The Paragraphs tab displays a tabular representation of all the memory in the target program. This is known as the paragraphs view.

 

 

 

The paragraphs view displays information about a process's virtual memory usage whilst the process is running. If there is no target program being monitored, the paragraphs view does not display any data.

 

For memory paragraphs where more than one memory status (or swap count etc) is present for the pages in the memory paragraph the display will list the aggregate values (if two pages have been swapped a total of 33 times (18 and 15 times each) the display will show a swap count of 33).

 

The data displayed is data per virtual memory paragraph (as defined by the operating system dwAllocationGranularity returned from Win32 API call GetSystemInfo()).

A memory paragraph is 64Kb.

 

 

Filtering

 

The displayed data can be filtered by Type and by Working Set.

 

 

 

Type

 

Filtering by type filters memory for the following types of memory:

 

•All. All types of memory.

•Committed. Committed memory.

•Reserved. Reserved memory.

•Free. Free memory.

•Private. Memory private to this application.

•Image. Executable files (EXE, DLL, etc).

•Mapped. Memory mapped files.

•Stack. Memory used for thread stacks.

•Shareable. Memory shared with other applications.

•Swapped. Memory swapped in/out of memory.

•Wasted. Memory allocated by VirtualAlloc() but not available to the application to use. What is wasted memory?

 

Working Set

 

Filtering by working set filters memory for the following working set criteria:

 

•All. Displays all memory.

•Working Set. Only displays memory that is in the working set.

•Not Working Set. Only displays memory that is not in the working set.

 

 

Sorting

 

Each column can be sorted by clicking the column header to move sorting to that column. Clicking the current column header again reverses the sort direction.

 

 

Context menu

 

A context menu is available to allow DLL inspection using PE File Browser, and to copy the DLL name to clipboard.

 

 

 

 

 

Viewing swap behaviour

 

To view virtual memory being swapped select the Swap column so that the sort arrow points downwards.

 

The display will show pages that have been swapped with the number of times they have been swapped shown in the Swap column.

 

When a page gets swapped it will be promoted at the top of the swap column for 1 second then be displayed back in it's regular sorted position.

When combined with the highlight swapped memory option on the Display Settings dialog you can very easily see pages being swapped.

 

 

View data

 

Clicking View data... opens a memory inspection dialog, allowing you to view the memory as BYTEs, WORDs, DWORDs or QWORDs.