windbg !dd无法查看物理内存。

PROCESS 88e58658  SessionId: 0  Cid: 0808    Peb: 7ffd9000  ParentCid: 07bc
    DirBase: 0e5806a0  ObjectTable: e3dcb1a8  HandleCount:  47.
    Image: conime.exe

PROCESS 891c5aa8  SessionId: 0  Cid: 07ac    Peb: 7ffdb000  ParentCid: 03b4
    DirBase: 0e5806c0  ObjectTable: e2761420  HandleCount:  84.
    Image: windbg.exe

lkd> !dd 0e5806a0
Physical memory read at e5806a0 failed
If you know the caching attributes used for the memory,
try specifying [c], [uc] or [wc], as in !dd [c] <params>.
WARNING: Incorrect use of these flags will cause unpredictable
processor corruption.  This may immediately (or at any time in
the future until reboot) result in a system hang, incorrect data
being displayed or other strange crashes and corruption.

lkd> !dd [c] 0e5806a0
Physical memory read at e5806a0 failed
lkd> !dd [uc] 0e5806a0
Physical memory read at e5806a0 failed
lkd> !dd [wc] 0e5806a0
Physical memory read at e5806a0 failed

全都不行

[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！