home *** CD-ROM | disk | FTP | other *** search
- Example: Borland C small memory model program
-
-
- DOS version read
- Get segment address of program
- Get segment address of environment block
- Read interrupt vector 00
- Read interrupt vector 04
- Read interrupt vector 05
- Read interrupt vector 06
- Set vector 00 to 5306:015C
- Modify memory allocation
- Get clock counter
- Get device information
- [Stdin]
- Get device information
- [Stdout]
- Get segment address of environment block
- Get bytes from command line
- Write to [Stdout]
-
- Funcion main, of program test running....
- Set vector 00 to 1322:19A9
- Set vector 04 to 1322:1A1B
- Set vector 05 to F000:FF54
- Set vector 06 to F000:1805
- Terminate!
- 2
- Example: Viral Messiah Virus
-
-
- Set vector 03 to 51DE:0000
- Set vector 01 to 51DE:0000
- Write to programmable interrupt controller port [0021]
- (Attempt to disable hardware. Inhibited)
- Get Current directory
- Get segment address of environment block
- Change directory [C:\WINDOWS]
- DTA read
- DTA changed
- Searching for [*.COM]
- DTA read
- Open file [WIN.COM]
- [4] bytes read from [WIN.COM]
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- Open file [WIN.COM]
- Get clock counter
- Write to file [WIN.COM]
- (Inhibited)
- Set file date/time [WIN.COM]
- (Inhibited)
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- DTA changed
- Change directory [\VIRUS]
- Get Current directory
- Get segment address of environment block
- Change directory [C:\WINDOWS]
- DTA read
- DTA changed
- Searching for [*.COM]
- DTA read
- Open file [WIN.COM]
- [4] bytes read from [WIN.COM]
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- Open file [WIN.COM]
- Get clock counter
- Write to file [WIN.COM]
- (Inhibited)
- Set file date/time [WIN.COM]
- (Inhibited)
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- DTA changed
- Change directory [\VIRUS]
- Get Current directory
- 3
- Get segment address of environment block
- Change directory [C:\WINDOWS]
- DTA read
- DTA changed
- Searching for [*.COM]
- DTA read
- Open file [WIN.COM]
- [4] bytes read from [WIN.COM]
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- Open file [WIN.COM]
- Get clock counter
- Write to file [WIN.COM]
- (Inhibited)
- Set file date/time [WIN.COM]
- (Inhibited)
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- DTA changed
- Change directory [\VIRUS]
- Get Current directory
- Get segment address of environment block
- Change directory [C:\WINDOWS]
- DTA read
- DTA changed
- Searching for [*.COM]
- DTA read
- Open file [WIN.COM]
- [4] bytes read from [WIN.COM]
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- Open file [WIN.COM]
- Get clock counter
- Write to file [WIN.COM]
- (Inhibited)
- Set file date/time [WIN.COM]
- (Inhibited)
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- DTA changed
- Change directory [\VIRUS]
- Get Current directory
- Get segment address of environment block
- Change directory [C:\WINDOWS]
- DTA read
- DTA changed
- Searching for [*.COM]
- DTA read
- Open file [WIN.COM]
- [4] bytes read from [WIN.COM]
- 4
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- Open file [WIN.COM]
- Get clock counter
- Write to file [WIN.COM]
- (Inhibited)
- Set file date/time [WIN.COM]
- (Inhibited)
- Close file [WIN.COM]
- Set file attributes [WIN.COM]
- (Inhibited)
- DTA changed
- Change directory [\VIRUS]
- Write character in teletype mode: I
- Write character in teletype mode:
- Write character in teletype mode: a
- Write character in teletype mode: m
- Write character in teletype mode:
- Write character in teletype mode: y
- Write character in teletype mode: o
- Write character in teletype mode: u
- Write character in teletype mode: r
- Write character in teletype mode:
- Write character in teletype mode: V
- Write character in teletype mode: I
- Write character in teletype mode: R
- Write character in teletype mode: A
- Write character in teletype mode: L
- Write character in teletype mode:
- Write character in teletype mode: M
- Write character in teletype mode: E
- Write character in teletype mode: S
- Write character in teletype mode: S
- Write character in teletype mode: I
- Write character in teletype mode: A
- Write character in teletype mode: H
- Write character in teletype mode:
-
- Write character in teletype mode:
-
- Write character in teletype mode: F
- Write character in teletype mode: o
- Write character in teletype mode: l
- Write character in teletype mode: l
- Write character in teletype mode: o
- Write character in teletype mode: w
- Write character in teletype mode:
- Write character in teletype mode: m
- Write character in teletype mode: e
- Write character in teletype mode:
- Write character in teletype mode: a
- Write character in teletype mode: n
- Write character in teletype mode: d
- Write character in teletype mode:
- 5
- Write character in teletype mode: b
- Write character in teletype mode: e
- Write character in teletype mode:
- Write character in teletype mode: r
- Write character in teletype mode: e
- Write character in teletype mode: d
- Write character in teletype mode: e
- Write character in teletype mode: e
- Write character in teletype mode: m
- Write character in teletype mode: e
- Write character in teletype mode: d
- Write character in teletype mode:
-
- Write character in teletype mode:
-
- Write character in teletype mode: Y
- Write character in teletype mode: o
- Write character in teletype mode: u
- Write character in teletype mode: r
- Write character in teletype mode:
- Write character in teletype mode: d
- Write character in teletype mode: a
- Write character in teletype mode: t
- Write character in teletype mode: a
- Write character in teletype mode:
- Write character in teletype mode: d
- Write character in teletype mode: o
- Write character in teletype mode: t
- Write character in teletype mode: h
- Write character in teletype mode:
- Write character in teletype mode: e
- Write character in teletype mode: x
- Write character in teletype mode: i
- Write character in teletype mode: s
- Write character in teletype mode: t
- Write character in teletype mode:
- Write character in teletype mode: n
- Write character in teletype mode: o
- Write character in teletype mode:
- Write character in teletype mode: m
- Write character in teletype mode: o
- Write character in teletype mode: r
- Write character in teletype mode: e
- Write character in teletype mode:
-
- Write character in teletype mode:
-
- Write character in teletype mode: T
- Write character in teletype mode: h
- Write character in teletype mode: e
- Write character in teletype mode:
- Write character in teletype mode: F
- Write character in teletype mode: A
- Write character in teletype mode: T
- Write character in teletype mode:
- Write character in teletype mode: h
- 6
- Write character in teletype mode: o
- Write character in teletype mode: l
- Write character in teletype mode: d
- Write character in teletype mode: s
- Write character in teletype mode:
- Write character in teletype mode: a
- Write character in teletype mode: s
- Write character in teletype mode: h
- Write character in teletype mode: e
- Write character in teletype mode: s
- Write character in teletype mode:
- Write character in teletype mode: o
- Write character in teletype mode: f
- Write character in teletype mode:
- Write character in teletype mode: y
- Write character in teletype mode: o
- Write character in teletype mode: u
- Write character in teletype mode: r
- Write character in teletype mode:
- Write character in teletype mode: d
- Write character in teletype mode: r
- Write character in teletype mode: e
- Write character in teletype mode: a
- Write character in teletype mode: m
- Write character in teletype mode: s
- Write character in teletype mode:
-
- Write character in teletype mode:
-
- Write character [I] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [a] to printer [00]
- (Inhibited)
- Write character [m] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [y] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [u] to printer [00]
- (Inhibited)
- Write character [r] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [V] to printer [00]
- (Inhibited)
- Write character [I] to printer [00]
- (Inhibited)
- Write character [R] to printer [00]
- (Inhibited)
- 7
- Write character [A] to printer [00]
- (Inhibited)
- Write character [L] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [M] to printer [00]
- (Inhibited)
- Write character [E] to printer [00]
- (Inhibited)
- Write character [S] to printer [00]
- (Inhibited)
- Write character [S] to printer [00]
- (Inhibited)
- Write character [I] to printer [00]
- (Inhibited)
- Write character [A] to printer [00]
- (Inhibited)
- Write character [H] to printer [00]
- (Inhibited)
- Write character [
- ] to printer [00]
- (Inhibited)
- Write character [
- ] to printer [00]
- (Inhibited)
- Write character [F] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [l] to printer [00]
- (Inhibited)
- Write character [l] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [w] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [m] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [a] to printer [00]
- (Inhibited)
- Write character [n] to printer [00]
- (Inhibited)
- Write character [d] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [b] to printer [00]
- 8
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [r] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [d] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [m] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [d] to printer [00]
- (Inhibited)
- Write character [
- ] to printer [00]
- (Inhibited)
- Write character [
- ] to printer [00]
- (Inhibited)
- Write character [Y] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [u] to printer [00]
- (Inhibited)
- Write character [r] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [d] to printer [00]
- (Inhibited)
- Write character [a] to printer [00]
- (Inhibited)
- Write character [t] to printer [00]
- (Inhibited)
- Write character [a] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [d] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [t] to printer [00]
- (Inhibited)
- Write character [h] to printer [00]
- (Inhibited)
- 9
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [x] to printer [00]
- (Inhibited)
- Write character [i] to printer [00]
- (Inhibited)
- Write character [s] to printer [00]
- (Inhibited)
- Write character [t] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [n] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [m] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [r] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [
- ] to printer [00]
- (Inhibited)
- Write character [
- ] to printer [00]
- (Inhibited)
- Write character [T] to printer [00]
- (Inhibited)
- Write character [h] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [F] to printer [00]
- (Inhibited)
- Write character [A] to printer [00]
- (Inhibited)
- Write character [T] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [h] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [l] to printer [00]
- 10
- (Inhibited)
- Write character [d] to printer [00]
- (Inhibited)
- Write character [s] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [a] to printer [00]
- (Inhibited)
- Write character [s] to printer [00]
- (Inhibited)
- Write character [h] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [s] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [f] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [y] to printer [00]
- (Inhibited)
- Write character [o] to printer [00]
- (Inhibited)
- Write character [u] to printer [00]
- (Inhibited)
- Write character [r] to printer [00]
- (Inhibited)
- Write character [ ] to printer [00]
- (Inhibited)
- Write character [d] to printer [00]
- (Inhibited)
- Write character [r] to printer [00]
- (Inhibited)
- Write character [e] to printer [00]
- (Inhibited)
- Write character [a] to printer [00]
- (Inhibited)
- Write character [m] to printer [00]
- (Inhibited)
- Write character [s] to printer [00]
- (Inhibited)
- Write character [
- ] to printer [00]
- (Inhibited)
- Write character [
- ] to printer [00]
- (Inhibited)
- Terminate!
- 11
- Example: Encrypted .COM program (Edited)
-
-
- 0100 jmp 0104
- 0104 mov [0101],2C4A
- 010A std
- 010B mov si,423E
- 010E mov di,5572
- 0111 mov ax,0000
- 0114 mov cx,[si]
- 0116 cmp cx,ax
- 0118 je 0100
- 011A dec si
- 011B dec si
- 011C rep movsw
- 011E mov cx,[si]
- 0120 dec si
- 0121 dec si
- 0122 rep stosw
- 0124 jmp short 0114
- 0114 mov cx,[si]
- 0116 cmp cx,ax
- 0118 je 0100
- 011A dec si
- 011B dec si
- 011C rep movsw
- 011E mov cx,[si]
- 0120 dec si
- 0121 dec si
- 0122 rep stosw
- 0124 jmp short 0114
- 0114 mov cx,[si]
- 0116 cmp cx,ax
- 0118 je 0100
- 0100 jmp 2D4D
- 2D4D call 0A99
- 0A99 call 0BDE
- 0BDE mov ah,30
- 0BE0 call 0910
- 0910 cmp ah,3D
- 0913 je 092A
- 0915 cmp ah,3C
- 0918 je 092A
- 091A cmp ah,3E
- 091D je 0952
- 091F cmp ah,80
- 0922 je 096C
- 0924 push bp
- 0925 cld
- 0926 int 21 DOS version read
- 0928 pop bp
- 0929 ret
-
- 12
- Example: Microsoft C 5.1 Small memory model program
-
-
- DOS version read
- Get segment address of program
- Get segment address of program
- Modify memory allocation
- DOS version read
- Read interrupt vector 00
- Set vector 00 to 51EE:00B8
- Get segment address of environment block
- Get device information
- [Stdprn]
- Get device information
- [Stdaux]
- Get device information
- [Stderr]
- Get device information
- [Stdout]
- Get device information
- [Stdin]
- Get segment address of environment block
- Get segment address of environment block
- Get bytes from command line
- Get bytes from command line
- Write to [Stdout]
-
-
- Funcion main, of program test running....
- Set vector 00 to 120A:19A9
- Terminate!
-
-