PEBrowse Crash-Dump Analyzer builds upon the frameworks presented in PEBrowse Professional and PEBrowse Professional Interactive to offer a user mode analysis tool that is both powerful and easy to use. The program reads minidump files that can be generated by calling the API's in Microsoft's DbgHelp library. If you are using the Professional Interactive utility to debug a .NET managed executable for versions 1.0 and 1.1 of the Microsoft .NET CLR and decide to create a crash-dump, the analysis tool will also read two auxiliary files that contain JIT symbolic information and object references from the garbage-collected heap.
The interface offers virtually unlimited numbers of disassembly and memory display windows, as well as access to summary displays, heap information, and process information. Valid memory addresses are indicated where possible so that memory can be viewed with confidence. Symbolic information has been integrated into every display in order to provide you with as much context as possible so that you can get to the root cause of the crash. The following are available summary displays:
|
|
|
The process information display offers:
|
|
|
One innovation PEBrowse Crash-Dump Analyzer brings to the analysis session is the ability to collect, store and organize open windows in a "notebook." This can be quite handy when tracking down numerous memory references or disassembling a large number of stack frames. Plus when you decide to quit the analysis session, the program saves all of your open windows into a session file. And when you return to the analysis, the windows will be reopened to where you left off (or they are automatically collected inside the notebook).
Screenshot:
Download PEBrowse Crash-Dump Analyzer.