Here a tutorial diving deep into the kernel and getting the correct addresses for the int3 call table that can exist in PACE/Ilok protected apps. Pace/Iloks steals user mode calls and redirects them to an int3 table. Here the driver takes over and redirects those calls back to their correct locations.
