DUMP on how to analyze the file 64-bit machine with 32-bit program WINDBG

 After the dump dragged into windbg, the command input field .load wow64exts Enter! Sw enter, the dump will be windbg, switch from 64-bit mode to 32-bit mode, otherwise the call stack to see our analysis of dump It is not helpful. You can then use other commands analyzed. For example: Use the kb command, view the call stack for all threads, find out which thread, ~ * kb, is to look at the call stack for all threads.

Guess you like

Origin www.cnblogs.com/Fightingbirds/p/11278794.html