| 1 | Log created: 2008-01-11T03:10:37.222160000Z
|
|---|
| 2 | Executable: /usr/lib/virtualbox/VirtualBox
|
|---|
| 3 | Arg[0]: /usr/lib/virtualbox/VirtualBox
|
|---|
| 4 | Arg[1]: -comment
|
|---|
| 5 | Arg[2]: XP
|
|---|
| 6 | Arg[3]: -startvm
|
|---|
| 7 | Arg[4]: 52b96835-b4a0-4bb6-bd97-d439f65b6b0c
|
|---|
| 8 |
|
|---|
| 9 | The mappings are FLOATING.
|
|---|
| 10 | ea800000 - eaffffff Hypervisor Memory Area
|
|---|
| 11 |
|
|---|
| 12 | Virtual handlers:
|
|---|
| 13 | WRITE 0014d000-0014dfff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 14 | Physical page 00000 ffffffff
|
|---|
| 15 | WRITE 0080a000-0080afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 16 | Physical page 00000 ffffffff
|
|---|
| 17 | WRITE 0080b000-0080bfff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 18 | Physical page 00000 ffffffff
|
|---|
| 19 | WRITE 0080d000-0080dfff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 20 | Physical page 00000 ffffffff
|
|---|
| 21 | WRITE 00813000-00813fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 22 | Physical page 00000 ffffffff
|
|---|
| 23 | WRITE 00824000-00824fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 24 | Physical page 00000 ffffffff
|
|---|
| 25 | WRITE 00829000-00829fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 26 | Physical page 00000 ffffffff
|
|---|
| 27 | WRITE 0082a000-0082afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 28 | Physical page 00000 ffffffff
|
|---|
| 29 | WRITE 00832000-00832fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 30 | Physical page 00000 ffffffff
|
|---|
| 31 | WRITE 0083e000-0083efff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 32 | Physical page 00000 ffffffff
|
|---|
| 33 | WRITE 00862000-00862fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 34 | Physical page 00000 ffffffff
|
|---|
| 35 | WRITE 00991000-00991fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 36 | Physical page 00000 ffffffff
|
|---|
| 37 | WRITE 06783000-06783fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 38 | Physical page 00000 ffffffff
|
|---|
| 39 | WRITE 0679f000-0679ffff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 40 | Physical page 00000 ffffffff
|
|---|
| 41 | WRITE 8003f000-8003f3ff size 00000400 Guest GDT write access handler
|
|---|
| 42 | Physical page 00000 0003f000
|
|---|
| 43 | WRITE 8003f400-8003fbff size 00000800 Guest IDT write access handler
|
|---|
| 44 | Physical page 00000 0003f400
|
|---|
| 45 | WRITE 80042000-80042087 size 00000088 Guest TSS write access handler
|
|---|
| 46 | Physical page 00000 00042000
|
|---|
| 47 | WRITE 80146000-80146fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 48 | Physical page 00000 00146000
|
|---|
| 49 | WRITE 80147000-80147fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 50 | Physical page 00000 00147000
|
|---|
| 51 | WRITE 8014a000-8014afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 52 | Physical page 00000 0014a000
|
|---|
| 53 | WRITE 8014b000-8014bfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 54 | Physical page 00000 0014b000
|
|---|
| 55 | WRITE 8014c000-8014cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 56 | Physical page 00000 0014c000
|
|---|
| 57 | WRITE 8014d000-8014dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 58 | Physical page 00000 0014d000
|
|---|
| 59 | WRITE 8014f000-8014ffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 60 | Physical page 00000 ffffffff
|
|---|
| 61 | WRITE 80806000-80806fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 62 | Physical page 00000 00806000
|
|---|
| 63 | WRITE 80807000-80807fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 64 | Physical page 00000 00807000
|
|---|
| 65 | WRITE 80808000-80808fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 66 | Physical page 00000 00808000
|
|---|
| 67 | WRITE 80809000-80809fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 68 | Physical page 00000 00809000
|
|---|
| 69 | WRITE 8080a000-8080afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 70 | Physical page 00000 0080a000
|
|---|
| 71 | WRITE 8080b000-8080bfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 72 | Physical page 00000 0080b000
|
|---|
| 73 | WRITE 8080c000-8080cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 74 | Physical page 00000 0080c000
|
|---|
| 75 | WRITE 8080d000-8080dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 76 | Physical page 00000 0080d000
|
|---|
| 77 | WRITE 8080e000-8080efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 78 | Physical page 00000 0080e000
|
|---|
| 79 | WRITE 8080f000-8080ffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 80 | Physical page 00000 0080f000
|
|---|
| 81 | WRITE 80811000-80811fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 82 | Physical page 00000 00811000
|
|---|
| 83 | WRITE 80812000-80812fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 84 | Physical page 00000 00812000
|
|---|
| 85 | WRITE 80813000-80813fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 86 | Physical page 00000 00813000
|
|---|
| 87 | WRITE 80814000-80814fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 88 | Physical page 00000 00814000
|
|---|
| 89 | WRITE 80815000-80815fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 90 | Physical page 00000 00815000
|
|---|
| 91 | WRITE 80816000-80816fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 92 | Physical page 00000 00816000
|
|---|
| 93 | WRITE 80817000-80817fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 94 | Physical page 00000 00817000
|
|---|
| 95 | WRITE 80818000-80818fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 96 | Physical page 00000 00818000
|
|---|
| 97 | WRITE 80819000-80819fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 98 | Physical page 00000 00819000
|
|---|
| 99 | WRITE 8081d000-8081dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 100 | Physical page 00000 0081d000
|
|---|
| 101 | WRITE 80824000-80824fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 102 | Physical page 00000 00824000
|
|---|
| 103 | WRITE 8082a000-8082afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 104 | Physical page 00000 0082a000
|
|---|
| 105 | WRITE 80833000-80833fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 106 | Physical page 00000 00833000
|
|---|
| 107 | WRITE 80834000-80834fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 108 | Physical page 00000 00834000
|
|---|
| 109 | WRITE 80836000-80836fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 110 | Physical page 00000 00836000
|
|---|
| 111 | WRITE 8083c000-8083cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 112 | Physical page 00000 0083c000
|
|---|
| 113 | WRITE 8083e000-8083efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 114 | Physical page 00000 0083e000
|
|---|
| 115 | WRITE 80844000-80844fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 116 | Physical page 00000 00844000
|
|---|
| 117 | WRITE 80848000-80848fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 118 | Physical page 00000 00848000
|
|---|
| 119 | WRITE 8084e000-8084efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 120 | Physical page 00000 0084e000
|
|---|
| 121 | WRITE 8084f000-8084ffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 122 | Physical page 00000 0084f000
|
|---|
| 123 | WRITE 80857000-80857fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 124 | Physical page 00000 00857000
|
|---|
| 125 | WRITE 80865000-80865fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 126 | Physical page 00000 00865000
|
|---|
| 127 | WRITE 80925000-80925fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 128 | Physical page 00000 00925000
|
|---|
| 129 | WRITE 809f0000-809f0fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 130 | Physical page 00000 009f0000
|
|---|
| 131 | WRITE 809f9000-809f9fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 132 | Physical page 00000 009f9000
|
|---|
| 133 | WRITE 8677d000-8677dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 134 | Physical page 00000 0677d000
|
|---|
| 135 | WRITE 86783000-86783fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 136 | Physical page 00000 06783000
|
|---|
| 137 | WRITE 86798000-86798fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 138 | Physical page 00000 06798000
|
|---|
| 139 | WRITE 8679b000-8679bfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 140 | Physical page 00000 0679b000
|
|---|
| 141 | WRITE 8679f000-8679ffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 142 | Physical page 00000 0679f000
|
|---|
| 143 | WRITEHYP ea80f090-ea80f88f size 00000800 Shadow IDT write access handler
|
|---|
| 144 | WRITEHYP ea810580-ea810607 size 00000088 Shadow TSS write access handler
|
|---|
| 145 | WRITEHYP eab9d000-eabacfff size 00010000 Shadow GDT write access handler
|
|---|
| 146 | WRITEHYP eabad000-eabbdfff size 00011000 Shadow LDT write access handler
|
|---|
| 147 | WRITE f7691000-f7691fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 148 | Physical page 00000 06b5a000
|
|---|
| 149 | WRITE f76d9000-f76d9fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 150 | Physical page 00000 06a9d000
|
|---|
| 151 | WRITE f7756000-f7756fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 152 | Physical page 00000 06993000
|
|---|
| 153 | WRITE f7759000-f7759fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 154 | Physical page 00000 06996000
|
|---|
| 155 | WRITE f775a000-f775afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 156 | Physical page 00000 06997000
|
|---|
| 157 | WRITE f78be000-f78befff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 158 | Physical page 00000 06b20000
|
|---|
| 159 | WRITE f78bf000-f78bffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 160 | Physical page 00000 06b21000
|
|---|
| 161 | WRITE f7ac0000-f7ac0fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 162 | Physical page 00000 06a4a000
|
|---|
| 163 |
|
|---|
| 164 | Physical handlers: (PhysHandlers=274928 (0x431f0))
|
|---|
| 165 | From - To (incl) HandlerHC UserHC HandlerHC UserHC HandlerGC UserGC Type Description
|
|---|
| 166 | 00039000 - 00039fff b5d819c0 b3ab9fd4 f8d89520 b3ab9fd4 eade8210 ea963fd4 Write Guest Paging Access Handler
|
|---|
| 167 | 0003a000 - 0003afff b5d819c0 b3aba04c f8d89520 b3aba04c eade8210 ea96404c Write Guest Paging Access Handler
|
|---|
| 168 | 0003b000 - 0003bfff b5d819c0 b3ab9ae8 f8d89520 b3ab9ae8 eade8210 ea963ae8 Write Guest Paging Access Handler
|
|---|
| 169 | 0003c000 - 0003cfff b5d819c0 b3ab9cc8 f8d89520 b3ab9cc8 eade8210 ea963cc8 Write Guest Paging Access Handler
|
|---|
| 170 | 0003d000 - 0003dfff b5d819c0 b3ab9b60 f8d89520 b3ab9b60 eade8210 ea963b60 Write Guest Paging Access Handler
|
|---|
| 171 | 0003e000 - 0003efff b5d819c0 b3aba088 f8d89520 b3aba088 eade8210 ea964088 Write Guest Paging Access Handler
|
|---|
| 172 | 000a0000 - 000bffff 00000000 b3b98030 00000000 b3b98030 eadc97d0 ea828030 MMIO VGA - VGA Video Buffer
|
|---|
| 173 | 000c0000 - 000c7fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write VGA BIOS
|
|---|
| 174 | 000e0000 - 000e0fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write ACPI RSDP
|
|---|
| 175 | 000e1000 - 000e1fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write DMI tables
|
|---|
| 176 | 000e2000 - 000ecfff 00000000 00000000 00000000 00000000 eade2100 00000000 Write Net Boot ROM
|
|---|
| 177 | 000f0000 - 000fffff 00000000 00000000 00000000 00000000 eade2100 00000000 Write PC BIOS - 0xfffff
|
|---|
| 178 | 01030000 - 01030fff b5d819c0 b3ab9a70 f8d89520 b3ab9a70 eade8210 ea963a70 Write Guest Paging Access Handler
|
|---|
| 179 | 01031000 - 01031fff b5d819c0 b3ab9c50 f8d89520 b3ab9c50 eade8210 ea963c50 Write Guest Paging Access Handler
|
|---|
| 180 | 01032000 - 01032fff b5d819c0 b3ab9ee4 f8d89520 b3ab9ee4 eade8210 ea963ee4 Write Guest Paging Access Handler
|
|---|
| 181 | 01033000 - 01033fff b5d819c0 b3ab9c14 f8d89520 b3ab9c14 eade8210 ea963c14 Write Guest Paging Access Handler
|
|---|
| 182 | 06800000 - 06800fff b5d819c0 b3ab9f98 f8d89520 b3ab9f98 eade8210 ea963f98 Write Guest Paging Access Handler
|
|---|
| 183 | 06801000 - 06801fff b5d819c0 b3ab9b24 f8d89520 b3ab9b24 eade8210 ea963b24 Write Guest Paging Access Handler
|
|---|
| 184 | 06815000 - 06815fff b5d819c0 b3ab9b9c f8d89520 b3ab9b9c eade8210 ea963b9c Write Guest Paging Access Handler
|
|---|
| 185 | 06900000 - 06900fff b5d819c0 b3ab9bd8 f8d89520 b3ab9bd8 eade8210 ea963bd8 Write Guest Paging Access Handler
|
|---|
| 186 | 06dff000 - 06dfffff b5d819c0 b3ab9d04 f8d89520 b3ab9d04 eade8210 ea963d04 Write Guest Paging Access Handler
|
|---|
| 187 | 06ec8000 - 06ec8fff b5d819c0 b3ab9d40 f8d89520 b3ab9d40 eade8210 ea963d40 Write Guest Paging Access Handler
|
|---|
| 188 | 06f00000 - 06f00fff b5d819c0 b3ab9c8c f8d89520 b3ab9c8c eade8210 ea963c8c Write Guest Paging Access Handler
|
|---|
| 189 | 06f01000 - 06f01fff b5d819c0 b3ab9db8 f8d89520 b3ab9db8 eade8210 ea963db8 Write Guest Paging Access Handler
|
|---|
| 190 | 06f3a000 - 06f3afff b5d819c0 b3ab9aac f8d89520 b3ab9aac eade8210 ea963aac Write Guest Paging Access Handler
|
|---|
| 191 | 06fc0000 - 06fc0fff b5d819c0 b3ab9d7c f8d89520 b3ab9d7c eade8210 ea963d7c Write Guest Paging Access Handler
|
|---|
| 192 | 070fb000 - 070fbfff b5d819c0 b3ab9f5c f8d89520 b3ab9f5c eade8210 ea963f5c Write Guest Paging Access Handler
|
|---|
| 193 | 071aa000 - 071aafff b5d819c0 b3ab9f20 f8d89520 b3ab9f20 eade8210 ea963f20 Write Guest Paging Access Handler
|
|---|
| 194 | 071b6000 - 071b6fff b5d819c0 b3aba010 f8d89520 b3aba010 eade8210 ea964010 Write Guest Paging Access Handler
|
|---|
| 195 | 071b7000 - 071b7fff b5d819c0 b3ab99bc f8d89520 b3ab99bc eade8210 ea9639bc Write Guest Paging Access Handler
|
|---|
| 196 | 07225000 - 07225fff b5d819c0 b3ab9a34 f8d89520 b3ab9a34 eade8210 ea963a34 Write Guest Paging Access Handler
|
|---|
| 197 | 07259000 - 07259fff b5d819c0 b3ab99f8 f8d89520 b3ab99f8 eade8210 ea9639f8 Write Guest Paging Access Handler
|
|---|
| 198 | 0725b000 - 0725bfff b5d819c0 b3aba0c4 f8d89520 b3aba0c4 eade8210 ea9640c4 Write Guest Paging Access Handler
|
|---|
| 199 | 07260000 - 07260fff b5d819c0 b3ab9980 f8d89520 b3ab9980 eade8210 ea963980 Write Guest Paging Access Handler
|
|---|
| 200 | 075a4000 - 075a4fff b5d819c0 b3ab9944 f8d89520 b3ab9944 eade8210 ea963944 Write Guest Paging Access Handler
|
|---|
| 201 | e0000000 - e07fffff b3388a80 b2dde060 00000000 b2dde060 eae0a180 eae16060 Write VGA LFB
|
|---|
| 202 | f0000000 - f0000fff 00000000 b3bcdf20 00000000 b3bcdf20 eadc97d0 ea85df20 MMIO PCNet
|
|---|
| 203 | f0800000 - f0800fff 00000000 b3bce120 00000000 b3bce120 eadc97d0 ea85e120 MMIO USB OHCI
|
|---|
| 204 | fee00000 - fee00fff 00000000 b3b96af0 00000000 b3b96af0 eadc97d0 ea826af0 MMIO APIC Memory
|
|---|
| 205 | ffff0000 - ffffffff 00000000 00000000 00000000 00000000 eade2100 00000000 Write PC BIOS - 0xffffffff
|
|---|