windbg学习----!vadump和.hh和!vprotc

!vadump扩展命令显示所有的虚拟内存区域以及它们对应的保护信息

0:000> !vadump
BaseAddress:       00000000
RegionSize:        00010000
State:             00010000  MEM_FREE
Protect:           00000001  PAGE_NOACCESS

BaseAddress:       00010000
RegionSize:        00010000
State:             00001000  MEM_COMMIT
Protect:           00000004  PAGE_READWRITE
Type:              00040000  MEM_MAPPED

!vprot扩展命令显示指定地址的虚拟内存保护信息

0:000> !vprot 7ffe0001
BaseAddress:       7ffe0000
AllocationBase:    7ffe0000
AllocationProtect: 00000002  PAGE_READONLY
RegionSize:        00001000
State:             00001000  MEM_COMMIT
Protect:           00000002  PAGE_READONLY
Type:              00020000  MEM_PRIVATE

.hh后跟要查看的命令，可以直接打开帮助文档.