Source: https://www.trellix.com/en-us/assets/docs/atr-library/tr-function-hooking-for-recon-and-exploitation.pdf