Jump to content
Nytro

Defrag Tools: #21 - WinDbg - Memory User Mode

Recommended Posts

Posted

[h=1]Defrag Tools: #21 - WinDbg - Memory User Mode[/h]By: Larry Larsen, Andrew Richards, Chad Beeder

PlayButton.png 33 minutes, 48 seconds





[h=3]Download[/h] bg-help.gif [h=3]How do I download the videos?[/h]

  • To download, right click the file type you would like and pick “Save target as…” or “Save link as…”

[h=3]Why should I download videos from Channel9?[/h]

  • It's an easy way to save the videos you like locally.
  • You can save the videos in order to watch them offline.
  • If all you want is to hear the audio, you can download the MP3!

[h=3]Which version should I choose?[/h]

  • If you want to view the video on your PC, Xbox or Media Center, download the High Quality WMV file (this is the highest quality version we have available).
  • If you'd like a lower bitrate version, to reduce the download time or cost, then choose the Medium Quality WMV file.
  • If you have a Zune, WP7, iPhone, iPad, or iPod device, choose the low or medium MP4 file.
  • If you just want to hear the audio of the video, choose the MP3 file.

Right click “Save as…”

In this episode of Defrag Tools, Andrew Richards, Chad Beeder and Larry Larsen continue looking at the Debugging Tools for Windows (in particular WinDbg). WinDbg is a debugger that supports user mode debugging of a process, or kernel mode debugging of a computer.

This installment goes over the commands used to show the memory used in a user mode debug session. We cover these commands:

  • !address -summary
  • !address <addr>
  • !vprot <addr>
  • !mapped_file <addr>

Make sure you watch Defrag Tools Episode #1 for instructions on how to get the Debugging Tools for Windows and how to set the required environment variables for symbols and source code resolution.

Resources:

Microsoft Windows SDK for Windows 7 and .NET Framework 4

Sysinternals VMMap

Performance and Memory Consumption Under WOW64

MEMORY_BASIC_INFORMATION structure

Memory Protection Constants

Timeline:

[00:50] - Live Debug of Notepad

[01:10] - VMMap of Notepad

[02:08] - Virtual Address Space summary (!address -summary)

[04:30] - 'Large Address Space Aware' increases the VA space from 2GB to 4GB

[08:11] - Memory Mapped Files

[10:11] - Memory Type, State and Protection (inc. Guard Pages)

[21:22] - Allocation Base vs. Base Address (!address <addr>)

[26:52] - Virtual Protection shows the Alloc. Base Protection (!vprot <addr>)

[29:14] - Mapped Files (!mapped_file <addr>)

Sursa: Defrag Tools: #21 - WinDbg - Memory User Mode | Defrag Tools | Channel 9

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...