up (Unassemble from Physical Memory)
The up command displays an assembly translation of the specified program code in physical memory.
up Range
up Address
up
Parameters
Range
Specifies the memory range in physical memory that contains the instructions to disassemble. For more information about the syntax, see Address and Address Range Syntax.
Address
Specifies the beginning of the memory range in physical memory to disassemble. Eight instructions on an x86-based processor are unassembled. For more information about the syntax, see Address and Address Range Syntax.
Environment
| Item | Description |
|---|---|
| Modes | User mode, kernel mode |
| Targets | Live, crash dump |
| Platforms | All |
Additional Information
For more information about assembly debugging and related commands, see Debugging in Assembly Mode.
Remarks
If you do not specify a parameter for the up command, the disassembly begins at the current address and extends eight instructions on an x86-based processor.
Do not confuse this command with the u (Unassemble). The up command disassembles only physical memory, while the u command disassembles only virtual memory.
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for