Sample viewer

vx.netlux.org/Virus.DOS.SillyC.240.e

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:50:42.641657764Z 26 PC: 12a84 | Set disk transfer address
2018-12-17T21:50:42.643361832Z 78 PC: 12a9f | Find first file
2018-12-17T21:50:42.653006255Z 67 PC: 12abb | Get or set file attributes
2018-12-17T21:50:42.669463691Z 61 PC: 12ac0 | Open file (Filename = ' K /K command Executes the specified command and continues running. LThe /P and /MSG switches may be used only when COMMAND is started by using +the SHELL command in the CONFIG.SYS file. F####,$z$$%U%%%,&y&')
2018-12-17T21:50:42.676512838Z 63 PC: 12acc | Read file or device (Read 407 bytes on handle 5)
2018-12-17T21:50:42.685816344Z 66 PC: 12ae9 | Move file pointer
2018-12-17T21:50:42.687612418Z 64 PC: 12af4 | Write file or device (Write 647 bytes on handle 5)
2018-12-17T21:50:42.696418157Z 87 PC: 12afb | Get or set file date and time
2018-12-17T21:50:42.698508631Z 62 PC: 12aff | Close file
2018-12-17T21:50:42.707674568Z 67 PC: 12b06 | Get or set file attributes
2018-12-17T21:50:42.717997578Z 79 PC: 12a9f | Find next file
2018-12-17T21:50:42.721167252Z 67 PC: 12abb | Get or set file attributes
2018-12-17T21:50:42.73170019Z 61 PC: 12ac0 | Open file (Filename = '')
2018-12-17T21:50:42.738599198Z 63 PC: 12acc | Read file or device (Read 27 bytes on handle 5)
2018-12-17T21:50:42.746388381Z 66 PC: 12ae9 | Move file pointer
2018-12-17T21:50:42.74777966Z 64 PC: 12af4 | Write file or device (Write 267 bytes on handle 5)
2018-12-17T21:50:42.75058764Z 87 PC: 12afb | Get or set file date and time
2018-12-17T21:50:42.753227365Z 62 PC: 12aff | Close file
2018-12-17T21:50:42.760560691Z 67 PC: 12b06 | Get or set file attributes
2018-12-17T21:50:42.77071781Z 79 PC: 12a9f | Find next file
2018-12-17T21:50:42.774052977Z 67 PC: 12abb | Get or set file attributes
2018-12-17T21:50:42.791990508Z 61 PC: 12ac0 | Open file (Filename = '')
2018-12-17T21:50:42.812917899Z 63 PC: 12acc | Read file or device (Read 92 bytes on handle 5)
2018-12-17T21:50:42.82016682Z 66 PC: 12ae9 | Move file pointer
2018-12-17T21:50:42.822208511Z 64 PC: 12af4 | Write file or device (Write 332 bytes on handle 5)
2018-12-17T21:50:42.82547446Z 87 PC: 12afb | Get or set file date and time
2018-12-17T21:50:42.827703553Z 62 PC: 12aff | Close file
2018-12-17T21:50:42.83776296Z 67 PC: 12b06 | Get or set file attributes
2018-12-17T21:50:42.847456506Z 79 PC: 12a9f | Find next file
2018-12-17T21:50:42.853227253Z 67 PC: 12abb | Get or set file attributes
2018-12-17T21:50:42.88381752Z 61 PC: 12ac0 | Open file (Filename = '')
2018-12-17T21:50:42.900177724Z 63 PC: 12acc | Read file or device (Read 29 bytes on handle 5)
2018-12-17T21:50:42.928365973Z 66 PC: 12ae9 | Move file pointer
2018-12-17T21:50:42.929940634Z 64 PC: 12af4 | Write file or device (Write 269 bytes on handle 5)
2018-12-17T21:50:42.936987103Z 87 PC: 12afb | Get or set file date and time
2018-12-17T21:50:42.939526247Z 62 PC: 12aff | Close file
2018-12-17T21:50:42.960241015Z 67 PC: 12b06 | Get or set file attributes
2018-12-17T21:50:42.97020109Z 79 PC: 12a9f | Find next file
2018-12-17T21:50:42.973261657Z 67 PC: 12abb | Get or set file attributes
2018-12-17T21:50:42.998278529Z 61 PC: 12ac0 | Open file (Filename = '')
2018-12-17T21:50:43.017800098Z 63 PC: 12acc | Read file or device (Read 29 bytes on handle 5)
2018-12-17T21:50:43.024132219Z 66 PC: 12ae9 | Move file pointer
2018-12-17T21:50:43.02695758Z 64 PC: 12af4 | Write file or device (Write 269 bytes on handle 5)
2018-12-17T21:50:43.029865741Z 87 PC: 12afb | Get or set file date and time
2018-12-17T21:50:43.031503749Z 62 PC: 12aff | Close file
2018-12-17T21:50:43.047571014Z 67 PC: 12b06 | Get or set file attributes
2018-12-17T21:50:43.06839341Z 79 PC: 12a9f | Find next file
2018-12-17T21:50:43.073812026Z 67 PC: 12abb | Get or set file attributes
2018-12-17T21:50:43.084233066Z 61 PC: 12ac0 | Open file (Filename = '')
2018-12-17T21:50:43.090779241Z 63 PC: 12acc | Read file or device (Read 501 bytes on handle 5)
2018-12-17T21:50:43.119713037Z 66 PC: 12ae9 | Move file pointer
2018-12-17T21:50:43.122357896Z 64 PC: 12af4 | Write file or device (Write 741 bytes on handle 5)
2018-12-17T21:50:43.130764031Z 87 PC: 12afb | Get or set file date and time
2018-12-17T21:50:43.132504041Z 62 PC: 12aff | Close file
2018-12-17T21:50:43.140860558Z 67 PC: 12b06 | Get or set file attributes
2018-12-17T21:50:43.158762329Z 79 PC: 12a9f | Find next file
2018-12-17T21:50:43.162788082Z 67 PC: 12abb | Get or set file attributes
2018-12-17T21:50:43.183845648Z 61 PC: 12ac0 | Open file (Filename = 'f1Fff')
2018-12-17T21:50:43.195064021Z 63 PC: 12acc | Read file or device (Read 29 bytes on handle 5)
2018-12-17T21:50:43.201539706Z 66 PC: 12ae9 | Move file pointer
2018-12-17T21:50:43.203202725Z 64 PC: 12af4 | Write file or device (Write 269 bytes on handle 5)
2018-12-17T21:50:43.207151444Z 87 PC: 12afb | Get or set file date and time
2018-12-17T21:50:43.208569474Z 62 PC: 12aff | Close file
2018-12-17T21:50:43.215721071Z 67 PC: 12b06 | Get or set file attributes
2018-12-17T21:50:43.226035535Z 79 PC: 12a9f | Find next file
2018-12-17T21:50:43.228605087Z 67 PC: 12abb | Get or set file attributes
2018-12-17T21:50:43.23856121Z 61 PC: 12ac0 | Open file (Filename = 'f1Fff')
2018-12-17T21:50:43.24622892Z 63 PC: 12acc | Read file or device (Read 241 bytes on handle 5)
2018-12-17T21:50:43.249091051Z 62 PC: 12aff | Close file
2018-12-17T21:50:43.25112877Z 67 PC: 12b06 | Get or set file attributes
2018-12-17T21:50:43.261746963Z 79 PC: 12a9f | Find next file
2018-12-17T21:50:43.264534438Z 26 PC: 12b11 | Set disk transfer address
2018-12-17T21:50:43.26565006Z 42 PC: 12b21 | Get date 0x12b21: cmp dl, 0x17
0x12b24: jne 0x12b2d
0x12b26: mov ah, 9
0x12b28: mov dx, 0x10a
0x12b2b: int 0x21
0x12b2d: call 0x12b31
0x12b30: ret
0x12b31: pop si
0x12b32: mov di, 0x100
0x12b35: push di
0x12b36: mov cx, word ptr [0x1ee]
0x12b3a: rep movsb byte ptr es:[di], byte ptr [si]
0x12b3c: ret
0x12b3d: pop es
0x12b3e: push cs
0x12b3f: add byte ptr [bx + si], al
0x12b41: add byte ptr [bx + si], al
0x12b43: add byte ptr [bx + si], al
0x12b45: add byte ptr [bx + si], ah
0x12b47: inc cx

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":38,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:39:46.883778495Z 26 PC: 12a84 | Set disk transfer address
2018-12-25T11:39:46.885703086Z 78 PC: 12a9f | Find first file
2018-12-25T11:39:46.892290371Z 67 PC: 12abb | Get or set file attributes
2018-12-25T11:39:46.957382309Z 61 PC: 12ac0 | Open file (Filename = ' K /K command Executes the specified command and continues running. LThe /P and /MSG switches may be used only when COMMAND is started by using +the SHELL command in the CONFIG.SYS file. F####,$z$$%U%%%,&y&')
2018-12-25T11:39:46.964941702Z 63 PC: 12acc | Read file or device (Read 407 bytes on handle 5)
2018-12-25T11:39:46.972440463Z 66 PC: 12ae9 | Move file pointer
2018-12-25T11:39:46.97396948Z 64 PC: 12af4 | Write file or device (Write 647 bytes on handle 5)
2018-12-25T11:39:47.044163738Z 87 PC: 12afb | Get or set file date and time
2018-12-25T11:39:47.046261677Z 62 PC: 12aff | Close file
2018-12-25T11:39:47.1398868Z 67 PC: 12b06 | Get or set file attributes
2018-12-25T11:39:47.22992522Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:47.234629901Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:47.359589868Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:47.368957927Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:47.37784814Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:47.379363371Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:47.382445759Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:47.385516706Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:47.446916187Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:47.568181849Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:47.572606371Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:47.69787819Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:47.705443207Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:47.712325731Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:47.713847458Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:47.716577422Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:47.717855876Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:47.828844062Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.011784351Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.014737589Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.158245132Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.167065541Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.174778199Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:48.178798058Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:48.182004804Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:48.184238717Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.331807695Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.50404783Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.507258407Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.530577956Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.540219288Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.547480529Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:48.549338132Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:48.553166743Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:48.554708499Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.611483246Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.646772661Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.656789449Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.676634347Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.685158964Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.692434873Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:48.694342367Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:48.727935653Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:48.730580252Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.752219719Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.777771801Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.782282619Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.804634996Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.815771669Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.824309091Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:48.826998366Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:48.830985461Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:48.843095512Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.858831174Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.893999463Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.898515529Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.948166448Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.955814729Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.963464405Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.967116894Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:49.109394504Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:49.113749007Z 26 PC: 12b11 | Set disk transfer address
2018-12-25T11:39:49.118101788Z 42 PC: 12b21 | Get date 0x12b21: cmp dl, 0x17
0x12b24: jne 0x12b2d
0x12b26: mov ah, 9
0x12b28: mov dx, 0x10a
0x12b2b: int 0x21
0x12b2d: call 0x12b31
0x12b30: ret
0x12b31: pop si
0x12b32: mov di, 0x100
0x12b35: push di
0x12b36: mov cx, word ptr [0x1ee]
0x12b3a: rep movsb byte ptr es:[di], byte ptr [si]
0x12b3c: ret
0x12b3d: pop es
0x12b3e: push cs
0x12b3f: add byte ptr [bx + si], al
0x12b41: add byte ptr [bx + si], al
0x12b43: add byte ptr [bx + si], al
0x12b45: add byte ptr [bx + si], ah
0x12b47: jcxz 0x12ba5

{"DateBased":true,"Day":23,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":38,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:39:47.079706954Z 26 PC: 12a84 | Set disk transfer address
2018-12-25T11:39:47.081832549Z 78 PC: 12a9f | Find first file
2018-12-25T11:39:47.089194156Z 67 PC: 12abb | Get or set file attributes
2018-12-25T11:39:47.13986588Z 61 PC: 12ac0 | Open file (Filename = ' K /K command Executes the specified command and continues running. LThe /P and /MSG switches may be used only when COMMAND is started by using +the SHELL command in the CONFIG.SYS file. F####,$z$$%U%%%,&y&')
2018-12-25T11:39:47.149104222Z 63 PC: 12acc | Read file or device (Read 407 bytes on handle 5)
2018-12-25T11:39:47.158224451Z 66 PC: 12ae9 | Move file pointer
2018-12-25T11:39:47.160949432Z 64 PC: 12af4 | Write file or device (Write 647 bytes on handle 5)
2018-12-25T11:39:47.230428507Z 87 PC: 12afb | Get or set file date and time
2018-12-25T11:39:47.234857166Z 62 PC: 12aff | Close file
2018-12-25T11:39:47.359931478Z 67 PC: 12b06 | Get or set file attributes
2018-12-25T11:39:47.444479905Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:47.448424981Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:47.568364281Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:47.57425777Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:47.581753256Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:47.583155601Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:47.585980788Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:47.592246331Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:47.69849134Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:47.828764717Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:47.832986548Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.0115417Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.020024755Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.034122266Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:48.035566387Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:48.038449921Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:48.040006278Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.158547988Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.330204023Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.333835079Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.504239558Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.511837235Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.519577637Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:48.522008175Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:48.524941899Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:48.526654599Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.58682516Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.644169833Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.647951779Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.67110379Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.679046453Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.686814265Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:48.68848081Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:48.691765708Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:48.69354269Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.726818903Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.7463274Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.749167076Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.777580364Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.78289438Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.787109557Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:48.788848755Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:48.810229523Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:48.81176948Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.834797802Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.852845315Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.855896019Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:48.880720054Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:48.887973117Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:48.89510698Z 66 PC: 12ae9 | Move file pointer (See above)
2018-12-25T11:39:48.896464199Z 64 PC: 12af4 | Write file or device (See above)
2018-12-25T11:39:48.899313513Z 87 PC: 12afb | Get or set file date and time (See above)
2018-12-25T11:39:48.901117133Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:48.928165615Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:48.969650872Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:48.971874293Z 67 PC: 12abb | Get or set file attributes (See above)
2018-12-25T11:39:49.122364187Z 61 PC: 12ac0 | Open file (See above)
2018-12-25T11:39:49.128589865Z 63 PC: 12acc | Read file or device (See above)
2018-12-25T11:39:49.133510529Z 62 PC: 12aff | Close file (See above)
2018-12-25T11:39:49.135521054Z 67 PC: 12b06 | Get or set file attributes (See above)
2018-12-25T11:39:49.152772016Z 79 PC: 12a9f | Find next file (See above)
2018-12-25T11:39:49.156652725Z 26 PC: 12b11 | Set disk transfer address
2018-12-25T11:39:49.157657261Z 42 PC: 12b21 | Get date 0x12b21: cmp dl, 0x17
0x12b24: jne 0x12b2d
0x12b26: mov ah, 9
0x12b28: mov dx, 0x10a
0x12b2b: int 0x21
0x12b2d: call 0x12b31
0x12b30: ret
0x12b31: pop si
0x12b32: mov di, 0x100
0x12b35: push di
0x12b36: mov cx, word ptr [0x1ee]
0x12b3a: rep movsb byte ptr es:[di], byte ptr [si]
0x12b3c: ret
0x12b3d: pop es
0x12b3e: push cs
0x12b3f: add byte ptr [bx + si], al
0x12b41: add byte ptr [bx + si], al
0x12b43: add byte ptr [bx + si], al
0x12b45: add byte ptr [bx + si], ah
0x12b47: jcxz 0x12ba5
2018-12-25T11:39:49.159398991Z 9 PC: 12b2d | Display string (String= ' Nichts ist wie es scheint... ')