How to manually translate virtual addresses into physical ones

In previous posts we talked about virtual address space and how virtual memory is managed.  I’ve never posted anything about virtual address translation though, and for the ones interested on the details behing this operation I recommend reading the chapter 7 – Memory Management (specifically the Address Translation section) of the Windows Internals 4th Edition…

0

A new phase…

Even though this has been a strictly technical channel (I’ve never posted about anything else other than technical stuff) I know a lot of friends read it and so I decided to open an exception on this post and use it to publish something about me that also has a direct effect on how often and what type of content I will be able to keep…

3

Kernel dump analysis – Bugcheck 0xA (IRQL_NOT_LESS_OR_EQUAL)

Yet another kernel memory dump to be analyzed – The bugcheck this time is the 0xA – IRQL_NOT_LESS_OR_EQUAL.   To better understand what this message means we would need a little background on Windows Internals but basically when executing anything at a interrupt request level (IRQL) = 2 or higher (in normal circumstances instructions get executed at…

2

Kernel dump analysis – Bugcheck 1E (KMODE_EXCEPTION_NOT_HANDLED)

It’s been a long time since my last post, but for some reason lately I’ve been receiving so many nice feedbacks about the blog and the other posts that I feel really motivated again to post a new article.  See how important your feedback is for me? J Ok, normally I post about user mode…

3