Completed
Starting with the function that creates the trampolines
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Creating Trampolines and Re-Obfuscating Function Pointers in Runtime Linking - Part 7
Automatically move to the next video in the Classroom when playback concludes
- 1 Starting with the function that creates the trampolines
- 2 Location of the new import table
- 3 Concerning precomputed values
- 4 Typing arguments
- 5 Loading the required DLLs
- 6 Debugging
- 7 Preparing to store function pointers
- 8 Getting the desired function pointer
- 9 Allocating new memory
- 10 Checking memory for padding bytes 0xABABABAB
- 11 Basis for the trampoline
- 12 Generating random numbers
- 13 Adding code to the trampoline
- 14 Example function call
- 15 Wrapping up and recap