ReadDriver A kernel memory read driver using data ptr hook Feature Read and write process memory Get process module address Usage Change NtUserRegisterTouchPadCapable offset in Entry.cpp ReadDriver/MyDriver1/Entry.cpp Line 23 in 142da14 uintptr_t HookAddress = reinterpret_cast<uintptr_t>(win32k)+0x664E0; You Can find it with ida: So in my computer, my offset is x664E0.