EBalloon / ThreadNotify

POC Resgister-Callback Kernel

Hooks the CiThreadNotification function in mmcss.sys.

This function was registered by PsSetCreateThreadNotifyRoutine.

I don't know if this will be detected in the most decent Anti-Cheats like EAC, BE, VANGUARD, because it's in .text.

Load Driver with kdmapper