Exercise PN1: Analysis of an application process dump (ApplicationA, 32-bit, CLR 2)

Goal: Learn how to load the correct .NET SOS WinDbg extension and analyze managed space.

Patterns: Stack Trace Collection; CLR Thread; Version-Specific Extension; Managed Code Exception; Managed Stack Trace

Commands: .logopen, ~*k, !analyze -v, !pe, ~*e, lmv, .chain, .unload, .load, .logclose

  1. Launch WinDbg from Debugging Tools for Windows or Debugging Tools for Windows (x86)

  2. Open \ANETMDA-Dumps\32-bit\Processes\CLR2\ApplicationA.DMP

  3. If you are presented with this dialog say No:

  4. We get the dump file loaded:

    Note: ApplicationA shows this dialog when launched: ...

Get Accelerated .NET Memory Dump Analysis: Training Course Transcript and WinDbg Practice Exercises with Notes now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.