Getting started with dump file analysis

Question

I am working with an outdated VB6 / COM application that sometimes crashes Windows 7. Now I created a .dmp file for one of these crashes using the Sysinternals ProcDump tool. However, I have never worked with dump files before. What resources would you recommend to get started with dump file analysis?

Answer 1

Some more links that may be useful

WinDBG and tools:
https://developer.microsoft.com/en-us/windows/hardware/download-windbg

. Network Extension for WinDBG:
https://docs.microsoft.com/en-us/dotnet/framework/tools/sos-dll-sos-debugging-extension

Answer 2

There are several books, such as Windows Advanced Debugging , or this guy’s blog books that may help.

There is also knowledge of the assembler that you will need.

Use WinDbg or any other debugger. The above book is specifically for WinDbg.

Answer 3

You can use KIT to develop Microsoft software, which includes windbg for analyzing dump files, but it requires a lot of download, a simple application is bluescreenview, which will analyze the dump file and show which module creates the problem here: link .