Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Getting started with dump file analysis

I am working with a legacy VB6/COM application which sometimes causes Windows 7 to crash. I have now generated a .dmp file of one of these crashes using the ProcDump tool from Sysinternals. However, I have never worked with dump files before. Which resources would you recommend for getting started with dump file analysis?

like image 993
user181813 Avatar asked Feb 14 '11 13:02

user181813


People also ask

What is the command used for analyze the dump file?

opendump command, the debugger can read the dump files directly out of the CAB. However, if there are multiple dump files stored in a single CAB, the debugger will only be able to read one of them.


3 Answers

Some more links that might be usefull

WinDBG and tools:
https://developer.microsoft.com/en-us/windows/hardware/download-windbg

.Net extension for WinDBG:
https://docs.microsoft.com/en-us/dotnet/framework/tools/sos-dll-sos-debugging-extension

like image 67
Marvin Smit Avatar answered Oct 10 '22 08:10

Marvin Smit


There are some books such as "Advanced Windows Debugging" or the books on this guy's blog that can help.

There is also knowing assembler that you will need.

Use WinDbg or any other debugger. The above mentioned book is for WinDbg specifically though.

like image 37
Tony The Lion Avatar answered Oct 10 '22 07:10

Tony The Lion


You can use Microsoft Software Development KIT which includes windbg to analyze the dump files, but its required a large download, the simple application is bluescreenview which will analyze the dump file, and shows what module make problem here is the link.

like image 28
jacob justin Avatar answered Oct 10 '22 07:10

jacob justin