Old GameGuard versions allowed any process to call DeviceIoControl with codes that read/write kernel memory.
GameGuard works by "hooking" functions. A bypass can involve: Un-hooking bypass nprotect gameguard
: Using tools to map unsigned drivers can lower a system's overall security posture, potentially allowing actual malware to exploit the same bypass pathways. Old GameGuard versions allowed any process to call