/tf-article2-windbg-19.txt
Secret
Created Aug 13, 2017
| 6: kd> ? 1cf0 * 0x1000 | |
| Evaluate expression: 30343168 = 00000000`01cf0000 | |
| 6: kd> !pte 00000000`01cf0000 | |
| VA 0000000001cf0000 | |
| PXE at FFFFF6FB7DBED000 PPE at FFFFF6FB7DA00000 PDE at FFFFF6FB40000070 PTE at FFFFF6800000E780 | |
| contains 02D0000654195867 contains 0320000656E18867 contains 4F20000653448867 contains CF30000651EC9867 | |
| pfn 654195 ---DA--UWEV pfn 656e18 ---DA--UWEV pfn 653448 ---DA--UWEV pfn 651ec9 ---DA--UW-V | |
| 6: kd> !pfn 651ec9 | |
| PFN 00651EC9 at address FFFFFA8012F5C5B0 | |
| flink 000004F3 blink / share count 00000001 pteaddress FFFFF6800000E780 | |
| reference count 0001 used entry count 0000 Cached color 0 Priority 5 | |
| restore pte 00000080 containing page 653448 Active M | |
| Modified |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment