> I have a system in the field (but I can modem into it and use Remote
Desktop) that I want to read a given memory location. It’s a PCI
device’s register (not configuration space, but normal memory space),
but it’s already mapped into memory and I know where (0xF247A100).
So, given that it’s remote and I can’t reboot it, I can’t seem to use
any of the usual debuggers. DEBUG can’t handle a 32-bit address.
I figure that someone surely must have written a quick-and-dirty
utility to do this, which I assume would need a helper driver since
it’s in high memory. But a Google search didn’t get me anywhere.
Is the system XP or higher? If so, what about remote desktoping in and
using Windbg’s local kernel debugging option to view the contents of your
memory address?
Ron
From: “Taed Wynnell” >Reply-To: “Windows System Software Devs Interest List” > >To: “Windows System Software Devs Interest List” >Subject: [ntdev] Utility to read a memory location? >Date: Mon, 12 Feb 2007 06:49:06 -0800 > > > I have a system in the field (but I can modem into it and use Remote > > Desktop) that I want to read a given memory location. It’s a PCI > > device’s register (not configuration space, but normal memory space), > > but it’s already mapped into memory and I know where (0xF247A100). > > > > So, given that it’s remote and I can’t reboot it, I can’t seem to use > > any of the usual debuggers. DEBUG can’t handle a 32-bit address. > > > > I figure that someone surely must have written a quick-and-dirty > > utility to do this, which I assume would need a helper driver since > > it’s in high memory. But a Google search didn’t get me anywhere. > > > > Any pointers? > > > > (Thanks in advance.) > > > >— >Questions? First check the Kernel Driver FAQ at >http://www.osronline.com/article.cfm?id=256 > >To unsubscribe, visit the List Server section of OSR Online at >http://www.osronline.com/page.cfm?name=ListServer
Be aware that in the default configuration for Windows Vista and beyond,
this will not work.
–
Ken Johnson (Skywing)
Windows SDK MVP http://www.nynaeve.net
“Ronald Riddle” wrote in message news:xxxxx@ntdev… > Hi Taed, > > Is the system XP or higher? If so, what about remote desktoping in and > using Windbg’s local kernel debugging option to view the contents of your > memory address? > > > Ron > > >>From: “Taed Wynnell” >>Reply-To: “Windows System Software Devs Interest List” >> >>To: “Windows System Software Devs Interest List” >>Subject: [ntdev] Utility to read a memory location? >>Date: Mon, 12 Feb 2007 06:49:06 -0800 >> >> > I have a system in the field (but I can modem into it and use Remote >> > Desktop) that I want to read a given memory location. It’s a PCI >> > device’s register (not configuration space, but normal memory space), >> > but it’s already mapped into memory and I know where (0xF247A100). >> > >> > So, given that it’s remote and I can’t reboot it, I can’t seem to use >> > any of the usual debuggers. DEBUG can’t handle a 32-bit address. >> > >> > I figure that someone surely must have written a quick-and-dirty >> > utility to do this, which I assume would need a helper driver since >> > it’s in high memory. But a Google search didn’t get me anywhere. >> > >> > Any pointers? >> > >> > (Thanks in advance.) >> > >> >>— >>Questions? First check the Kernel Driver FAQ at >>http://www.osronline.com/article.cfm?id=256 >> >>To unsubscribe, visit the List Server section of OSR Online at >>http://www.osronline.com/page.cfm?name=ListServer > > _________________________________________________________________ > Search for grocery stores. Find gratitude. Turn a simple search into > something more. > http://click4thecause.live.com/search/charity/default.aspx?source=hmemtagline_gratitude&FORM=WLMTAG > >
>Be aware that in the default configuration for Windows Vista and beyond,
this will not work.
Yep, with Vista you need to ensure that you’re running Windbg with Admin
priviledges and that the system is booted in debug mode. Then, you should
be fine.