usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything due to being inside of legit memory (signed legit driver).
I don't understand.
my driver :
DriverEntry(In PDRIVER_OBJECT Driver, In PUNICODE_STRING RegPath)
if i want use this tool
What should I do?
how to get driver mappedImageBase, and mappedImageSize?
Do you have a complete example?
Sorry, I'm stupid
system is win10 21H2. It maps the driver correctly. But will lead to crash on any reboot and sometimes installing new software after using. Hard reset will boot and reboot without problem. But anytime after running code with this. It's BSoD as the attached picture.
Any way to solve this?