I have 30720 bytes of memory I need to dump.  db edi surely does not give me enough as it only supplies me with 128 bytes.  How to make it display all 30720 bytes and not just 128?  If so, can it output them to a file?  Thanks

I don't have any Assembly skill at all, so this is a shot in the dark, but couldn't you just make a loop that gets 128 bytes 240 times, increasing the memory location to read 128 bytes per loop?

To display it all in Windbg (not recommended for this much data): db edi l0n30720.  To save it to a file: .writemem c:\mymemory.dat edi l0n30720.

Works perfect, thanks.

Get back on Botnet/b.net