Protected Windows driver has subsystem changed from Native to Windows GUI

[maxion]

Hello,

We use VMProtect to virtualize some functions in our Windows driver. The driver is working fine after it is packed with VMProtect but I noticed the subsystem of the driver was changed from Native to Windows GUI. Do I need to do post-processing on the driver to fix this or I did something wrong here?

Thanks.

[Admin]

Do you have an example (original SYS+VMP file) that shows your problem?

[maxion]

Just found out it was our mistake. We have changed linker flags from /DRIVER:WDM to /DRIVER, which also cause subsystem to change from NATIVE to WINDOWS. Specify /SUBSYSTEM:NATIVE manually fixed the problem.

[Admin]

The latest version of VMProtect shows all fields from PE headers: