ReadPhysicalWithFlags - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// wdbgexts.h
VOID ReadPhysicalWithFlags(
ULONG64 address,
PVOID buf,
ULONG size,
ULONG flags,
PULONG sizer
);
View the official Windows Driver Kit DDI referenceNo description available.
The ReadPhysicalWithFlags function reads from physical memory.
addressSpecifies the physical address to read.
bufSpecifies the address of an array of bytes to hold the data that is read.
sizeSpecifies the number of bytes to read.
flagsSpecifies the properties of the physical memory to be read. This must match the way the physical memory was advertised to the operating system on the target. Possible values are listed in the following table.
| Value | Description |
|---|---|
| PHYS_FLAG_DEFAULT | Use the default memory caching. |
| PHYS_FLAG_CACHED | The physical memory is cached. |
| PHYS_FLAG_UNCACHED | The physical memory is uncached. |
| PHYS_FLAG_WRITE_COMBINED | The physical memory is write-combined. |
sizerReceives the number of bytes actually read.
If you are writing a WdbgExts extension, include wdbgexts.h. If you are writing a DbgEng extension that calls this function, include wdbgexts.h before dbgeng.h (see Writing DbgEng Extension Code for details).