a PoC for reflectiveloader with user-mode rootkit - View it on GitHub