I am just curious to knwo about Picos in Windows. So does the sussystem
provider driver take care of tasks liek allocation of memory creation of
thread etc completely shielding them from Windows?
lets take an example:
NtWriteVirtualMemory, this API is implemented in teh Kernel as
MmCopyVirtaulMemory. So I put a breakpoint in that API, and dran a custom
linux app which does something similar (in linux terms). I never got any
hits from the subsystem (I was hoping i would either get a hit from the
pico process itself, or if not atleast teh system process or the subsystem
driver would invoke it, nothing happened.
so my question is is windows completly oblivious to waht goes on inside and
only cares about create process/thread ExitProcess/thread?