your entire ""paper" can be written down in a tweet
uint32_t id;
id = *((uint32_t*)GetProcAddress(GetModuleHandle(L"ntdll"), L"NtCreateFile") + 1);
mov r10, rcx
mov eax, id
syscall
ret
This Tweet was deleted by the Tweet author. Learn more
Conversation
also, manually resolving imports has been around for decades, and there are much better tricks to do with it.
various links that do what you do but better:
github.com/JustasMasiulis github.com/JustasMasiulis unknowncheats.me/forum/c-and-c-
Based on your responses it appears you did not read the paper. We state the concept was first discussed in 1997. We also state our technique is nothing revolutionary.
You are a very strange and angry person.
2