.include "asm_defines.h"
        
;// constants   
ADDR    = 0xB34D4D4D    ;// 77.77.77.178 in network byte order
NAP     = 360000000             ;// 1 hour in seconds = time to sleep
        
;// variables are all stored on the stack at the following offsets
SA      = -0x10         ;// struct sockaddr_in
SAFAM   = -0x10 
SAP     = -0xE  
SAIP    = -0xC  

SOCK    = -0x14         ;//socket handle
        
BUF     = -0x20         ;//send buffer
BUFSZ   = 0xC           ;//12 bytes     
        
ARGS    = -0x38         ;//function arg strings
ARG0    = -0x38 
ARG1    = -0x34 
ARG2    = -0x30
ARG3    = -0x2c 
ARG4    = -0x28
ARG5    = -0x24 
        
.text   
.globl _start   
        
_start: 
        pushl   %ebp            ;//save the old frame pointer
        movl    %esp, %ebp      ;//use ebp to reference variables
        
        ;// first we clear out our memory
        leal    SA(%ebp), %ebx  ;/load ebx with the address of starting memory to clear
        movl    $28, %ecx       ;//load ecx with number bytes to clear (buffer + sockaddr_in) = (12 + 16)
zmem:   
        movb    $0, (%ebx)      ;//zero the byte in %bl
        inc     %edx            ;//counter      
        inc     %ebx            ;//expose next byte
        cmp     %edx, %ecx      ;//loop control
        jne     zmem

        ;//set up address struct
        movw    $AF_INET, SAFAM(%ebp)
        movl    $ADDR, SAIP(%ebp)

        ;//create the socket
        ;//socket(AF_INET, SOCK_RAW, IPPROTO_ICMP);
socket: 
        movl    $SYS_socketcall, %eax
        movl    $SYS_socket, %ebx
        movl    $AF_INET, ARG0(%ebp)
        movl    $SOCK_RAW, ARG1(%ebp)
        movl    $IPPROTO_ICMP, ARG2(%ebp)
        leal    ARGS(%ebp), %ecx
        int     $0x80 
        movl    %eax, SOCK(%ebp)
        cmpl    $0x1, %eax
        jle     exit

icmp:   
        ;//setup the icmp header
        leal    BUF(%ebp), %eax         
        movb    $0x08, (%eax)           ;//type
        movb    $0x00, 0x1(%eax)        ;//code
        movw    $0xfff5, 0x2(%eax)      ;//checksum 2 bytes
        movw    $0x0001, 0x4(%eax)      ;//ID 2 bytes
        movw    $0x0001, 0x6(%eax)      ;//SEQ 2 bytes
        
        xorl    %esi, %esi      ;//esi is the counter for sending packets

send:           ;//we cant use 2 memory operands in one expression, hence the register swappdeedooing
        ;//sendto(sock, buf, 8, 0, (struct sockaddr *) &sa, SALEN)      %ecx already contains arg address
        movl    $SYS_socketcall, %eax   ;//always this for sock calls
        movl    $SYS_sendto, %ebx               ;// 11 is # for sendto
        movl    SOCK(%ebp), %edx        ;// the socket
        movl    %edx, ARG0(%ebp)        
        leal    BUF(%ebp), %edx         ;//the buffer
        movl    %edx, ARG1(%ebp)        
        movl    $0x8, ARG2(%ebp)        ;//length 
        movl    $0x0, ARG3(%ebp)        ;//no options
        leal    SA(%ebp), %edx          ;// sockaddr_in address
        movl    %edx, ARG4(%ebp)
        movl    $SALEN, ARG5(%ebp)      ;// sizeof struct
        int     $0x80
        
        ;//test return value
        cmpl    $0x1, %eax
        jle     exit
        
        incl    %esi            ;//our loop control sends 5 packets
        cmpl    $0x5, %esi
        jl      send

exit:   
        movl    $SYS_exit, %eax         ;//system exit
        movb    $0x1, %bl
        int     $0x80