Benign freebsd Download

btx.S

Source references XOR syntaxSource embeds a long hexadecimal byte array
SHA-2565922235b3fc35c858519ba28d3ecdcebfd8246891b414c8205fee627346b5e0b

Evidence

English function-word token "the" lines 2–10
2:35… er
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms are freely
6 * permitted provided that the above copyright notice and this
7 * paragraph and the following disclaimer are duplicated in all
8 * such forms.
9 *
10 * This softw …
imports <bootargs.h> lines 11–22
11:64… ed
12 * warranties of merchantability and fitness for a particular
13 * purpose.
14 */
15
16#include <bootargs.h>
17
18/*
⋯4 lines
Source references XOR syntax lines 128–135
128:5… nitialization routine.
129 */
130init: cli # Disable interrupts
131 xor %ax,%ax # Zero/segment
132 mov %ax,%ss # Set up
133 mov $MEM_ESP0,%sp # stack
134 mov %ax,%es # Address
135 mov %ax,%ds # da …
Source embeds a long hexadecimal byte array lines 146–152
146:52… errupts.
147 */
148 mov $intr20,%bx # Address first handler
149 mov $0x10,%cx # Number of handlers
150 mov $0x20*4,%di # First real mode IDT entry
151init.0: mov %bx,(%di) # Store IP
152 inc %di # Ad …
Loads ordinal table entries lines 165–172
165:22… done
166 lodsb # Get segment
167 xchg %ax,%dx # P:DPL:type
168 lodsw # Get control
169 xchg %ax,%bx # set
170 lodsw # Get handler offset
171 mov $SEL_SCODE,%dh # Segment selector
172init.2: shr …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.