Bypassing Breakpoints with File "Streams"
 Piotr Bania (Piotr) <bania piotr gmailcom> |
Tuesday, February 6 2007 13:43.18 CST |
Some short new pseudo-article of mine:
http://piotrbania.com/all/articles/bypassing_the_breakpoints.txt
Comments
 mjs |
Posted: Wednesday, February 7 2007 03:10.48 CST |
| I guess that the memory gets changed during a DMA transfer. In this situation, the processor has no chance to detect the memory access ... | |
 EliCZ |
Posted: Wednesday, February 7 2007 03:48.25 CST |
| Yes, it can be DMA. Plus, in Windows are Drx (if active)swapped on KiSystemService entry and exit. | |