bits 32 find_ntoskrnl_pcr: mov eax, 0x8050babe scan_down: and ax, 0xf001 dec eax cmp [eax], word 0x5a4d jnz scan_down