0:005> .dump /mf my.dump
Creating my.dump - mini user dump
Dump successfully written
文件会被创建到windbg的安装目录
用windbg打开，会自动停下来，也就是上次我们停下来时的状态
执行!dso
0:028> !dso
OS Thread Id: 0x1abc (28)
RSP/REG Object Name
00000000051dd988 000000013f42aff0 System.NullReferenceException
00000000051dd9d0 00000000ff2f1310 System.Web.Caching.ExpiresBucket
00000000051dda28 000000013f42aff0 System.NullReferenceException
00000000051dda30 000000013f2f1808 System.EventArgs
00000000051dda40 000000013f42aff0 System.NullReferenceException
00000000051dda60 000000013f42aff0 System.NullReferenceException
00000000051ddaa0 000000013f42a508 System.Web.Caching.CacheEntry
00000000051ddaa8 00000000ff2f0d20 System.Web.Caching.CacheSingle
00000000051ddb18 000000013f2f1808 System.EventArgs
00000000051ddb20 00000001bf2e0998 System.String
00000000051ddb30 000000013f42aff0 System.NullReferenceException
找到Exception对象的地址000000013f42aff0，再执行!pe
0:028> !pe 000000013f42aff0
Exception object: 000000013f42aff0
Exception type: System.NullReferenceException
Message: hello
InnerException: <none>
StackTrace (generated):
<none>
StackTraceString: <none>
HResult: 80004003
就可以看到Message:hello