var start mov start, eip asm start, "mov eax, ds:[edi+eax*4]" add start, 3 asm start, "jmp eax" ret