" the VirtualAlloc’ed page tables can be paged to disk themselves and thus when paged back into physical memory they will most likely be allocated in a new physical page. However, this has proven to be an insignificant issue after suspending the working set manager thread which is responsible for paging virtual memory to disk. "
It means that you only need the vulnerable driver to be loaded once, rather than being loaded continuously. Useful for getting past anticheats I guess.
6 comments
[ 13.9 ms ] story [ 176 ms ] thread" the VirtualAlloc’ed page tables can be paged to disk themselves and thus when paged back into physical memory they will most likely be allocated in a new physical page. However, this has proven to be an insignificant issue after suspending the working set manager thread which is responsible for paging virtual memory to disk. "
I don't quite get this part, it seems like a contradiction? It relies on VDM but VDM doesn't need to be loaded?