How to make a memory dump in .net?

Question

How do you obtain a memory dump from a given memory address in the format:

  Address   |           Hexadecimal representation              | ASCII representation
---------------------------------------------------------------------------------------
0x637132687 | 00 00 00 00 00 00 00 00   45 21 65 78 32 F5 12 6C |  ....... ahsnfdas
0x637132703 | 00 00 00 00 00 00 00 00   45 21 65 78 32 F5 12 6C |  ....... ahsnfdas
0x637132719 | 00 00 00 00 00 00 00 00   45 21 65 78 32 F5 12 6C |  ....... ahsnfdas
0x637132735 | 00 00 00 00 00 00 00 00   45 21 65 78 32 F5 12 6C |  ....... ahsnfdas

Do you know any API/framework/tool for the work?

score 2 · Accepted Answer · edited May 23 '17 at 12:26

2

You'll need Marshal.CopyMemory() and this code. P/Invoking VirtualQueryEx() to ensure the memory addresses are valid would be a good idea to avoid exceptions.

edited May 23 '17 at 12:26

Community

1
1

answered May 15 '10 at 17:33

Hans Passant

922,412
146
1,693
2,536

Thanks Hans, I'm going to take this approach : ) +1 – SDReyes May 15 '10 at 17:37

score 1 · Answer 2 · edited Jun 20 '20 at 09:12

1

It can certainly be done using WinDbg. Honestly, I'm not a wizard using it but Tess Ferrandez from Microsoft is and has an excellent blog about using WinDbg to debug .NET applications.

It seems you just want to browse a normal memory dump, that should be pretty straightforward. If you want to examine anything further (with regards to .net) you should use the SOS extensions for WinDbg.

edited Jun 20 '20 at 09:12

Community

1
1

answered May 15 '10 at 17:06

Johannes Rudolph

35,298
14
114
172

Thank you Johannes! nice link +1 – SDReyes May 15 '10 at 17:37

How to make a memory dump in .net?

2 Answers2