You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
15 lines
231 B
Plaintext
15 lines
231 B
Plaintext
1 year ago
|
load kernel syms:
|
||
|
|
.sympath srv*https://msdl.microsoft.com/download/symbols
|
||
|
|
.reload /f
|
||
|
|
|
||
|
|
get eprocess of a proc:
|
||
|
|
!process 0 0
|
||
|
|
or
|
||
|
|
!process calc.exe
|
||
|
|
then
|
||
|
|
dt nt!_EPROCESS <address>
|
||
|
|
|
||
|
|
vtop:
|
||
|
|
!vtop PFN VirtualAddress
|
||
|
|
!vtop 0 VirtualAddress
|