Creating Trampolines and Re-Obfuscating Function Pointers in Runtime Linking - Part 7

Creating Trampolines and Re-Obfuscating Function Pointers in Runtime Linking - Part 7

Dr Josh Stroschein via YouTube Direct link

Starting with the function that creates the trampolines

1 of 15

1 of 15

Starting with the function that creates the trampolines

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

Creating Trampolines and Re-Obfuscating Function Pointers in Runtime Linking - Part 7

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Starting with the function that creates the trampolines
  2. 2 Location of the new import table
  3. 3 Concerning precomputed values
  4. 4 Typing arguments
  5. 5 Loading the required DLLs
  6. 6 Debugging
  7. 7 Preparing to store function pointers
  8. 8 Getting the desired function pointer
  9. 9 Allocating new memory
  10. 10 Checking memory for padding bytes 0xABABABAB
  11. 11 Basis for the trampoline
  12. 12 Generating random numbers
  13. 13 Adding code to the trampoline
  14. 14 Example function call
  15. 15 Wrapping up and recap

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.