A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv. - View it on GitHub