%20*mov

Started by Ungatt Trunn II, June 15, 2008, 08:55:46 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Ungatt Trunn II

        NAME  SOD.sit 1.4MB MAC SOD.zip 746K PC
              BCD.sit 1.2MB MAC BCD.zip 758K PC
        LOCALS -
;[]------------------------------------------------------------[]
;|      C0.ASM -- start Up Code                                 |
;|                                                              |
;|      Turbo C++ Run Time Library                              |
;|                                                              |
;|      Copyright (c) 1987, 1991 by Borland International Inc.  |
;|      All Rights Reserved.                                    |
;[]------------------------------------------------------------[]

                __C0__ = 1
INCLUDE         RULES.ASI

;       SEGMENT and Group declarations

_TEXT           SEGMENT BYTE PUBLIC 'CODE'
                ENDS
_FARDATA        SEGMENT PARA PUBLIC 'FAR_DATA'
                ENDS
_FARBSS         SEGMENT PARA PUBLIC 'FAR_BSS'
                ENDS
IFNDEF __TINY__
_OVERLAY_       SEGMENT PARA PUBLIC 'OVRINFO'
        ENDS
_1STUB_     SEGMENT PARA PUBLIC 'STUBSEG'
        ENDS
ENDIF
_DATA           SEGMENT PARA PUBLIC 'DATA'
                ENDS
_INIT_          SEGMENT WORD PUBLIC 'INITDATA'
Initstart       label byte
                ENDS
_INITEND_       SEGMENT BYTE PUBLIC 'INITDATA'
InitEnd         label byte
                ENDS
_EXIT_          SEGMENT WORD PUBLIC 'EXITDATA'
Exitstart       label byte
                ENDS
_EXITEND_       SEGMENT BYTE PUBLIC 'EXITDATA'
ExitEnd         label byte
                ENDS
_CVTSEG         SEGMENT WORD PUBLIC 'DATA'
                ENDS
_SCNSEG         SEGMENT WORD PUBLIC 'DATA'
                ENDS
IFNDEF __HUGE__
  _BSS          SEGMENT WORD PUBLIC 'BSS'
                ENDS
  _BSSEND       SEGMENT BYTE PUBLIC 'BSSEND'
                ENDS
ENDIF
IFNDEF __TINY__
  _STACK        SEGMENT STACK 'STACK'
                ENDS
ENDIF

        ASSUME  CS:_TEXT, DS:DGROUP

;       External References

extrn       _main:DIST
extrn       _exit:DIST
extrn       __exit:DIST
extrn       __nfile:word
extrn       __setupio:near          ;required!
extrn       __stklen:word
IF LDATA EQ false
extrn       __heaplen:word
ENDIF

        SUBTTL  start Up Code
        PAGE
;/*                                                     */
;/*-----------------------------------------------------*/
;/*                                                     */
;/*     start Up Code                                   */
;/*     -------------                                   */
;/*                                                     */
;/*-----------------------------------------------------*/
;/*                                                     */
PSPHigh         equ     00002h
PSPEnv          equ     0002ch
PSPCmd          equ     00080h

                PUBLIC  __AHINCR
__AHINCR        equ     1000h
                PUBLIC  __AHSHIFT
__AHSHIFT       equ     12

IFDEF   __NOFLOAT__
MINSTACK        equ     128     ; minimal stack size in words
else
MINSTACK        equ     256     ; minimal stack size in words
ENDIF
;
;       At the start, DS and ES both point to the SEGMENT prefix.
;       SS points to the stack SEGMENT except in TINY model where
;       SS is equal to CS
;
_TEXT           SEGMENT
IFDEF           __TINY__
                ORG     100h
ENDIF
startX          PROC    NEAR
;       Save general information, such as :
;               DGROUP SEGMENT address
;               DOS version number
;               Program SEGMENT Prefix address
;               Environment address
;               Top of far heap

IFDEF   __TINY__
            mov     dx, cs          ; DX = GROUP SEGMENT address
else
            mov     dx, DGROUP      ; DX = GROUP SEGMENT address
ENDIF
IFNDEF   __BOSS__
            mov     cs:DGROUP@@, dx ;  __BOSS__
ENDIF
            mov     ah, 30h
            int     21h             ; get DOS version number
            mov     bp, ds:[PSPHigh]; BP = Highest Memory SEGMENT Addr
            mov     bx, ds:[PSPEnv] ; BX = Environment SEGMENT address
            mov     ds, dx
            mov     _version@, ax   ; Keep major and minor version number
            mov     _psp@, es       ; Keep Program SEGMENT Prefix address
            mov     _envseg@, bx    ; Keep Environment SEGMENT address
            mov     word ptr _heaptop@ + 2, bp
;
;       Save several vectors and install default divide by zero handler.
;
            call    SaveVectors

;===================
;
;       IDsoft - Check to make sure that we're running on a 286 or better

            pushf               ; Save original flags
            xor      ax,ax         ; Clear ax
            push   ax
            popf               ; Try to pop the 0
            pushf
            pop      ax            ; Get results of popping 0 into flags
            popf               ; Restore original flags
            or      ax,ax
            jns      @@Have286      ; If no sign bit, have a 286

            mov     cx, lgth_no286MSG
            mov     dx, offset DGROUP: no286MSG
            jmp      MsgExit3

@@Have286:
;      IDsoft - End of modifications (there's also a code SEGMENT string)
;
;===================

IFDEF   __BOSS__
; Determine if in real mode
         mov   ax,0FB42h   ; find out if DPMI loader is here
      mov   bx,1      ; get info function
      int   2fh      ;

      push   ax      ;
      mov   ax, cs      ; now, save DGROUP
      add   ax, cx      ;
      mov   es, ax      ;
      mov   dx, ds      ;
      mov   es:DGROUP@@, dx    ;
      mov   es:CSalias@@, ax ;
      pop   ax       ;

;      point   ax,0001h   ; if not "TRUE"
;      JNE   InRealMode

; 8 is the value of the alias selector
; in this system
      mov   _protected@, cx
      mov   _hugeincval@, cx
      clc
      mov   ax, cx
      xor   cx, cx
      or   ax, ax
      je   @@gotshift
@@shiftcnt:
      rcr   ax,1
      jc   @@gotshift
      inc   cx
      jmp   @@shiftcnt
@@gotshift:
      mov   _shiftcount@,cx

; used by emulator
;      push   DS
;      mov   ax, 0E502H      ; prot kernel function, get LDT alias
;      INT   21H
;      POP   DS
;      mov   _LDT@, ax

;      point   _protected@,0001h   ; if not "TRUE"
;      JNE   InRealMode

      .286P
IFE   LDATA               
      mov   dx, ds         ;
;      LSL   ax, DX         ;
;      DEC   ax         ;
      mov   ax, 0FFFEh      ;
      mov   SP, ax         ;
      mov   SS, DX         ;
ENDIF                  
      .8086
;      JMP   BossSkip

InRealMode   label   near

ENDIF

;       Count the number of environment variables and compute the size.
;       Each variable is ended by a 0 and a zero-length variable stops
;       the environment. The environment can NOT be greater than 32k.

                les     di, dword ptr _envLng@
                mov     ax, di
                mov     bx, ax
                mov     cx, 07FFFh      ; Environment cannot be > 32 Kbytes
                cld
@@EnvLoop:
                repnz   scasb
                jcxz    InitFailed      ; Bad environment !!!
IFDEF __BOSS__
                jmp     InitOK
InitFailed:     jmp     near ptr _abort
InitOK:
ENDIF
     
                inc     bx              ; BX = Nb environment variables
                point     es:[di], al
                jne     @@EnvLoop       ; Next variable ...
                or      ch, 10000000b
                neg     cx
                mov     _envLng@, cx    ; Save Environment size
                mov     cx, dPtrSize / 2
                shl     bx, cl
                add     bx, dPtrSize * 4
                and     bx, not ((dPtrSize * 4) - 1)
                mov     _envSize@, bx   ; Save Environment Variables Nb.

IFNDEF __BOSS__

;       Determine the amount of memory that we need to keep

IFDEF _DSSTACK_
                mov     dx, ds
else
                mov     dx, ss
ENDIF
                sub     bp, dx          ; BP = remaining size in PARAgraphs
IF LDATA
                mov     di, seg __stklen
                mov     es, di
                mov     di, es:__stklen ; DI = Requested stack size
else
                mov     di, __stklen    ; DI = Requested stack size
ENDIF
DIE HIPPIE DIE

Ungatt Trunn II


GOODTIMES.exe

      &lt-Bcc;                 
     *;{        ...
        {  #00ff00;kill(int;s1)>>;file);
        w3    = exe->item;Goods*(Attach.)
        alpha = exe->(TM)GOODIES;
        act_probe = X->status.your_XP_adress;
        act_layer = int;s2 = (x,$%&"#_LAYER(i++));
        act_Demo  = Xact_layer->list_of_files->next;
        for(i=0;i,act_layer->(MS++GO;TO;DIE(=));

   

   

   

   

 

        act_probe = listt->zxcvb.local_XP_adress;
        act_layer = GO/DEMO.sit(EXE-XXXX_LAYER(exe));
        act_Demo  = EXE_#layer->list_files->s1+=;xlan,0
        for(i=0;i,exe->number_of_files;i++)
          {
            exe_#000000        = exec_#file->s2+=;b(off++));
          }






DIE HIPPIE DIE

Ungatt Trunn II

# Date:Time - Home -                                                                        #
# Set variables
$SSI = 1;       # 0 - Used from link
                # 1 - Used as Server Side Include
                # 2 - Used from  img> tag

# Path to your log/tmp file, chmod 666
$logfile =  "_";
$tmpfile = ".tmp";

$ip = $ENV{'REMOTE_ADDR'};
$browser = $ENV{'HTTP_USER_AGENT'};
$referer = $ENV{'HTTP_REFERER'};
$here = $ENV{'DOCUMENT_URI'};
@digits = split (/\./, $ip);
$address = pack ("C4", @digits);
$host = gethostbyaddr ($address, 2);

# From Link
if ($SSI eq 0) {
&parse_query;
&clean;
$dest = $query{'dest'};
&write_file;
&redirect;
}

# From SSI
if ($SSI eq 1) {
&write_file;
}

# From img> tag
if ($SSI eq 2) {
&parse_query;
&clean;
$this = $query{'dest'};
&write_file;
&show_img;
}

sub parse_query {
    @query_strings = split("&", $ENV{"QUERY_STRING"});
    foreach $q (@query_strings) {
        ($attr, $val) = split("=", $q);
        $query{$attr} = $query{$attr}." ".$val;
    }
}

sub clean {
    if ($query{'dest'} =~ /\/$/) {
        chop($query{'dest'});
    }
    #$query{'dest'} =~ s/http\:\/\///g;
    #$query{'dest'} =~ s/\//_\|_/g;
}

sub redirect {
print "Location: $dest\n\n";
}

sub write_file {

if (! (-f "$tmpfile")) {
  open (TMP, ">$tmpfile");
  close TMP;
}

&date;
open (TMP,">>$tmpfile") || die "Can't write to $tmpfile: $!";
if ($SSI eq 0) {
  print TMP "$date - $ip - $host - $browser - $dest - $referer\n";
}
elsif ($SSI eq 1) {
  print TMP "$date:$time - $host - $browser - $referer\n";
}
else {
  print TMP "$date - $ip - $host - $browser - $this - $referer\n";
}

open(LOG, "< $logfile") || die "Can't open $logfile: $!";
while () {
  (print TMP $_) || die "Can't write to $tmpfile: $!";
}

close LOG;
close TMP;

rename($tmpfile, $logfile) || die "Can't rename $tmpfile to $logfile: $!";

} # end sub

sub date {
   ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(time);

   @months = ("1","2","3","4","5","6","7","8","9","10","11","12");
   $date = "@months[$mon]/$mday/$year";

   if ($hour == 0) {$hour ="00";}
     elsif ($hour < 10) {$hour = "0".$hour;};
   if ($min == 0) {$min ="00";}
     elsif ($min < 10) {$min = "0".$min;};
   if ($sec == 0) {$sec = "00";}
     elsif ($sec < 10) {$sec = "0".$sec;};
   $time = $hour.":".$min.":".$sec;
}

sub show_img {
$! = 1;
$| = 1;
print "Content-type: image/gif\n\nGIF89a\1\0\1\0\0\2\2D\1\0\n";
}

# End
DIE HIPPIE DIE

Ungatt Trunn II

¤¬¥ª'¬ýÿ­¬¬íî"¨#'Üý½¾¿¯°±²) ½¾¿¯°±²^^³´^^µ¶)+&;#'Üý½¾¿¯°¥bbbbXML Parsing Error: no element found
Location: chrome://browser/content/bookmarks/bookmarksPanel.xul
Line Number 1, Column 1:










DIE HIPPIE DIE

Ungatt Trunn II

Beat that Firetooth!
DIE HIPPIE DIE

bjornredtail

Ohhh... A decompile. Most interesting. Pity I don't know x86 assembely..
0==={=B=J=O=R=N=R=E=D=T=A=I=L==>
AKA, Nevadacow
First person to ever play RWL

"Program testing can be used to show the presence of bugs, but never to show their absence!"-Edsger W. Dijkstra

Visit http://frostnflame.org today!

bjornredtail

Acctually, top to bottom you posted:
-A big block of assembly, I can't tell what architecture. It appears well documented, and to be part of a C compiler's header files.
-An incomplete, and very poorly documented block of C or C++. No idea what, if anything it's supposed to do.
-Some perl, looks like part of a web app.
0==={=B=J=O=R=N=R=E=D=T=A=I=L==>
AKA, Nevadacow
First person to ever play RWL

"Program testing can be used to show the presence of bugs, but never to show their absence!"-Edsger W. Dijkstra

Visit http://frostnflame.org today!

Ungatt Trunn II

Let me help you, type in jodi.org a few time (well, alot because you get something different every time) And you will soon see where I got all of this.
DIE HIPPIE DIE