
Virus bevor EMU
---------------
cs:1540BDC301         mov    bp,01C3
cs:1543 BB5015         mov    bx,1550
cs:1546 2E8137223A     xor    cs:word ptr [bx],3A22
cs:154B 43             inc    bx
cs:154C 43             inc    bx
cs:154D 4D             dec    bp
cs:154E 75F6           jne    1546
cs:1550 CA3A22         retf   223A
cs:1553 67A3D7343BA3   mov    [A33B34D7],ax

Virus nach EMU                                           Wildcarded code:
--------------                                          
cs:1540 BDC301         mov    bp,01C3                    BD
cs:1543 BB5015         mov    bx,1550                      BB
cs:1546 2E8137223A     xor    cs:word ptr [bx],3A22        81  [seg: skipped]
cs:154B 43             inc    bx                           43
cs:154C 43             inc    bx                           43
cs:154D 4D             dec    bp                           4d
cs:yyyy 90             nop                                 --  [nop: skipped]
cs:154E 75F6           jne    1546                         75
cs:1550E80000       call   1553                         e8
cs:1553 5D            pop    bp                           5d
cs:1554 81ED1601      sub    bp,0116                      81
cs:1558 81FC4941      cmp    sp,4149                      81
cs:155C 740B          je     1569                         74
cs:155E 8DB6EF01      lea    si,[bp+01EF]                 8d
cs:1562 BF0001        mov    di,0100                      bf
                    
Decrypted Code z.B.:  e8 00 00 5d 81 ed 16 01 81 fc 49 41 74 0b 8d b6 ....

