bits 32

;
; This is eEye's approach.
;
entry:
	mov esi, [0xffdff038]
	lodsd
	lodsd
scan:
	dec eax
	cmp dword [eax], 0x00905a4d
	jnz scan