a study virus for pe file writed by win32 asm