Hex Hunt 3 20 points For the virtual address Ox0000029, fill in the following information: Page Table Address: type your answer... Physical Page Frame: type your answer.... Physical Address: type your answer... Registers Duran EAX=00008000 EBX=eeeeeeee ECX=e8ee2fe8 EDX=@eeeeeee ESI=08eeeeee EDI=8e8ee800 EBP=08ee2fd8 ESP=00002fde EIP=08088029 EFL=@eeee246 ---2-P-) CPL=3 II=2 A20=1 SMM=@ HLT=@ ES =0823 080308 ffffffff eacff3ee DPL=3 DS [-WA] CS =6016 C6896900 ffffffff Becffae0 DPL=3 CS32 [-R-] SS =8823 08898988 ffffffff Becff3e9 DPL=3 DS [-WA DS =8923 89898988 ffffffff Becff3ee DPL=3 DS [-WA] FS 8888 88808808 Beeee888 88888888 GS =2888 e8208808 eeeeeeea eeeeeeee LDT=880e ee200000 eeeeffff 88088200 DPL=0 LDT TR =0828 801117a8 eee00067 68408980 DPL=@ TSS32-avi GDT= 80111818 ee20202f IDT= 80113cce eeee7ff CR2=82918911 CR2=28898800 CR3=8dfbb8e9 CR4=98908810 DRE=88988068 DR1=28888888 DR2=63889880 DR3=88888888 DR6=ffffeffo DR7=28808490 EFER=200802e8eeeeee FCW=837f FsWw=2300 (ST=8] FTW=20 MXCSR=28001688 FPRO=808800808808eeee eeea FPR130808800808808808 8800 FPR2=8eeeeeeeeeeeeeee eeee FPR3=8908808088eeeee 0800 FPR4=8eeeeeeeeeeeeeee eeea FPRS=0000000002eeeeee eeee FPR6=800BEBEOB9088ee ee68 FPR7=000000000000eece 6800 XMM28=8689689899800BEC3068983989889989 XMM21=298688988060889880080880689BBERO XMM82=8888888888 88989889889 XMM33=288968988 388888888 XMM04=288068 3888eeeeeeee XMM6=@eeet eeeeeeee XMM07 =@eeeeee eeeeeeee 4 20 points For the top of the stack, fill in the following information: Page Table Address: type your answer... Physical Page Frame: type your answer... Physical Address: type your answer... Memory Dump ========== 5 points BONUS QUESTION (Up to 10 points) 998888888df78fdc: 8x88888888 @x88888888 888888888 8x29888888 888888888df78fec: Ox8888888 @x28808800 8x88888888 @x28888888 098888089df78ffc: exeeee8808 @xedf7a827 ex@df78893 ex@df77857 888888888df7988c: ex@808800 exeeee0800 exeeeeeeee @x8888eeee 808808088df7901c: ex@0808800 ex@eee0800 8x80e8eeee @x80080880 8088eaeeedf7902c: @xeeeeeee exeeeee880 @xeeeeeeee ex aeeeeeee eeeeeeeeedf7903c: exeeeeeeee @xeeeeee90 exeeeeeeee @xeeeeeeee 808808088df7984c: @x80808800 exeeee0890 @xaceae280 x 80020800 398988989df7905c: OxB6896998 OxB8B00290 x89889880 x 88888888 888888888df7986C: OX88886896 @x36898890 OXB0698690 OxB0608890 df79e7c: exageeee exaeeeeeae aeeeeeeedf79: exaeeeeee exaeeeeeee What sort of information would we expect to find at virtual address Ox000000292 For full credit, tell me why you think we would find what we would find. BIVA A-AI E df78ffc: e xdf7a027 0xdf78003 xdf77067 df79: df7901: df7902c: e df79e3c: df7904: df7905c: 0x00000000 0x00000000 df7906c: 0x00000000 0x00000000 0x00000000 0x00000000 df7907: 0x00000000 df7908: ... df7efdc: Oxff3f7003 Oxff3f8ee3 0xff3f9003 Oxff3fa003 df7efec: Oxff3fbee3 0xff3fcee3 0xff3fdee3 exff3feee3 000000000df7effc: Oxff3ff0o3 Oxfeco0003 Oxfec01003 OxfecO2003 df7f0ec: Oxfece3e03 Oxfece4003 Oxfec5e03 Oxfece6003 df7f91c: Oxfece7003 Oxfece8ee3 Oxfece9003 Oxfeceaee3 000000000df7f02c: Oxfeceboo3 Oxfececoo3 exfecodoo3 Oxfecoe003 edf7fe3c: Oxf ec10003 Oxfec11003 Oxfec12003 df7fe4c: Oxfec13003 Oxfec14003 exfec15003 exfec16003 df7fe5c: Oxfec17003 Oxfec18ee3 Oxfec19003 Oxfec1aee3 000000000df7f06c: Oxfec1b003 Oxfec1c003 Oxfec1de03 Oxfec1e003 df7fe7c: Oxfec1f003 exfec20003 0xfec21003 Oxfec22003 df7f68c: Oxfec23003 Oxfec24003 Oxfec25003 Oxfec26003 eeeeeeeeedbardc: Oxee3f7e03 0x003f8ee3 03f9003 e3fa003 dbafec: exee3fbe03 0x003fce03 0x003fdo03 0x003fe003 dbaffc: exee3ffe xdf79027 dbbeec: 0x00000000 0x00000000 0x00000000 0x00000000 dbbe1c: ex00000000 0x00000000 0x00000000 eeeeeeeedbbe2c: dbbe3c: dbbe4c: dbbe5c: dbb: dbbe7c: 0x00000000 0x00000000 dbbe8c: exe0000000 0x00000000 0x00000000 dbbfce: 000000000dbbfde: ex00000000 0x00000000 0x00000000 0x00000000 dbbf: xdf82007 xdf81007 Oxedf8e0e7 Oxedf7f027 eeeeeeeeedbbffe: Oxedf7e0e7 xdf7dee7 Oxedf7c0e7 xdf7b0e7 dbce: Ox8dbdooe exo1010101 0x01010101 xe1010101 eeeeeeedbce10: exe1010101 exo1010101 exe1010101 exe1010101 edbc020: 0x01010101 0x01010101 0x01010101 0x01010101 dbc030: 0x01010101 0x01010101 0x01010101 0x01010101 dbce40: 0x01010101 0x01010101 0x01010101 0x01010101 dbc050: 0x01010101 0x01010101 0x01010101 0x01010101 eeeeeeeeedbc060: 0x01010101 xe1010101 0x01010101 0x01010101 dbc070: 0x01010101 exe1010101 0x01010101 0x01010101 Hex Hunt 3 20 points For the virtual address Ox0000029, fill in the following information: Page Table Address: type your answer... Physical Page Frame: type your answer.... Physical Address: type your answer... Registers Duran EAX=00008000 EBX=eeeeeeee ECX=e8ee2fe8 EDX=@eeeeeee ESI=08eeeeee EDI=8e8ee800 EBP=08ee2fd8 ESP=00002fde EIP=08088029 EFL=@eeee246 ---2-P-) CPL=3 II=2 A20=1 SMM=@ HLT=@ ES =0823 080308 ffffffff eacff3ee DPL=3 DS [-WA] CS =6016 C6896900 ffffffff Becffae0 DPL=3 CS32 [-R-] SS =8823 08898988 ffffffff Becff3e9 DPL=3 DS [-WA DS =8923 89898988 ffffffff Becff3ee DPL=3 DS [-WA] FS 8888 88808808 Beeee888 88888888 GS =2888 e8208808 eeeeeeea eeeeeeee LDT=880e ee200000 eeeeffff 88088200 DPL=0 LDT TR =0828 801117a8 eee00067 68408980 DPL=@ TSS32-avi GDT= 80111818 ee20202f IDT= 80113cce eeee7ff CR2=82918911 CR2=28898800 CR3=8dfbb8e9 CR4=98908810 DRE=88988068 DR1=28888888 DR2=63889880 DR3=88888888 DR6=ffffeffo DR7=28808490 EFER=200802e8eeeeee FCW=837f FsWw=2300 (ST=8] FTW=20 MXCSR=28001688 FPRO=808800808808eeee eeea FPR130808800808808808 8800 FPR2=8eeeeeeeeeeeeeee eeee FPR3=8908808088eeeee 0800 FPR4=8eeeeeeeeeeeeeee eeea FPRS=0000000002eeeeee eeee FPR6=800BEBEOB9088ee ee68 FPR7=000000000000eece 6800 XMM28=8689689899800BEC3068983989889989 XMM21=298688988060889880080880689BBERO XMM82=8888888888 88989889889 XMM33=288968988 388888888 XMM04=288068 3888eeeeeeee XMM6=@eeet eeeeeeee XMM07 =@eeeeee eeeeeeee 4 20 points For the top of the stack, fill in the following information: Page Table Address: type your answer... Physical Page Frame: type your answer... Physical Address: type your answer... Memory Dump ========== 5 points BONUS QUESTION (Up to 10 points) 998888888df78fdc: 8x88888888 @x88888888 888888888 8x29888888 888888888df78fec: Ox8888888 @x28808800 8x88888888 @x28888888 098888089df78ffc: exeeee8808 @xedf7a827 ex@df78893 ex@df77857 888888888df7988c: ex@808800 exeeee0800 exeeeeeeee @x8888eeee 808808088df7901c: ex@0808800 ex@eee0800 8x80e8eeee @x80080880 8088eaeeedf7902c: @xeeeeeee exeeeee880 @xeeeeeeee ex aeeeeeee eeeeeeeeedf7903c: exeeeeeeee @xeeeeee90 exeeeeeeee @xeeeeeeee 808808088df7984c: @x80808800 exeeee0890 @xaceae280 x 80020800 398988989df7905c: OxB6896998 OxB8B00290 x89889880 x 88888888 888888888df7986C: OX88886896 @x36898890 OXB0698690 OxB0608890 df79e7c: exageeee exaeeeeeae aeeeeeeedf79: exaeeeeee exaeeeeeee What sort of information would we expect to find at virtual address Ox000000292 For full credit, tell me why you think we would find what we would find. BIVA A-AI E df78ffc: e xdf7a027 0xdf78003 xdf77067 df79: df7901: df7902c: e df79e3c: df7904: df7905c: 0x00000000 0x00000000 df7906c: 0x00000000 0x00000000 0x00000000 0x00000000 df7907: 0x00000000 df7908: ... df7efdc: Oxff3f7003 Oxff3f8ee3 0xff3f9003 Oxff3fa003 df7efec: Oxff3fbee3 0xff3fcee3 0xff3fdee3 exff3feee3 000000000df7effc: Oxff3ff0o3 Oxfeco0003 Oxfec01003 OxfecO2003 df7f0ec: Oxfece3e03 Oxfece4003 Oxfec5e03 Oxfece6003 df7f91c: Oxfece7003 Oxfece8ee3 Oxfece9003 Oxfeceaee3 000000000df7f02c: Oxfeceboo3 Oxfececoo3 exfecodoo3 Oxfecoe003 edf7fe3c: Oxf ec10003 Oxfec11003 Oxfec12003 df7fe4c: Oxfec13003 Oxfec14003 exfec15003 exfec16003 df7fe5c: Oxfec17003 Oxfec18ee3 Oxfec19003 Oxfec1aee3 000000000df7f06c: Oxfec1b003 Oxfec1c003 Oxfec1de03 Oxfec1e003 df7fe7c: Oxfec1f003 exfec20003 0xfec21003 Oxfec22003 df7f68c: Oxfec23003 Oxfec24003 Oxfec25003 Oxfec26003 eeeeeeeeedbardc: Oxee3f7e03 0x003f8ee3 03f9003 e3fa003 dbafec: exee3fbe03 0x003fce03 0x003fdo03 0x003fe003 dbaffc: exee3ffe xdf79027 dbbeec: 0x00000000 0x00000000 0x00000000 0x00000000 dbbe1c: ex00000000 0x00000000 0x00000000 eeeeeeeedbbe2c: dbbe3c: dbbe4c: dbbe5c: dbb: dbbe7c: 0x00000000 0x00000000 dbbe8c: exe0000000 0x00000000 0x00000000 dbbfce: 000000000dbbfde: ex00000000 0x00000000 0x00000000 0x00000000 dbbf: xdf82007 xdf81007 Oxedf8e0e7 Oxedf7f027 eeeeeeeeedbbffe: Oxedf7e0e7 xdf7dee7 Oxedf7c0e7 xdf7b0e7 dbce: Ox8dbdooe exo1010101 0x01010101 xe1010101 eeeeeeedbce10: exe1010101 exo1010101 exe1010101 exe1010101 edbc020: 0x01010101 0x01010101 0x01010101 0x01010101 dbc030: 0x01010101 0x01010101 0x01010101 0x01010101 dbce40: 0x01010101 0x01010101 0x01010101 0x01010101 dbc050: 0x01010101 0x01010101 0x01010101 0x01010101 eeeeeeeeedbc060: 0x01010101 xe1010101 0x01010101 0x01010101 dbc070: 0x01010101 exe1010101 0x01010101 0x01010101