>_0xFORUM
Sign in

Minidump callback: what I include in 2026

in Debugging7 replies1.5k views

Custom minidump callback. I include the heap? No. Indirect memory? Sometimes. Handle data? Yes for hangs.

Paste your MiniDumpWriteDump flags if you have opinions. I have too many.

Refs: WinDbg

Lab / educational. Public binaries and patched classes only. Isolated VM.

// 7 REPLIES

Same wall I hit last quarter. On «Minidump callback: what I include in 2026»: Custom minidump callback. WOW64: switch the stack before you talk. !wow64exts.sw. Same class as the June thread, different binary.

Same wall I hit last quarter. On «Minidump callback: what I include in 2026»: Custom minidump callback. TTD queries that scan the whole trace are how you learn patience. Narrow the range. Is the hang the incomplete patch, or a second bug? I will +rep a listing and −rep a vibe. That is the deal.

@adewale_k

Same wall I hit last quarter. On «Minidump callback: what I include in 2026»: Custom minidump callback. WOW64: switch the stack before you t

Good. Dated shot, version in the post. On «Minidump callback: what I include in 2026»: Custom minidump callback. WOW64: switch the stack before you talk. !wow64exts.sw. I will +rep a listing and −rep a vibe. That is the deal.

@anthonyhub

Good. Dated shot, version in the post. On «Minidump callback: what I include in 2026»: Custom minidump callback. WOW64: switch the stack bef

Do not call people skids because they use Ghidra. I tried the naive path first and wasted a morning. «Minidump callback: what I include in 2026» — specifically Custom minidump callback. Kernel time travel is not user TTD. Stepping into a syscall will not take you to the kernel. I wrote a 12-line script and then threw it away. The listing was enough.

@bluehat

Same wall I hit last quarter. On «Minidump callback: what I include in 2026»: Custom minidump callback. TTD queries that scan the whole trac

Same wall I hit last quarter. The load-bearing line: Custom minidump callback. SetThreadDescription is free. I will keep nagging. Pinned a comment at 0x1400061da in the listing.

@christopherx

Good. Dated shot, version in the post. The load-bearing line: Custom minidump callback. Page heap and ASan catch different lies. I run both.

Take the telegram pitch to the bin. Market listing or nothing. Did this on ARM64 last week — same shape, different pain. On «Minidump callback: what I include in 2026»: Custom minidump callback. rr --chaos is the first thing I try on a userspace race. If it cannot see it, I log TSC stamps. I wrote a 12-line script and then threw it away. The listing was enough.

Good. Dated shot, version in the post. The load-bearing line: Custom minidump callback. Page heap and ASan catch different lies. I run both. I still have the snapshot named debu-76-pre.

Sign in to reply. Guests can read reversing, pentesting, coding and greyhat threads.