just wondering if I can get base address via driver also.. the default one works on stuff that doesn't have kernel anti cheats.

[gurachan]

No description provided.

[kkent030315]

SystemHandleInformation HandleTableEntry->Object contains process PEPROCESS pointer of its process handle

void* buffer;
libmhyprot::read_kernel_memory<void*>(
    HandleTableEntry->Object + OffsetSectionBaseAddressDependsNtosVer,
    &buffer,
    sizeof(void*));

; ntoskrnl.exe 10.0.19041.928
PsGetProcessSectionBaseAddress proc near
mov rax, [rcx+520h] ; PEPROCESS->SectionBaseAddress
ret
PsGetProcessSectionBaseAddress endp