It depends on x86 addressing modes, but tldr lookup tables: > mov eax, [base + eax*4] You load 1 address if eax is 0 and a different on if it’s 1. There’s als

It depends on x86 addressing modes, but tldr lookup tables: > mov eax, [base + eax*4] You load 1 address if eax is 0 and a different on if it’s 1. There’s also a jump instruction so you can implement a conditional jump through mov. This is based on the Stephen Dolan paper: https://harrisonwl.github.io/assets/courses/malware/spring2017/papers/mov-is-turing-complete.pdf https://harrisonwl.github.io/assets/courses/malware/spring20...