// ntdddump.h
DUMP_READ DumpRead;
NTSTATUS DumpRead(
[in] PFILTER_EXTENSION FilterExtension,
[in] PLARGE_INTEGER DiskByteOffset,
[in] PMDL Mdl
)
{...}
View the official Windows Driver Kit DDI referenceNo description available.
The Dump_Read callback routine is called after the read from the dump port driver. The filter driver can access the dump data during the call to this routine.
FilterExtension [in]A pointer to a FILTER_EXTENSION structure.
DiskByteOffset [in]The value, in bytes, relative to the source partition for the crash dump or hibernation. Filter drivers should not modify this field.
Mdl [in]A pointer to an MDL structure that describes the data buffer containing the dump data. Filter drivers should not modify this field.
If the routine succeeds, it must return STATUS_SUCCESS. Otherwise, it must return one of the error status values defined in Ntstatus.h.
Filter drivers can read the data that was read by the crashdump process.
Filter drivers can modify the contents of the data buffer contained in Mdl to revert any changes made to the data when it was written to disk.