Skip to content

minidump

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History
 
 

minidump

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
src
src
 
 
Cargo.toml
Cargo.toml
 
 
README.md
README.md
 
 
build.rs
build.rs
 
 

README.md

Binary Ninja Minidump View

A Minidump binary view plugin for Binary Ninja.

Supported Minidump Types

This plugin currently only supports loading minidump files generated by the Windows MiniDumpWriteDump API.

This includes dumps generated from:

  • The .dump command in WinDbg.
  • The .dump command in Binary Ninja's debugger for Windows targets (which uses the same debugging engine as WinDbg).

For both of the above, it's recommended to generate a full dump:

.dump /ma dumpfile.dmp

minidump dumpfile.dmp
  • Right clicking on a listed process and then clicking "Create dump file" / "Create full dump" from Windows Task Manager, Process Hacker, Sysinternals Process Explorer, etc...

Unsupported Features (for now)

  • Loading Minidump files from platforms or APIs other than Windows' MinidumpWriteDump, such as those generated by Google Breakpad.
  • Loading and applyng debug information from the minidump file. In Windows minidump files, MinidumpModuleList streams contain information about the PDB file which contains the debug information for the module; this isn't currently read or applied, however.