Hello,
Is there way to change memory protect attributes (read/write/execute)
in kernel mode ?
NTDLL has NtProtectVirtualMemory but NTOSKRNL does not export
similar function. Can I use NtProtectVirtualMemory in kernel ?
i.e. use int 2e to call it since that is not exported.
Or is there other way ?
Is it possible to change in portable way other PTE attributes, for
example disable “copy on write” ?
–
Best regards,
Andrew mailto:xxxxx@nizhny.ru