bits 32 ; ; This is eEye's approach. ; entry: push byte 0x38 pop ebx mov eax, [fs:ebx] mov eax, [eax+4] scan: and ax, 0xf001 dec eax cmp word [eax], 0x5a4d jnz scan