DoppelGate relies on reading ntdll on disk to grab syscall stubs, and patches these syscall stubs into desired functions to bypass Userland Hooking.
Geek Repo:Geek Repo
Github PK Tool:Github PK Tool