pkdge32.asm

里面包含了N个病毒代码.汇编.c++/c编写

format  PE GUI 4.0
entry   __start
include 'useful.inc'
include 'pkrng.inc'
include 'pkdge32.inc'


.data

col_code: times crypted_size+200h    db  0
rng_seed        dd          ?


.code

__start:        mov     edi,col_code
                mov     esi,rng_seed
                mov     ecx,crypted_size
                mov     ebx,12345678h
                mov     edx,78h
                call    __pkdge32
                push    edi

                mov     esi,edi
                xchg    eax,edi
                stosd

                xchg    esi,edi
                mov     esi,crypt_code
                mov     ecx,crypted_size
                rep     movsb

                pop     esi
                mov     ecx,crypted_size
                mov     edi,esi
encrypt:        lodsb
                xor     al,78h
                stosb
                loop    encrypt

                jmp     col_code

crypt_code:     xor     eax,eax
                push    eax
                @pushsz 'PKDGE32 Test'
                @pushsz 'This code has been decrypted sucessfully!'
                push    eax
                call    [MessageBoxA]
                ret
crypted_size = $-crypt_code


.idata

@imp_libz   usr,'user32.dll'
@imp_apiz   usr,MessageBoxA,'MessageBoxA'