[问题记录.WinDbg]在64位系统上抓取32位进程的dump

【问题现象】

用DebugDiag分析dump，遇到如下错误：

Type	Description	Recommendation
Error	The process XXX.exe in XXX.DMP is a 32 bit application running on a 64 bit operating system. The dump file was collected from a 64 bit debugger other than DebugDiag.Analysis of this type of dump is not supported.	Collect another dump using DebugDiag, or using any 32 bit debugger

【问题原因】

参看Capturing memory dumps for 32-bit processes on an x64 machine

On a 64-bit OS, the dump created by Task Manager for a WOW process will be a 64-bit dump. This can cause problems, especially if you're debugging managed code. For 32-bit WOW processes, it's generally best to use a 32-bit utility.

https://stackoverflow.com/questions/10839230/simplest-method-for-creating-dump-file-for-troubled-process

【解决办法】

其中一种最简单的方式是——用32位的任务管理器抓取：

1) 运行 C:\Windows\SysWOW64\taskmgr.exe

可以看到，任务管理器进程是32位

2) 在要抓取的进程上右键--创建转储文件