CODEWITHSUNDEEP
c++windowsdebugging
pcent
pcent

Reputation: 2029

Can I use windows event log to debug an application?

My application crashes and generates a windows event log that says:

Faulting application someapp.exe, version 1.0.0.0, faulting module TAOd.dll, version 1.6.9.0, fault address 0x0000f8286.

Is there a way to map this address to a method call?

I don't have debug information. The app is running on a production machine, so it can't be stopped whenever I want.

I would like to find a clue where to start with so few information...

Upvotes: 2

Views: 1695

Answers (3)

Abyx
Abyx

Reputation: 12918

0x0000f8286 It's RVA, so you can load you dll in debugger or disassembler, go there and look where is it.

Upvotes: 0

VGE
VGE

Reputation: 4191

Yes it is possible, but you have to gather clue.

TOAd.dll is crashing at a specific address? is it always the same ?

But it'll be better if you use a debugger to get a stack trace, but you also have to get the corresponding TAOd.pdb.

Upvotes: 1

Goz
Goz

Reputation: 62323

Yes there is a way. Generate a map file and look up the function.

Edit: Try http://www.codeproject.com/KB/debug/mapfile.aspx

Upvotes: 1

Related Questions