Skip to content

Instantly share code, notes, and snippets.

@mvankuipers

mvankuipers/tf-article2-windbg-19.txt Secret

Created August 13, 2017 22:15
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mvankuipers/20a2c60308fd1fdae6f96ce4483f89f9 to your computer and use it in GitHub Desktop.
Save mvankuipers/20a2c60308fd1fdae6f96ce4483f89f9 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
tf-article2-windbg-19.txt
6: kd> ? 1cf0 * 0x1000
Evaluate expression: 30343168 = 00000000`01cf0000
6: kd> !pte 00000000`01cf0000
VA 0000000001cf0000
PXE at FFFFF6FB7DBED000 PPE at FFFFF6FB7DA00000 PDE at FFFFF6FB40000070 PTE at FFFFF6800000E780
contains 02D0000654195867 contains 0320000656E18867 contains 4F20000653448867 contains CF30000651EC9867
pfn 654195 ---DA--UWEV pfn 656e18 ---DA--UWEV pfn 653448 ---DA--UWEV pfn 651ec9 ---DA--UW-V
6: kd> !pfn 651ec9
PFN 00651EC9 at address FFFFFA8012F5C5B0
flink 000004F3 blink / share count 00000001 pteaddress FFFFF6800000E780
reference count 0001 used entry count 0000 Cached color 0 Priority 5
restore pte 00000080 containing page 653448 Active M
Modified
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment