|
dumpchk - how do I get command line parameters which launched the dumped process? I ran dumpchk on dump file. Dump file shows path to target process executable (see below) but how do I get command line parameters which launched the target process? (I already installed debugger symbol... perhaps i need to restart)
Thanks.
--------------------------------------------------------------
<br />
C:\>dumpchk C:\data\ttl_2136.dmp<br />
Loading dump file test_2136.dmp<br />
<br />
Loading Dump File [test_2136.dmp]<br />
User Mini Dump File with Full Memory: Only application data is available<br />
<br />
WARNING: Minidump contains unknown stream type 0xf<br />
<br />
Microsoft (R) Windows User-Mode Debugger Version 5.1.2600.0<br />
Copyright (c) Microsoft Corporation. All rights reserved.<br />
<br />
Loaded dbghelp extension DLL<br />
The call to LoadLibrary(ext) failed with error 2.<br />
Please check your debugger configuration and/or network access<br />
Loaded exts extension DLL<br />
The call to LoadLibrary(uext) failed with error 2.<br />
Please check your debugger configuration and/or network access<br />
Loaded ntsdexts extension DLL<br />
Windows XP Version 2600 (Service Pack 2) UP Free x86 compatible<br />
Debug session time: Thu Nov 23 01:06:29 2006<br />
System Uptime: not available<br />
Symbol search path is: *** Invalid *** : Verify _NT_SYMBOL_PATH setting<br />
Executable search path is:<br />
*********************************************************************<br />
* Symbols can not be loaded because symbol path is not initialized. *<br />
* *<br />
* The Symbol Path can be set by: *<br />
* using the _NT_SYMBOL_PATH environment variable. *<br />
* using the -y <symbol_path> argument when starting the debugger. *<br />
* using .sympath and .sympath+ *<br />
*********************************************************************<br />
----- User Mini Dump Analysis<br />
<br />
MINIDUMP_HEADER:<br />
Version A793 (610A)<br />
NumberOfStreams 8<br />
Flags 6<br />
<br />
Streams:<br />
Stream 0: type ThreadListStream (3), size 00000034, RVA 000000D0<br />
Stream 1: type ModuleListStream (4), size 00000874, RVA 00000104<br />
20 modules<br />
<br />
*** Path to executable is shown but what parameter? To find out, install "Window Symbol Packages" from Then Windows Symbol Packages: http:
<br />
RVA 00000108, 00400000 - 00410000: 'C:\tools\unpacked\test\ttl.exe'<br />
RVA 00000174, 7c900000 - 7c9b0000: 'C:\WINDOWS\system32\ntdll.dll'<br />
RVA 000001E0, 7c800000 - 7c8f4000: 'C:\WINDOWS\system32\kernel32.dll'<br />
RVA 0000024C, 71ab0000 - 71ac7000: 'C:\WINDOWS\system32\ws2_32.dll'<br />
RVA 000002B8, 77c10000 - 77c68000: 'C:\WINDOWS\system32\msvcrt.dll'<br />
RVA 00000324, 71aa0000 - 71aa8000: 'C:\WINDOWS\system32\ws2help.dll'<br />
RVA 00000390, 77dd0000 - 77e6b000: 'C:\WINDOWS\system32\advapi32.dll'<br />
... other stuff ...<br />
RVA 0000075C, 77d40000 - 77dd0000: 'C:\WINDOWS\system32\user32.dll'<br />
RVA 000007C8, 76390000 - 763ad000: 'C:\WINDOWS\system32\imm32.dll'<br />
RVA 00000834, 629c0000 - 629c9000: 'C:\WINDOWS\system32\lpk.dll'<br />
RVA 000008A0, 74d90000 - 74dfb000: 'C:\WINDOWS\system32\usp10.dll'<br />
RVA 0000090C, 71a90000 - 71a98000: 'C:\WINDOWS\system32\wshtcpip.dll'<br />
Stream 2: type Memory64ListStream (9), size 00000790, RVA 00001D87<br />
120 memory ranges<br />
RVA 0x2517 BaseRva<br />
range# Address Size<br />
0 00010000 00001000<br />
1 00020000 00001000<br />
2 0012c000 00004000<br />
3 00130000 00003000<br />
4 00140000 00010000<br />
5 00240000 00006000<br />
6 00250000 00003000<br />
7 00260000 00016000<br />
... blah blah blah ...<br />
113 7c97f000 00002000<br />
114 7c981000 0002f000<br />
115 7f6f0000 00007000<br />
116 7ffb0000 00024000<br />
117 7ffdd000 00001000<br />
118 7ffdf000 00001000<br />
119 7ffe0000 00001000<br />
Stream 3: type SystemInfoStream (7), size 00000038, RVA 00000080<br />
Stream 4: type ??? (15), size 00000018, RVA 000000B8<br />
Stream 5: type HandleDataStream (12), size 00000410, RVA 00001977<br />
Stream 6: type UnusedStream (0), size 00000000, RVA 00000000<br />
Stream 7: type UnusedStream (0), size 00000000, RVA 00000000<br />
<br />
Windows XP Version 2600 (Service Pack 2) UP Free x86 compatible<br />
Debug session time: Thu Nov 23 01:06:29 2006<br />
System Uptime: not available<br />
The call to LoadLibrary(ext) failed with error 2.<br />
Please check your debugger configuration and/or network access<br />
PEB at 7ffdd000<br />
*************************************************************************<br />
*** ***<br />
*** ***<br />
*** Your debugger is not using the correct symbols ***<br />
*** ***<br />
*** In order for this command to work properly, your symbol path ***<br />
*** must point to .pdb files that have full type information. ***<br />
*** ***<br />
*** Certain .pdb files (such as the public OS symbols) do not ***<br />
*** contain the required information. Contact the group that ***<br />
*** provided you with these symbols if you need this command to ***<br />
*** work. ***<br />
*** ***<br />
*** ***<br />
*************************************************************************<br />
error 3 InitTypeRead( nt!PEB32 at 7ffdd000)...<br />
Finished dump check<br />
<br />
C:\><br />
Norman Fung
|
|
|
|
|
First, download the latest debugging tools for Windows from http://www.microsoft.com/whdc/DevTools/Debugging/default.mspx[^]. The current 32-bit release is version 6.6.7.5.
Secondly, go to Control Panel, System, Advanced tab, and click Environment Variables. Under 'System Variables' click New, enter _NT_SYMBOL_PATH for the Variable Name, then an appropriate path for the value. This is a semicolon-separated list of directories to look for debugging symbols in. The newer versions of the debugging tools support downloading symbols from an online symbol server using the HTTP protocol. I set this environment variable to C:\Windows;C:\Windows\System32;SRV*C:\WebSymbols*http://msdl.microsoft.com/download/symbols.
The SRV* part tells the debugger to download symbols from the URL to the C:\WebSymbols folder. This folder is created if it doesn't exist. Next time you run dumpchk, the debugger will download the symbols it needs to find out where to look in memory for the program's command line parameters. This may take a little while.
|
|
|
|
|
Thanks, can you explain this though?
C:\Windows;C:\Windows\System32;SRV*C:\WebSymbols*http://msdl.microsoft.com/download/symbols
can be broken down into:
1. C:\Windows;
2. C:\Windows\System32;
3. SRV*C:\WebSymbols*http://msdl.microsoft.com/download/symbols
I don't understand (3)
Norman Fung
|
|
|
|
|
SRV tells the debugger that what follows is an instruction to symsrv.dll to access an online symbol server. You then split it at the * characters:
C:\WebSymbols is the local cache directory, so that the debugger doesn't have to go back to the server every time for a specific DLL version's debugging symbols. This folder is organised by symbol file name (e.g. kernel32.pdb) then by a hash of the DLL's contents (I think). Each time the DLL is updated, the hash will no longer match and symsrv.dll will (try to) download the symbols matching the new version.
http://msdl.microsoft.com/download/symbols is the URL for Microsoft's symbol server, which provides the debugging symbols to symsrv.dll.
More information can be found in the Debugging Help help file - look for 'symbol servers' in the Index.
You can use the symchk utility to preload your local cache.
|
|
|
|
|
<br />
C:\>dumpchk test_3324.dmp<br />
Loading dump file test_3324.dmp<br />
<br />
Loading Dump File [test_3324.dmp]<br />
... lots of stuff ...<br />
Loaded dbghelp extension DLL<br />
The call to LoadLibrary(ext) failed with error 2.<br />
Please check your debugger configuration and/or network access<br />
Loaded exts extension DLL<br />
The call to LoadLibrary(uext) failed with error 2.<br />
Please check your debugger configuration and/or network access<br />
Loaded ntsdexts extension DLL<br />
Windows XP Version 2600 (Service Pack 2) UP Free x86 compatible<br />
Debug session time: Fri Nov 24 07:32:00 2006<br />
System Uptime: not available<br />
WARNING: SRV*C:\WebSymbols*http:
essible, ignoring<br />
Symbol search path is: C:\Windows\Symbols;C:\Windows;C:\Windows\System32<br />
Executable search path is:<br />
... lots of stuff ...<br />
Windows XP Version 2600 (Service Pack 2) UP Free x86 compatible<br />
Debug session time: Fri Nov 24 07:32:00 2006<br />
System Uptime: not available<br />
The call to LoadLibrary(ext) failed with error 2.<br />
Please check your debugger configuration and/or network access<br />
PEB at 7ffdf000<br />
*** WARNING: Unable to verify checksum for test.exe<br />
*** ERROR: Module load completed but symbols could not be loaded for test.exe<br />
*** ERROR: Symbol file could not be found. Defaulted to export symbols for dnsa<br />
pi.dll -<br />
*** ERROR: Symbol file could not be found. Defaulted to export symbols for rasa<br />
dhlp.dll -<br />
*** ERROR: Symbol file could not be found. Defaulted to export symbols for user<br />
32.dll -<br />
*** ERROR: Symbol file could not be found. Defaulted to export symbols for gdi3<br />
2.dll -<br />
*** ERROR: Symbol file could not be found. Defaulted to export symbols for kern<br />
el32.dll -<br />
error 3 InitTypeRead( nt!PEB32 at 7ffdf000)...<br />
Finished dump check<br />
<br />
C:\><br />
....
Norman Fung
|
|
|
|
|
norm wrote: *** ERROR: Symbol file could not be found. Defaulted to export symbols for kern
el32.dll -
That's your problem. It's coming from:
WARNING: SRV*C:\WebSymbols*http://msdl.microsoft.com/download/symbols is not acc
essible, ignoring
Are you sure you're running dumpchk from the latest version of the debugging tools? The version I have doesn't say anything about loading debugger extensions.
|
|
|
|
|
Yes I believe I downloaded dumpchk not long ago, from here:
http://download.microsoft.com/download/win2000srv/Utility/3.0/NT45/EN-US/Oem3sr2.zip
Why is it the "latest" version won't work? Where can I get a version which actually works?
Norman Fung
|
|
|
|
|
Hello,
my software communicates with an electronic device
via UDP, port 165. On some computers (networkadapters)
the UDP pakets from the device are discarded, because of
checksum errors. The checksum is calculated correctly,
you can see the pakets in Ethereal (with checksum error).
How can I solve this problem? Thanks in advance.
Frank
|
|
|
|
|
Can i know how to ping remote systems on windows 2000 professional operating system using WMI can u please provide example in C++.
i have the following script example
strComputer = "PC1;PC2;"
sArray = Split(strComputer, ";")
strDomain = "WOrkArea"
strUser = InputBox("Enter user name")
strPassword = InputBox("Enter password")
Set objSWbemLocator = CreateObject("WbemScripting.SWbemLocator")
For each Machine in sArray=
Set objWMIService = objSWbemLocator.ConnectServer(strComputer, _
"root\CIMV2", _
strUser, _
strPassword, _
"MS_409", _
"ntlmdomain:" + strDomain)
Set colProcessList = objWMIService.ExecQuery _
("SELECT * FROM Win32_Process WHERE Name = 'notepad.exe'")
For Each objProcess in colProcessList
objProcess.Terminate()
Next
Next
can u please help with c++ code using WMI to run on Windows 2000 professional
Thanks in Advance
abhi
|
|
|
|
|
Hi guys wondering if anyone can help me on this one...
Basically i want to write a sync program for my creative zen mp3 player which is based on directory name rather than song name. Simply put it's gonna loop through the mp3 directory on my PC, compare it to the directories on my player and copy across any new stuff.
I can currently auto sync using media player, but this does it based on song name which takes an age as there's 11,000+ songs! By doing this based on directories i should be able to reduce the comparison to a mere 1,500 or so and ultimately speed up this timely process! (I appreciate this wont be a true auto-sync, but it'll be good enough for me)
The problem is is that my pc shows the mp3 player as a "Windows Portable Device" and hence doesnt have a drive letter (despite the fact i can browse the media files on the Zen (the path in explorer is just "My Computer\Creative Zen"))
Anyone know of a way i can get access to my player through code? Purhaps there's a management object search similar to 'Win32_LogicalDisk' but for media players?
Thanks in advance!
|
|
|
|
|
You can use WMDM[^] to access the device.
|
|
|
|
|
i am using windows XP OS and i have created a windows service which runs a piece of code every minute.
now i have changed the password programmatically for the service. for this i used the ChangeServiceConfig win32 api function. now the problem is that the service does not start giving a logon failure error even i am logged as administrator. but if we manually changed the password in the service control panel it works.
can any body help why the ChangeServiceConfig function does not set the password although the function executes successfully.
thanks
Pras
|
|
|
|
|
It sounds like your changing the password the service uses to login to the system. The service needs a username as password of an account to use, just like any person logging in at the keyboard. If the username and password you give it doesn't match an account on the system, the service will fail like you've described.
If you change the password the service uses, you also have to change the password on the account in the Users and Passwords control panel applet, or in the Management Console - Users and Groups (right-click My Computer, then click Manage).
Dave Kreskowiak
Microsoft MVP - Visual Basic
|
|
|
|
|
Hi, need help, suppose a windows service is running with some user login/password...
now suppose the user's password expires...
will the service keep running? or will it stop as soon as the password expires?
|
|
|
|
|
Stop cross-posting in all the forums!! It's very rude and if multiple people respond, there won't be any colaboration between the people answering you.
Post your question in the C++ forum and be patient! Also, you might want to ask a more specific question. Just asking "can someone help me?" will proabably get you ignored.
Keep in mind that the CodeProject primary supports development on the Windows platforms, not Unix. So if you get any Visual C++ specific answers, you'll have to do some work to convert it to whatever you're using.
On top of all that, Googling for "C++ blowfish algorithm" came up with over half a million hits, so you might want to check some of those first.
Dave Kreskowiak
Microsoft MVP - Visual Basic
|
|
|
|
|
How can I get the the group(s) that the current user(the user account the applications is running on) is in? I can get the privileges, but i need the group(s). Thanks for any help.
-yeti
|
|
|
|
|
Control Panel -> Administrative Tools -> Computer Management
Then select Local Users and Groups.
Don't forget you will need administrative privileges here.
modified 1-Aug-19 21:02pm.
|
|
|
|
|
Programmatically. I need to do it in the application.
|
|
|
|
|
|
I'll take a look, thanks.
|
|
|
|
|
how can we guess what language you're programming with ? 
|
|
|
|
|
Sorry. I'm using C++. I'd like it to work in winxp and win2k.
|
|
|
|
|
EpicYeti wrote: Sorry. I'm using C++. I'd like it to work in winxp and win2k.
then i think you can ask the Visual C++ forum... you'll probably get much more valuable answers
|
|
|
|
|
hi guys,
execuse me if this is not the appropriate discussion board to ask such a question 
I want to make a power point presentaion the loops over and over again until some one hits esc.
Any ideas....
Thanks in advance
|
|
|
|
|
samerh wrote: Any ideas....
How about using the help file that comes as part of the installation. You will find it rather helpful if you ask it the right question.
To give you a hint, for XP version, fire up Powerpoint and see what the "Slide Show -> Set Up Show" menuitem does.
modified 1-Aug-19 21:02pm.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
