Assuming the following lines of code:
MOV DWORD PTR FS:,EAX CALL someRoutine MOV EAX,DWORD PTR DS:[EAX+4] CMP DWORD PTR DS:[EAX+1204],0 JE placeInCode XOR EAX,EAX
My goal is to change [someRoutine] in such a way that the JE is always taken - I specifically don't want to tamper with the code outside [someRoutine]. So just think of [someRoutine] as a set of instructions that you can freely change and adapt.
I can't seem to understand how to solve this equation. If there was no MOV instruction after the call, I guess I could just go to the address [EAX+1204] and fill it with 0. But like this, there seem to be too many unknown dependencies.