Microsoft KB Archive/239552

= Debugging a Terminal Server 4.0 Memory.dmp File When Winstation Space Is Not Available =

Article ID: 239552

Article Last Modified on 10/31/2006

-

APPLIES TO


 * Microsoft Windows NT Server 4.0, Terminal Server Edition

-



This article was previously published under Q239552



SUMMARY
When a crash occurs in Win32k.sys and you attempt to debug a Terminal Server 4.0 Memory.dmp file, the winstation space is usually not available. Although you can usually resolve this problem by doing a live debug and using the .pagein command, you can avoid this problem using the techniques described below.



MORE INFORMATION
To avoid down time that can occur when you perform a live debug, use the following steps:  Install the latest Microsoft Windows 2000 kernel debugger and related files on a Windows 2000-based computer. Load the Terminal Server Memory.dmp file in the kernel debugger. View the stack of the crashing thread. You can now see all of the function calls and parameters, even if the pages that contain the code are not accessible. To view the data in the winstation space, use the !vtop and the !dd commands. You can get the DirBase value using the !process command. Because you cannot unassemble the information in the winstation space using the kernel debugger, use the Dumpbin tool:  Locate a copy of Win32k.sys that is identical to the one used in the dump. At a command prompt, type the following command:

dumpbin /disasm win32k.sys /out:win32k.txt

</li></ol> </li></ol>

This creates a disassembly of Win32k.sys in the Win32k.txt file. You can then search the text file for the address of each function in the stack.

Dumpbin.exe
The Dumpbin tool is included with the following products:
 * Visual Studio
 * Visual C++
 * Microsoft IDW build tools
 * Microsoft Windows Software Development Kit (SDK) or Device Driver Kit (DDK) tools

Additional query words: winstation

Keywords: kbenv kbinfo KB239552

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.