Conversation
|
After testing, it can indeed effectively avoid BSOD, but with the modified reading method, there is a high probability that it cannot obtain the physical address when reading processes with kernel anti-cheat protection, ultimately leading to read failures. STATUS_NOT_FOUND |
Intercept mov cr3, to get the real cr3 of the game |
|
I tried to traverse mmpfn to get the real cr3, but this process is very time-consuming, especially under vmExit, the system interruption time is too long, and finally WATCHDOG blue screen or automatic restart. Can you explain the principle of obtaining real cr3 by intercepting cr3? I don't quite understand it. |
Improved hypervisor stability