Does a procdump dump show pages that never loaded because of demand paging?

  64-bit, mmu, procdump, windows, x86

Lately I’ve learned about Demand Paging and about that pages are only loaded when they are accessed.
I am curious to know if a dump created using procdump.exe (from Sysinternals) will show me the full virtual address space including the unloaded pages, or, will it show me only the pages that were loaded and are mapped in the MMU?

My natural thought was that procdump will request every page data so every page will be loaded and the full virtual address space will be dumped, but I didn’t find any way to ensure that.

Thanks

Source: Windows Questions

LEAVE A COMMENT