======Microsoft - Debugging======

[[http://weblogs.asp.net/owscott/archive/2012/07/18/reading-a-memory-dmp-or-other-dmp-file.aspx|Scott Forsyth's Blog - Reading a memory.dmp or other .dmp file]] \\
[[http://msdn.microsoft.com/en-us/windows/hardware/gg463009.aspx|Windows Dev Center - Download and Install Debugging Tools for Windows]] \\
[[http://msdn.microsoft.com/en-us/library/windows/desktop/ee416349%28v=vs.85%29.aspx|Windows Dev Center - Crash Dump Analysis]] \\
[[http://msdn.microsoft.com/en-us/library/windows/hardware/hh994433(v=vs.85).aspx|Windows Dev Center - Bug Check Code Reference]] \\
[[http://blogs.technet.com/b/yongrhee/archive/2012/09/09/you-got-a-b-s-o-d-blue-screen-of-death-known-as-bug-checks-now-what.aspx|TechNet Blogs > The troubleshooters and problem solvers... > You got a B.S.O.D. (Blue Screen of Death, known as Bug Checks), now what?]] \\


=====Analyse MEMORY.DMP=====

Either: \\
  - Download [[https://www.nirsoft.net/utils/blue_screen_view.html|NirSoft - BlueScreenView]].
  - Start BlueScreenView to get the reason for the crash from the minidumps in C:\Windows\Minidump.

Or:
  - Download the Windows 10 SDK from[[https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/debugger-download-tools|Download Debugging Tools for Windows]] and install the "Debugging Tools for Windows" rom it.
    - This can be done on another PC than where the MEMORY.DMP was made. \\
  - Start WinDbg via Start -> All Programs -> Debugging Tools for Windows -> WinDbg 
  - Set the symbol file path via menu File -> Symbol File Path.
  - Copy and paste to the Symbol Search Path window:<code>**%%SRV*c:\websymbols*http:msdl.microsoft.com/download/symbols%%**</code>  
  - Load the MEMORY.DMP via menu File -> Open Crash Dump.
  - Click Yes at "Save Information for Workspace".
  - Wait for the result.

Sources:
  * [[https://thegeekpage.com/how-to-read-memory-dump-files-in-windows-10/|The Geek Page - How to read Memory Dump files in Windows 10]]
   * [[http://blogs.technet.com/petergal/archive/2006/03/23/422993.aspx|Petergal's SBS Blog - Stop 0x000000D1 DRIVER_IRQL_NOT_LESS_OR_EQUAL (8a400000, 00000002, 00000000, f77e00a9)]] \\
   * [[https://docs.microsoft.com/en-us/troubleshoot/windows-client/performance/read-small-memory-dump-file|Microsoft Docs - How to read the small memory dump file that is created by Windows if a crash occurs]]
   * [[http://windbg.org/|WinDbg]]