Secrets

Every WindowsNT box has a NSA trojan called _Total.exe which is loaded by kernel itself, it can override any user functions and start spying on command.

>>5
Actually it's
nop
nop
nop
nop
nop
function:
mov edi, edi
which is 5 bytes for a long jump and a 2-byte nop that can be atomically replaced with a short jump to the long jump. (Consider what would happen if another thread was at `push ebp' while you patch your jump in)