If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.
To use any dmp file you need a debugger. Windbg is the most common one.
But you need to be a bit of an expert (and lucky) plus have the symbols to get anything useful from them in general.
Thanks
Another question, what should I use for the "symbol search path" in WinDbg.
I generally use the following symbol patth for that dump file windows created in C:\windows\mini dump.
Thanks
Another question, what should I use for the "symbol search path" in WinDbg.
I generally use the following symbol patth for that dump file windows created in C:\windows\mini dump.
SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [F:\BurnInTestx64-V8.0 Pro-1040-20171117-083413-9740-9772\BurnInTestx64-V8.0 Pro-1040-20171117-083413-9740-9772.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available
WARNING: Minidump contains unknown stream type 0x15
WARNING: Minidump contains unknown stream type 0x16
WARNING: Whitespace at end of path element
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Version 16299 MP (12 procs) Free x64
Product: WinNt, suite: SingleUserTS
Machine Name:
Debug session time: Sat Nov 18 00:34:16.000 2017 (UTC + 8:00)
System Uptime: not available
Process Uptime: 0 days 16:41:35.000
.................................................. ..............
.................................................. .
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(260c.262c): Access violation - code c0000005 (first/second chance not available)
Unable to load image C:\Windows\System32\ntdll.dll, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntdll.dll
*** ERROR: Module load completed but symbols could not be loaded for ntdll.dll
ntdll+0xa1b74:
00007ff9`96f21b74 0000 add byte ptr [rax],al ds:00000000`00000467=??
Comment