|
| !ptov |
 |
Mon, 31 Mar 2008 16:55:17 -070 |
Does !ptov output make any sense?
1: kd> !process 0 0
**** NT ACTIVE PROCESS DUMP ****
PROCESS 8476ea90 SessionId: none Cid: 0004 Peb: 00000000 ParentCid: 0000
DirBase: 00122000 ObjectTable: 82c000b0 HandleCount: 51.
Image: System
1: kd> !ptov 122
3962000 0
2603000 3ff000
12e000 400000
15e000 401000
2fda1000 402000
2fda3000 403000
12f000 404000
130000 405000
13f000 406000
140000 407000
141000 408000
142000 409000
143000 40a000
144000 40b000
1800000 40c000
1a00000 40d000
147000 40e000
4bff000 40f000
4a05000 410000
37d7000 411000
33ba000 412000
31a0000 413000
3109000 414000
31b3000 416000
31c6000 417000
3107000 418000
311b000 419000
150000 41a000
151000 41b000
310a000 41c000
310b000 41d000
154000 41e000
155000 41f000
156000 420000
4400000 421000
4600000 422000
4800000 423000
2fa00000 424000
2f800000 425000
2f600000 426000
2f400000 427000
2f200000 428000
2f000000 429000
2ee00000 42a000
2ec00000 42b000
2ea00000 42c000
2e800000 42d000
2e600000 42e000
2e400000 42f000
2e200000 430000
2e000000 431000
2de00000 432000
2dc00000 433000
2da00000 434000
2d800000 435000
2d600000 436000
2d400000 437000
311c000 438000
312d000 439000
312e000 43a000
312f000 43b000
30d0000 43c000
30c1000 43d000
30d9000 43e000
30d5000 43f000
30b4000 440000
123000 600000
124000 601000
125000 602000
126000 603000
2fd91000 604000
127000 7fe000
128000 7ff000
|
| Post Reply
|
| RE: !ptov |
 |
Thu, 10 Apr 2008 12:03:01 -070 |
It looks like !ptov related article needs to be updated
!ptov takes PFN of PDE as an argument, but when PAE is enabled then DirBase
points at PDPTE, not PDE
"Andrew Sha" wrote:
> Does !ptov output make any sense?
>
>
> 1: kd> !process 0 0
> **** NT ACTIVE PROCESS DUMP ****
> PROCESS 8476ea90 SessionId: none Cid: 0004 Peb: 00000000 ParentCid:
0000
> DirBase: 00122000 ObjectTable: 82c000b0 HandleCount: 51.
> Image: System
>
> 1: kd> !ptov 122
> 3962000 0
> 2603000 3ff000
> 12e000 400000
> 15e000 401000
> 2fda1000 402000
> 2fda3000 403000
> 12f000 404000
> 130000 405000
> 13f000 406000
> 140000 407000
> 141000 408000
> 142000 409000
> 143000 40a000
> 144000 40b000
> 1800000 40c000
> 1a00000 40d000
> 147000 40e000
> 4bff000 40f000
> 4a05000 410000
> 37d7000 411000
> 33ba000 412000
> 31a0000 413000
> 3109000 414000
> 31b3000 416000
> 31c6000 417000
> 3107000 418000
> 311b000 419000
> 150000 41a000
> 151000 41b000
> 310a000 41c000
> 310b000 41d000
> 154000 41e000
> 155000 41f000
> 156000 420000
> 4400000 421000
> 4600000 422000
> 4800000 423000
> 2fa00000 424000
> 2f800000 425000
> 2f600000 426000
> 2f400000 427000
> 2f200000 428000
> 2f000000 429000
> 2ee00000 42a000
> 2ec00000 42b000
> 2ea00000 42c000
> 2e800000 42d000
> 2e600000 42e000
> 2e400000 42f000
> 2e200000 430000
> 2e000000 431000
> 2de00000 432000
> 2dc00000 433000
> 2da00000 434000
> 2d800000 435000
> 2d600000 436000
> 2d400000 437000
> 311c000 438000
> 312d000 439000
> 312e000 43a000
> 312f000 43b000
> 30d0000 43c000
> 30c1000 43d000
> 30d9000 43e000
> 30d5000 43f000
> 30b4000 440000
> 123000 600000
> 124000 601000
> 125000 602000
> 126000 603000
> 2fd91000 604000
> 127000 7fe000
> 128000 7ff000
|
| Post Reply
|
|
|
|
|
|
|
|
|
|