Whitepaper detailing Microsoft API function pointer hijacking.
You can download it from the following link: https://packetstormsecurity.com/files/download/61372/shinnai-msapi.pdf
Source: https://packetstormsecurity.com/files/61372/shinnai-msapi.pdf.html