In Windows, the PDPs and PTE

As the pointer (physical address) of the apsaradb for RDS table, the actual IP address is c0300000 (c0600000 in XP ).

Experiment: view the physical address corresponding to the 0x80000000 virtual address.
View
Kd> DD/P 800 + (viewed in physical memory)
Or
Kd> dd c0300000 + 800 (view through the corresponding virtual memory)
C0300800 000001e3004001e3 008001e3 00c001e3
C0300810 010001e3 014001e3 018001e3 01c001e3
C0300820 020001e3 024001e3 028001e3 02c001e3
C0300830 030001e3 034001e3 038001e3 03c001e3
C0300840 040001e3 044001e3 048001e3 04c001e3
C0300850 050001e3 054001e3 058001e3 05c001e3
C0300860 060001e3 064001e3 068001e3 06c001e3
C0300870 070001e3 074001e3 078001e3 07c001e3
All results are found to end with 1e3, for example, 000001e3, where 7bit is 1, which indicates that the page size is 4 MB.
That is to say, the virtual address ranges from 0x80000000 ~ 0xa0000000-1, all pages are 4 MB, and the ing to the virtual address is 0 ~ 0x20000000-1.
That isThe first MB of physical memory is mapped to 0x80000000 ~ 0x9fffffff.

You can also use it! View virtual memory by using Pte.
Kd>! PTE 80000000
80000000-PVDF at c0300800 PTE at c0200000
Contains 000001e3 contains 00000000
PFN 0 GLDA--KWV large page

Conclusion:
1. Windows will create4 mb pte tableTo view the virtual memory, you only need to view this table,This table is located at 0xc0000000 (this is still true in XP). For example, if the virtual memory address 0x12345678 is used, you can view the virtual address 0x12345*4 + 0xc0000000. The base address here is a physical address, and then add the offset 12345678 in 678.
2. The virtual address corresponding to the PDP table isC0300000.
3.The first MB of physical memory is mapped to 0x80000000 ~ 0x9fffffff (this is not satisfied after WindowsXP ).

The above cases are aimed at the case where PAE is not enabled and the PAE is enabled.
Want to know the physical address corresponding to the virtual address 804fe000.
(1) The simplest use! PTE command:
Kd>! PTE 804fe000
Va 804fe000
Partial encryption c0602010PTE at least 0000c04027f0
Contains 000000000034c163 contains 00000000004fe121
PFN 34C-G-DA--KWEV PFN 4Fe-G--A-KREV

The height of 804fe000 is 10 bits, 0x201, each of which occupies 16 bytes. 0x201*16 = 0x2010.
The height of 804fe000 is 20 bits 0x804fe, and each PTE occupies 8 bytes. 0x804fe * 8 = 0x4027f0.