Function hooking DLLs and how to evade them with 
In/DirectSyscalls

User mode and kernel mode are two distinct privilege levels in an OS that regulate how the CPU interacts with the software and manages system resources:

• User mode: In user mode, where regular applications and user-level processes operate—such as word processors and web browsers—programs are constrained by limited access to system hardware and resources. They function within a protected environment, devoid of direct manipulation of critical system resources. This segregation ensures that user-level activities proceed without compromising the stability and security of the underlying OS, maintaining a necessary barrier between user applications and sensitive system components.
• Kernel mode: Kernel mode, also known as privileged mode, constitutes the domain where the OS’s core, or kernel, operates, overseeing system resources and delivering vital services to user-level applications...