Reverse Engineering Asked on July 26, 2021
I have seen many drivers with a section named PAGE, but couldn’t find good enough information on it, what is the role of this section?
Simple, it's a section that will supposedly be mapped as paged memory. This can contain code or data and is governed by the PAGED_CODE macro, among others, at source code level.
That is, whatever gets stored in that section cannot be accessed at arbitrary IRQLs. Quote:
If the IRQL > APC_LEVEL, the PAGED_CODE macro causes the system to ASSERT.
Also see this for an entry point into the overall topic. But I reckon given the specific nature of your question you are aware of paged and nonpaged pool and so on.
Correct answer by 0xC0000022L on July 26, 2021
Get help from others!
Recent Answers
Recent Questions
© 2024 TransWikia.com. All rights reserved. Sites we Love: PCI Database, UKBizDB, Menu Kuliner, Sharing RPP