Re: how does "hpcboot.exe" work?

> I am a bit shocked that "Windows-CE-v1" has no memory protection.

IIRC it did but there were several development functions:
 http://www.jp.netbsd.org/ja/JP/ml/port-hpcmips-ja/199812/msg00000.html
 http://www.jp.netbsd.org/ja/JP/ml/port-hpcmips-ja/199812/msg00002.html
(in Japanese)

WindowsCE development kit provieded "VirtualCopy()" function that
could map any physical memory address spaces to virtual address space.

I cannot find evidence but IIRC pbsdboot (and also maybe hpcboot) used
such functions and overwrote CPU interrupt/exception vectors to hook
kernel mode access.
---
Izumi Tsutsui