WinDbg debug (Get on handle table, 32 bits)

Today, the use of WinDbg (x86) to get a handle table debugging, the benefit of a lot of debugging steps and keys again to be familiar with, The concept of a handle table page is further understood. WinDbg Debug and handle table unfamiliar friends can draw on my debugging steps L to familiarize myself with the basics of the handle table, the debugging steps and getting the sections below.

3:kd> DT _eprocess 891ad030
Nt!_eprocess
+0x0f4 OBJECTTABLE:0X9ECA0EF0 _handle_table
3:kd> DT _handle_table 0X9ECA0EF0
Nt!_handle_table
+0x000 tablecode:0x83b15001//00 01 10 11
+0x004 quotaprocess:0x891ad030 _eprocess
+0x008 uniqueprocessid:0x000008f0 Void
+0x00c Handlelock: _ex_push_lock
+0x010 handletablelist: _list_entry [0xa5adf668-0x90347b38]
+0x018 handlecontentionevent: _ex_push_lock
+0x01c Debuginfo: (NULL)
+0x020 Extrainfopages:0n0
+0x024 flags:0
+0x024 strictfifo:0y0
+0x028 firstfreehandle:0xb04
+0x02c Lastfreehandleentry:0xa73f6ff8 _handle_table_entry
+0x030 handlecount:0x29d
+0x034 nexthandleneedingpool:0x1000
+0x038 handlecounthighwatermark:0x2f5
3:kd> DD 0x83b15000
83b15000 8f46f000 a73f6000 00000000 00000000
3:kd> DD 8f46f000
8f46f000 00000000 Fffffffe 8e3ed141 00000003//8 bytes for a _handle_table_entry struct
8f46f010 8a25bca9 00100020 8a3eb621 00100020//The first group is "rubbish"
8f46f020 9ec983c1 00020019 88ed6109 001f0001//_handle_table_entry The first member &8 is _object_header
8f46f030 8a414881 001f0001 8f5ff521 00020019
8f46f040 8a414841 001f0003 8a28af29 021f0003
8f46f050 8a120a81 000f037f 88e2ded1 000f01ff
8f46f060 8a120a81 000f037f 9eda6171 00000001
8f46f070 8a2a0a71 00000804 88d2bac1 00000804

3:kd> DT _handle_table_entry 8f46f020
Nt!_handle_table_entry
+0x000 object:0x9ec983c1 Void
+0x000 OBATTRIBUTES:0X9EC983C1
+0x000 infotable:0x9ec983c1 _handle_table_entry_info
+0x000 VALUE:0X9EC983C1
+0x004 grantedaccess:0x20019
+0x004 grantedaccessindex:0x19
+0x006 Creatorbacktraceindex:2
+0x004 nextfreetableentry:0x20019

88ed6109&8 this important
3:kd> DT _object_header 88ed6108
Nt!_object_header
+0x000 pointercount:0n3
+0x004 handlecount:0n1
+0x004 nexttofree:0x00000001 Void
+0x008 Lock: _ex_push_lock
+0x00c typeindex:0x24 ' $ '
+0x00d traceflags:0 '
+0x00e infomask:0xc '
+0x00f flags:0x40 ' @ '
+0x010 objectcreateinfo:0x8a184340 _object_create_information
+0x010 quotablockcharged:0x8a184340 Void
+0x014 SecurityDescriptor: (NULL)
+0x018 Body: _quad

3:kd>!object 88ed6108+0x18
object:88ed6120 Type: (8792e040) ALPC Port
objectheader:88ed6108 (new version)
Handlecount:1 Pointercount:3

WinDbg debug (Get on handle table, 32 bits)