SecureOL VE2 virtual environment protection bypass

It's possible to address physical memory directly from NTVDM subsystem...