Tag Archives: PInvoke

How to download Windows image files from the Microsoft symbol server using C# and DbgHelp

During my journeys through CorDebug I’ve often needed to access Windows operating system image files that I didn’t have on my local machine. This is actually a pretty normal situation to be in when debugging crash dumps. More often that … Continue reading

Posted in Crash Dumps | Tagged , , | Leave a comment

Converting from time_t to System.DateTime

I was busy reviewing my minidump source code before publishing it to codeplex and I noticed that there was one field in the MINIDUMP_MODULE structure that I didn’t mention previously: MINIDUMP_MODULE.TimeDateStamp. The documentation for MINIDUMP_MODULE says this field is stored … Continue reading

Posted in Crash Dumps | Tagged | Leave a comment

Reading minidump files, part 3 of 4: Reading stream data (ModuleListStream) returned from MiniDumpReadDumpStream

Part 1 of 4: Accessing memory mapped files from C# Part 2 of 4: Using MiniDumpReadDumpStream Part 3 of 4: Reading stream data (ModuleListStream) returned from MiniDumpReadDumpStream Part 4 of 4: Putting it all together All code is available on … Continue reading

Posted in Crash Dumps | Tagged , , , | 3 Comments

Reading minidump files, part 2 of 4: Using MiniDumpReadDumpStream

Part 1 of 4: Accessing memory mapped files from C# Part 2 of 4: Using MiniDumpReadDumpStream Part 3 of 4: Reading stream data (ModuleListStream) returned from MiniDumpReadDumpStream Part 4 of 4: Putting it all together All code is available on … Continue reading

Posted in Crash Dumps | Tagged , , , | 9 Comments

Reading minidump files, part 1 of 4: Accessing memory mapped files from C#

UPDATE: I’m looking into using SafeMemoryMappedViewHandle as the return value for MapViewOfFile() instead of IntPtr. Either will work, but since Microsoft provides a class to specifically wrap memory mapped view handles I thought I’d have a look at using it. … Continue reading

Posted in Crash Dumps | Tagged , , , | 4 Comments

Getting started with PInvoke: calling MiniDumpWriteDump to create minidumps

In my last post I briefly touched on what information is contained inside a minidump and the use of MiniDumpWriteDump to create your own dumps. In this post I’m going to elaborate on both of those and provide some code … Continue reading

Posted in Crash Dumps | Tagged , , | 1 Comment