What's a quick way to get a crash dump.

I figured this would be a good place to ask this question. Sorry if this is
the
wrong forum.

I would like to play around with analyzing crash dumps on W2K and need
an easy way to create my own crash. Could someone give me a simple C/C++
program crash a Windows 2K system from a privileged account?

Thanks,
Brad.

SubodhRadheshyamGupta
Thu Jan 13 00:33:23 CST 2005


Windows 2000 includes a feature that enables you to have the system stop
responding and generate a Memory.dmp file (crash to blue-screen) by using a
button combination on the keyboard.
Registry Settings -

System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters]
Value Name: CrashOnCtrlScroll
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)
add these keys and restart the computer, you can generate a bugcheck
responding by holding down the right CTRL key and pressing the SCROLL LOCK
key twice.

Or else write if you want to do this for practise write a faulty driver on
your own which will help you understand the internals of debugging drivers.

Regards
Subodh

"surviving1" wrote:

> I figured this would be a good place to ask this question. Sorry if this is
> the
> wrong forum.
>
> I would like to play around with analyzing crash dumps on W2K and need
> an easy way to create my own crash. Could someone give me a simple C/C++
> program crash a Windows 2K system from a privileged account?
>
> Thanks,
> Brad.
>
>
>

Xiao
Thu Jan 13 00:43:02 CST 2005

no effect

OS is Windows 2000 Pro

"Subodh Radheshyam Gupta" <SubodhRadheshyamGupta@discussions.microsoft.com>
дÈëÓʼþ news:583C628A-D7D1-4CA7-A47E-B60E3F6D4F73@microsoft.com...
>
> Windows 2000 includes a feature that enables you to have the system stop
> responding and generate a Memory.dmp file (crash to blue-screen) by using
a
> button combination on the keyboard.
> Registry Settings -
>
> System Key:
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters]
> Value Name: CrashOnCtrlScroll
> Data Type: REG_DWORD (DWORD Value)
> Value Data: (0 = disabled, 1 = enabled)
> add these keys and restart the computer, you can generate a bugcheck
> responding by holding down the right CTRL key and pressing the SCROLL LOCK
> key twice.
>
> Or else write if you want to do this for practise write a faulty driver on
> your own which will help you understand the internals of debugging
drivers.
>
> Regards
> Subodh
>
> "surviving1" wrote:
>
> > I figured this would be a good place to ask this question. Sorry if
this is
> > the
> > wrong forum.
> >
> > I would like to play around with analyzing crash dumps on W2K and need
> > an easy way to create my own crash. Could someone give me a simple
C/C++
> > program crash a Windows 2K system from a privileged account?
> >
> > Thanks,
> > Brad.
> >
> >
> >

Doron
Thu Jan 13 01:25:57 CST 2005

you have to reboot for this to take affect. also note, it must be the
*right* control key. there is a difference between right and left.

d

--
Please do not send e-mail directly to this alias. this alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.


"Xiao" <xiaotao@pminchina.com> wrote in message
news:ejb02sT%23EHA.2316@TK2MSFTNGP15.phx.gbl...
> no effect
>
> OS is Windows 2000 Pro
>
> "Subodh Radheshyam Gupta"
> <SubodhRadheshyamGupta@discussions.microsoft.com>
> дÈëÓʼþ news:583C628A-D7D1-4CA7-A47E-B60E3F6D4F73@microsoft.com...
>>
>> Windows 2000 includes a feature that enables you to have the system stop
>> responding and generate a Memory.dmp file (crash to blue-screen) by using
> a
>> button combination on the keyboard.
>> Registry Settings -
>>
>> System Key:
>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters]
>> Value Name: CrashOnCtrlScroll
>> Data Type: REG_DWORD (DWORD Value)
>> Value Data: (0 = disabled, 1 = enabled)
>> add these keys and restart the computer, you can generate a bugcheck
>> responding by holding down the right CTRL key and pressing the SCROLL
>> LOCK
>> key twice.
>>
>> Or else write if you want to do this for practise write a faulty driver
>> on
>> your own which will help you understand the internals of debugging
> drivers.
>>
>> Regards
>> Subodh
>>
>> "surviving1" wrote:
>>
>> > I figured this would be a good place to ask this question. Sorry if
> this is
>> > the
>> > wrong forum.
>> >
>> > I would like to play around with analyzing crash dumps on W2K and need
>> > an easy way to create my own crash. Could someone give me a simple
> C/C++
>> > program crash a Windows 2K system from a privileged account?
>> >
>> > Thanks,
>> > Brad.
>> >
>> >
>> >
>
>

Burkhardt
Thu Jan 13 04:45:35 CST 2005

a. under
HKLM\System\CurrentControlSet\Services\i8042prt\Parameters\CrashOnCtrlScroll
enter a 1
b. reboot
c. hold right ctrl-key and press scroll-lock twice

Kind regards
Burkhardt Braun







surviving1 wrote:
> I figured this would be a good place to ask this question. Sorry if this is
> the
> wrong forum.
>
> I would like to play around with analyzing crash dumps on W2K and need
> an easy way to create my own crash. Could someone give me a simple C/C++
> program crash a Windows 2K system from a privileged account?
>
> Thanks,
> Brad.
>
>

Scott
Thu Jan 13 07:09:37 CST 2005

Hi,

You can use Bang! http://www.osronline.com/article.cfm?article=153 (free reg
required).

Regards,

-scott

--
Scott Noone
Software Engineer
OSR Open Systems Resources, Inc.
http://www.osronline.com

"surviving1" <survivin1@spam-me-not.yahoo.com> wrote in message
news:OlQYT9R%23EHA.3708@TK2MSFTNGP14.phx.gbl...
>I figured this would be a good place to ask this question. Sorry if this
>is
> the
> wrong forum.
>
> I would like to play around with analyzing crash dumps on W2K and need
> an easy way to create my own crash. Could someone give me a simple C/C++
> program crash a Windows 2K system from a privileged account?
>
> Thanks,
> Brad.
>
>

surviving1
Thu Jan 13 10:38:43 CST 2005

I was hoping to get a code sample to do this. I used to write kernel code
on
OpenVMS years ago and I believe there are a lot similarities between
it and Windows. Part of this exercise is to read crash dumps but the other
is to get a quick start into Windows internals.

Thanks,
Brad.

"Subodh Radheshyam Gupta" <SubodhRadheshyamGupta@discussions.microsoft.com>
wrote in message news:583C628A-D7D1-4CA7-A47E-B60E3F6D4F73@microsoft.com...
>
> Windows 2000 includes a feature that enables you to have the system stop
> responding and generate a Memory.dmp file (crash to blue-screen) by using
a
> button combination on the keyboard.
> Registry Settings -
>
> System Key:
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters]
> Value Name: CrashOnCtrlScroll
> Data Type: REG_DWORD (DWORD Value)
> Value Data: (0 = disabled, 1 = enabled)
> add these keys and restart the computer, you can generate a bugcheck
> responding by holding down the right CTRL key and pressing the SCROLL LOCK
> key twice.
>
> Or else write if you want to do this for practise write a faulty driver on
> your own which will help you understand the internals of debugging
drivers.
>
> Regards
> Subodh
>
> "surviving1" wrote:
>
> > I figured this would be a good place to ask this question. Sorry if
this is
> > the
> > wrong forum.
> >
> > I would like to play around with analyzing crash dumps on W2K and need
> > an easy way to create my own crash. Could someone give me a simple
C/C++
> > program crash a Windows 2K system from a privileged account?
> >
> > Thanks,
> > Brad.
> >
> >
> >

Maxim
Thu Jan 13 15:19:46 CST 2005

I remember pressing Scroll Lock invoking WinDbg immediately, even without
this option.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@storagecraft.com
http://www.storagecraft.com

"Burkhardt Braun" <burkhardt.braun@-N-O-S-P-A-M-gmx.net> wrote in message
news:41e642f5$1@olaf.komtel.net...
> a. under
>
HKLM\System\CurrentControlSet\Services\i8042prt\Parameters\CrashOnCtrlScroll
> enter a 1
> b. reboot
> c. hold right ctrl-key and press scroll-lock twice
>
> Kind regards
> Burkhardt Braun
>
>
>
>
>
>
>
> surviving1 wrote:
> > I figured this would be a good place to ask this question. Sorry if this
is
> > the
> > wrong forum.
> >
> > I would like to play around with analyzing crash dumps on W2K and need
> > an easy way to create my own crash. Could someone give me a simple C/C++
> > program crash a Windows 2K system from a privileged account?
> >
> > Thanks,
> > Brad.
> >
> >

Burkhardt
Thu Jan 13 18:03:41 CST 2005



surviving1 wrote:
> I was hoping to get a code sample to do this. I used to write kernel code
> on
> OpenVMS years ago and I believe there are a lot similarities between
> it and Windows. Part of this exercise is to read crash dumps but the other
> is to get a quick start into Windows internals.
IIUYC take this code snippet:
{
int ( *BlueScreenGeneratorFromHell )( void ) = 0;

BlueScreenGeneratorFromHell( );
}

Kind regards
Burkhardt Braun




>
> Thanks,
> Brad.
>
> "Subodh Radheshyam Gupta" <SubodhRadheshyamGupta@discussions.microsoft.com>
> wrote in message news:583C628A-D7D1-4CA7-A47E-B60E3F6D4F73@microsoft.com...
>
>>Windows 2000 includes a feature that enables you to have the system stop
>>responding and generate a Memory.dmp file (crash to blue-screen) by using
>
> a
>
>>button combination on the keyboard.
>>Registry Settings -
>>
>>System Key:
>>[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters]
>>Value Name: CrashOnCtrlScroll
>>Data Type: REG_DWORD (DWORD Value)
>>Value Data: (0 = disabled, 1 = enabled)
>>add these keys and restart the computer, you can generate a bugcheck
>>responding by holding down the right CTRL key and pressing the SCROLL LOCK
>>key twice.
>>
>>Or else write if you want to do this for practise write a faulty driver on
>>your own which will help you understand the internals of debugging
>
> drivers.
>
>>Regards
>>Subodh
>>
>>"surviving1" wrote:
>>
>>
>>>I figured this would be a good place to ask this question. Sorry if
>
> this is
>
>>>the
>>>wrong forum.
>>>
>>>I would like to play around with analyzing crash dumps on W2K and need
>>>an easy way to create my own crash. Could someone give me a simple
>
> C/C++
>
>>>program crash a Windows 2K system from a privileged account?
>>>
>>>Thanks,
>>>Brad.
>>>
>>>
>>>
>
>
>

Doron
Thu Jan 13 21:05:08 CST 2005

no need to derference NULL, just call KeBugCheck(Ex). Look at the
pnpi8042prt sample in the ddk (under input samples). this is the driver
that implements crash on ctrl control. look in kbddep.c at the ISR.

d

--
Please do not send e-mail directly to this alias. this alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.


"Burkhardt Braun" <burkhardt.braun@-N-O-S-P-A-M-gmx.net> wrote in message
news:41e6fe04@olaf.komtel.net...
>
>
> surviving1 wrote:
>> I was hoping to get a code sample to do this. I used to write kernel
>> code
>> on
>> OpenVMS years ago and I believe there are a lot similarities between
>> it and Windows. Part of this exercise is to read crash dumps but the
>> other
>> is to get a quick start into Windows internals.
> IIUYC take this code snippet:
> { int ( *BlueScreenGeneratorFromHell )( void ) = 0;
>
> BlueScreenGeneratorFromHell( );
> }
>
> Kind regards
> Burkhardt Braun
>
>
>
>
>>
>> Thanks,
>> Brad.
>>
>> "Subodh Radheshyam Gupta"
>> <SubodhRadheshyamGupta@discussions.microsoft.com>
>> wrote in message
>> news:583C628A-D7D1-4CA7-A47E-B60E3F6D4F73@microsoft.com...
>>
>>>Windows 2000 includes a feature that enables you to have the system stop
>>>responding and generate a Memory.dmp file (crash to blue-screen) by using
>>
>> a
>>
>>>button combination on the keyboard.
>>>Registry Settings -
>>>
>>>System Key:
>>>[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters]
>>>Value Name: CrashOnCtrlScroll
>>>Data Type: REG_DWORD (DWORD Value)
>>>Value Data: (0 = disabled, 1 = enabled)
>>>add these keys and restart the computer, you can generate a bugcheck
>>>responding by holding down the right CTRL key and pressing the SCROLL
>>>LOCK
>>>key twice.
>>>
>>>Or else write if you want to do this for practise write a faulty driver
>>>on
>>>your own which will help you understand the internals of debugging
>>
>> drivers.
>>
>>>Regards
>>>Subodh
>>>
>>>"surviving1" wrote:
>>>
>>>
>>>>I figured this would be a good place to ask this question. Sorry if
>>
>> this is
>>
>>>>the
>>>>wrong forum.
>>>>
>>>>I would like to play around with analyzing crash dumps on W2K and need
>>>>an easy way to create my own crash. Could someone give me a simple
>>
>> C/C++
>>
>>>>program crash a Windows 2K system from a privileged account?
>>>>
>>>>Thanks,
>>>>Brad.
>>>>
>>>>
>>>>
>>
>>

Doron
Thu Jan 13 21:06:01 CST 2005

that would be print screen. or maybe you hit the pause/break key while
holding down control.

d

--
Please do not send e-mail directly to this alias. this alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.


"Maxim S. Shatskih" <maxim@storagecraft.com> wrote in message
news:uvQODWb%23EHA.1396@tk2msftngp13.phx.gbl...
> I remember pressing Scroll Lock invoking WinDbg immediately, even
> without
> this option.
>
> --
> Maxim Shatskih, Windows DDK MVP
> StorageCraft Corporation
> maxim@storagecraft.com
> http://www.storagecraft.com
>
> "Burkhardt Braun" <burkhardt.braun@-N-O-S-P-A-M-gmx.net> wrote in message
> news:41e642f5$1@olaf.komtel.net...
>> a. under
>>
> HKLM\System\CurrentControlSet\Services\i8042prt\Parameters\CrashOnCtrlScroll
>> enter a 1
>> b. reboot
>> c. hold right ctrl-key and press scroll-lock twice
>>
>> Kind regards
>> Burkhardt Braun
>>
>>
>>
>>
>>
>>
>>
>> surviving1 wrote:
>> > I figured this would be a good place to ask this question. Sorry if
>> > this
> is
>> > the
>> > wrong forum.
>> >
>> > I would like to play around with analyzing crash dumps on W2K and need
>> > an easy way to create my own crash. Could someone give me a simple
>> > C/C++
>> > program crash a Windows 2K system from a privileged account?
>> >
>> > Thanks,
>> > Brad.
>> >
>> >
>
>