Under some circumstances, Windows has to overwrite important files such as csrss.exe and lsass.exe. Such as when updates affect these files. Or when the files are corrupted and repaired with the SFC tool. How does it accomplish this without ending the processes and triggering a blue screen?
I've tried adding the registry value
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations and giving it this value
But when I rebooted, the registry value was deleted, but no files were changed.
My goal is to be able to overwrite files these files with my own modified versions without using an external tool like a linux live cd.
Yes, I am aware this is stupid. I'm fully responsible for any damage caused by this. Nonetheless, I still want to know how. Thanks for any help.