I wanted to write this because I was unable to find anything online about what I was trying to accomplish.
A while back I came up with the idea of potentially backporting Windows 11's improved thread scheduling features for newer CPUs (Multi-CCD and hybrid designs with E-cores etc.) to Windows 10, because frankly I really dislike Windows 11. This however, proved to be impossible through kernel modification.
The thread scheduling is (likely) handled by the functions KiSwapThread
, KiSelectCandidateProcessor
, KiSearchForNewThread
and other undocumented functions. These can be found in the kernel image ntoskrnl.exe
.
Could we just implement it ourselves? Well you would need to reverse engineer it, but even if we did have the code, we would still not be able to "just patch it in"... because of a security feature: cryptographic integrity checks.
*Side note: The Windows NT kernel does actually get updated with Wind