title: Analyzing .dmp files
body: <p>I am trying to solve a c++ exe run time error issue that happens  only in production. I am new to C++ and windbg but I am pasting the enalysis here. I would greatly appreciate if some one can point me to as to how and under what condition this error occurs and more importantly how do I figure out which line of code is causing it. I read lot of forums BUT If I open the dmp file in VS 2008, I have a pdb file locally and the exe locally BUT I can never get the Go To Source code menu option enabled. Quick reply as to how to analyze this .dmp file and how to understand it, would be highly appreciated.. Thanks!</p>
  
  <hr>
  
  <ul>
  <li>*</li>
  <li>Exception Analysis                                   *</li>
  <li>*
  
  <hr></li>
  </ul>
  
  <p>GetPageUrlData failed, server returned HTTP status 404
  URL requested: <a href="http://watson.microsoft.com/StageOne/MYServer_exe/0_0_0_0/MyServer_exe/0_0_0_0/000194ab.htm?Retriage=1" rel="nofollow noreferrer">http://watson.microsoft.com/StageOne/MYServer_exe/0_0_0_0/MyServer_exe/0_0_0_0/000194ab.htm?Retriage=1</a></p>
  
  <p>FAULTING_IP:
  Myserver+194ab
  004194ab c6040100        mov     byte ptr [ecx+eax],0</p>
  
  <p>EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
  ExceptionAddress: 004194ab (Myserver+0x000194ab)
     ExceptionCode: c0000005 (Access violation)
    ExceptionFlags: 00000000
  NumberParameters: 2
     Parameter[0]: 00000001
     Parameter[1]: 00000000
  Attempt to write to address 00000000</p>
  
  <p>DEFAULT_BUCKET_ID:  NULL_POINTER_WRITE</p>
  
  <p>PROCESS_NAME:  Myserver.exe</p>
  
  <p>ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.</p>
  
  <p>EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.</p>
  
  <p>EXCEPTION_PARAMETER1:  00000001</p>
  
  <p>EXCEPTION_PARAMETER2:  00000000</p>
  
  <p>WRITE_ADDRESS:  00000000</p>
  
  <p>FOLLOWUP_IP:
  MYServer+194ab
  004194ab c6040100        mov     byte ptr [ecx+eax],0</p>
  
  <p>MOD_LIST: </p>
  
  <p>NTGLOBALFLAG:  0</p>
  
  <p>APPLICATION_VERIFIER_FLAGS:  0</p>
  
  <p>FAULTING_THREAD:  000004e0</p>
  
  <p>PRIMARY_PROBLEM_CLASS:  NULL_POINTER_WRITE</p>
  
  <p>BUGCHECK_STR:  APPLICATION_FAULT_NULL_POINTER_WRITE</p>
  
  <p>LAST_CONTROL_TRANSFER:  from 00418a4e to 004194ab</p>
  
  <p>STACK_TEXT: 
  WARNING: Stack unwind information not available. Following frames may be wrong.
  087ffa74 00418a4e 0a73b070 087ffc6c 087ffd8c Myserver+0x194ab
  087ffb64 00410767 0a73b070 087ffd74 087ffd8c Myserver+0x18a4e
  087ffc6c 0041089b 0a73b0f8 0a727a78 0a73b108 Myserver+0x10767
  087ffd74 00433913 0a73b0f8 0a727a78 0a73b108 Myserver+0x1089b
  087ffe58 0042fbf3 0a73b0f8 0a727a78 00000044 Myserver+0x33913
  087fffb8 7d4dfe37 000006a0 00000000 00000000 Myserver+0x2fbf3
  087fffec 00000000 0042fae0 000006a0 00000000 kernel32!BaseThreadStart+0x34</p>
  
  <p>SYMBOL_STACK_INDEX:  0</p>
  
  <p>SYMBOL_NAME:  Myserver+194ab</p>
  
  <p>FOLLOWUP_NAME:  MachineOwner</p>
  
  <p>MODULE_NAME: Myserver</p>
  
  <p>IMAGE_NAME:  Myserver.exe</p>
  
  <p>DEBUG_FLR_IMAGE_TIMESTAMP:  4c2123df</p>
  
  <p>STACK_COMMAND:  ~86s; .ecxr ; kb</p>
  
  <p>FAILURE_BUCKET_ID:  NULL_POINTER_WRITE_c0000005_Myserver.exe!Unknown</p>
  
  <p>BUCKET_ID:  APPLICATION_FAULT_NULL_POINTER_WRITE_Myserver+194ab</p>
  
  <p>Followup: MachineOwner</p>