Steve Walkin wrote:
Can we reuse this image(.sys) ? What will be the implications.
You must fix checksum of image (see PE optional header).
I think the better is to remove the ‘Writable’ flag from ‘INIT’ section during build.
For example: ImageNtHeader -> patch -> ChecksumMappedFile -> flush on disk.