Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
BOOL flag;<br />
if(flag)<br />
{<br />
//do something<br />
}<br />
In-Place Patching<br />
© <strong>Below</strong> <strong>Gotham</strong> <strong>Labs</strong>, 2009<br />
cmp DWORD PTR _flag, 0<br />
je SHORT $LN2@routine<br />
;do something<br />
$LN2@routine:<br />
Can alter code without diverting path of execution<br />
Replace je SHORT $LN2@routine (i.e. 0x74 0x24)<br />
With nop nop (i.e. 0x90 0x90)<br />
Code within the brackets is always executed!<br />
17