1. Common WinDbg Commands (Thematically Grouped)
(Documents/Command Lists)

...  Variants / Params Description version Dump version info of debugger and loaded extension DLLs vercommand Dump command line that was used to start the debugger vertarget ...

2. !heap failed in windbg. Invalid type information f
(Forum/Crash Dump Analysis )

Hello, I'm trying to dump heap information from full dump memory file sitting on Windows Server 2003 SP2 x86. Dump was created for 32-bit mixed (native/clr) application which was running on Windows ...

3. Bugcheck Analysis
(Forum/Crash Dump Analysis )

Microsoft (R) Windows Debugger Version 6.9.0003.113 X86 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\Minidump\060510-19390-01 begin_of_the_skype_highlighting              060510-19390-01      end_of_the_skype_highlighting.dmp] Mini ...

4. Crash Dump - Analysis Error - Advice Please
(Forum/Crash Dump Analysis )

... I open the minidump that I want to analyse I get the following error Loading User Symbols Loading unloaded module list ................. Unable to load image lvuvc.sys, Win32 error 0n2 *** WARNING: ...

5. Crashdump bitness
(Forum/General Questions)

Hi, Is there a way to find out if a dump was created using 32bit or 64bit debugger? Thanks Nachiket ...

6. Detail analysis of crashme.exe
(Forum/Article Discussions)

Hi Can you please elaborate how to analyze dump using Crashme.exe it will be very helpful. Regards Sudhir ...

7. drwtsn32
(Forum/General Questions)

... Microsoft. Just after I answer to this popup, the dump file is deleted. Is it possible to configure drwtsn32 to generate a dump file and that it does not delete it ? Thanks for advance. Sybar ...

8. Help with crash dump
(Forum/Crash Dump Analysis )

Hi, I am have a regular crash of my machine every 2-3 days. below is the analysis of the problem "Open Crash Dump ...". Can anyone suggest the problem? Is it faulty memory or a driver fault? kd> ...

9. Is it possible to view Mutant states from a Crash
(Forum/User-Mode Debugging)

... crash dump file so that I can exame the mutex states at the time that I invoke the crash dump. I've tried creating a crashdump using PROCDUMP -ma test.exe. Can somebody please tell me if and how it ...

10. Memory Searching issue (command s)
(Forum/Kernel-Mode Debugging)

Hello! When I try to use the 's' command to search memory, it was coming up with no results. Upon dumping the memory region where I knew the byte-sequence I was looking for is located, the memory there ...

11. Minidump error
(Forum/Crash Dump Analysis )

Hi, kindly help. Got 3 minidump files w/ after 3 consecutive restart of the machine by itself. Debugging Details: ------------------ Could not read faulting driver name READ_ADDRESS:  ...

12. Re: Crash location !
(Forum/Crash Dump Analysis )

Use the adplus.vbs script to monitor your executable and it will automatically generate a full dump when the proces has a 2nd chance exception (unhandled exception). There are parameters to the script, ...

13. Re: Crashdump bitness
(Forum/General Questions)

Welcome Nachiket. You can actually open a 32-bit dump with both a 32- or 64-bit WinDbg. At the same time you can open a 64-bit dump with both variants of WinDbg too. So, how to find out the bitness ...

14. Re: CrashMe Application
(Forum/Article Discussions)

Hello everybody I can't see 10 Mb memory in dump which allocate operator new. I do next step 1) Start "CrashMe.exe" in debug mode 2) Attach with WinDbg 3) Press button "operator new*" 4) Press ...

15. Re: Detail analysis of crashme.exe
(Forum/Article Discussions)

Sudhir, welcome and thanks for your input. In fact an article about setting up WinDbg and analyze CrashMe and its crash dumps is the very next thing I will do over the next weeks. I hope to see ...

16. Re: drwtsn32
(Forum/General Questions)

... an error report to Microsoft. If you choose Don't Send, a dump file will be created and stored on your hard disk. If you choose Send Error Report, a dump file will be created and stored on your hard disk, ...

17. Re: sort lm n t by date/time
(Forum/Crash Dump Analysis )

Welcome Carl. You might try the !dll -l command. It lists all currently loaded dlls sorted by their load order, though enough memory information must be present in the dump for the command to work (.dump ...

18. Re: Unable to load image ntkrnlpa.exe
(Forum/Crash Dump Analysis )

I have been dealing with a similar issue for several weeks now. We need to run a kernel dump (we are using livekd) on a secure Status server that we CANNOT open up to the internet in order to download ...

19. Re: Unable to load image ntkrnlpa.exe
(Forum/Crash Dump Analysis )

... a hex-editor for example? We need to run a kernel dump (we are using livekd) on a secure Status server that we CANNOT open up to the internet in order to download symbols from Microsoft's symbols ...

20. Re: Video or Sound from 'A to Z' presentation?
(Forum/Suggestion Box)

It would be useful if you could add a narative. But I was also thinking that an article on the limits of a mini dump vs full memory dump might also be useful. Cheers. ...

21. Re:Can handled exceptions be seen with WinDbg
(Forum/Debugging of Managed-Code )

... in the past. By no means it will halt a debugger on handled exceptions since this isn't how exceptions were meant to work in the first place. Last but not least: You might also try out the sos!DumpAllExceptions ...

22. Re:Other forums
(Forum/General Questions)

... want other places there are several. You might check Syinternals or CodeProject's debug section; the Forum at Open System Resources (OSR), or the handy blog from Dmitry called Dumpanalysis; then there ...

23. Re:Unable to load image ntoskrnl.exe
(Forum/Crash Dump Analysis )

Will, Hi. Unable to load image \WINDOWS\system32\ntoskrnl.exe, Win32 error 0n2 For some reason WinDbg doesn't find the associated ntoskrnl.exe image. You usually need both for Crash Dumps: a) The ...

24. Re:Unable to load image ntoskrnl.exe
(Forum/Crash Dump Analysis )

... check with my co-worker who did in fact say the machine which generated the dump is in fact a single-processor appliance. It was a very simple piece of the puzzle I didn't have. Thanks for the steps ...

25. See in Memory Descriptor List whats on
(Forum/Kernel-Mode Debugging)

... the mdl. can i analyze this problem with a full memory dump or should i take the driver verifier for this? thank you very much for your help. sorry about my english. ...

26. sort lm n t by date/time
(Forum/Crash Dump Analysis )

When analyzing a minidump, how do I sort the output of lm n t by date-time? ...

27. Unable to load image ntoskrnl.exe
(Forum/Crash Dump Analysis )

I want to be sure I have WinDbg configured properly. I've got a minidump that returns this error when I load it: Loading Dump File [C:\Documents and Settings\will\Desktop\Mini021610-02.dmp] Mini Kernel ...

28. unknown stream type 0x13 and other weird messages
(Forum/Crash Dump Analysis )

I have several dumps on a system that always shows the following messages logged. Does anyone know what this indicates (in bold): Loading Dump File [C:\temp\dumps\Crash_Mode__Date_09-03-2010__Time_12-37-50PM\PID-5396__VWJS.EXE__1st_chance_Process_Shut_Down__full_24e4_2010-09-07_05-27-12-493_1514.dmp] User ...

29. WinDbg !threads for ASP.NET 4 memory dump
(Forum/Debugging of Managed-Code )

!ASPXPages from psscor4 doesn't display threadID's for threads that are queued or completed. However !threads seems to show a threadID all the time. Does it include threads that are queued? idle in the ...

30. Windbg + Crash Dump
(Forum/Crash Dump Analysis )

Hi, I've lots of question about some informations i can extract from a complete crash dump. I will be glad if someone can help me. I'm using windbg with crash dump. I set Symbol search path is: ...

31. WinDbg psscor4 !ASPXPages -ip not listing anything
(Forum/Debugging of Managed-Code )

I'm analyzing a dump file taken with procdump -ma w3wp on a Windows Server 2008 R2 SP1 machine running .NET 4. !ASPXPages –ip Going to dump the HttpContexts found in the heap. HttpContext ...