display memory frame address in kernel mode

[Amn]

Hi all,

I am trying to read the contents of display (screen image data), but in user mode access violation is all i will ever get. The question is, can I safely and reliably read display contents if I develop a kernel mode utility, and is it worth it ?

All I need is a physical display data, and that including all logon (GINA) screens, in other words, display contents across user desktops and locked workstation screens. This requires some sophisticated methods, and those I have heard of are:

1. Write a mirror display driver
2. Write a display driver (i think this one is crazy)

Is there any other way to do the task ? If not, I am installing Windows DDK and heading for mirror driver sample, reprogramming and recompiling it, right ?

Help

[sukhodolin]

Mirror driver is the way to go

[Amn]

Thanks, i guess, after two years - a reply

Do you know something I don't ? I mean, did you make one ?

Cheers!

[golanshahar]

did you try DirectX maybe it will be enough for what you need?

Cheers

[Amn]

Did you try it yourself ?