Reading EIP through CALL is called "delta addressing", and it was a common technique in malware back in the days when viruses were infecting executable files (n

Reading EIP through CALL is called "delta addressing", and it was a common technique in malware back in the days when viruses were infecting executable files (nowadays this doesn't exist because of digitally signed code on all major platforms except Linux)