In my original post, I left you with the assignment of modifying this command to create a series of dump files instead of overwriting the same one repeatedly.
0:003> bp kernel32!RaiseException ".dump /ma /o c:\\temp\\myapp.dmp; g"
breakpoint 0 redefined
Well, this is going to be a short post because shortly after writing that I realized there was a much easier way to do this than what I had in mind.
The /u
switch for the .dump
command appends a timestamp and the PID to the filename.
0:003> bp kernel32!RaiseException ".dump /ma /u c:\\temp\\myapp.dmp; g"
breakpoint 0 redefined
An effective way to fill up the hard drive on a production machine, if I do say so myself.