Win11 25H2 (26200.x) Fix for you

[CyberExploiter]

Win11 25H2 (26200.x) breaks the keyboard chain. Tested 26200.8655.

1. win32ksgd.sys removed, merged into win32k.sys.
   Symbol renamed: g_SessionGlobalSlots -> gSessionGlobalSlots.
   RVA 0x877D8 on 26200.8655. gLowSessionGlobalSlots at 0x87810 holds session 0.

2. Slot-table AOB (win32k.sys):
   48 8B 05 ? ? ? ? FF C9 48 8B 04 C8 C3
   disp32 at match+3. Legacy AOB misses on the inserted FF C9.

3. Walker is three derefs from symbol storage, not two:
   array_addr = read(symbol_VA)
   slot_value = read(array_addr + 8*sid)
   state_ptr = read(slot_value)

4. Slot index = game process session ID, not slot[0..3] scan.
   VMMDLL_ProcessGetInformation -> info.win.dwSessionId (sub-struct, not top).
   slot_idx = sid - 1.

5. gafAsyncKeyState offset 0x37F8 on 26200.8655.
   Source: win32kbase.sys GetAsyncKeyState RVA 0x186C40, and sil, [rax+rdx+37F8h].
   AOB: B9 00 80 FF FF 40 22 B4 10 ? ? ? ?
   disp32 at match+9. Anchors on 0xFFFF8000 GetAsyncKeyState bit mask.

6. win32k.sys / win32kbase.sys .text reads return zero through cached path.
   disp32 reads and slot pointer reads need VMMDLL_MemReadEx with VMMDLL_FLAG_NOCACHE.
   FindSignature itself is fine.

7. Session-state struct fields on 26200.8655:
   +0x37F8 gafAsyncKeyState (64B bitmap)
   +0x3878 gafRecentKeysDown (being phased out by Feature_AsyncKeyStateRecentDown_Removal2)
   +0x4E30 per-input-thread KeyEvent ptr

Bit decode unchanged: state_bitmap[(vk2)/8] & (1 << (2(vk&3))).

Proxy waterfall: csrss.exe, then winlogon.exe / wininit.exe with VMMDLL_PID_PROCESS_WITH_KERNELMEMORY.

[Metick]

Please make a PR for it. I don't have or use DMA anymore, ensure you still keep support for previous windows versions.

[AVGGAMER07]

@Metick I've been using your library since release and since the recent update input is no longer working. I know basics for my project and I dont know how to implement the fix this user is stating. Can you please help or update it for the latest changes for windows?