tailieunhanh - Memory Dump Analysis Anthology- P3

Memory Dump Analysis Anthology- P3: This is a revised, edited, cross-referenced and thematically organized volume of selected blog posts about crash dump analysis and debugging written in 2006 - 2007 for software engineers developing and maintaining products on Windows platforms, technical support and escalation engineers dealing with complex software issues and general Windows users. | Minidump Analysis 61 0 kd Imv m dxg start end module name bf9c3000 bf9d4580 dxg pdb symbols Loaded symbol image file Mapped memory image file c websymbols 41107B9311580 Image path dxg. sys Image name dxg. sys Timestamp Wed Aug 04 07 00 51 2004 41107B93 Checksum 0001D181 ImageSize 00011580 File version Product version File flags 0 Mask 3F File OS 40004 NT Win32 File type Driver File date Translations CompanyName Microsoft Corporation ProductName Microsoft Windows Operating System InternalName OriginalFilename Productversion FileVersion FileDescription DirectX Graphics Driver LegalCopyright Microsoft Corporation. All rights reserved. 0 kd Imv m win32k start end module name bf800000 bf9c2180 win32k pdb symbols Loaded symbol image file Mapped memory image file c websymbols win32k .sys 45F013F61c2180 Image path Image name Timestamp Thu Mar 08 13 47 34 2007 45F013F6 CheckSum 001C4886 ImageSize 001C2180 File version Product version File flags 0 Mask 3F File OS 40004 NT Win32 File type Driver File date Translations CompanyName Microsoft Corporation ProductName Microsoft Windows Operativsystem InternalName OriginalFilename ProductVersion FileVersion FileDescription Win32-flerbrugerdriver LegalCopyright Microsoft Corporation. Alle rettighede forbeholdes. Please purchase PDF Split-Merge on to remove this watermark 62 PART 2 Professional Crash Dump Analysis Please purchase PDF Split-Merge on to remove this watermark Minidump Analysis 63 SYMBOLS AND IMAGES Suppose we have a minidump with a stack trace that involves our product driver and due to some reason WinDbg doesn t pick symbols automatically and shows the following