[ GetProcAddress ] https://docs.microsoft.com/en-us/windows/win32/api/libloaderapi/nf-libloaderapi-getprocaddress [ VirtualProtectEx ] https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualprotectex 5 params, 2nd is addr of protection to change [ VirtualAllocEx ] https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualallocex 5 params, ret (eax) is base addr of allocated memory