-
Load symbols in windbg (.sympath srv*https://msdl.microsoft.com/download/symbols;.reload /f)
-
lv to get base virtual address of nvlddmkm
-
add 2863B4 (or calculate offset from base by finding: 75 07 B8 69 00 00 00)
-
Confirm that this starts with 75
Now live WinDBG won't let you edit virtual memory, so edit it in physical memory.
-
!vtop 0 <virtual address without the `>
-
!eb <physical address> eb