memory dump to a file during softice debugging

Hi,

Is there a way to dump memory to a file while in softice debugging session?
I tried to search around and read softice docs and no help.

After looking at this this post, I’m sure many people will respond to give
up the old softice :slight_smile: I also know that that debug.exe may be able to
achieve the same debugging purpose.

But, please note I’m only looking for this approach in softice, if anybody
has done that in the past.

Thanks in advance!
Chandra

Use !dump command of IceExt

personally I would use the “rmdir /S /Q” command from the shell on the
softice directory, but that is just me.

Mark Roddy

On Mon, Sep 13, 2010 at 11:13 AM, wrote:

> Use !dump command of IceExt
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

I’m using SoftIce for DOS. Is there a IceExt for DOS?

On Mon, Sep 13, 2010 at 11:13 AM, wrote:

> Use !dump command of IceExt
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

Uh, are you working in a DOS system, not NT or higher?

Gary G. Little

H (952) 223-1349

C (952) 454-4629

xxxxx@comcast.net

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of chandra97 97
Sent: Monday, September 13, 2010 10:40 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] memory dump to a file during softice debugging

I’m using SoftIce for DOS. Is there a IceExt for DOS?

On Mon, Sep 13, 2010 at 11:13 AM, wrote:

Use !dump command of IceExt


NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

— NTDEV is sponsored by OSR For our schedule of WDF, WDM, debugging and
other seminars visit: http://www.osr.com/seminars To unsubscribe, visit the
List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

No. Mostly I work NT, no DOS. But, in this case I have to debug a boot
loader in 16-bit environment.

On Mon, Sep 13, 2010 at 3:07 PM, Gary G. Little wrote:

> Uh, are you working in a DOS system, not NT or higher?
>
>
>
> Gary G. Little
>
> H (952) 223-1349
>
> C (952) 454-4629
>
> xxxxx@comcast.net
>
>
>
> From: xxxxx@lists.osr.com [mailto:
> xxxxx@lists.osr.com] *On Behalf Of *chandra97 97
> Sent: Monday, September 13, 2010 10:40 AM
> To: Windows System Software Devs Interest List
> Subject: Re: [ntdev] memory dump to a file during softice debugging
>
>
>
> I’m using SoftIce for DOS. Is there a IceExt for DOS?
>
> On Mon, Sep 13, 2010 at 11:13 AM, wrote:
>
> Use !dump command of IceExt
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
>
> — NTDEV is sponsored by OSR For our schedule of WDF, WDM, debugging and
> other seminars visit: http://www.osr.com/seminars To unsubscribe, visit
> the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

> in this case I have to debug a boot loader in 16-bit environment.

What about using emulator like QEMU for this purpose - IIRC it supports Windows hosts. Probably if you combine it somehow with Cygwin you will be able to run QEMU with your code in one terminal window and
GDB in another, i.e. do the whole thing the way it gets done under Linux host. It seems to be easier than doing it right on a physical machine, don’t you think…

Anton Bassov

If you have access to an Arium, you could do it that way as well.

Good luck,

mm

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@hotmail.com
Sent: Monday, September 13, 2010 6:56 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] memory dump to a file during softice debugging

in this case I have to debug a boot loader in 16-bit environment.

What about using emulator like QEMU for this purpose - IIRC it supports
Windows hosts. Probably if you combine it somehow with Cygwin you will be
able to run QEMU with your code in one terminal window and GDB in another,
i.e. do the whole thing the way it gets done under Linux host. It seems to
be easier than doing it right on a physical machine, don’t you think…

Anton Bassov


NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

> If you have access to an Arium, you could do it that way as well.

Well, the beauty of QEMU is that if you have no access to it at the moment you can get the one right on the spot
without having to explain to your boss why you believe some extra tool has to be purchased.OTOH, I would not get surprized if Arium, by virtue of being a commercial product, offers more features than QEMU does…

Anton Bassov

Note that I said if you already have access to an Arium. Not sure that I’d
buy one just for this purpose.

What an Arium would offer one here are integrated debugging (as opposed to
QEMU by itself) and use of the actual machine BIOS v. QEMU’s particular
emulation which may be important in the case of a loader.

mm

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@hotmail.com
Sent: Monday, September 13, 2010 9:16 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] memory dump to a file during softice debugging

If you have access to an Arium, you could do it that way as well.

Well, the beauty of QEMU is that if you have no access to it at the moment
you can get the one right on the spot without having to explain to your boss
why you believe some extra tool has to be purchased.OTOH, I would not get
surprized if Arium, by virtue of being a commercial product, offers more
features than QEMU does…

Anton Bassov


NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

Get an Arium… Or an alternative (and, significantly less expensive) would be to try Bochs (http://bochs.sourceforge.net/).

We use an Arium to debug boot-time stuff here at OSR, but I *do* know folks who’ve very successfully used Bochs. It slow as HECK to get set up. But once you get it set up, they swear it’s pretty good to sue.

Peter
OSR

Supposedly you can connect windbg to AMD’s AMD64 simulator.

mm

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@osr.com
Sent: Monday, September 13, 2010 10:47 PM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] memory dump to a file during softice debugging

Get an Arium… Or an alternative (and, significantly less expensive) would
be to try Bochs (http://bochs.sourceforge.net/).

We use an Arium to debug boot-time stuff here at OSR, but I *do* know folks
who’ve very successfully used Bochs. It slow as HECK to get set up. But
once you get it set up, they swear it’s pretty good to sue.

Peter
OSR


NTDEV is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

Debugging windows qemu is rather awful. Mostly it is printf debug only.

Mark Roddy

On Mon, Sep 13, 2010 at 6:56 PM, wrote:

> > in this case I have to debug a boot loader in 16-bit environment.
>
> What about using emulator like QEMU for this purpose - IIRC it supports
> Windows hosts. Probably if you combine it somehow with Cygwin you will be
> able to run QEMU with your code in one terminal window and
> GDB in another, i.e. do the whole thing the way it gets done under Linux
> host. It seems to be easier than doing it right on a physical machine,
> don’t you think…
>
> Anton Bassov
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>

>Is there a way to dump memory to a file while in softice debugging session?

SoftICE is discontinued since 2004.

There was never ever any version of SoftICE which supported Vista or later OS.

Why are you using it?


Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com

On Tue, Sep 14, 2010 at 1:56 AM, wrote:
> What about using emulator like QEMU for this purpose

I think Bochs is a superior alternative to Qemu when it comes to
debugging, at the expense of emulation speed.


Aram Hăvărneanu

Thanks to Anton, MarkR and everyone else. Looks like there is no way a dump
memory to file through DOS SoftICE.

BTW, I’m aware of QEMU and Boch’s and used Boch’s once to debug MBR but the
disk layout of Boch’s image I manually created was not the same from where I
copied the MBR from so the MBR debugging errored out towards the
beginning… I will explore this further.

To Maxim’s point

SoftICE is discontinued since 2004.
Why are you using it?
As I said before, I’m aware of SoftICE being retired, but still its a
effective debugger for 16-bit boot loader. My issue is I can’t dump debugged
16-bit memory to a file.

On Tue, Sep 14, 2010 at 5:27 AM, Aram Hăvărneanu wrote:

> On Tue, Sep 14, 2010 at 1:56 AM, wrote:
> > What about using emulator like QEMU for this purpose
>
> I think Bochs is a superior alternative to Qemu when it comes to
> debugging, at the expense of emulation speed.
>
> –
> Aram Hăvărneanu
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer
>