Re: Clever ways to hide a compare



>You can do self modifying code on NT without any problems, you just have to
>either modify the PE header on disk or use VirtualProtect to allow writing
>to your .text section.

Even simpler: Put the corresponding code into the data section (e.g.,
as a function) and call or jump to it. Might not work on machines with
"NX bit" if the data section has not set the "executable" flag,
though. Same applies for self-modifying code created on the stack.

.