[问题记录.WinDbg]在64位系统上抓取32位进程的dump
【问题现象】
用DebugDiag分析dump，遇到如下错误：
| Type | Description | Recommendation |
|---|---|---|
The process XXX.exe in XXX.DMP is a 32 bit application running on a 64 bit operating system. The dump file was collected from a 64 bit debugger other than DebugDiag.Analysis of this type of dump is not supported. |
Collect another dump using DebugDiag, or using any 32 bit debugger |
【问题原因】
参看Capturing memory dumps for 32-bit processes on an x64 machine
On a 64-bit OS, the dump created by Task Manager for a WOW process will be a 64-bit dump. This can cause problems, especially if you're debugging managed code. For 32-bit WOW processes, it's generally best to use a 32-bit utility.
【解决办法】
其中一种最简单的方式是——用32位的任务管理器抓取：
1) 运行 C:\Windows\SysWOW64\taskmgr.exe
可以看到，任务管理器进程是32位
2) 在要抓取的进程上右键--创建转储文件
