Windbg using Error analyze

You can follow the below mentioned steps to get the crash dump:
1. Install WinDbg from
2. Launch WinDbg via the shortcut
3. Click File->Open Executable
4. Select Acrobat.exe from “C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat.exe” and hit “OK”
5. Remember to press “g” and hit enter when you encounter the first breakpoint and then you will see a text “Debuggeee is running” and Acrobat will be launched
6. Open whatever file is it that produces the crash in Acrobat.
7. When you have successfully reproduced the sceanrio causing the crash/freezing of Adobe Acrobat X, enter the below command in the WinDbg terminal

.dump /ma c:\temp.dmp (Hit enter)
8. This will produce the crash dump at C:\ by the name of temp.dmp

Could you please upload the dump (compress the dump using WinZip or likewise) at some site and provide the link for the same. I will have a look at the same.

How to Use the Debug Diagnostic Tool v1.1 (DebugDiag)

Windows Crash Dump Analysis with the WinDbg Tool

Perform Crash Dump Analysis for Cisco Jabber for Windows

Use the WinDbg tool in order to perform crash dump analysis. Download the tool from the WinDbg website.

WinDbg Symbols Configuration

  1. In order to change the symbol path, navigate to File > Symbol File Path > Symbol Path.
  1. Paste this text into the window:
  1. Click OK.

Crash Dump Analysis in WinDbg

  1. Start WinDbg.
  1. From the File menu, click Open Crash Dump.
  2. Choose the .dmp (memory.dmp, user.dmp etc.) file, and click Open or drag and drop the .dmp file into WinDbg. This example uses the fulldump file.
  1. In the command window at the bottom, enter !analyze – v, and press Enter.
  1. You can see the progress of the analysis on the bottom-left of the screen. In this image, the status is “BUSY.”

    This command performs an analysis with a fully verbose display of data and is useful in order to obtain more information.
  1. In order to quit, enter q in the command window, and press Enter.

Here is an example of dump analyzer output:

> !analyze -v


WARNING: Frame IP not in any known module. Following frames may be wrong.
02f4e80c 01457967 7ffdac00 00000104 02f4e86c 0x0
02f4e848 0145637d 00000001 02f4e86c 02f4ed58 wxvault+0x7967
02f4ea88 7c8138b7 7ffdac00 00000000 02f4eac8 wxvault+0x637d
02f4ed1c 009a436f 00b413b4 02f4ed58 00000000 
02f4edb8 00000000 00000000 00000000 00000000 CUPCK9+0x5a436f

STACK_COMMAND: ~8s; .ecxr ; kb


SYMBOL_NAME: wxvault+7967


MODULE_NAME: wxvault

IMAGE_NAME: wxvault.dll




Examine the MODULE_NAME and the IMAGE_NAME. The information these provide, like wxvault.dll or CiscoJabber.exe, indicate what application caused the crash. In this case, the crash occurred because of issues with the Cisco Jabber.exe application and not with the user?s machine. A Google search shows that wxvault.dll is related to the DELL Embassy Trust Suite.


%d bloggers like this: