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:39.811805161Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:39.81284866Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:39.814331264Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.816360321Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:39.817479082Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.819836135Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:39.820898994Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.822968075Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:39.82471809Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.827030662Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:39.828529056Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.831377022Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:39.832727096Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.835041333Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:39.836921256Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.839229071Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:39.840549656Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.843450767Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:39.844961272Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.847408916Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:39.849101799Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.851241325Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:39.852360909Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.855593409Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:39.858501902Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.860925477Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:39.86308864Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.865514669Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:39.867005309Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.869863031Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:39.871815788Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.875360161Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:39.877425412Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.879679222Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:39.880869434Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.88349937Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:39.884943934Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.887545132Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:39.889441663Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.891492893Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:39.892503389Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.895199104Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:39.896377253Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.898434405Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:39.900389227Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.902371575Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:39.903495413Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.906378144Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:39.907622918Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.90982006Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:39.911511749Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.913908296Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:39.91531131Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.918245171Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:39.919635182Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.922004972Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:39.923651109Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.925762491Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:39.926874495Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.929544942Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:39.931060238Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.93309121Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:39.935009811Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.93709735Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:39.938175358Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.940667255Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:39.941746469Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.943786874Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:39.945379795Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.947453436Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:39.94850063Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.951432848Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:39.952591945Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:39.954548825Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:39.956228338Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:39.961970621Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:40.256535987Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.258851114Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:40.262168737Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:40.263222Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:40.264652029Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:40.265649798Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:40.266561462Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:40.268083669Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.270145736Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:40.271153618Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.273492899Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:40.274564638Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.27648463Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:40.277740006Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.279735677Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:40.280746993Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.283381364Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:40.284451593Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.286397904Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:40.287795215Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.289765523Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:40.291040855Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.294052974Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:40.29502684Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.296843266Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:40.302759111Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.304859218Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:40.306585426Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.313379149Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:40.314600702Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.316705299Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:40.318377748Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.320508509Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:40.321765985Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.324598357Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:40.325723829Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.32777624Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:40.329365157Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.331427214Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:40.332510811Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.335519732Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:40.336931291Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.339286772Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:40.351143762Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.353425329Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:40.354690214Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.36871797Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:40.370658634Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.373166619Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:40.375296087Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.377743187Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:40.379200467Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.382281594Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:40.383707135Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.386081504Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:40.388001025Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.39050295Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:40.391877384Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.394914039Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:40.396128254Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.398283252Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:40.409557666Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.412532109Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:40.413839568Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.416405823Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:40.417790846Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.420285852Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:40.422108489Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.424416495Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:40.425929107Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.428968782Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:40.430178366Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.432549044Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:40.434627046Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.437641346Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:40.439099225Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.44207625Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:40.443279602Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.445407408Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:40.447109624Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:40.452730815Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:40.409706395Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.412874755Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:40.41440285Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:40.416082186Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:40.418937408Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:40.42019561Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:40.421375144Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:40.423500031Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.426277808Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:40.427738119Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.430551Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:40.431777172Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.434268735Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:40.435630752Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.442826289Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:40.444230484Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.446626906Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:40.451713893Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.454512617Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:40.455570867Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.475734046Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:40.476954226Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.479068048Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:40.481019258Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.483123843Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:40.484261046Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.488119084Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:40.48915484Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.491217418Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:40.49316703Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.495739353Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:40.497267377Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.500394546Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:40.501941727Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.504570559Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:40.506881121Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.508606856Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:40.509600941Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.511619284Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:40.512782471Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.514315701Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:40.515805935Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.517248265Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:40.518114856Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.520253653Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:40.521391793Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.524075838Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:40.526486197Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.528899328Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:40.530329813Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.533816867Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:40.535191967Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.538132337Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:40.540282864Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.54241034Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:40.543533262Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.546777354Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:40.548229883Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.550650279Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:40.553133728Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.555646216Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:40.557124038Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.560546279Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:40.562106995Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.564541815Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:40.566697059Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.570106264Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:40.57158017Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.574456045Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:40.576661111Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.579108749Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:40.580821039Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.583106218Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:40.584257456Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.58701281Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:40.588358051Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.590456583Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:40.591780111Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:40.594736Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:40.595969536Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:40.601358101Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:41.016204729Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.020949717Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:41.022347458Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:41.023873504Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.027977135Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.03030914Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.032600996Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.034909656Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.038612606Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:41.040636555Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.043483448Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:41.048857953Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.051622491Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:41.053265682Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.056904855Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:41.05834316Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.060816376Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:41.062817078Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.076787748Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:41.07817157Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.081026992Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:41.082678942Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.08602413Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:41.087719756Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.090528949Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:41.092016856Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.094661293Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:41.096755377Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.099403513Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:41.101029867Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.104473672Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:41.106104863Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.108822412Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:41.111336932Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.114089222Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:41.115375416Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.118102027Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:41.119374097Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.122020327Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:41.124364845Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.126816657Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:41.128231103Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.131270512Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:41.132666855Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.14431633Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:41.158276894Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.161111205Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:41.162493942Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.164951023Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:41.166177384Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.167756939Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:41.16872525Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.171086059Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:41.172036956Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.173773433Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:41.175099564Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.176542629Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:41.177335635Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.179183188Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:41.180166974Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.181676862Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:41.182924225Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.184594634Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:41.185640158Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.187752222Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:41.188901254Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.190526359Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:41.192175494Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.193871369Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:41.194727436Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.196909565Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:41.197872171Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.199361611Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:41.200887452Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.202519518Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:41.203394482Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.206096935Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:41.207403841Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.210081784Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:41.211853552Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:41.217138661Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:41.068917706Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.072186484Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:41.073536615Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:41.075084185Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.080341216Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.094200265Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.095635037Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.099175615Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:41.101680271Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.10475343Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:41.107506789Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.109558459Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:41.110503544Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.112853359Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:41.114436958Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.116681073Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:41.118311398Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.121193381Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:41.122508865Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.124351196Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:41.125836058Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.127581501Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:41.128628697Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.130871591Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:41.131914471Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.133580859Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:41.135355892Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.137014905Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:41.138025505Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.140462718Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:41.141554861Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.143167963Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:41.157527072Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.16000374Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:41.161291207Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.16673945Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:41.167910328Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.170590136Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:41.172344211Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.175127634Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:41.176539101Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.179627098Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:41.180971235Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.183242017Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:41.185069157Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.187534817Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:41.18889273Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.191632858Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:41.193139657Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.195405372Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:41.196961889Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.199905687Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:41.201022335Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.204293207Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:41.206673363Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.209362059Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:41.21102998Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.214786307Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:41.216181823Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.21878156Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:41.222699158Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.225967001Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:41.228574908Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.232544183Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:41.235214988Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.23807933Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:41.240387752Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.243250759Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:41.245015958Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.248421455Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:41.250129919Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.252952924Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:41.255274142Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.258184807Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:41.259889905Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.263614437Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:41.265394544Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.268248287Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:41.270833468Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:41.277392157Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:41.261989988Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.265474477Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:41.267165714Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:41.269058251Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.271905646Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.273362293Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:41.274762289Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:41.276436806Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.286174419Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:41.287720519Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.290659743Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:41.293016968Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.295879397Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:41.297611903Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.312871522Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:41.314598766Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.317494403Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:41.320183387Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.332944096Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:41.334686944Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.337963688Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:41.339617099Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.342320221Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:41.344151756Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.34731592Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:41.349079977Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.351893594Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:41.354465485Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.356887904Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:41.358159824Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.376108635Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:41.378496752Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.382000098Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:41.384899972Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.387467335Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:41.38885454Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.392308085Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:41.393661407Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.396097464Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:41.397862806Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.400574935Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:41.402198954Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.405148529Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:41.408106785Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.410860959Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:41.412516485Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.416487794Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:41.418153939Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.420965521Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:41.422840481Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.425302763Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:41.426617889Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.429584506Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:41.431033747Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.433839758Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:41.436181705Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.438640327Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:41.440003203Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.44431024Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:41.445797107Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.448364138Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:41.456022402Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.462988214Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:41.464786675Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.468494665Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:41.471397785Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.474505482Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:41.478215546Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.481042425Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:41.483023595Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.486014383Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:41.488285237Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.49083616Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:41.492716607Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.496263486Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:41.497631742Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.500105801Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:41.503374817Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:41.506285567Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:41.508120396Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:41.515959879Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":7,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:42.457243847Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.461134372Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:42.462514171Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:42.464188657Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:42.467026799Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:42.469281129Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:42.470707563Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:42.477654528Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.480166108Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:42.481568104Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.484411961Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:42.486731474Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.489756311Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:42.491701057Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.496676909Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:42.498571034Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.501587379Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:42.503898993Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.50741704Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:42.509898093Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.513559967Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:42.515037929Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.517544858Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:42.523329755Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.525971465Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:42.527433297Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.530187879Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:42.53227006Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.536367273Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:42.53834393Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.551179808Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:42.552968565Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.555883103Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:42.559751185Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.56298007Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:42.564848411Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.568730731Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:42.570063911Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.572448898Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:42.574739975Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.577224302Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:42.578568253Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.58174973Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:42.583164406Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.585748987Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:42.588605572Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.59111021Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:42.592492323Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.595763559Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:42.597483974Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.600240005Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:42.602649401Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.605445328Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:42.606844655Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.609304956Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:42.611252661Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.613922062Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:42.615342366Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.618587317Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:42.62042367Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.624228475Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:42.626550993Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.629111934Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:42.630649588Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.633516439Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:42.634751908Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.637059121Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:42.638760948Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.641181643Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:42.642514655Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.645393736Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:42.646791225Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.649243001Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:42.651077859Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.653393924Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:42.654471001Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.65764299Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:42.659247983Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.661968764Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:42.66451058Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:42.670621602Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:42.718766531Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.720485742Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:42.721483202Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:42.72287715Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:42.723889507Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:42.724628031Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:42.725840904Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.727992301Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:42.728969141Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.731217711Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:42.742706879Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.745912208Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:42.748447804Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.751029325Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:42.752640034Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.755800982Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:42.757228686Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.759532909Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:42.765634661Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.767856016Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:42.769127234Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.771530522Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:42.772767242Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.774804242Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:42.775946036Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.782215651Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:42.783291308Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.785319809Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:42.797261035Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.798722067Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:42.799812855Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.802067303Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:42.803128706Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.805169059Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:42.806475425Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.808426695Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:42.809358621Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.81181241Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:42.812836578Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.814894219Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:42.816186187Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.818144998Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:42.819156953Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.821301877Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:42.822311897Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.824327872Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:42.826006176Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.827894367Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:42.828931072Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.831878575Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:42.832886545Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.834945045Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:42.836906115Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.838951084Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:42.840101662Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.842745056Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:42.844518573Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.846599078Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:42.847981517Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.84989516Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:42.851037486Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.853784596Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:42.855237613Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.857474662Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:42.859218913Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.861260103Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:42.86227866Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.864947363Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:42.865826734Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.86773472Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:42.869369784Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.871516075Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:42.872717369Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.875138325Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:42.876273231Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.878275351Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:42.879777355Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:42.881759555Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:42.882881779Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:42.888432589Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":2,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:43.121224168Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.124106043Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:43.125939125Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:43.127844676Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.129900292Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:43.131297876Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.132658915Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:43.134540767Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.137026264Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:43.138646206Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.141801998Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:43.143129658Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.145608079Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:43.147551744Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.150077032Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:43.151402722Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.154108798Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:43.155793205Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.158314717Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:43.160187674Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.162621505Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:43.163809213Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.165957602Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:43.167954746Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.170777189Z 48 PC: 19852 | Get DOS version
2018-12-25T11:46:43.172513734Z 42 PC: 19436 | Get date 0x19436: cmp al, 1
0x19438: je 0x19448
0x1943a: cmp al, 3
0x1943c: je 0x19448
0x1943e: cmp al, 5
0x19440: je 0x19448
0x19442: call 0x19769
0x19445: jmp 0x1944b
0x19447: nop
0x19448: call 0x19762
0x1944b: mov si, 0xafdf
0x1944e: mov ah, 0x30
0x19450: int 0x21
0x19452: cmp di, 0xc3c3
0x19456: jne 0x19474
0x19458: mov bx, cs
0x1945a: mov ax, word ptr cs:[0x362]
0x1945e: sub bx, ax
0x19460: mov word ptr cs:[0x362], bx
0x19465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.180420722Z 48 PC: 19452 | Get DOS version
2018-12-25T11:46:43.182031084Z 42 PC: 19036 | Get date 0x19036: cmp al, 1
0x19038: je 0x19048
0x1903a: cmp al, 3
0x1903c: je 0x19048
0x1903e: cmp al, 5
0x19040: je 0x19048
0x19042: call 0x19369
0x19045: jmp 0x1904b
0x19047: nop
0x19048: call 0x19362
0x1904b: mov si, 0xafdf
0x1904e: mov ah, 0x30
0x19050: int 0x21
0x19052: cmp di, 0xc3c3
0x19056: jne 0x19074
0x19058: mov bx, cs
0x1905a: mov ax, word ptr cs:[0x362]
0x1905e: sub bx, ax
0x19060: mov word ptr cs:[0x362], bx
0x19065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.18431721Z 48 PC: 19052 | Get DOS version
2018-12-25T11:46:43.18636493Z 42 PC: 18c36 | Get date 0x18c36: cmp al, 1
0x18c38: je 0x18c48
0x18c3a: cmp al, 3
0x18c3c: je 0x18c48
0x18c3e: cmp al, 5
0x18c40: je 0x18c48
0x18c42: call 0x18f69
0x18c45: jmp 0x18c4b
0x18c47: nop
0x18c48: call 0x18f62
0x18c4b: mov si, 0xafdf
0x18c4e: mov ah, 0x30
0x18c50: int 0x21
0x18c52: cmp di, 0xc3c3
0x18c56: jne 0x18c74
0x18c58: mov bx, cs
0x18c5a: mov ax, word ptr cs:[0x362]
0x18c5e: sub bx, ax
0x18c60: mov word ptr cs:[0x362], bx
0x18c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.189278032Z 48 PC: 18c52 | Get DOS version
2018-12-25T11:46:43.191050005Z 42 PC: 18836 | Get date 0x18836: cmp al, 1
0x18838: je 0x18848
0x1883a: cmp al, 3
0x1883c: je 0x18848
0x1883e: cmp al, 5
0x18840: je 0x18848
0x18842: call 0x18b69
0x18845: jmp 0x1884b
0x18847: nop
0x18848: call 0x18b62
0x1884b: mov si, 0xafdf
0x1884e: mov ah, 0x30
0x18850: int 0x21
0x18852: cmp di, 0xc3c3
0x18856: jne 0x18874
0x18858: mov bx, cs
0x1885a: mov ax, word ptr cs:[0x362]
0x1885e: sub bx, ax
0x18860: mov word ptr cs:[0x362], bx
0x18865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.194399206Z 48 PC: 18852 | Get DOS version
2018-12-25T11:46:43.195872998Z 42 PC: 18436 | Get date 0x18436: cmp al, 1
0x18438: je 0x18448
0x1843a: cmp al, 3
0x1843c: je 0x18448
0x1843e: cmp al, 5
0x18440: je 0x18448
0x18442: call 0x18769
0x18445: jmp 0x1844b
0x18447: nop
0x18448: call 0x18762
0x1844b: mov si, 0xafdf
0x1844e: mov ah, 0x30
0x18450: int 0x21
0x18452: cmp di, 0xc3c3
0x18456: jne 0x18474
0x18458: mov bx, cs
0x1845a: mov ax, word ptr cs:[0x362]
0x1845e: sub bx, ax
0x18460: mov word ptr cs:[0x362], bx
0x18465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.198429582Z 48 PC: 18452 | Get DOS version
2018-12-25T11:46:43.20031033Z 42 PC: 18036 | Get date 0x18036: cmp al, 1
0x18038: je 0x18048
0x1803a: cmp al, 3
0x1803c: je 0x18048
0x1803e: cmp al, 5
0x18040: je 0x18048
0x18042: call 0x18369
0x18045: jmp 0x1804b
0x18047: nop
0x18048: call 0x18362
0x1804b: mov si, 0xafdf
0x1804e: mov ah, 0x30
0x18050: int 0x21
0x18052: cmp di, 0xc3c3
0x18056: jne 0x18074
0x18058: mov bx, cs
0x1805a: mov ax, word ptr cs:[0x362]
0x1805e: sub bx, ax
0x18060: mov word ptr cs:[0x362], bx
0x18065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.202970348Z 48 PC: 18052 | Get DOS version
2018-12-25T11:46:43.204522228Z 42 PC: 17c36 | Get date 0x17c36: cmp al, 1
0x17c38: je 0x17c48
0x17c3a: cmp al, 3
0x17c3c: je 0x17c48
0x17c3e: cmp al, 5
0x17c40: je 0x17c48
0x17c42: call 0x17f69
0x17c45: jmp 0x17c4b
0x17c47: nop
0x17c48: call 0x17f62
0x17c4b: mov si, 0xafdf
0x17c4e: mov ah, 0x30
0x17c50: int 0x21
0x17c52: cmp di, 0xc3c3
0x17c56: jne 0x17c74
0x17c58: mov bx, cs
0x17c5a: mov ax, word ptr cs:[0x362]
0x17c5e: sub bx, ax
0x17c60: mov word ptr cs:[0x362], bx
0x17c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.208219174Z 48 PC: 17c52 | Get DOS version
2018-12-25T11:46:43.209531905Z 42 PC: 17836 | Get date 0x17836: cmp al, 1
0x17838: je 0x17848
0x1783a: cmp al, 3
0x1783c: je 0x17848
0x1783e: cmp al, 5
0x17840: je 0x17848
0x17842: call 0x17b69
0x17845: jmp 0x1784b
0x17847: nop
0x17848: call 0x17b62
0x1784b: mov si, 0xafdf
0x1784e: mov ah, 0x30
0x17850: int 0x21
0x17852: cmp di, 0xc3c3
0x17856: jne 0x17874
0x17858: mov bx, cs
0x1785a: mov ax, word ptr cs:[0x362]
0x1785e: sub bx, ax
0x17860: mov word ptr cs:[0x362], bx
0x17865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.211882965Z 48 PC: 17852 | Get DOS version
2018-12-25T11:46:43.213656776Z 42 PC: 17436 | Get date 0x17436: cmp al, 1
0x17438: je 0x17448
0x1743a: cmp al, 3
0x1743c: je 0x17448
0x1743e: cmp al, 5
0x17440: je 0x17448
0x17442: call 0x17769
0x17445: jmp 0x1744b
0x17447: nop
0x17448: call 0x17762
0x1744b: mov si, 0xafdf
0x1744e: mov ah, 0x30
0x17450: int 0x21
0x17452: cmp di, 0xc3c3
0x17456: jne 0x17474
0x17458: mov bx, cs
0x1745a: mov ax, word ptr cs:[0x362]
0x1745e: sub bx, ax
0x17460: mov word ptr cs:[0x362], bx
0x17465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.216362424Z 48 PC: 17452 | Get DOS version
2018-12-25T11:46:43.21841274Z 42 PC: 17036 | Get date 0x17036: cmp al, 1
0x17038: je 0x17048
0x1703a: cmp al, 3
0x1703c: je 0x17048
0x1703e: cmp al, 5
0x17040: je 0x17048
0x17042: call 0x17369
0x17045: jmp 0x1704b
0x17047: nop
0x17048: call 0x17362
0x1704b: mov si, 0xafdf
0x1704e: mov ah, 0x30
0x17050: int 0x21
0x17052: cmp di, 0xc3c3
0x17056: jne 0x17074
0x17058: mov bx, cs
0x1705a: mov ax, word ptr cs:[0x362]
0x1705e: sub bx, ax
0x17060: mov word ptr cs:[0x362], bx
0x17065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.221649874Z 48 PC: 17052 | Get DOS version
2018-12-25T11:46:43.223596743Z 42 PC: 16c36 | Get date 0x16c36: cmp al, 1
0x16c38: je 0x16c48
0x16c3a: cmp al, 3
0x16c3c: je 0x16c48
0x16c3e: cmp al, 5
0x16c40: je 0x16c48
0x16c42: call 0x16f69
0x16c45: jmp 0x16c4b
0x16c47: nop
0x16c48: call 0x16f62
0x16c4b: mov si, 0xafdf
0x16c4e: mov ah, 0x30
0x16c50: int 0x21
0x16c52: cmp di, 0xc3c3
0x16c56: jne 0x16c74
0x16c58: mov bx, cs
0x16c5a: mov ax, word ptr cs:[0x362]
0x16c5e: sub bx, ax
0x16c60: mov word ptr cs:[0x362], bx
0x16c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.226067469Z 48 PC: 16c52 | Get DOS version
2018-12-25T11:46:43.227383783Z 42 PC: 16836 | Get date 0x16836: cmp al, 1
0x16838: je 0x16848
0x1683a: cmp al, 3
0x1683c: je 0x16848
0x1683e: cmp al, 5
0x16840: je 0x16848
0x16842: call 0x16b69
0x16845: jmp 0x1684b
0x16847: nop
0x16848: call 0x16b62
0x1684b: mov si, 0xafdf
0x1684e: mov ah, 0x30
0x16850: int 0x21
0x16852: cmp di, 0xc3c3
0x16856: jne 0x16874
0x16858: mov bx, cs
0x1685a: mov ax, word ptr cs:[0x362]
0x1685e: sub bx, ax
0x16860: mov word ptr cs:[0x362], bx
0x16865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.231212416Z 48 PC: 16852 | Get DOS version
2018-12-25T11:46:43.23328296Z 42 PC: 16436 | Get date 0x16436: cmp al, 1
0x16438: je 0x16448
0x1643a: cmp al, 3
0x1643c: je 0x16448
0x1643e: cmp al, 5
0x16440: je 0x16448
0x16442: call 0x16769
0x16445: jmp 0x1644b
0x16447: nop
0x16448: call 0x16762
0x1644b: mov si, 0xafdf
0x1644e: mov ah, 0x30
0x16450: int 0x21
0x16452: cmp di, 0xc3c3
0x16456: jne 0x16474
0x16458: mov bx, cs
0x1645a: mov ax, word ptr cs:[0x362]
0x1645e: sub bx, ax
0x16460: mov word ptr cs:[0x362], bx
0x16465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.236354687Z 48 PC: 16452 | Get DOS version
2018-12-25T11:46:43.239265899Z 42 PC: 16036 | Get date 0x16036: cmp al, 1
0x16038: je 0x16048
0x1603a: cmp al, 3
0x1603c: je 0x16048
0x1603e: cmp al, 5
0x16040: je 0x16048
0x16042: call 0x16369
0x16045: jmp 0x1604b
0x16047: nop
0x16048: call 0x16362
0x1604b: mov si, 0xafdf
0x1604e: mov ah, 0x30
0x16050: int 0x21
0x16052: cmp di, 0xc3c3
0x16056: jne 0x16074
0x16058: mov bx, cs
0x1605a: mov ax, word ptr cs:[0x362]
0x1605e: sub bx, ax
0x16060: mov word ptr cs:[0x362], bx
0x16065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.241902169Z 48 PC: 16052 | Get DOS version
2018-12-25T11:46:43.243257315Z 42 PC: 15c36 | Get date 0x15c36: cmp al, 1
0x15c38: je 0x15c48
0x15c3a: cmp al, 3
0x15c3c: je 0x15c48
0x15c3e: cmp al, 5
0x15c40: je 0x15c48
0x15c42: call 0x15f69
0x15c45: jmp 0x15c4b
0x15c47: nop
0x15c48: call 0x15f62
0x15c4b: mov si, 0xafdf
0x15c4e: mov ah, 0x30
0x15c50: int 0x21
0x15c52: cmp di, 0xc3c3
0x15c56: jne 0x15c74
0x15c58: mov bx, cs
0x15c5a: mov ax, word ptr cs:[0x362]
0x15c5e: sub bx, ax
0x15c60: mov word ptr cs:[0x362], bx
0x15c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.246266314Z 48 PC: 15c52 | Get DOS version
2018-12-25T11:46:43.24747598Z 42 PC: 15836 | Get date 0x15836: cmp al, 1
0x15838: je 0x15848
0x1583a: cmp al, 3
0x1583c: je 0x15848
0x1583e: cmp al, 5
0x15840: je 0x15848
0x15842: call 0x15b69
0x15845: jmp 0x1584b
0x15847: nop
0x15848: call 0x15b62
0x1584b: mov si, 0xafdf
0x1584e: mov ah, 0x30
0x15850: int 0x21
0x15852: cmp di, 0xc3c3
0x15856: jne 0x15874
0x15858: mov bx, cs
0x1585a: mov ax, word ptr cs:[0x362]
0x1585e: sub bx, ax
0x15860: mov word ptr cs:[0x362], bx
0x15865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.249803493Z 48 PC: 15852 | Get DOS version
2018-12-25T11:46:43.252253642Z 42 PC: 15436 | Get date 0x15436: cmp al, 1
0x15438: je 0x15448
0x1543a: cmp al, 3
0x1543c: je 0x15448
0x1543e: cmp al, 5
0x15440: je 0x15448
0x15442: call 0x15769
0x15445: jmp 0x1544b
0x15447: nop
0x15448: call 0x15762
0x1544b: mov si, 0xafdf
0x1544e: mov ah, 0x30
0x15450: int 0x21
0x15452: cmp di, 0xc3c3
0x15456: jne 0x15474
0x15458: mov bx, cs
0x1545a: mov ax, word ptr cs:[0x362]
0x1545e: sub bx, ax
0x15460: mov word ptr cs:[0x362], bx
0x15465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.25450997Z 48 PC: 15452 | Get DOS version
2018-12-25T11:46:43.255582135Z 42 PC: 15036 | Get date 0x15036: cmp al, 1
0x15038: je 0x15048
0x1503a: cmp al, 3
0x1503c: je 0x15048
0x1503e: cmp al, 5
0x15040: je 0x15048
0x15042: call 0x15369
0x15045: jmp 0x1504b
0x15047: nop
0x15048: call 0x15362
0x1504b: mov si, 0xafdf
0x1504e: mov ah, 0x30
0x15050: int 0x21
0x15052: cmp di, 0xc3c3
0x15056: jne 0x15074
0x15058: mov bx, cs
0x1505a: mov ax, word ptr cs:[0x362]
0x1505e: sub bx, ax
0x15060: mov word ptr cs:[0x362], bx
0x15065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.258702957Z 48 PC: 15052 | Get DOS version
2018-12-25T11:46:43.260284803Z 42 PC: 14c36 | Get date 0x14c36: cmp al, 1
0x14c38: je 0x14c48
0x14c3a: cmp al, 3
0x14c3c: je 0x14c48
0x14c3e: cmp al, 5
0x14c40: je 0x14c48
0x14c42: call 0x14f69
0x14c45: jmp 0x14c4b
0x14c47: nop
0x14c48: call 0x14f62
0x14c4b: mov si, 0xafdf
0x14c4e: mov ah, 0x30
0x14c50: int 0x21
0x14c52: cmp di, 0xc3c3
0x14c56: jne 0x14c74
0x14c58: mov bx, cs
0x14c5a: mov ax, word ptr cs:[0x362]
0x14c5e: sub bx, ax
0x14c60: mov word ptr cs:[0x362], bx
0x14c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.263005842Z 48 PC: 14c52 | Get DOS version
2018-12-25T11:46:43.265594609Z 42 PC: 14836 | Get date 0x14836: cmp al, 1
0x14838: je 0x14848
0x1483a: cmp al, 3
0x1483c: je 0x14848
0x1483e: cmp al, 5
0x14840: je 0x14848
0x14842: call 0x14b69
0x14845: jmp 0x1484b
0x14847: nop
0x14848: call 0x14b62
0x1484b: mov si, 0xafdf
0x1484e: mov ah, 0x30
0x14850: int 0x21
0x14852: cmp di, 0xc3c3
0x14856: jne 0x14874
0x14858: mov bx, cs
0x1485a: mov ax, word ptr cs:[0x362]
0x1485e: sub bx, ax
0x14860: mov word ptr cs:[0x362], bx
0x14865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.268153073Z 48 PC: 14852 | Get DOS version
2018-12-25T11:46:43.269524564Z 42 PC: 14436 | Get date 0x14436: cmp al, 1
0x14438: je 0x14448
0x1443a: cmp al, 3
0x1443c: je 0x14448
0x1443e: cmp al, 5
0x14440: je 0x14448
0x14442: call 0x14769
0x14445: jmp 0x1444b
0x14447: nop
0x14448: call 0x14762
0x1444b: mov si, 0xafdf
0x1444e: mov ah, 0x30
0x14450: int 0x21
0x14452: cmp di, 0xc3c3
0x14456: jne 0x14474
0x14458: mov bx, cs
0x1445a: mov ax, word ptr cs:[0x362]
0x1445e: sub bx, ax
0x14460: mov word ptr cs:[0x362], bx
0x14465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.272997807Z 48 PC: 14452 | Get DOS version
2018-12-25T11:46:43.274363221Z 42 PC: 14036 | Get date 0x14036: cmp al, 1
0x14038: je 0x14048
0x1403a: cmp al, 3
0x1403c: je 0x14048
0x1403e: cmp al, 5
0x14040: je 0x14048
0x14042: call 0x14369
0x14045: jmp 0x1404b
0x14047: nop
0x14048: call 0x14362
0x1404b: mov si, 0xafdf
0x1404e: mov ah, 0x30
0x14050: int 0x21
0x14052: cmp di, 0xc3c3
0x14056: jne 0x14074
0x14058: mov bx, cs
0x1405a: mov ax, word ptr cs:[0x362]
0x1405e: sub bx, ax
0x14060: mov word ptr cs:[0x362], bx
0x14065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.277215545Z 48 PC: 14052 | Get DOS version
2018-12-25T11:46:43.279152736Z 42 PC: 13c36 | Get date 0x13c36: cmp al, 1
0x13c38: je 0x13c48
0x13c3a: cmp al, 3
0x13c3c: je 0x13c48
0x13c3e: cmp al, 5
0x13c40: je 0x13c48
0x13c42: call 0x13f69
0x13c45: jmp 0x13c4b
0x13c47: nop
0x13c48: call 0x13f62
0x13c4b: mov si, 0xafdf
0x13c4e: mov ah, 0x30
0x13c50: int 0x21
0x13c52: cmp di, 0xc3c3
0x13c56: jne 0x13c74
0x13c58: mov bx, cs
0x13c5a: mov ax, word ptr cs:[0x362]
0x13c5e: sub bx, ax
0x13c60: mov word ptr cs:[0x362], bx
0x13c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.281659222Z 48 PC: 13c52 | Get DOS version
2018-12-25T11:46:43.283107093Z 42 PC: 13836 | Get date 0x13836: cmp al, 1
0x13838: je 0x13848
0x1383a: cmp al, 3
0x1383c: je 0x13848
0x1383e: cmp al, 5
0x13840: je 0x13848
0x13842: call 0x13b69
0x13845: jmp 0x1384b
0x13847: nop
0x13848: call 0x13b62
0x1384b: mov si, 0xafdf
0x1384e: mov ah, 0x30
0x13850: int 0x21
0x13852: cmp di, 0xc3c3
0x13856: jne 0x13874
0x13858: mov bx, cs
0x1385a: mov ax, word ptr cs:[0x362]
0x1385e: sub bx, ax
0x13860: mov word ptr cs:[0x362], bx
0x13865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.285552258Z 48 PC: 13852 | Get DOS version
2018-12-25T11:46:43.28648641Z 42 PC: 13436 | Get date 0x13436: cmp al, 1
0x13438: je 0x13448
0x1343a: cmp al, 3
0x1343c: je 0x13448
0x1343e: cmp al, 5
0x13440: je 0x13448
0x13442: call 0x13769
0x13445: jmp 0x1344b
0x13447: nop
0x13448: call 0x13762
0x1344b: mov si, 0xafdf
0x1344e: mov ah, 0x30
0x13450: int 0x21
0x13452: cmp di, 0xc3c3
0x13456: jne 0x13474
0x13458: mov bx, cs
0x1345a: mov ax, word ptr cs:[0x362]
0x1345e: sub bx, ax
0x13460: mov word ptr cs:[0x362], bx
0x13465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.288060264Z 48 PC: 13452 | Get DOS version
2018-12-25T11:46:43.289563203Z 42 PC: 13036 | Get date 0x13036: cmp al, 1
0x13038: je 0x13048
0x1303a: cmp al, 3
0x1303c: je 0x13048
0x1303e: cmp al, 5
0x13040: je 0x13048
0x13042: call 0x13369
0x13045: jmp 0x1304b
0x13047: nop
0x13048: call 0x13362
0x1304b: mov si, 0xafdf
0x1304e: mov ah, 0x30
0x13050: int 0x21
0x13052: cmp di, 0xc3c3
0x13056: jne 0x13074
0x13058: mov bx, cs
0x1305a: mov ax, word ptr cs:[0x362]
0x1305e: sub bx, ax
0x13060: mov word ptr cs:[0x362], bx
0x13065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.291666155Z 48 PC: 13052 | Get DOS version
2018-12-25T11:46:43.292967134Z 42 PC: 12c36 | Get date 0x12c36: cmp al, 1
0x12c38: je 0x12c48
0x12c3a: cmp al, 3
0x12c3c: je 0x12c48
0x12c3e: cmp al, 5
0x12c40: je 0x12c48
0x12c42: call 0x12f69
0x12c45: jmp 0x12c4b
0x12c47: nop
0x12c48: call 0x12f62
0x12c4b: mov si, 0xafdf
0x12c4e: mov ah, 0x30
0x12c50: int 0x21
0x12c52: cmp di, 0xc3c3
0x12c56: jne 0x12c74
0x12c58: mov bx, cs
0x12c5a: mov ax, word ptr cs:[0x362]
0x12c5e: sub bx, ax
0x12c60: mov word ptr cs:[0x362], bx
0x12c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.295558017Z 48 PC: 12c52 | Get DOS version
2018-12-25T11:46:43.296543286Z 9 PC: 12a82 | Display string (String= 'Goat file (EXE). Size=000003E8h/0000001000d bytes. ')
2018-12-25T11:46:43.300034882Z 76 PC: 12a86 | Terminate with return code (Return code = '36')

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":2824,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:46:43.309654222Z 42 PC: 1bc36 | Get date 0x1bc36: cmp al, 1
0x1bc38: je 0x1bc48
0x1bc3a: cmp al, 3
0x1bc3c: je 0x1bc48
0x1bc3e: cmp al, 5
0x1bc40: je 0x1bc48
0x1bc42: call 0x1bf69
0x1bc45: jmp 0x1bc4b
0x1bc47: nop
0x1bc48: call 0x1bf62
0x1bc4b: mov si, 0xafdf
0x1bc4e: mov ah, 0x30
0x1bc50: int 0x21
0x1bc52: cmp di, 0xc3c3
0x1bc56: jne 0x1bc74
0x1bc58: mov bx, cs
0x1bc5a: mov ax, word ptr cs:[0x362]
0x1bc5e: sub bx, ax
0x1bc60: mov word ptr cs:[0x362], bx
0x1bc65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.316989688Z 48 PC: 1bc52 | Get DOS version
2018-12-25T11:46:43.318784241Z 38 PC: 1bc95 | Create PSP
2018-12-25T11:46:43.320682304Z 53 PC: 1bcce | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.322475602Z 53 PC: 1bcdf | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:43.323837632Z 37 PC: 1bcf2 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:46:43.325504479Z 37 PC: 1bd02 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:46:43.327886215Z 42 PC: 1b836 | Get date 0x1b836: cmp al, 1
0x1b838: je 0x1b848
0x1b83a: cmp al, 3
0x1b83c: je 0x1b848
0x1b83e: cmp al, 5
0x1b840: je 0x1b848
0x1b842: call 0x1bb69
0x1b845: jmp 0x1b84b
0x1b847: nop
0x1b848: call 0x1bb62
0x1b84b: mov si, 0xafdf
0x1b84e: mov ah, 0x30
0x1b850: int 0x21
0x1b852: cmp di, 0xc3c3
0x1b856: jne 0x1b874
0x1b858: mov bx, cs
0x1b85a: mov ax, word ptr cs:[0x362]
0x1b85e: sub bx, ax
0x1b860: mov word ptr cs:[0x362], bx
0x1b865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.330460945Z 48 PC: 1b852 | Get DOS version
2018-12-25T11:46:43.331783583Z 42 PC: 1b436 | Get date 0x1b436: cmp al, 1
0x1b438: je 0x1b448
0x1b43a: cmp al, 3
0x1b43c: je 0x1b448
0x1b43e: cmp al, 5
0x1b440: je 0x1b448
0x1b442: call 0x1b769
0x1b445: jmp 0x1b44b
0x1b447: nop
0x1b448: call 0x1b762
0x1b44b: mov si, 0xafdf
0x1b44e: mov ah, 0x30
0x1b450: int 0x21
0x1b452: cmp di, 0xc3c3
0x1b456: jne 0x1b474
0x1b458: mov bx, cs
0x1b45a: mov ax, word ptr cs:[0x362]
0x1b45e: sub bx, ax
0x1b460: mov word ptr cs:[0x362], bx
0x1b465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.335040687Z 48 PC: 1b452 | Get DOS version
2018-12-25T11:46:43.336844374Z 42 PC: 1b036 | Get date 0x1b036: cmp al, 1
0x1b038: je 0x1b048
0x1b03a: cmp al, 3
0x1b03c: je 0x1b048
0x1b03e: cmp al, 5
0x1b040: je 0x1b048
0x1b042: call 0x1b369
0x1b045: jmp 0x1b04b
0x1b047: nop
0x1b048: call 0x1b362
0x1b04b: mov si, 0xafdf
0x1b04e: mov ah, 0x30
0x1b050: int 0x21
0x1b052: cmp di, 0xc3c3
0x1b056: jne 0x1b074
0x1b058: mov bx, cs
0x1b05a: mov ax, word ptr cs:[0x362]
0x1b05e: sub bx, ax
0x1b060: mov word ptr cs:[0x362], bx
0x1b065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.33985561Z 48 PC: 1b052 | Get DOS version
2018-12-25T11:46:43.34786361Z 42 PC: 1ac36 | Get date 0x1ac36: cmp al, 1
0x1ac38: je 0x1ac48
0x1ac3a: cmp al, 3
0x1ac3c: je 0x1ac48
0x1ac3e: cmp al, 5
0x1ac40: je 0x1ac48
0x1ac42: call 0x1af69
0x1ac45: jmp 0x1ac4b
0x1ac47: nop
0x1ac48: call 0x1af62
0x1ac4b: mov si, 0xafdf
0x1ac4e: mov ah, 0x30
0x1ac50: int 0x21
0x1ac52: cmp di, 0xc3c3
0x1ac56: jne 0x1ac74
0x1ac58: mov bx, cs
0x1ac5a: mov ax, word ptr cs:[0x362]
0x1ac5e: sub bx, ax
0x1ac60: mov word ptr cs:[0x362], bx
0x1ac65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.350259848Z 48 PC: 1ac52 | Get DOS version
2018-12-25T11:46:43.35178057Z 42 PC: 1a836 | Get date 0x1a836: cmp al, 1
0x1a838: je 0x1a848
0x1a83a: cmp al, 3
0x1a83c: je 0x1a848
0x1a83e: cmp al, 5
0x1a840: je 0x1a848
0x1a842: call 0x1ab69
0x1a845: jmp 0x1a84b
0x1a847: nop
0x1a848: call 0x1ab62
0x1a84b: mov si, 0xafdf
0x1a84e: mov ah, 0x30
0x1a850: int 0x21
0x1a852: cmp di, 0xc3c3
0x1a856: jne 0x1a874
0x1a858: mov bx, cs
0x1a85a: mov ax, word ptr cs:[0x362]
0x1a85e: sub bx, ax
0x1a860: mov word ptr cs:[0x362], bx
0x1a865: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.355077173Z 48 PC: 1a852 | Get DOS version
2018-12-25T11:46:43.356683276Z 42 PC: 1a436 | Get date 0x1a436: cmp al, 1
0x1a438: je 0x1a448
0x1a43a: cmp al, 3
0x1a43c: je 0x1a448
0x1a43e: cmp al, 5
0x1a440: je 0x1a448
0x1a442: call 0x1a769
0x1a445: jmp 0x1a44b
0x1a447: nop
0x1a448: call 0x1a762
0x1a44b: mov si, 0xafdf
0x1a44e: mov ah, 0x30
0x1a450: int 0x21
0x1a452: cmp di, 0xc3c3
0x1a456: jne 0x1a474
0x1a458: mov bx, cs
0x1a45a: mov ax, word ptr cs:[0x362]
0x1a45e: sub bx, ax
0x1a460: mov word ptr cs:[0x362], bx
0x1a465: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.358932927Z 48 PC: 1a452 | Get DOS version
2018-12-25T11:46:43.361089549Z 42 PC: 1a036 | Get date 0x1a036: cmp al, 1
0x1a038: je 0x1a048
0x1a03a: cmp al, 3
0x1a03c: je 0x1a048
0x1a03e: cmp al, 5
0x1a040: je 0x1a048
0x1a042: call 0x1a369
0x1a045: jmp 0x1a04b
0x1a047: nop
0x1a048: call 0x1a362
0x1a04b: mov si, 0xafdf
0x1a04e: mov ah, 0x30
0x1a050: int 0x21
0x1a052: cmp di, 0xc3c3
0x1a056: jne 0x1a074
0x1a058: mov bx, cs
0x1a05a: mov ax, word ptr cs:[0x362]
0x1a05e: sub bx, ax
0x1a060: mov word ptr cs:[0x362], bx
0x1a065: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.363529996Z 48 PC: 1a052 | Get DOS version
2018-12-25T11:46:43.364919023Z 42 PC: 19c36 | Get date 0x19c36: cmp al, 1
0x19c38: je 0x19c48
0x19c3a: cmp al, 3
0x19c3c: je 0x19c48
0x19c3e: cmp al, 5
0x19c40: je 0x19c48
0x19c42: call 0x19f69
0x19c45: jmp 0x19c4b
0x19c47: nop
0x19c48: call 0x19f62
0x19c4b: mov si, 0xafdf
0x19c4e: mov ah, 0x30
0x19c50: int 0x21
0x19c52: cmp di, 0xc3c3
0x19c56: jne 0x19c74
0x19c58: mov bx, cs
0x19c5a: mov ax, word ptr cs:[0x362]
0x19c5e: sub bx, ax
0x19c60: mov word ptr cs:[0x362], bx
0x19c65: mov ax, word ptr cs:[0x357]
2018-12-25T11:46:43.368851971Z 48 PC: 19c52 | Get DOS version
2018-12-25T11:46:43.370408117Z 42 PC: 19836 | Get date 0x19836: cmp al, 1
0x19838: je 0x19848
0x1983a: cmp al, 3
0x1983c: je 0x19848
0x1983e: cmp al, 5
0x19840: je 0x19848
0x19842: call 0x19b69
0x19845: jmp 0x1984b
0x19847: nop
0x19848: call 0x19b62
0x1984b: mov si, 0xafdf
0x1984e: mov ah, 0x30
0x19850: int 0x21
0x19852: cmp di, 0xc3c3
0x19856: jne 0x19874
0x19858: mov bx, cs
0x1985a: mov ax, word ptr cs:[0x362]
0x1985e: sub bx, ax
0x19860: mov word ptr cs:[0x362], bx
0x19865: mov ax, word ptr