Dump some memory from a crashdump into another file...

WINDBG
1

Hi All,

I am looking for a tool / method / extension, that will allow me to specify
a Virtual address (Via a global symbol if possible) and Length within a
crashdump file. Then, it will take memory from that address, and dump it
to a data file somewhere onto my PC. I have a data structure I want to
get access to using an external tool that will dig through it. I know I
could write an extension to do this also, but it would be easier to have
access to the data from an external tool also.

BTW, does anyone have “Skeleton code” for an KD Extension that will sort of
make it a little easier to get started writing one? (I never wrote one
before)

Thanks,
James

2

Try “.writemem ”. It is a newer feature added in
6.0.17 (I think) and the debugger.chm should explain it.

The Debugger SDK is can be installed via the custom install option of
the debugger installation.

-----Original Message-----
From: xxxxx@conexant.com [mailto:xxxxx@conexant.com]
Sent: Thursday, October 03, 2002 6:37 PM
To: Kernel Debugging Interest List
Subject: [windbg] Dump some memory from a crashdump into another file…

Hi All,

I am looking for a tool / method / extension, that will allow me to
specify a Virtual address (Via a global symbol if possible) and Length
within a
crashdump file. Then, it will take memory from that address, and dump
it
to a data file somewhere onto my PC. I have a data structure I want
to
get access to using an external tool that will dig through it. I know I
could write an extension to do this also, but it would be easier to have
access to the data from an external tool also.

BTW, does anyone have “Skeleton code” for an KD Extension that will sort
of make it a little easier to get started writing one? (I never wrote
one
before)

Thanks,
James

—
You are currently subscribed to windbg as: xxxxx@microsoft.com To
unsubscribe send a blank email to %%email.unsub%%