I wanted to know how to view permissions(rwx) in Windbg of DLL like viewing it in Linux:
cat /proc/{id}/maps
08048000-08056000 r-xp 00000000 03:0c 64593 /usr/sbin/gpm
Asked
Active
Viewed 228 times
0
Marco Bonelli
- 63,369
- 21
- 118
- 128
serom
- 1
-
Does this answer your question? [Windbg memory map?](https://stackoverflow.com/questions/22722345/windbg-memory-map) – Marco Bonelli Nov 03 '21 at 21:43
-
@MarcoBonelli, I need for user-mode and kernel mode also. it says it is for user-mode, But I don`t see all the fields in my windbg appear like in his answer(where it says for RWX) – serom Nov 03 '21 at 22:18
-
Don't look for RXW. We have PAGE_NOACCESS, PAGE_READONLY, PAGE_READWRITE, PAGE_EXECUTE_READ etc. – Thomas Weller Nov 04 '21 at 19:23
-
!vadump will give a detailed map of process address space. and in kernel !vad or virtual address descriptor for the implicit process context if this is what you seek ill convert this comment to answer – blabb Nov 05 '21 at 04:43