I am working with a windows driver and I want to dump the contents of a memory buffer to disk, is there a safe way to dump data inside a driver for debugging purposes?
The buffer is large around 900k
On 08-Sep-2015 23:07, germancons@ wrote:
I am working with a windows driver and I want to dump the contents of a memory buffer to disk, is there a safe way to dump data inside a driver for debugging purposes?
The buffer is large around 900k
What means “safe way” - do you want it encrypted or obscured?
Otherwise just create a file and write the data (yes this is possible in
kernel mode, but be careful ).
– pa
Would using the .writemem debugger command be sufficient?
-scott
OSR
@OSRDrivers
wrote in message news:xxxxx@ntdev…
I am working with a windows driver and I want to dump the contents of a
memory buffer to disk, is there a safe way to dump data inside a driver for
debugging purposes?
The buffer is large around 900k