When you're running inside the binary you can do mostly whatever you want. Especially in this case where the back door could run before mprotect(2) has been us

When you're running inside the binary you can do mostly whatever you want. Especially in this case where the back door could run before mprotect(2) has been used to write-protect critical structures like the GOT and PLT (not that that is watertight either).