home *** CD-ROM | disk | FTP | other *** search
- CORELOOK.EXE
-
- PC Memory Scan and Search
-
-
- This program is a simple tool for viewing the contents of the
- PC's memory. It will display any memory address within the 1024 K
- bytes that are addressable in the Intel segmented addressing scheme.
- Thus includes the 640 K bytes of user memory and the 360 K bytes
- defined for system and hardware support functions.
-
- This program also has a string search function that will find
- the memory locations that contain a string of up to five characters
- that you define.
-
- When CORELOOK is loaded, a screen frame appears that includes
- the viewing "window" into the memory contents as well as the
- address/string input fields and all required help information.
-
-
- MEMORY CONTENTS DISPLAY
-
- CORELOOK displays the Hex values of 256 bytes of memory in the
- viewing "window", arranged in 16 rows of 16 bytes, similar to DOS's
- DEBUG utility. Each row is preceded by the 16-bit segment and
- offset components of the 20-bit segmented address of the first byte
- in the row. At the end of each row, the ASCII representations of
- the 16 bytes are displayed. Unprintable low-ASCII and extended
- characters are shown as blank spaces, much as DEBUG displays
- periods.
-
- When CORELOOK first starts, the viewing window displays the
- memory beginning at address 0000:0000. You can then change to other
- addresses by using the several scanning options, as follows.
-
- >0000:0000< ENTER BEGINNING DISPLAY ADDRESS
-
- This option provides an input field to specify the segment
- and offset of the beginning of the desired block of memory.
- The cursor starts under the leftmost position: enter valid
- hex values (0-9 and A-F) across the field, skipping over
- unchanged positions with the <Right> cursor. The Backspace
- and <Left> cursor do not work, but entry will wrap around
- to the beginning if you need to correct a value. At any
- place in the field, pressing Enter will put the indicated
- memory block in the viewing window.
-
- F7 - BACK PAGE
-
- Changes the contents of the viewing window to begin at an
- address 256 bytes lower than the current beginning address.
-
- F8 - FORWARD PAGE
-
- Changes the contents of the viewing window to begin at an
- address 256 bytes greater than the current beginning
- address.
-
- F9 - BACK LINE
-
- Changes the contents of the viewing window to begin at an
- address 16 bytes lower than the current beginning address.
-
- F10 - FORWARD LINE
-
- Changes the contents of the viewing window to begin at an
- address 16 bytes greater than the current beginning
- address.
-
- When these function key commands are used to scroll the viewing
- window, the address in the BEGINNING DISPLAY ADDRESS input field is
- updated automatically, and will always be consistent with the first
- memory location displayed in the viewing window.
-
- The viewing window scroll functions also have a wrap capability
- at the ends of the addressable memory. If the viewing window
- beginning address is 0000:0000 and you use F7 to move back one page,
- the new viewing window will begin at the address of FFF0:0000.
-
-
- STRING SEARCHING
-
- CORELOOK provides a string search feature that will find memory
- locations that hold byte values matching a five character ASCII
- string. The match must be exact, including leading and trailing
- spaces that you have in the input field.
-
- Alt F - ENTER FIND STRING
-
- Press ALT F to access the string search function. The
- cursor will move to the input field where you type the five
- characters to be matched. If the search string is less
- than five characters, you need to enter leading and
- trailing spaces exactly as you expect them to be located.
- This may take a little experimentation if you are not sure
- how the search string is delimited in its memory storage.
- When the input field is to your liking, press <Enter> to
- begin the search.
-
- F5 - REPEAT FIND
-
- This will search for the next occurrence of the string
- currently displayed in the input field. Memory addresses
- are searched in ascending order.
-
-
- PROGRAM TERMINATION
-
- Pressing <ESC> at any time will terminate CORELOOK and take you
- back to DOS.
-
-
-
- Rev 0 (docs only)
- TAM 9/3/88