IDkmVolatileMemoryOperation Interface
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Provides support for reading and writing memory. Unlike IDkmMemoryOperation, this Interface can be used when the process is running, and it will never cache results, so it should be used with care.
Implementations of this interface may restrict when they are called using a filter defined in their component configuration. The following properties may be used: BaseDebugMonitorId, EngineId, TransportKind.
public interface class IDkmVolatileMemoryOperationpublic interface class IDkmVolatileMemoryOperation__interface IDkmVolatileMemoryOperationpublic interface IDkmVolatileMemoryOperationtype IDkmVolatileMemoryOperation = interfacePublic Interface IDkmVolatileMemoryOperationMethods
| VolatileReadMemory(DkmProcess, UInt64, Byte[]) |
Read memory from the target process. This method differs from 'ReadMemory' in that this method can be called at any time (not just when the target is stopped) and the debugger will not try to cache the result of this operation. |
| VolatileWriteMemory(DkmProcess, UInt64, Byte[]) |
Write to the memory of the target process. This method differs from 'WriteMemory' in that this method can be called at any time (not just when the target is stopped) and the debugger will not try to cache the result of this operation. If any memory cannot be written to, an E_INVALID_MEMORY_ADDRESS error will be raised. Because the memory write may occur from run mode, this failure may happen after the copy operation has already begun, and thus may lead to memory corruption in the target process. For this reason, this function must be used with care, and failures may be fatal. |