Automate memory search in dump-CodePudding

I have full dump and want to search across custom made doubly linked list of 6 millions elements.

To make is simple consider that element of list contains data that is type integer. Is that way to find (automate) if there is element with specific value.

I'm using Visual Studio 2017 Professional, so action "Debug Managed Memory" is not an option.

CodePudding user response：

I have used WinDbg Preview tool to sovlve this. It's free tool made by Microsoft. It can run JavaScript to analyze memory, and probably much more.

Template JS code list iteration :

"use strict";

function read_next(addr) {
    return host.memory.readMemoryValues(addr, 1, 8)[0];
}

function read_data(addr) {
    return host.memory.readMemoryValues(addr   0x10, 1, 8)[0];
}

function invokeScript() {
    let current = 0x123; // hardcoded

    while(current)
    {
        let data = read_data(current);

        // use data pointer to analize data

        current = read_next(current);
    }
}