https://www.matteomalvica.com/drafts/ Recent content in Drafts on Hugo en This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License. https://www.matteomalvica.com/drafts/windows_mem_arch/ Mon, 01 Jan 0001 00:00:00 +0000 https://www.matteomalvica.com/drafts/windows_mem_arch/ I always wanted to condense in a one-pager all the wonderuful concepts about memory internals from the “Rootkit Arsnel” by B.Blunden - so here they are! The memory models, which are still relevant, are described around the x86 specs, whereas the playalongs are x64 based, so anyone can get similar results by running the latest win10 version. x86 - Abstractions Memory Models Flat Model Contiguous address space, can be mapped 1:1 to phy address space or seen as linear address space during virtual memory.