[Atexrh]

I've been trying to inject my module in to a game protected with obRegisterCallbacks
What functions or methods do you suggest as i can not open any handles to the process
also: i would like to keep this usermode

[EP_X0FF]

You can use this -> http://www.kernelmode.info/forum/viewto ... =15&t=3418 to load in the process at the early stage of it life.

[ring0star]

That won't work. You can unregister their callbacks or set a callback above and below their procedure and reset access rights or filter out your process.

[InvokeStatic]

That won't work. You can unregister their callbacks or set a callback above and below their procedure and reset access rights or filter out your process.

You could also register your own callback with the same altitude and cause a collision. The game anticheat that I was dealing with didn't check ObRegisterCallbacks NTSTATUS :lol: .

You can also just byte patch ObRegisterCallbacks and then unpatch it after you are finished. You can view the driver I created for this purpose here:

http://www.unknowncheats.me/forum/dayz- ... t-sys.html