Sample viewer

vx.netlux.org/Virus.DOS.DAN.AntiEnter.1081

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:20:49.040439113Z 204 PC: 12ab6 | UNKNOWN!
2018-12-17T22:20:49.041360514Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:20:49.043342552Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:20:49.04466688Z 74 PC: 12af8 | Reallocate memory
2018-12-17T22:20:49.046118697Z 72 PC: 12afe | Allocate memory
2018-12-17T22:20:49.048328678Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:20:49.049821847Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-17T22:20:49.051408961Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax

{"DateBased":true,"Day":4,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:43.616830327Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:43.617860754Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:43.619354368Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:43.620687095Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:43.62216977Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:43.62438344Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:43.626347889Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:43.627745315Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
2018-12-25T11:49:43.630682822Z 44 PC: 12b61 | Get time 0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
0x12b76: push cx
0x12b77: push dx
0x12b78: push ds
0x12b79: push es
0x12b7a: push si
0x12b7b: push di
0x12b7c: push cs
0x12b7d: pop ds
0x12b7e: in al, 0x60
0x12b80: cmp al, 0x1c

{"DateBased":true,"Day":6,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:43.66820583Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:43.669989124Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:43.671157705Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:43.672327095Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:43.674372058Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:43.676129044Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:43.677724833Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:43.679246947Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
2018-12-25T11:49:43.682853117Z 44 PC: 12b61 | Get time 0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
0x12b76: push cx
0x12b77: push dx
0x12b78: push ds
0x12b79: push es
0x12b7a: push si
0x12b7b: push di
0x12b7c: push cs
0x12b7d: pop ds
0x12b7e: in al, 0x60
0x12b80: cmp al, 0x1c

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:44.09825095Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:44.099606181Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.101162276Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.102909206Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:44.105090166Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:44.107009218Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.108244804Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.109478874Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax

{"DateBased":true,"Day":1,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:44.213146192Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:44.215001904Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.21640625Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.217843907Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:44.219579359Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:44.221616811Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.222832757Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.224058394Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
2018-12-25T11:49:44.226661823Z 44 PC: 12b61 | Get time 0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
0x12b76: push cx
0x12b77: push dx
0x12b78: push ds
0x12b79: push es
0x12b7a: push si
0x12b7b: push di
0x12b7c: push cs
0x12b7d: pop ds
0x12b7e: in al, 0x60
0x12b80: cmp al, 0x1c

{"DateBased":true,"Day":2,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:44.231105847Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:44.232007622Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.233391358Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.234544432Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:44.235774385Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:44.237847904Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.239508066Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.240813539Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax

{"DateBased":true,"Day":2,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:44.237968308Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:44.239126907Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.240375678Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.241503318Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:44.242876783Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:44.244532346Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.24611254Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.247532881Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax

{"DateBased":true,"Day":4,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:44.34173381Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:44.343160874Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.344435702Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.345624278Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:44.347362667Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:44.348785657Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.349954892Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.352116657Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
2018-12-25T11:49:44.354453921Z 44 PC: 12b61 | Get time 0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
0x12b76: push cx
0x12b77: push dx
0x12b78: push ds
0x12b79: push es
0x12b7a: push si
0x12b7b: push di
0x12b7c: push cs
0x12b7d: pop ds
0x12b7e: in al, 0x60
0x12b80: cmp al, 0x1c

{"DateBased":true,"Day":6,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:44.572097841Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:44.573916697Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.575171237Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.57640044Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:44.577787882Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:44.579601572Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.580852543Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.582018543Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
2018-12-25T11:49:44.584649291Z 44 PC: 12b61 | Get time 0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
0x12b76: push cx
0x12b77: push dx
0x12b78: push ds
0x12b79: push es
0x12b7a: push si
0x12b7b: push di
0x12b7c: push cs
0x12b7d: pop ds
0x12b7e: in al, 0x60
0x12b80: cmp al, 0x1c

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:44.679187471Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:44.680423177Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.68158602Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.682769402Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:44.684447639Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:44.686078825Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.687360592Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.688799763Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax

{"DateBased":true,"Day":1,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":3616,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:44.807696671Z 204 PC: 12ab6 | UNKNOWN!
2018-12-25T11:49:44.808635194Z 53 PC: 12ac3 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.81053631Z 53 PC: 12ad4 | Get interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.81211183Z 74 PC: 12af8 | Reallocate memory
2018-12-25T11:49:44.813989289Z 72 PC: 12afe | Allocate memory
2018-12-25T11:49:44.817178943Z 37 PC: 12b2c | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:44.818566266Z 37 PC: 12b34 | Set interrupt vector (Interrupt = '9' AKA 'Display string')
2018-12-25T11:49:44.819981454Z 42 PC: 12b4c | Get date 0x12b4c: cmp dh, 3
0x12b4f: jne 0x12b6e
0x12b51: cmp al, 2
0x12b53: je 0x12b5d
0x12b55: cmp al, 4
0x12b57: je 0x12b5d
0x12b59: cmp al, 6
0x12b5b: jne 0x12b6e
0x12b5d: mov ah, 0x2c
0x12b5f: int 0x21
0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
2018-12-25T11:49:44.822988479Z 44 PC: 12b61 | Get time 0x12b61: cmp cl, 0x32
0x12b64: jb 0x12b6e
0x12b66: mov ah, 9
0x12b68: lea dx, word ptr [bp + 0x2c]
0x12b6c: int 0x21
0x12b6e: xor ax, ax
0x12b70: push 0x100
0x12b73: ret
0x12b74: pushf
0x12b75: push ax
0x12b76: push cx
0x12b77: push dx
0x12b78: push ds
0x12b79: push es
0x12b7a: push si
0x12b7b: push di
0x12b7c: push cs
0x12b7d: pop ds
0x12b7e: in al, 0x60
0x12b80: cmp al, 0x1c