We use VMProtect to virtualize some functions in our Windows driver. The driver is working fine after it is packed with VMProtect but I noticed the subsystem of the driver was changed from Native to Windows GUI. Do I need to do post-processing on the driver to fix this or I did something wrong here?
Just found out it was our mistake. We have changed linker flags from /DRIVER:WDM to /DRIVER, which also cause subsystem to change from NATIVE to WINDOWS. Specify /SUBSYSTEM:NATIVE manually fixed the problem.
