I am curious; does anyone know how does MS stop patching of the system call
table on x64? On 2k3SP1 on x32 it makes the table readonly. Does it do
something more on x64? Similarly how does it protect IDT, GDT etc from being
patched?
I am curious; does anyone know how does MS stop patching of the system call
table on x64? On 2k3SP1 on x32 it makes the table readonly. Does it do
something more on x64? Similarly how does it protect IDT, GDT etc from being
patched?