Сохранить дамп памяти процесса в файл

 _process = new Process ();
 
            ........................
 
            _process.StartInfo.RedirectStandardOutput = true;
            _process.StartInfo.RedirectStandardError = true; 
          
            _process.StartInfo.CreateNoWindow = true;
 
            _process.OutputDataReceived+=new DataReceivedEventHandler(_process_OutputDataReceived);
            _process.ErrorDataReceived+=new DataReceivedEventHandler(_process_ErrorDataReceived);
 
            _process.StartInfo.UseShellExecute = false;        
 
            _process.Start();
        
            _process.BeginOutputReadLine();
 
 
  void _process_OutputDataReceived(object sender, DataReceivedEventArgs e)
       {
            try 
    {
 
                e.Data - тескт потока
            
            }
            catch(Exception ex){
            }
 
        }

using System;
using System.ComponentModel;
using System.Diagnostics;
using System.IO;
using System.Runtime.InteropServices;
 
namespace ConsoleApplication29
{
    class Program
    {
        [Flags]
        enum MINIDUMP_TYPE : uint
        {
            MiniDumpNormal = 0x00000000,
            MiniDumpWithDataSegs = 0x00000001,
            MiniDumpWithFullMemory = 0x00000002,
            MiniDumpWithHandleData = 0x00000004,
            MiniDumpFilterMemory = 0x00000008,
            MiniDumpScanMemory = 0x00000010,
            MiniDumpWithUnloadedModules = 0x00000020,
            MiniDumpWithIndirectlyReferencedMemory = 0x00000040,
            MiniDumpFilterModulePaths = 0x00000080,
            MiniDumpWithProcessThreadData = 0x00000100,
            MiniDumpWithPrivateReadWriteMemory = 0x00000200,
            MiniDumpWithoutOptionalData = 0x00000400,
            MiniDumpWithFullMemoryInfo = 0x00000800,
            MiniDumpWithThreadInfo = 0x00001000,
            MiniDumpWithCodeSegs = 0x00002000,
            MiniDumpWithoutAuxiliaryState = 0x00004000,
            MiniDumpWithFullAuxiliaryState = 0x00008000,
            MiniDumpWithPrivateWriteCopyMemory = 0x00010000,
            MiniDumpIgnoreInaccessibleMemory = 0x00020000,
            MiniDumpWithTokenInformation = 0x00040000
        };
 
        [DllImport( "DbgHelp.dll", SetLastError = true )]
        [return: MarshalAs( UnmanagedType.Bool )]
        static extern bool MiniDumpWriteDump (
            IntPtr hProcess,
            int ProcessId,
            IntPtr hFile,
            MINIDUMP_TYPE DumpType,
            IntPtr ExceptionParam,
            IntPtr UserStreamParam,
            IntPtr CallbackParam
            );
 
        static void Main ( string[] args )
        {
            using ( var process = Process.GetProcessesByName( "idaq" )[0] )
            using ( var file    = File.Open( "mem.dmp", FileMode.Create, FileAccess.Write ) )
            {
                var dumpType = MINIDUMP_TYPE.MiniDumpNormal;
 
                if ( !MiniDumpWriteDump(
                        process.Handle, process.Id, file.Handle,
                        dumpType, IntPtr.Zero, IntPtr.Zero, IntPtr.Zero )
                    )
                    throw new Win32Exception( Marshal.GetLastWin32Error() );
            }
        }
    }
}

var dumpType = (MINIDUMP_TYPE)0x1826;
/* MINIDUMP_TYPE.MiniDumpWithFullMemory | MINIDUMP_TYPE.MiniDumpWithHandleData |
    MINIDUMP_TYPE.MiniDumpWithUnloadedModules | MINIDUMP_TYPE.MiniDumpWithFullMemoryInfo |
    MINIDUMP_TYPE.MiniDumpWithThreadInfo;
*/

using System.IO;
using System.Diagnostics;
using System.Runtime.InteropServices;
 
        //импорт библиотеки из операционной системы для создания дампа памяти
        [DllImport("dbghelp.dll")]
        public static extern bool MiniDumpWriteDump(IntPtr hProcess, Int32 ProcessId, IntPtr hFile, int DumpType, IntPtr ExceptionParam, IntPtr UserStreamParam, IntPtr CallackParam);
 
        private void button1_Click(object sender, EventArgs e)
        {
                using (FileStream fs = new FileStream(@"C:\firefox.dmp", FileMode.Create))
                {
                    foreach (Process pr in Process.GetProcessesByName("firefox"))
                        MiniDumpWriteDump(pr.Handle, pr.Id, fs.SafeFileHandle.DangerousGetHandle(), 0x1826, IntPtr.Zero, IntPtr.Zero, IntPtr.Zero);
                    fs.Close();
                }
        }