-
-
[原创]Automating Kernel dumps collection through code
-
发表于: 2012-10-8 15:22 4310
-
1. Download and install debuging tools for Windows in the folder c:\debuggers from a50K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3#2K6k6r3I4Q4x3X3g2E0K9h3y4J5L8%4y4G2k6Y4c8Q4x3X3g2U0L8$3#2Q4x3V1k6V1L8%4N6F1L8r3!0S2k6q4)9J5c8Y4y4&6L8h3u0G2L8s2y4Q4x3V1k6V1k6h3u0#2k6$3N6W2M7Y4y4Q4x3V1k6V1j5X3N6Q4y4h3k6^5z5o6k6Q4y4h3j5$3i4K6u0W2x3e0q4Q4x3X3f1I4i4K6u0W2y4o6l9@1i4K6u0W2L8i4y4A6
2. Dowload and install LiveKD into the folder c:\debuggers from
ae1K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4c8W2j5$3S2F1k6i4c8Q4x3X3g2E0K9h3y4J5L8%4y4G2k6Y4c8Q4x3X3g2U0L8$3#2Q4x3V1k6W2L8W2)9J5k6s2g2K6i4K6u0r3M7%4W2K6K9h3&6@1k6i4u0F1j5h3I4K6i4K6u0r3j5X3t1^5z5e0M7@1x3e0f1`.
3. Setup environment variable _NT_SYMBOL_PATH = srv*c\localsymbols*
4. Insert the following line of code at the appropriate location :
// The following code is to silently accept the EULA. This needs to be done only ONE time on the machine.
system("c:\\debuggers\\LiveKD.exe /accepteula");
// The following code is to collect the kernel dumps
system("c:\\debuggers\\LiveKD.exe -o c:\\kerneldump.dmp");
5. The dump c:\kerneldump.dmp will be collected but the system will not restart.