The MEMDump utility is designed to dump or copy any part of 4GB linear memory address space under MS-DOS and Windows 9x DOS to a console, text or binary file.
You can use MEMDump for dump contents of PCI devices memory located outside of first megabyte, access USB structures, study contents of memory used by memory managers, etc. For proper access to hardware registers, memory can be read with BYTE, WORD or Double WORD granularity. Utility provides transparent access to memory with or without installed memory managers.
Syntax:
MEMDUMP [/H|?]
[/D[B|W|D][:Address[,Length]]]
[/F:filename|none]
[/B:filename]
where:
/H - Print this text
/D[B|W|D][:Address[,Length]]
- Dump 'Length' number of memory bytes from specified
linear 'Address' as bytes (DB), words (DW) or
double words (DD) correspondingly.
/F:filename - Output file for the dump (Default: console)
Use /F:none to completely suppress dump
/B:filename - Output file for the binary contents of memory
Notes:
Both 'Address' and 'Length' can be expressed in hexadecimal format with '0x' prefix. The 'Length' field can be also expressed in decimal. Examples:
MEMDUMP /DW:0x100000,0x100000 /F:2ndMB.dmp - dump second MB to file 2ndMB.dmp
MEMDUMP /DB:0x100000,128 - dump 128 Bytes to console
MEMDUMP /D:0,0x100 /F:none /B:IntTB.bin - copy INT table to binary file IntTB.bin
If dump or binary file exists, MEMDUMP unconditionally overrides it.
If you are using WORD or DWORD access 'Length' parameter should be multiple of 2 or 4 correspondingly.
Please remember that if the memory manager (such as EMM386.EXE) is loaded, MEMDUMP will read linear address rather as physical address.
자 료 실
유틸리티 MEMDump(DOS)
2007.10.02 23:39
The MEMDump utility is designed to dump or copy any part of 4GB linear memory address space under MS-DOS and Windows 9x DOS to a console, text or binary file.
You can use MEMDump for dump contents of PCI devices memory located outside of first megabyte, access USB structures, study contents of memory used by memory managers, etc. For proper access to hardware registers, memory can be read with BYTE, WORD or Double WORD granularity. Utility provides transparent access to memory with or without installed memory managers.
Syntax:
MEMDUMP [/H|?]
[/D[B|W|D][:Address[,Length]]]
[/F:filename|none]
[/B:filename]
where:
/H - Print this text
/D[B|W|D][:Address[,Length]]
- Dump 'Length' number of memory bytes from specified
linear 'Address' as bytes (DB), words (DW) or
double words (DD) correspondingly.
/F:filename - Output file for the dump (Default: console)
Use /F:none to completely suppress dump
/B:filename - Output file for the binary contents of memory
Notes:
Both 'Address' and 'Length' can be expressed in hexadecimal format with '0x' prefix. The 'Length' field can be also expressed in decimal. Examples:
MEMDUMP /DW:0x100000,0x100000 /F:2ndMB.dmp - dump second MB to file 2ndMB.dmp
MEMDUMP /DB:0x100000,128 - dump 128 Bytes to console
MEMDUMP /D:0,0x100 /F:none /B:IntTB.bin - copy INT table to binary file IntTB.bin
If dump or binary file exists, MEMDUMP unconditionally overrides it.
If you are using WORD or DWORD access 'Length' parameter should be multiple of 2 or 4 correspondingly.
Please remember that if the memory manager (such as EMM386.EXE) is loaded, MEMDUMP will read linear address rather as physical address.
댓글 [0]
번호 | 제목 | 글쓴이 | 조회 | 추천 | 등록일 |
---|---|---|---|---|---|
[공지] | 저작권 보호 요청 자료 목록 | gooddew | - | - | - |
[공지] | 자료실 이용간 유의사항 | gooddew | - | - | - |
719 | 서버 / IT| 트레이바의 네트워크 아이콘을 클래식으로 [2] | 오펜하이머 | 7233 | 1 | 09-05 |
718 | 윈도우 / PE| 제가 닷넷으로 만든 윈도우8 시스템 종료 시켜주는 프로그... [13] | 블루포 | 8850 | 4 | 09-05 |
717 | 유틸리티| 빠른 조각모음 입니다 (일명 종결자라고 하는데...글쎄요 ) [13] | 클레멘타인 | 13285 | 3 | 09-04 |
716 | wise care-365-pro-1.82.137 포터블 [14] | 천국문 | 7938 | 3 | 09-04 |
715 | 유틸리티| CPUID Pro 1.14 [2] | 넥스트90 | 5717 | 4 | 09-04 |
714 | 미디어| AIMP v3.20 Build 1125 Beta 1 (02.09.2012) [1] | 카라꽃향기 | 5858 | 3 | 09-04 |
713 | 윈도우 / PE| ollydbg 2.00 [7] |
|
7336 | 0 | 09-03 |
712 | 윈도우 / PE| [파이널] Windows 8 번역 오류 수정 모음 [15] |
|
11320 | 6 | 09-03 |
711 | 유틸리티| 라이브온에어 v6.0 (build 20120903) 업데이트 버전 | 모라카네 | 5026 | 3 | 09-03 |
710 | 그래픽| 사용기/설치기 카테고리 글 1559에 파일 첨부가 안되서.... |
|
14816 | 3 | 09-03 |
709 | 윈도우 / PE| 윈8 K 드라이브 최적화 번역 수정 (개-드라이브 포함) [5] |
|
8781 | 4 | 09-02 |
708 | 게 임| 스파이더 카드놀이 for 윈도우8 [5] | minesoul | 20918 | 3 | 09-02 |
707 | 서버 / IT| 유튜브 동영상 다운로더 [10] | DevBird | 8280 | 3 | 09-01 |
706 | 윈도우 / PE| 무료로 한글폰트를 설치해 보세요. [25] | 프리네 | 13650 | 10 | 08-31 |
705 | 미디어| 팟플레이어 08월 30일자 개발자 버전 [12] | ohys | 9692 | 10 | 08-30 |
704 | 유틸리티| 메모장2 mod r770 (Notepad2-mod r770) 공개 [13] | iJeyBee | 7962 | 9 | 08-30 |
703 | 유틸리티| 종합 멀티미디어 프로그램 라이브온에어 v6.0 (build 20120... [2] | 모라카네 | 5807 | 2 | 08-29 |
702 | 윈도우 / PE| (무인자동)응답파일 autounattend.xml [7] | 노백 | 9255 | 4 | 08-29 |
701 | 유틸리티| iReboot(멀티부팅 사용자를 위한...) [2] | 낙엽 | 6530 | 1 | 08-29 |
700 | 유틸리티| VMware OS X 10.8.1 Mountain Lion&iWork 9.2 [14] | 다른 의견 | 13989 | 3 | 08-28 |