home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Zodiac Super OZ
/
MEDIADEPOT.ISO
/
FILES
/
13
/
SSD40.ZIP
/
EXAMPLE.DOC
< prev
next >
Wrap
Text File
|
1996-04-19
|
15KB
|
608 lines
Example: Borland C small memory model program
DOS version read
Get segment address of program
Get segment address of environment block
Read interrupt vector 00
Read interrupt vector 04
Read interrupt vector 05
Read interrupt vector 06
Set vector 00 to 5306:015C
Modify memory allocation
Get clock counter
Get device information
[Stdin]
Get device information
[Stdout]
Get segment address of environment block
Get bytes from command line
Write to [Stdout]
Funcion main, of program test running....
Set vector 00 to 1322:19A9
Set vector 04 to 1322:1A1B
Set vector 05 to F000:FF54
Set vector 06 to F000:1805
Terminate!
2
Example: Viral Messiah Virus
Set vector 03 to 51DE:0000
Set vector 01 to 51DE:0000
Write to programmable interrupt controller port [0021]
(Attempt to disable hardware. Inhibited)
Get Current directory
Get segment address of environment block
Change directory [C:\WINDOWS]
DTA read
DTA changed
Searching for [*.COM]
DTA read
Open file [WIN.COM]
[4] bytes read from [WIN.COM]
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
Open file [WIN.COM]
Get clock counter
Write to file [WIN.COM]
(Inhibited)
Set file date/time [WIN.COM]
(Inhibited)
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
DTA changed
Change directory [\VIRUS]
Get Current directory
Get segment address of environment block
Change directory [C:\WINDOWS]
DTA read
DTA changed
Searching for [*.COM]
DTA read
Open file [WIN.COM]
[4] bytes read from [WIN.COM]
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
Open file [WIN.COM]
Get clock counter
Write to file [WIN.COM]
(Inhibited)
Set file date/time [WIN.COM]
(Inhibited)
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
DTA changed
Change directory [\VIRUS]
Get Current directory
3
Get segment address of environment block
Change directory [C:\WINDOWS]
DTA read
DTA changed
Searching for [*.COM]
DTA read
Open file [WIN.COM]
[4] bytes read from [WIN.COM]
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
Open file [WIN.COM]
Get clock counter
Write to file [WIN.COM]
(Inhibited)
Set file date/time [WIN.COM]
(Inhibited)
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
DTA changed
Change directory [\VIRUS]
Get Current directory
Get segment address of environment block
Change directory [C:\WINDOWS]
DTA read
DTA changed
Searching for [*.COM]
DTA read
Open file [WIN.COM]
[4] bytes read from [WIN.COM]
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
Open file [WIN.COM]
Get clock counter
Write to file [WIN.COM]
(Inhibited)
Set file date/time [WIN.COM]
(Inhibited)
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
DTA changed
Change directory [\VIRUS]
Get Current directory
Get segment address of environment block
Change directory [C:\WINDOWS]
DTA read
DTA changed
Searching for [*.COM]
DTA read
Open file [WIN.COM]
[4] bytes read from [WIN.COM]
4
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
Open file [WIN.COM]
Get clock counter
Write to file [WIN.COM]
(Inhibited)
Set file date/time [WIN.COM]
(Inhibited)
Close file [WIN.COM]
Set file attributes [WIN.COM]
(Inhibited)
DTA changed
Change directory [\VIRUS]
Write character in teletype mode: I
Write character in teletype mode:
Write character in teletype mode: a
Write character in teletype mode: m
Write character in teletype mode:
Write character in teletype mode: y
Write character in teletype mode: o
Write character in teletype mode: u
Write character in teletype mode: r
Write character in teletype mode:
Write character in teletype mode: V
Write character in teletype mode: I
Write character in teletype mode: R
Write character in teletype mode: A
Write character in teletype mode: L
Write character in teletype mode:
Write character in teletype mode: M
Write character in teletype mode: E
Write character in teletype mode: S
Write character in teletype mode: S
Write character in teletype mode: I
Write character in teletype mode: A
Write character in teletype mode: H
Write character in teletype mode:
Write character in teletype mode:
Write character in teletype mode: F
Write character in teletype mode: o
Write character in teletype mode: l
Write character in teletype mode: l
Write character in teletype mode: o
Write character in teletype mode: w
Write character in teletype mode:
Write character in teletype mode: m
Write character in teletype mode: e
Write character in teletype mode:
Write character in teletype mode: a
Write character in teletype mode: n
Write character in teletype mode: d
Write character in teletype mode:
5
Write character in teletype mode: b
Write character in teletype mode: e
Write character in teletype mode:
Write character in teletype mode: r
Write character in teletype mode: e
Write character in teletype mode: d
Write character in teletype mode: e
Write character in teletype mode: e
Write character in teletype mode: m
Write character in teletype mode: e
Write character in teletype mode: d
Write character in teletype mode:
Write character in teletype mode:
Write character in teletype mode: Y
Write character in teletype mode: o
Write character in teletype mode: u
Write character in teletype mode: r
Write character in teletype mode:
Write character in teletype mode: d
Write character in teletype mode: a
Write character in teletype mode: t
Write character in teletype mode: a
Write character in teletype mode:
Write character in teletype mode: d
Write character in teletype mode: o
Write character in teletype mode: t
Write character in teletype mode: h
Write character in teletype mode:
Write character in teletype mode: e
Write character in teletype mode: x
Write character in teletype mode: i
Write character in teletype mode: s
Write character in teletype mode: t
Write character in teletype mode:
Write character in teletype mode: n
Write character in teletype mode: o
Write character in teletype mode:
Write character in teletype mode: m
Write character in teletype mode: o
Write character in teletype mode: r
Write character in teletype mode: e
Write character in teletype mode:
Write character in teletype mode:
Write character in teletype mode: T
Write character in teletype mode: h
Write character in teletype mode: e
Write character in teletype mode:
Write character in teletype mode: F
Write character in teletype mode: A
Write character in teletype mode: T
Write character in teletype mode:
Write character in teletype mode: h
6
Write character in teletype mode: o
Write character in teletype mode: l
Write character in teletype mode: d
Write character in teletype mode: s
Write character in teletype mode:
Write character in teletype mode: a
Write character in teletype mode: s
Write character in teletype mode: h
Write character in teletype mode: e
Write character in teletype mode: s
Write character in teletype mode:
Write character in teletype mode: o
Write character in teletype mode: f
Write character in teletype mode:
Write character in teletype mode: y
Write character in teletype mode: o
Write character in teletype mode: u
Write character in teletype mode: r
Write character in teletype mode:
Write character in teletype mode: d
Write character in teletype mode: r
Write character in teletype mode: e
Write character in teletype mode: a
Write character in teletype mode: m
Write character in teletype mode: s
Write character in teletype mode:
Write character in teletype mode:
Write character [I] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [a] to printer [00]
(Inhibited)
Write character [m] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [y] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [u] to printer [00]
(Inhibited)
Write character [r] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [V] to printer [00]
(Inhibited)
Write character [I] to printer [00]
(Inhibited)
Write character [R] to printer [00]
(Inhibited)
7
Write character [A] to printer [00]
(Inhibited)
Write character [L] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [M] to printer [00]
(Inhibited)
Write character [E] to printer [00]
(Inhibited)
Write character [S] to printer [00]
(Inhibited)
Write character [S] to printer [00]
(Inhibited)
Write character [I] to printer [00]
(Inhibited)
Write character [A] to printer [00]
(Inhibited)
Write character [H] to printer [00]
(Inhibited)
Write character [] to printer [00]
(Inhibited)
Write character [
] to printer [00]
(Inhibited)
Write character [F] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [l] to printer [00]
(Inhibited)
Write character [l] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [w] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [m] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [a] to printer [00]
(Inhibited)
Write character [n] to printer [00]
(Inhibited)
Write character [d] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [b] to printer [00]
8
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [r] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [d] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [m] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [d] to printer [00]
(Inhibited)
Write character [] to printer [00]
(Inhibited)
Write character [
] to printer [00]
(Inhibited)
Write character [Y] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [u] to printer [00]
(Inhibited)
Write character [r] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [d] to printer [00]
(Inhibited)
Write character [a] to printer [00]
(Inhibited)
Write character [t] to printer [00]
(Inhibited)
Write character [a] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [d] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [t] to printer [00]
(Inhibited)
Write character [h] to printer [00]
(Inhibited)
9
Write character [ ] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [x] to printer [00]
(Inhibited)
Write character [i] to printer [00]
(Inhibited)
Write character [s] to printer [00]
(Inhibited)
Write character [t] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [n] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [m] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [r] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [] to printer [00]
(Inhibited)
Write character [
] to printer [00]
(Inhibited)
Write character [T] to printer [00]
(Inhibited)
Write character [h] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [F] to printer [00]
(Inhibited)
Write character [A] to printer [00]
(Inhibited)
Write character [T] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [h] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [l] to printer [00]
10
(Inhibited)
Write character [d] to printer [00]
(Inhibited)
Write character [s] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [a] to printer [00]
(Inhibited)
Write character [s] to printer [00]
(Inhibited)
Write character [h] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [s] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [f] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [y] to printer [00]
(Inhibited)
Write character [o] to printer [00]
(Inhibited)
Write character [u] to printer [00]
(Inhibited)
Write character [r] to printer [00]
(Inhibited)
Write character [ ] to printer [00]
(Inhibited)
Write character [d] to printer [00]
(Inhibited)
Write character [r] to printer [00]
(Inhibited)
Write character [e] to printer [00]
(Inhibited)
Write character [a] to printer [00]
(Inhibited)
Write character [m] to printer [00]
(Inhibited)
Write character [s] to printer [00]
(Inhibited)
Write character [] to printer [00]
(Inhibited)
Write character [
] to printer [00]
(Inhibited)
Terminate!
11
Example: Encrypted .COM program (Edited)
0100 jmp 0104
0104 mov [0101],2C4A
010A std
010B mov si,423E
010E mov di,5572
0111 mov ax,0000
0114 mov cx,[si]
0116 cmp cx,ax
0118 je 0100
011A dec si
011B dec si
011C rep movsw
011E mov cx,[si]
0120 dec si
0121 dec si
0122 rep stosw
0124 jmp short 0114
0114 mov cx,[si]
0116 cmp cx,ax
0118 je 0100
011A dec si
011B dec si
011C rep movsw
011E mov cx,[si]
0120 dec si
0121 dec si
0122 rep stosw
0124 jmp short 0114
0114 mov cx,[si]
0116 cmp cx,ax
0118 je 0100
0100 jmp 2D4D
2D4D call 0A99
0A99 call 0BDE
0BDE mov ah,30
0BE0 call 0910
0910 cmp ah,3D
0913 je 092A
0915 cmp ah,3C
0918 je 092A
091A cmp ah,3E
091D je 0952
091F cmp ah,80
0922 je 096C
0924 push bp
0925 cld
0926 int 21 DOS version read
0928 pop bp
0929 ret
12
Example: Microsoft C 5.1 Small memory model program
DOS version read
Get segment address of program
Get segment address of program
Modify memory allocation
DOS version read
Read interrupt vector 00
Set vector 00 to 51EE:00B8
Get segment address of environment block
Get device information
[Stdprn]
Get device information
[Stdaux]
Get device information
[Stderr]
Get device information
[Stdout]
Get device information
[Stdin]
Get segment address of environment block
Get segment address of environment block
Get bytes from command line
Get bytes from command line
Write to [Stdout]
Funcion main, of program test running....
Set vector 00 to 120A:19A9
Terminate!