site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com Thread-index: AchYjD9Bfe+NzsR/EdyvHQAbY7jhxQ== Thread-topic: Dumping Entire Process Memory using vm_region User-agent: Microsoft-Entourage/11.3.6.070618 Hello All, I would like to dump the entire writable memory space of a process to disk (fwrite()) to be searched through. Can I use vm_region or some other api call to find the boundaries of a process virtual memory? Can someone give me an example? Thanks, David Weston Security Engineer Science Application International Corporation Web: http://www.saic.com/infosec Email:DAVID.G.WESTON@saic.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com