home *** CD-ROM | disk | FTP | other *** search
/ The Hacker's Encyclopedia 1998 / hackers_encyclopedia.iso / pc / virus / firefly.asm < prev    next >
Mailbox/MIME Entity  |  2003-06-11  |  3.2 KB
open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text

This file was processed as: Mailbox/MIME Entity (archive/mbox).

You can browse this item here: firefly.asm

ConfidenceProgramDetectionMatch TypeSupport
100% dexvert Mailbox/MIME Entity (archive/mbox) magic Supported
100% dexvert Internet Message Format (text/imf) magic Supported
100% dexvert Assembly Source File (text/asm) magic Supported
1% dexvert freeCAD assembly (other/freeCADAssembly) ext Unsupported
1% dexvert Text File (text/txt) fallback Supported
100% file Mailbox text, 1st line "From netcom.com!ix.netcom.com!howland.reston.ans.net!cs.utexas.edu!geraldo.cc.utexas.edu!axpvms.cc.utexas.edu!HALFLIFE Tue Nov ", ASCII text default
100% TrID E-Mail message (Var. 2) default
100% checkBytes Printable ASCII default
100% perlTextCheck Likely Text (Perl) default
100% siegfried x-fmt/111 Plain Text File default
100% detectItEasy Format: plain text[LF] default (weak)
100% xdgMime application/mbox default


hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 46 72 6f 6d 20 6e 65 74 | 63 6f 6d 2e 63 6f 6d 21 |From net|com.com!|
|00000010| 69 78 2e 6e 65 74 63 6f | 6d 2e 63 6f 6d 21 68 6f |ix.netco|m.com!ho|
|00000020| 77 6c 61 6e 64 2e 72 65 | 73 74 6f 6e 2e 61 6e 73 |wland.re|ston.ans|
|00000030| 2e 6e 65 74 21 63 73 2e | 75 74 65 78 61 73 2e 65 |.net!cs.|utexas.e|
|00000040| 64 75 21 67 65 72 61 6c | 64 6f 2e 63 63 2e 75 74 |du!geral|do.cc.ut|
|00000050| 65 78 61 73 2e 65 64 75 | 21 61 78 70 76 6d 73 2e |exas.edu|!axpvms.|
|00000060| 63 63 2e 75 74 65 78 61 | 73 2e 65 64 75 21 48 41 |cc.utexa|s.edu!HA|
|00000070| 4c 46 4c 49 46 45 20 54 | 75 65 20 4e 6f 76 20 32 |LFLIFE T|ue Nov 2|
|00000080| 39 20 30 39 3a 35 36 3a | 30 31 20 31 39 39 34 0a |9 09:56:|01 1994.|
|00000090| 58 72 65 66 3a 20 6e 65 | 74 63 6f 6d 2e 63 6f 6d |Xref: ne|tcom.com|
|000000a0| 20 61 6c 74 2e 63 6f 6d | 70 2e 76 69 72 75 73 3a | alt.com|p.virus:|
|000000b0| 34 39 31 0a 50 61 74 68 | 3a 20 6e 65 74 63 6f 6d |491.Path|: netcom|
|000000c0| 2e 63 6f 6d 21 69 78 2e | 6e 65 74 63 6f 6d 2e 63 |.com!ix.|netcom.c|
|000000d0| 6f 6d 21 68 6f 77 6c 61 | 6e 64 2e 72 65 73 74 6f |om!howla|nd.resto|
|000000e0| 6e 2e 61 6e 73 2e 6e 65 | 74 21 63 73 2e 75 74 65 |n.ans.ne|t!cs.ute|
|000000f0| 78 61 73 2e 65 64 75 21 | 67 65 72 61 6c 64 6f 2e |xas.edu!|geraldo.|
|00000100| 63 63 2e 75 74 65 78 61 | 73 2e 65 64 75 21 61 78 |cc.utexa|s.edu!ax|
|00000110| 70 76 6d 73 2e 63 63 2e | 75 74 65 78 61 73 2e 65 |pvms.cc.|utexas.e|
|00000120| 64 75 21 48 41 4c 46 4c | 49 46 45 0a 46 72 6f 6d |du!HALFL|IFE.From|
|00000130| 3a 20 68 61 6c 66 6c 69 | 66 65 40 61 78 70 76 6d |: halfli|fe@axpvm|
|00000140| 73 2e 63 63 2e 75 74 65 | 78 61 73 2e 65 64 75 0a |s.cc.ute|xas.edu.|
|00000150| 4e 65 77 73 67 72 6f 75 | 70 73 3a 20 61 6c 74 2e |Newsgrou|ps: alt.|
|00000160| 63 6f 6d 70 2e 76 69 72 | 75 73 0a 53 75 62 6a 65 |comp.vir|us.Subje|
|00000170| 63 74 3a 20 46 69 72 65 | 66 6c 79 20 76 69 72 75 |ct: Fire|fly viru|
|00000180| 73 0a 44 61 74 65 3a 20 | 32 38 20 4e 6f 76 20 31 |s.Date: |28 Nov 1|
|00000190| 39 39 34 20 30 38 3a 35 | 31 3a 33 37 20 47 4d 54 |994 08:5|1:37 GMT|
|000001a0| 0a 4f 72 67 61 6e 69 7a | 61 74 69 6f 6e 3a 20 55 |.Organiz|ation: U|
|000001b0| 6e 69 76 65 72 73 69 74 | 79 20 6f 66 20 54 65 78 |niversit|y of Tex|
|000001c0| 61 73 20 40 20 41 75 73 | 74 69 6e 0a 4c 69 6e 65 |as @ Aus|tin.Line|
|000001d0| 73 3a 20 36 31 0a 4d 65 | 73 73 61 67 65 2d 49 44 |s: 61.Me|ssage-ID|
|000001e0| 3a 20 3c 33 62 63 35 6d | 71 24 70 36 33 40 67 65 |: <3bc5m|q$p63@ge|
|000001f0| 72 61 6c 64 6f 2e 63 63 | 2e 75 74 65 78 61 73 2e |raldo.cc|.utexas.|
|00000200| 65 64 75 3e 0a 52 65 70 | 6c 79 2d 54 6f 3a 20 68 |edu>.Rep|ly-To: h|
|00000210| 61 6c 66 6c 69 66 65 40 | 61 78 70 76 6d 73 2e 63 |alflife@|axpvms.c|
|00000220| 63 2e 75 74 65 78 61 73 | 2e 65 64 75 0a 4e 4e 54 |c.utexas|.edu.NNT|
|00000230| 50 2d 50 6f 73 74 69 6e | 67 2d 48 6f 73 74 3a 20 |P-Postin|g-Host: |
|00000240| 61 78 70 76 6d 73 2e 63 | 63 2e 75 74 65 78 61 73 |axpvms.c|c.utexas|
|00000250| 2e 65 64 75 0a 0a 3b 46 | 49 52 45 46 4c 59 20 76 |.edu..;F|IREFLY v|
|00000260| 69 72 75 73 2c 20 62 79 | 20 4e 69 6b 61 64 65 6d |irus, by| Nikadem|
|00000270| 75 73 2e 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |us.     |        |
|00000280| 20 20 20 0a 3b 0a 3b 46 | 69 72 65 66 6c 79 20 69 |   .;.;F|irefly i|
|00000290| 73 20 61 6e 20 65 6e 63 | 72 79 70 74 65 64 2c 20 |s an enc|rypted, |
|000002a0| 6d 65 6d 6f 72 79 20 72 | 65 73 69 64 65 6e 74 20 |memory r|esident |
|000002b0| 76 69 72 75 73 20 77 68 | 69 63 68 20 69 6e 66 65 |virus wh|ich infe|
|000002c0| 63 74 73 0a 3b 2e 43 4f | 4d 66 69 6c 65 73 20 6f |cts.;.CO|Mfiles o|
|000002d0| 6e 20 6c 6f 61 64 2e 20 | 20 49 74 20 69 6e 63 6f |n load. | It inco|
|000002e0| 72 70 6f 72 61 74 65 73 | 20 63 6f 64 65 20 66 72 |rporates| code fr|
|000002f0| 6f 6d 20 50 72 6f 74 6f | 2d 54 2c 20 0a 3b 4c 6f |om Proto|-T, .;Lo|
|00000300| 6b 4a 61 77 20 61 6e 64 | 20 59 42 2d 58 20 76 69 |kJaw and| YB-X vi|
|00000310| 72 75 73 65 73 20 61 6e | 64 2c 20 77 68 65 6e 20 |ruses an|d, when |
|00000320| 69 6e 20 6d 65 6d 6f 72 | 79 2c 20 61 74 74 61 63 |in memor|y, attac|
|00000330| 6b 73 20 61 20 6c 61 72 | 67 65 20 73 65 6c 65 63 |ks a lar|ge selec|
|00000340| 74 69 6f 6e 0a 3b 6f 66 | 20 61 6e 74 69 2d 76 69 |tion.;of| anti-vi|
|00000350| 72 75 73 20 70 72 6f 67 | 72 61 6d 73 20 61 73 20 |rus prog|rams as |
|00000360| 74 68 65 79 20 61 72 65 | 20 65 78 65 63 75 74 65 |they are| execute|
|00000370| 64 2e 20 20 41 6e 74 69 | 2d 76 69 72 75 73 20 70 |d.  Anti|-virus p|
|00000380| 72 6f 67 72 61 6d 73 0a | 3b 69 64 65 6e 74 69 66 |rograms.|;identif|
|00000390| 69 65 64 20 62 79 20 46 | 69 72 65 66 6c 79 27 73 |ied by F|irefly's|
|000003a0| 20 65 78 65 63 75 74 65 | 2f 6c 6f 61 64 20 68 61 | execute|/load ha|
|000003b0| 6e 64 6c 65 72 20 61 72 | 65 20 64 65 6c 65 74 65 |ndler ar|e delete|
|000003c0| 64 2e 0a 3b 46 69 72 65 | 66 6c 79 20 69 6e 63 6f |d..;Fire|fly inco|
|000003d0| 72 70 6f 72 61 74 65 73 | 20 73 69 6d 70 6c 65 20 |rporates| simple |
|000003e0| 63 6f 64 65 20 66 72 6f | 6d 20 70 72 65 76 69 6f |code fro|m previo|
|000003f0| 75 73 20 69 73 73 75 65 | 73 20 6f 66 20 74 68 65 |us issue|s of the|
|00000400| 20 6e 65 77 73 6c 65 74 | 74 65 72 0a 3b 64 65 73 | newslet|ter.;des|
|00000410| 69 67 6e 65 64 20 74 6f | 20 64 65 2d 69 6e 73 74 |igned to| de-inst|
|00000420| 61 6c 6c 20 67 65 6e 65 | 72 69 63 20 56 53 41 46 |all gene|ric VSAF|
|00000430| 45 20 72 65 73 69 64 65 | 6e 74 20 76 69 72 75 73 |E reside|nt virus|
|00000440| 20 61 63 74 69 76 69 74 | 79 0a 3b 66 69 6c 74 65 | activit|y.;filte|
|00000450| 72 73 20 64 65 73 69 67 | 6e 65 64 20 66 6f 72 20 |rs desig|ned for |
|00000460| 4d 69 63 72 6f 73 6f 66 | 74 20 62 79 20 43 65 6e |Microsof|t by Cen|
|00000470| 74 72 61 6c 20 50 6f 69 | 6e 74 20 53 6f 66 74 77 |tral Poi|nt Softw|
|00000480| 61 72 65 2e 20 20 49 74 | 0a 3b 63 6f 6e 74 61 69 |are.  It|.;contai|
|00000490| 6e 73 20 69 6e 73 74 72 | 75 63 74 69 6f 6e 73 20 |ns instr|uctions |
|000004a0| 2d 20 73 70 65 63 69 66 | 69 63 61 6c 6c 79 20 61 |- specif|ically a|
|000004b0| 20 73 65 67 6d 65 6e 74 | 20 6f 66 20 70 73 65 75 | segment| of pseu|
|000004c0| 64 6f 2d 6e 65 73 74 65 | 64 20 0a 3b 6c 6f 6f 70 |do-neste|d .;loop|
|000004d0| 73 20 2d 20 77 68 69 63 | 68 20 73 70 6f 6f 66 20 |s - whic|h spoof |
|000004e0| 46 2d 50 72 6f 74 65 63 | 74 27 73 20 65 78 70 65 |F-Protec|t's expe|
|000004f0| 72 74 20 73 79 73 74 65 | 6d 20 67 65 6e 65 72 69 |rt syste|m generi|
|00000500| 63 20 76 69 72 75 73 0a | 3b 69 64 65 6e 74 69 66 |c virus.|;identif|
|00000510| 69 63 61 74 69 6f 6e 20 | 66 65 61 74 75 72 65 2e |ication |feature.|
|00000520| 0a 3b 0a 3b 46 49 52 45 | 46 4c 59 20 61 6c 73 6f |.;.;FIRE|FLY also|
|00000530| 20 69 6e 63 6c 75 64 65 | 73 20 61 20 76 69 73 75 | include|s a visu|
|00000540| 61 6c 20 6d 61 72 6b 65 | 72 20 74 69 65 64 20 74 |al marke|r tied t|
|00000550| 6f 20 74 68 65 20 73 79 | 73 74 65 6d 20 74 69 6d |o the sy|stem tim|
|00000560| 65 72 0a 3b 74 69 63 6b | 20 69 6e 74 65 72 72 75 |er.;tick| interru|
|00000570| 70 74 20 28 31 43 68 29 | 20 77 68 69 63 68 20 73 |pt (1Ch)| which s|
|00000580| 6c 6f 77 6c 79 20 63 79 | 63 6c 65 73 20 74 68 65 |lowly cy|cles the|
|00000590| 20 4e 75 6d 4c 6f 63 6b | 2c 20 43 61 70 73 4c 6f | NumLock|, CapsLo|
|000005a0| 63 6b 0a 3b 61 6e 64 20 | 53 63 72 6f 6c 6c 4c 6f |ck.;and |ScrollLo|
|000005b0| 63 6b 20 4c 45 44 73 20 | 6f 6e 20 74 68 65 20 6b |ck LEDs |on the k|
|000005c0| 65 79 62 6f 61 72 64 2e | 20 20 54 68 69 73 20 70 |eyboard.|  This p|
|000005d0| 72 6f 64 75 63 65 73 20 | 61 20 6e 6f 74 69 63 65 |roduces |a notice|
|000005e0| 61 62 6c 65 0a 3b 74 77 | 69 6e 6b 6c 69 6e 67 20 |able.;tw|inkling |
|000005f0| 65 66 66 65 63 74 20 77 | 68 65 6e 20 74 68 65 20 |effect w|hen the |
|00000600| 76 69 72 75 73 20 69 73 | 20 61 63 74 69 76 65 20 |virus is| active |
|00000610| 6f 6e 20 61 20 6d 61 63 | 68 69 6e 65 2e 0a 3b 0a |on a mac|hine..;.|
|00000620| 3b 41 6e 74 69 2d 61 6e | 74 69 2d 76 69 72 75 73 |;Anti-an|ti-virus|
|00000630| 20 6d 65 61 73 75 72 65 | 73 20 75 73 65 64 20 62 | measure|s used b|
|00000640| 79 20 46 69 72 65 66 6c | 79 20 76 61 72 79 20 69 |y Firefl|y vary i|
|00000650| 6e 20 65 66 66 65 63 74 | 69 76 65 6e 65 73 73 0a |n effect|iveness.|
|00000660| 3b 64 65 70 65 6e 64 65 | 6e 74 20 75 70 6f 6e 20 |;depende|nt upon |
|00000670| 68 6f 77 20 61 20 75 73 | 65 72 20 65 6d 70 6c 6f |how a us|er emplo|
|00000680| 79 73 20 73 6f 66 74 77 | 61 72 65 2e 20 20 46 6f |ys softw|are.  Fo|
|00000690| 72 20 65 78 61 6d 70 6c | 65 2c 20 77 68 69 6c 65 |r exampl|e, while|
|000006a0| 0a 3b 46 69 72 65 66 6c | 79 20 69 73 20 64 65 73 |.;Firefl|y is des|
|000006b0| 69 67 6e 65 64 20 74 6f | 20 64 65 6c 65 74 65 20 |igned to| delete |
|000006c0| 74 68 65 20 56 69 63 74 | 6f 72 20 43 68 61 72 6c |the Vict|or Charl|
|000006d0| 69 65 20 61 6e 74 69 2d | 76 69 72 75 73 0a 3b 73 |ie anti-|virus.;s|
|000006e0| 68 65 6c 6c 2c 20 56 43 | 2e 45 58 45 2c 20 61 20 |hell, VC|.EXE, a |
|000006f0| 75 73 65 72 20 77 68 6f | 20 65 6d 70 6c 6f 79 73 |user who| employs|
|00000700| 20 74 68 65 20 73 6f 66 | 74 77 61 72 65 20 70 61 | the sof|tware pa|
|00000710| 63 6b 61 67 65 73 20 75 | 74 69 6c 69 74 69 65 73 |ckages u|tilities|
|00000720| 0a 3b 66 6f 72 20 67 65 | 6e 65 72 69 63 20 76 69 |.;for ge|neric vi|
|00000730| 72 75 73 20 64 65 74 65 | 63 74 69 6f 6e 20 73 69 |rus dete|ction si|
|00000740| 6e 67 6c 79 2c 20 77 69 | 6c 6c 20 6e 6f 74 20 62 |ngly, wi|ll not b|
|00000750| 65 20 69 6e 74 65 72 66 | 65 72 65 64 20 77 69 74 |e interf|ered wit|
|00000760| 68 0a 3b 62 79 20 74 68 | 65 20 76 69 72 75 73 2e |h.;by th|e virus.|
|00000770| 20 59 6f 75 72 20 72 65 | 73 75 6c 74 73 20 6d 61 | Your re|sults ma|
|00000780| 79 20 76 61 72 79 2c 20 | 62 75 74 20 74 68 65 20 |y vary, |but the |
|00000790| 76 69 72 75 73 20 64 6f | 65 73 20 65 66 66 65 63 |virus do|es effec|
|000007a0| 74 69 76 65 6c 79 0a 3b | 64 65 6c 65 74 65 20 61 |tively.;|delete a|
|000007b0| 6e 74 69 2d 76 69 72 75 | 73 20 70 72 6f 67 72 61 |nti-viru|s progra|
|000007c0| 6d 73 20 77 68 69 6c 65 | 20 69 6e 20 6d 65 6d 6f |ms while| in memo|
|000007d0| 72 79 20 75 6e 6c 65 73 | 73 20 73 74 65 70 73 20 |ry unles|s steps |
|000007e0| 61 72 65 20 74 61 6b 65 | 6e 0a 3b 62 65 66 6f 72 |are take|n.;befor|
|000007f0| 65 68 61 6e 64 20 74 6f | 20 61 76 6f 69 64 20 74 |ehand to| avoid t|
|00000800| 68 69 73 2e 0a 3b 0a 3b | 46 69 72 65 66 6c 79 20 |his..;.;|Firefly |
|00000810| 69 6e 63 6f 72 70 6f 72 | 61 74 65 73 20 6d 69 6e |incorpor|ates min|
|00000820| 6f 72 20 63 6f 64 65 20 | 61 72 6d 6f 72 69 6e 67 |or code |armoring|
|00000830| 20 74 65 63 68 6e 69 71 | 75 65 73 20 64 65 73 69 | techniq|ues desi|
|00000840| 67 6e 65 64 20 74 6f 20 | 74 68 77 61 72 74 0a 3b |gned to |thwart.;|
|00000850| 74 72 69 76 69 61 6c 20 | 64 65 62 75 67 67 69 6e |trivial |debuggin|
|00000860| 67 2e 0a 20 0a 20 20 20 | 20 20 20 20 20 20 20 20 |g.. .   |        |
|00000870| 20 20 20 20 20 0a 20 20 | 20 20 20 20 20 20 20 20 |     .  |        |
|00000880| 20 20 20 20 20 20 0a 20 | 20 20 20 20 20 20 20 20 |      . |        |
|00000890| 20 20 20 20 20 20 20 2e | 72 61 64 69 78 20 31 36 |       .|radix 16|
|000008a0| 0a 20 20 20 20 20 63 6f | 64 65 20 20 20 20 20 20 |.     co|de      |
|000008b0| 20 73 65 67 6d 65 6e 74 | 0a 20 20 20 20 20 20 20 | segment|.       |
|000008c0| 20 20 20 20 20 20 20 20 | 20 6d 6f 64 65 6c 20 20 |        | model  |
|000008d0| 73 6d 61 6c 6c 0a 20 20 | 20 20 20 20 20 20 20 20 |small.  |        |
|000008e0| 20 20 20 20 20 20 61 73 | 73 75 6d 65 20 63 73 3a |      as|sume cs:|
|000008f0| 63 6f 64 65 2c 20 64 73 | 3a 63 6f 64 65 2c 20 65 |code, ds|:code, e|
|00000900| 73 3a 63 6f 64 65 0a 20 | 0a 20 20 20 20 20 20 20 |s:code. |.       |
|00000910| 20 20 20 20 20 20 20 20 | 20 6f 72 67 20 31 30 30 |        | org 100|
|00000920| 68 0a 20 0a 6c 65 6e 20 | 20 20 20 20 20 20 20 20 |h. .len |        |
|00000930| 20 20 20 20 65 71 75 20 | 6f 66 66 73 65 74 20 6c |    equ |offset l|
|00000940| 61 73 74 20 2d 20 73 74 | 61 72 74 0a 76 69 72 5f |ast - st|art.vir_|
|00000950| 6c 65 6e 20 20 20 20 20 | 20 20 20 20 65 71 75 20 |len     |    equ |
|00000960| 6c 65 6e 20 2f 20 31 36 | 64 20 20 20 20 20 20 20 |len / 16|d       |
|00000970| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 3b 20 31 |        |     ; 1|
|00000980| 36 20 62 79 74 65 73 20 | 70 65 72 20 70 61 72 61 |6 bytes |per para|
|00000990| 67 72 61 70 68 20 0a 65 | 6e 63 72 79 70 74 6c 65 |graph .e|ncryptle|
|000009a0| 6e 67 74 68 20 20 20 65 | 71 75 20 28 6c 61 73 74 |ngth   e|qu (last|
|000009b0| 20 2d 20 62 65 67 69 6e | 29 2f 34 2b 31 0a 20 0a | - begin|)/4+1. .|
|000009c0| 20 0a 20 0a 73 74 61 72 | 74 3a 0a 20 20 20 20 20 | . .star|t:.     |
|000009d0| 20 20 20 20 20 20 20 20 | 20 20 20 6d 6f 76 20 62 |        |   mov b|
|000009e0| 78 2c 20 6f 66 66 73 65 | 74 20 62 65 67 69 6e 20 |x, offse|t begin |
|000009f0| 20 20 20 20 20 20 20 3b | 20 54 68 65 20 45 6e 63 |       ;| The Enc|
|00000a00| 72 79 70 74 69 6f 6e 20 | 48 65 61 64 0a 20 20 20 |ryption |Head.   |
|00000a10| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 6d 6f 76 |        |     mov|
|00000a20| 20 63 78 2c 20 65 6e 63 | 72 79 70 74 6c 65 6e 67 | cx, enc|ryptleng|
|00000a30| 74 68 20 20 20 20 20 20 | 20 3b 0a 65 6e 63 72 79 |th      | ;.encry|
|00000a40| 70 74 69 6f 6e 5f 6c 6f | 6f 70 3a 20 20 20 20 20 |ption_lo|op:     |
|00000a50| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000a60| 20 20 20 20 20 20 20 3b | 0a 20 20 20 20 20 20 20 |       ;|.       |
|00000a70| 20 20 20 20 20 20 20 20 | 20 64 62 20 20 20 20 20 |        | db     |
|00000a80| 20 38 31 68 20 20 20 20 | 20 20 20 20 20 20 20 20 | 81h    |        |
|00000a90| 20 20 20 20 20 3b 20 58 | 4f 52 20 57 4f 52 44 20 |     ; X|OR WORD |
|00000aa0| 50 54 52 20 5b 42 58 5d | 2c 20 3f 3f 3f 3f 68 0a |PTR [BX]|, ????h.|
|00000ab0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000ac0| 64 62 20 20 20 20 20 20 | 33 37 68 20 20 20 20 20 |db      |37h     |
|00000ad0| 20 20 20 20 20 20 20 20 | 20 20 20 20 3b 0a 65 6e |        |    ;.en|
|00000ae0| 63 72 79 70 74 69 6f 6e | 5f 76 61 6c 75 65 5f 31 |cryption|_value_1|
|00000af0| 3a 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |:       |        |
|00000b00| 20 20 20 20 20 20 20 20 | 20 20 3b 0a 20 20 20 20 |        |  ;.    |
|00000b10| 20 20 20 20 20 20 20 20 | 20 20 20 20 64 77 20 20 |        |    dw  |
|00000b20| 20 20 20 20 30 30 30 30 | 68 20 20 20 20 20 20 20 |    0000|h       |
|00000b30| 20 20 20 20 20 20 20 20 | 3b 0a 20 20 20 20 20 20 |        |;.      |
|00000b40| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000b50| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000b60| 20 20 20 20 20 20 3b 0a | 20 20 20 20 20 20 20 20 |      ;.|        |
|00000b70| 20 20 20 20 20 20 20 20 | 64 62 20 20 20 20 20 20 |        |db      |
|00000b80| 38 31 68 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |81h     |        |
|00000b90| 20 20 20 20 3b 20 58 4f | 52 20 57 4f 52 44 20 50 |    ; XO|R WORD P|
|00000ba0| 54 52 20 5b 42 58 2b 32 | 5d 2c 20 3f 3f 3f 3f 68 |TR [BX+2|], ????h|
|00000bb0| 0a 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |.       |        |
|00000bc0| 20 64 62 20 20 20 20 20 | 20 37 37 68 20 20 20 20 | db     | 77h    |
|00000bd0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 3b 0a 20 |        |     ;. |
|00000be0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 64 |        |       d|
|00000bf0| 62 20 20 20 20 20 20 30 | 32 68 20 20 20 20 20 20 |b      0|2h      |
|00000c00| 20 20 20 20 20 20 20 20 | 20 20 20 3b 20 32 20 64 |        |   ; 2 d|
|00000c10| 69 66 66 65 72 65 6e 74 | 20 72 61 6e 64 6f 6d 20 |ifferent| random |
|00000c20| 77 6f 72 64 73 0a 65 6e | 63 72 79 70 74 69 6f 6e |words.en|cryption|
|00000c30| 5f 76 61 6c 75 65 5f 32 | 3a 20 20 20 20 20 20 20 |_value_2|:       |
|00000c40| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000c50| 20 20 3b 20 67 69 76 65 | 20 33 32 2d 62 69 74 20 |  ; give| 32-bit |
|00000c60| 65 6e 63 72 79 70 74 69 | 6f 6e 0a 20 20 20 20 20 |encrypti|on.     |
|00000c70| 20 20 20 20 20 20 20 20 | 20 20 20 64 77 20 20 20 |        |   dw   |
|00000c80| 20 20 20 30 30 30 30 68 | 20 20 20 20 20 20 20 20 |   0000h|        |
|00000c90| 20 20 20 20 20 20 20 3b | 0a 20 20 20 20 20 20 20 |       ;|.       |
|00000ca0| 20 20 20 20 20 20 20 20 | 20 61 64 64 20 20 20 20 |        | add    |
|00000cb0| 20 62 78 2c 20 34 20 20 | 20 20 20 20 20 20 20 20 | bx, 4  |        |
|00000cc0| 20 20 20 20 20 3b 0a 0a |                         |     ;..|        |
+--------+-------------------------+-------------------------+--------+--------+