Skip to content

v0.6
Compare
Choose a tag to compare
@GregTheDev GregTheDev released this 28 Apr 09:40
· 19 commits to master since this release
v0.6
22f272e

Features

  • Added summary view (includes minidump flags and which streams are saved inside the minidump)
  • Added reading of MINIDUMP_HEADER to DbgHelp.
  • Operating system description is now displayed in the SystemInfoView.
  • Added support for SystemMemoryInfoStream. (Microsoft seems to have stopped documenting the streams in MSDN, so this functionality is based on information found in the header files).
  • Added hex viewer to MemoryInfoView, now you can view the contents of memory regions (only works for full memory dumps). Hex viewer uses Be.HexEdit.
  • MemoryInfo view now supports sorting and filtering. See below for more details.

Sorting and Filtering

The MemoryInfo view now supports sorting and filtering columns. Click on the header to sort on that column, to filter the data in the column hover over the header and click the drop down button on the right hand edge. Only columns with a limited set of values can be filtered on e.g. you can not filter on the address or size columns, but you can filter on the AllocationProtect, State, Protect and Type columns. Multiple columns can be filtered at once.

Unfortunately the Win32 API doesn't support displaying a sort icon and filter icon on a listview header at the same time. For now I'm only displaying a filtered icon. Hopefully I can figure out an alternative in the future. As an aside: it seems like explorer.exe doesn't use the standard ListView control for displaying the file system files, that's why it can display both filter and sort icons.

Assets 4
Loading