Skip to content

Instantly share code, notes, and snippets.

@mvankuipers

mvankuipers/tf-article2-windbg-13.txt Secret

Created August 13, 2017 21:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mvankuipers/a80bdc3bbd2b9097b540f893397f30d5 to your computer and use it in GitHub Desktop.
Save mvankuipers/a80bdc3bbd2b9097b540f893397f30d5 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
tf-article2-windbg-13.txt
6: kd> ?? sizeof(nt!_MMPFN)
unsigned int64 0x30
6: kd> dt !_MMPFN (0xfffffa80`00000000 + (0x65207b * 0x30))
nt!_MMPFN
+0x000 u1 : <unnamed-tag>
+0x008 u2 : <unnamed-tag>
+0x010 PteAddress : 0xfffff8a0`09e25a00 _MMPTE
+0x010 VolatilePteAddress : 0xfffff8a0`09e25a00 Void
+0x010 Lock : 0n165829120
+0x010 PteLong : 0xfffff8a0`09e25a00
+0x018 u3 : <unnamed-tag>
+0x01c UsedPageTableEntries : 0
+0x01e VaType : 0 ''
+0x01f ViewCount : 0 ''
+0x020 OriginalPte : _MMPTE
+0x020 AweReferenceCount : 0n-333970336
+0x028 u4 : <unnamed-tag>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment