| 1 | Log created: 2008-01-11T03:14:14.365567000Z
|
|---|
| 2 | Executable: /usr/lib/virtualbox/VirtualBox
|
|---|
| 3 | Arg[0]: /usr/lib/virtualbox/VirtualBox
|
|---|
| 4 | Arg[1]: -comment
|
|---|
| 5 | Arg[2]: XP
|
|---|
| 6 | Arg[3]: -startvm
|
|---|
| 7 | Arg[4]: 52b96835-b4a0-4bb6-bd97-d439f65b6b0c
|
|---|
| 8 |
|
|---|
| 9 | The mappings are FLOATING.
|
|---|
| 10 | ea800000 - eaffffff Hypervisor Memory Area
|
|---|
| 11 |
|
|---|
| 12 | Virtual handlers:
|
|---|
| 13 | WRITE 0015a000-0015afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 14 | Physical page 00000 ffffffff
|
|---|
| 15 | WRITE 0080a000-0080afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 16 | Physical page 00000 ffffffff
|
|---|
| 17 | WRITE 0080b000-0080bfff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 18 | Physical page 00000 ffffffff
|
|---|
| 19 | WRITE 0080d000-0080dfff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 20 | Physical page 00000 ffffffff
|
|---|
| 21 | WRITE 00813000-00813fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 22 | Physical page 00000 ffffffff
|
|---|
| 23 | WRITE 0081a000-0081afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 24 | Physical page 00000 ffffffff
|
|---|
| 25 | WRITE 00824000-00824fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 26 | Physical page 00000 ffffffff
|
|---|
| 27 | WRITE 00829000-00829fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 28 | Physical page 00000 ffffffff
|
|---|
| 29 | WRITE 0082a000-0082afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 30 | Physical page 00000 ffffffff
|
|---|
| 31 | WRITE 00832000-00832fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 32 | Physical page 00000 ffffffff
|
|---|
| 33 | WRITE 0083e000-0083efff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 34 | Physical page 00000 ffffffff
|
|---|
| 35 | WRITE 00862000-00862fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 36 | Physical page 00000 ffffffff
|
|---|
| 37 | WRITE 00991000-00991fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 38 | Physical page 00000 ffffffff
|
|---|
| 39 | WRITE 06b90000-06b90fff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 40 | Physical page 00000 ffffffff
|
|---|
| 41 | WRITE 06b9a000-06b9afff size 00001000 CSAM-REM self-modifying code monitor handler
|
|---|
| 42 | Physical page 00000 ffffffff
|
|---|
| 43 | WRITE 8003f000-8003f3ff size 00000400 Guest GDT write access handler
|
|---|
| 44 | Physical page 00000 0003f000
|
|---|
| 45 | WRITE 8003f400-8003fbff size 00000800 Guest IDT write access handler
|
|---|
| 46 | Physical page 00000 0003f400
|
|---|
| 47 | WRITE 80042000-80042087 size 00000088 Guest TSS write access handler
|
|---|
| 48 | Physical page 00000 00042000
|
|---|
| 49 | WRITE 80153000-80153fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 50 | Physical page 00000 00153000
|
|---|
| 51 | WRITE 80154000-80154fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 52 | Physical page 00000 00154000
|
|---|
| 53 | WRITE 80157000-80157fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 54 | Physical page 00000 00157000
|
|---|
| 55 | WRITE 80158000-80158fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 56 | Physical page 00000 00158000
|
|---|
| 57 | WRITE 80159000-80159fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 58 | Physical page 00000 00159000
|
|---|
| 59 | WRITE 8015a000-8015afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 60 | Physical page 00000 0015a000
|
|---|
| 61 | WRITE 8015c000-8015cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 62 | Physical page 00000 ffffffff
|
|---|
| 63 | WRITE 80806000-80806fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 64 | Physical page 00000 00806000
|
|---|
| 65 | WRITE 80807000-80807fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 66 | Physical page 00000 00807000
|
|---|
| 67 | WRITE 80808000-80808fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 68 | Physical page 00000 00808000
|
|---|
| 69 | WRITE 80809000-80809fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 70 | Physical page 00000 00809000
|
|---|
| 71 | WRITE 8080a000-8080afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 72 | Physical page 00000 0080a000
|
|---|
| 73 | WRITE 8080b000-8080bfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 74 | Physical page 00000 0080b000
|
|---|
| 75 | WRITE 8080c000-8080cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 76 | Physical page 00000 0080c000
|
|---|
| 77 | WRITE 8080d000-8080dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 78 | Physical page 00000 0080d000
|
|---|
| 79 | WRITE 8080e000-8080efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 80 | Physical page 00000 0080e000
|
|---|
| 81 | WRITE 8080f000-8080ffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 82 | Physical page 00000 0080f000
|
|---|
| 83 | WRITE 80811000-80811fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 84 | Physical page 00000 00811000
|
|---|
| 85 | WRITE 80812000-80812fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 86 | Physical page 00000 00812000
|
|---|
| 87 | WRITE 80813000-80813fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 88 | Physical page 00000 00813000
|
|---|
| 89 | WRITE 80814000-80814fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 90 | Physical page 00000 00814000
|
|---|
| 91 | WRITE 80815000-80815fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 92 | Physical page 00000 00815000
|
|---|
| 93 | WRITE 80816000-80816fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 94 | Physical page 00000 00816000
|
|---|
| 95 | WRITE 80817000-80817fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 96 | Physical page 00000 00817000
|
|---|
| 97 | WRITE 80818000-80818fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 98 | Physical page 00000 00818000
|
|---|
| 99 | WRITE 80819000-80819fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 100 | Physical page 00000 00819000
|
|---|
| 101 | WRITE 8081d000-8081dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 102 | Physical page 00000 0081d000
|
|---|
| 103 | WRITE 80824000-80824fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 104 | Physical page 00000 00824000
|
|---|
| 105 | WRITE 8082a000-8082afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 106 | Physical page 00000 0082a000
|
|---|
| 107 | WRITE 80833000-80833fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 108 | Physical page 00000 00833000
|
|---|
| 109 | WRITE 80834000-80834fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 110 | Physical page 00000 00834000
|
|---|
| 111 | WRITE 80836000-80836fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 112 | Physical page 00000 00836000
|
|---|
| 113 | WRITE 8083c000-8083cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 114 | Physical page 00000 0083c000
|
|---|
| 115 | WRITE 8083e000-8083efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 116 | Physical page 00000 0083e000
|
|---|
| 117 | WRITE 80844000-80844fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 118 | Physical page 00000 00844000
|
|---|
| 119 | WRITE 8084e000-8084efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 120 | Physical page 00000 0084e000
|
|---|
| 121 | WRITE 8084f000-8084ffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 122 | Physical page 00000 0084f000
|
|---|
| 123 | WRITE 80857000-80857fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 124 | Physical page 00000 00857000
|
|---|
| 125 | WRITE 80865000-80865fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 126 | Physical page 00000 00865000
|
|---|
| 127 | WRITE 808a0000-808a0fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 128 | Physical page 00000 008a0000
|
|---|
| 129 | WRITE 808b9000-808b9fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 130 | Physical page 00000 008b9000
|
|---|
| 131 | WRITE 8090c000-8090cfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 132 | Physical page 00000 0090c000
|
|---|
| 133 | WRITE 80925000-80925fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 134 | Physical page 00000 00925000
|
|---|
| 135 | WRITE 80931000-80931fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 136 | Physical page 00000 00931000
|
|---|
| 137 | WRITE 80942000-80942fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 138 | Physical page 00000 00942000
|
|---|
| 139 | WRITE 809f0000-809f0fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 140 | Physical page 00000 009f0000
|
|---|
| 141 | WRITE 86f4e000-86f4efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 142 | Physical page 00000 06b4e000
|
|---|
| 143 | WRITE 86f90000-86f90fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 144 | Physical page 00000 06b90000
|
|---|
| 145 | WRITE 86f91000-86f91fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 146 | Physical page 00000 06b91000
|
|---|
| 147 | WRITE 86f9a000-86f9afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 148 | Physical page 00000 06b9a000
|
|---|
| 149 | WRITE 86fa2000-86fa2fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 150 | Physical page 00000 06ba2000
|
|---|
| 151 | WRITEHYP ea80f090-ea80f88f size 00000800 Shadow IDT write access handler
|
|---|
| 152 | WRITEHYP ea810580-ea810607 size 00000088 Shadow TSS write access handler
|
|---|
| 153 | WRITEHYP eab9d000-eabacfff size 00010000 Shadow GDT write access handler
|
|---|
| 154 | WRITEHYP eabad000-eabbdfff size 00011000 Shadow LDT write access handler
|
|---|
| 155 | WRITE f712a000-f712afff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 156 | Physical page 00000 ffffffff
|
|---|
| 157 | WRITE f714d000-f714dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 158 | Physical page 00000 ffffffff
|
|---|
| 159 | WRITE f7161000-f7161fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 160 | Physical page 00000 ffffffff
|
|---|
| 161 | WRITE f717d000-f717dfff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 162 | Physical page 00000 ffffffff
|
|---|
| 163 | WRITE f71c8000-f71c8fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 164 | Physical page 00000 ffffffff
|
|---|
| 165 | WRITE f7431000-f7431fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 166 | Physical page 00000 06f5c000
|
|---|
| 167 | WRITE f74f6000-f74f6fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 168 | Physical page 00000 06d93000
|
|---|
| 169 | WRITE f74f9000-f74f9fff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 170 | Physical page 00000 06d96000
|
|---|
| 171 | WRITE f74fa000-f74fafff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 172 | Physical page 00000 06d97000
|
|---|
| 173 | WRITE f765e000-f765efff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 174 | Physical page 00000 06f22000
|
|---|
| 175 | WRITE f765f000-f765ffff size 00001000 CSAM-PATM self-modifying code monitor handler
|
|---|
| 176 | Physical page 00000 06f23000
|
|---|
| 177 |
|
|---|
| 178 | Physical handlers: (PhysHandlers=334576 (0x51af0))
|
|---|
| 179 | From - To (incl) HandlerHC UserHC HandlerHC UserHC HandlerGC UserGC Type Description
|
|---|
| 180 | 00039000 - 00039fff b5dc99c0 b3b01f98 f8d89520 b3b01f98 eade8210 ea963f98 Write Guest Paging Access Handler
|
|---|
| 181 | 0003a000 - 0003afff b5dc99c0 b3b0204c f8d89520 b3b0204c eade8210 ea96404c Write Guest Paging Access Handler
|
|---|
| 182 | 0003b000 - 0003bfff b5dc99c0 b3b01ae8 f8d89520 b3b01ae8 eade8210 ea963ae8 Write Guest Paging Access Handler
|
|---|
| 183 | 0003c000 - 0003cfff b5dc99c0 b3b01b24 f8d89520 b3b01b24 eade8210 ea963b24 Write Guest Paging Access Handler
|
|---|
| 184 | 0003d000 - 0003dfff b5dc99c0 b3b01bd8 f8d89520 b3b01bd8 eade8210 ea963bd8 Write Guest Paging Access Handler
|
|---|
| 185 | 0003e000 - 0003efff b5dc99c0 b3b02088 f8d89520 b3b02088 eade8210 ea964088 Write Guest Paging Access Handler
|
|---|
| 186 | 000a0000 - 000bffff 00000000 b3be0030 00000000 b3be0030 eadc97d0 ea828030 MMIO VGA - VGA Video Buffer
|
|---|
| 187 | 000c0000 - 000c7fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write VGA BIOS
|
|---|
| 188 | 000e0000 - 000e0fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write ACPI RSDP
|
|---|
| 189 | 000e1000 - 000e1fff 00000000 00000000 00000000 00000000 eade2100 00000000 Write DMI tables
|
|---|
| 190 | 000e2000 - 000ecfff 00000000 00000000 00000000 00000000 eade2100 00000000 Write Net Boot ROM
|
|---|
| 191 | 000f0000 - 000fffff 00000000 00000000 00000000 00000000 eade2100 00000000 Write PC BIOS - 0xfffff
|
|---|
| 192 | 005f2000 - 005f2fff b5dc99c0 b3b01cc8 f8d89520 b3b01cc8 eade8210 ea963cc8 Write Guest Paging Access Handler
|
|---|
| 193 | 005f7000 - 005f7fff b5dc99c0 b3b01d04 f8d89520 b3b01d04 eade8210 ea963d04 Write Guest Paging Access Handler
|
|---|
| 194 | 0168d000 - 0168dfff b5dc99c0 b3b01908 f8d89520 b3b01908 eade8210 ea963908 Write Guest Paging Access Handler
|
|---|
| 195 | 0168e000 - 0168efff b5dc99c0 b3b01fd4 f8d89520 b3b01fd4 eade8210 ea963fd4 Write Guest Paging Access Handler
|
|---|
| 196 | 01690000 - 01690fff b5dc99c0 b3b019f8 f8d89520 b3b019f8 eade8210 ea9639f8 Write Guest Paging Access Handler
|
|---|
| 197 | 01691000 - 01691fff b5dc99c0 b3b01db8 f8d89520 b3b01db8 eade8210 ea963db8 Write Guest Paging Access Handler
|
|---|
| 198 | 01692000 - 01692fff b5dc99c0 b3b01c8c f8d89520 b3b01c8c eade8210 ea963c8c Write Guest Paging Access Handler
|
|---|
| 199 | 01693000 - 01693fff b5dc99c0 b3b020c4 f8d89520 b3b020c4 eade8210 ea9640c4 Write Guest Paging Access Handler
|
|---|
| 200 | 06c00000 - 06c00fff b5dc99c0 b3b01f5c f8d89520 b3b01f5c eade8210 ea963f5c Write Guest Paging Access Handler
|
|---|
| 201 | 06c01000 - 06c01fff b5dc99c0 b3b01b9c f8d89520 b3b01b9c eade8210 ea963b9c Write Guest Paging Access Handler
|
|---|
| 202 | 06c02000 - 06c02fff b5dc99c0 b3b01b60 f8d89520 b3b01b60 eade8210 ea963b60 Write Guest Paging Access Handler
|
|---|
| 203 | 06c15000 - 06c15fff b5dc99c0 b3b01c14 f8d89520 b3b01c14 eade8210 ea963c14 Write Guest Paging Access Handler
|
|---|
| 204 | 06d00000 - 06d00fff b5dc99c0 b3b01c50 f8d89520 b3b01c50 eade8210 ea963c50 Write Guest Paging Access Handler
|
|---|
| 205 | 07b8c000 - 07b8cfff b5dc99c0 b3b01e30 f8d89520 b3b01e30 eade8210 ea963e30 Write Guest Paging Access Handler
|
|---|
| 206 | 07b8d000 - 07b8dfff b5dc99c0 b3b01d7c f8d89520 b3b01d7c eade8210 ea963d7c Write Guest Paging Access Handler
|
|---|
| 207 | 07c15000 - 07c15fff b5dc99c0 b3b01e6c f8d89520 b3b01e6c eade8210 ea963e6c Write Guest Paging Access Handler
|
|---|
| 208 | 07c41000 - 07c41fff b5dc99c0 b3b01ee4 f8d89520 b3b01ee4 eade8210 ea963ee4 Write Guest Paging Access Handler
|
|---|
| 209 | 07cba000 - 07cbafff b5dc99c0 b3b01d40 f8d89520 b3b01d40 eade8210 ea963d40 Write Guest Paging Access Handler
|
|---|
| 210 | 07d00000 - 07d00fff b5dc99c0 b3b01ea8 f8d89520 b3b01ea8 eade8210 ea963ea8 Write Guest Paging Access Handler
|
|---|
| 211 | 07efb000 - 07efbfff b5dc99c0 b3b01a34 f8d89520 b3b01a34 eade8210 ea963a34 Write Guest Paging Access Handler
|
|---|
| 212 | 07faa000 - 07faafff b5dc99c0 b3b02010 f8d89520 b3b02010 eade8210 ea964010 Write Guest Paging Access Handler
|
|---|
| 213 | 07fb6000 - 07fb6fff b5dc99c0 b3b019bc f8d89520 b3b019bc eade8210 ea9639bc Write Guest Paging Access Handler
|
|---|
| 214 | 07fb7000 - 07fb7fff b5dc99c0 b3b01890 f8d89520 b3b01890 eade8210 ea963890 Write Guest Paging Access Handler
|
|---|
| 215 | 08065000 - 08065fff b5dc99c0 b3b01944 f8d89520 b3b01944 eade8210 ea963944 Write Guest Paging Access Handler
|
|---|
| 216 | 08099000 - 08099fff b5dc99c0 b3b018cc f8d89520 b3b018cc eade8210 ea9638cc Write Guest Paging Access Handler
|
|---|
| 217 | 0809b000 - 0809bfff b5dc99c0 b3b01980 f8d89520 b3b01980 eade8210 ea963980 Write Guest Paging Access Handler
|
|---|
| 218 | 080a0000 - 080a0fff b5dc99c0 b3b01854 f8d89520 b3b01854 eade8210 ea963854 Write Guest Paging Access Handler
|
|---|
| 219 | 083b2000 - 083b2fff b5dc99c0 b3b01818 f8d89520 b3b01818 eade8210 ea963818 Write Guest Paging Access Handler
|
|---|
| 220 | 083e4000 - 083e4fff b5dc99c0 b3b017dc f8d89520 b3b017dc eade8210 ea9637dc Write Guest Paging Access Handler
|
|---|
| 221 | e0000000 - e07fffff b33d0a80 b2e26060 00000000 b2e26060 eae0a180 eae16060 Write VGA LFB
|
|---|
| 222 | f0000000 - f0000fff 00000000 b3c15210 00000000 b3c15210 eadc97d0 ea85d210 MMIO PCNet
|
|---|
| 223 | fee00000 - fee00fff 00000000 b3bdeaf0 00000000 b3bdeaf0 eadc97d0 ea826af0 MMIO APIC Memory
|
|---|
| 224 | ffff0000 - ffffffff 00000000 00000000 00000000 00000000 eade2100 00000000 Write PC BIOS - 0xffffffff
|
|---|