|
|
|
Crashdump bitness (1 viewing) 1 Guest
|
|
|
TOPIC: Crashdump bitness
|
|
|
|
Crashdump bitness 31 Aug 2011 - 22:41
|
|
Hi,
Is there a way to find out if a dump was created using 32bit or 64bit debugger?
Thanks
Nachiket
|
|
|
|
Logged IP
|
| |
The administrator has disabled public write access.
|
|
|
|
Re: Crashdump bitness 09 Oct 2011 - 15:26
|
|
Welcome Nachiket.
You can actually open a 32-bit dump with both a 32- or 64-bit WinDbg. At the same time you can open a 64-bit dump with both variants of WinDbg too. So, how to find out the bitness of a dump in question? When I open a dump on my machine, I get a text that look like this:
32-bit dump; 32- or 64-bit WinDbg: Windows 7 Version 7601 (Service Pack 1) MP (8 procs) Free x64
64-bit dump; 32- or 64-bit WinDbg: Windows 7 Version 7601 (Service Pack 1) MP (8 procs) Free x86 compatible
Alternatively you can use another handy trick: Check out what kind of registers were stored in the dump. For example, RAX will exist only in 64-bit dumps.
32-bit dump; 32- or 64-bit WinDbg: r rax -> Bad register error in 'r rax'
64-bit dump; 32- or 64-bit WinDbg: r rax -> returns the register value
I hope this helps,
Robert
|
|
|
|
|
|
|
Logged IP
|
| |
The administrator has disabled public write access.
|
|
 |
|
|
|
Home 
