Merge branch 'master' of https://github.com/landhb/HideProcess

README.md

@@ -10,3 +10,41 @@ For more information on the concepts used here please check out my [article](htt
 
 Currently only works on 32bit systems. Does not bypass PatchGuard or driver signing requirements.
 
+Please use a VM whenever you run this. 
+
+#### Compiling The Driver 
+
+The driver has a number of dependencies and you'll need to compile it using msbuild or visual studio. I used Visual Studio during the development process. You'll need:
+
+1. [The Windows 10 SDK](https://developer.microsoft.com/en-us/windows/downloads/windows-10-sdk)
+2. [WDK 10](https://msdn.microsoft.com/en-us/library/windows/hardware/ff557573(v=vs.85).aspx)
+
+Once those are setup and integrated with Visual Studio, start a new empty KMDF (Kernel Mode Driver Framework) project and import the files in the /driver folder. 
+
+Under Debug -> [ProjectName] Properties -> Driver Settings -> General, make sure your Target OS Version is Windows 7 and the Target Platform is Desktop.
+
+Then under Build -> Configuration Manager, make sure the Platform is Win32, and x86 is selected under "Active solution platform".
+
+Now you should be able to use Build -> Build [ProjectName] to build the project. This will generate a .sys file if everything went well. Then put the .sys file in c:\Windows\System32\drivers\[ProjectName].sys, or change the following define statement in loader.c to the path you've specified:
+
+#define DRIVER "c:\\\\Windows\\System32\\drivers\\Rootkit.sys"
+
+#### Compiling The Loader
+
+For the loader you can simply use the makefile and mingw to cross compile it. 
+
+```
+sudo apt-get install mingw-w64
+```
+
+Then you can create a 32-bit Windows executable using the makefile with:
+
+```
+make 32bit
+```
+
+And a 64-bit Windows executables with:
+
+```
+make 64bit
+```