3 ms·
Why do Windows functions all begin with a MOV EDI, EDI instruction? (2011)
- burnt-resistor 1y agoThis potentially violates W^X, self-modifying code hurts the instruction cache, and it's probably less secure too.
- kristianp 1y agoAre these patches for dealing with bugs in popular old programs?
- rolph 1y agoif you want to say bugs, ok but this goes beyond bugs, this ensures there is a space to install a jmp out of the function to execute your patch [haxed version of the function]