Windows Dmp Analysis

分析 Windows 崩溃转储文件（.dmp），诊断 MaaNTE 及其依赖项（MaaFramework、MXU）的崩溃。自动从 GitHub Releases 下载对应版本 PDB 符号，使用 minidump-stackwalk 解析堆栈轨迹并定位崩溃根因。当 issue 日志包或附件中发现 .dmp 文件，或用户要求分析 DMP/崩溃转储时使用。

1bananachicken Updated Sep 17, 2026

Coding & Dev Tools

Install

Press C to copy

$ npx skillmds@latest add 1bananachicken/windows-dmp-analysis

Installs into ~/.claude/skills (or .claude/skills inside a project). Restart Claude Code to pick it up.

Download SKILL.md

＋ Add to collection

README badge

[![SkillMD](https://skillmd.com/badge/1bananachicken/windows-dmp-analysis.svg)](https://skillmd.com/skills/1bananachicken/windows-dmp-analysis)

Trust & safety

0 of 3 audits passed

Last audited Sep 18, 2026 · commit 3d29f7c

Works with: Claude Code Claude.ai OpenAI Codex +

File contents

Windows DMP Analysis

Scope

Windows minidump (.dmp) files from MaaNTE.
MaaNTE crashes almost always originate in MaaFramework (C++) or MXU (Rust/Tauri), not MaaNTE's Python code.
Only x86_64 covered below; for aarch64, substitute x86_64 → aarch64 in all download URLs.

Prerequisites

在本仓库的 CI workflow 中会安装并确保 minidump-stackwalk 和 dump_syms 可用。如果你在本地复现或手动运行本流程，需要自行安装这些工具：

which minidump-stackwalk && which dump_syms

If either is missing, install via:

curl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | bash
cargo binstall -y --no-confirm minidump-stackwalk dump_syms

Workflow

1. Obtain DMP

Download .dmp to .cache/dmp-analysis/issue-<number>/.

Sources:

Direct issue attachment (image/file link ending in .dmp)
Inside MaaNTE-logs-*.zip log package

WORK=".cache/dmp-analysis/issue-<NUMBER>"
mkdir -p "$WORK"
curl -L "<dmp_url>" -o "$WORK/crash.dmp"

2. Quick unsymbolicated analysis

minidump-stackwalk "$WORK/crash.dmp" 2>/dev/null

This gives without any symbols: OS info, exception type, module list with versions, raw stack frames.

Identify the crashing module from the exception address or the top stack frame.

3. Determine dependency versions

DMP module version info is frequently empty/unavailable. Prefer log and config sources:

Priority	Source	How
1	MXU logs	`maa_init success, version: v5.x.x`
2	Agent logs	`PI_CLIENT_MAAFW_VERSION` in PI environment log
3	Config files from logs package	`interface.json`, config files
4	Issue text	User-reported version
5	Module list in stackwalk output	Version column (often shows `?`)

Record:

MaaFramework version (e.g. 5.9.2)
MXU version (e.g. 1.21.2)

4. Download PDB symbols

MaaFramework

MAA_VER="<version>"   # e.g. 5.9.2
curl -sL "https://github.com/MaaXYZ/MaaFramework/releases/download/v${MAA_VER}/MAA-win-x86_64-v${MAA_VER}.zip" \
  -o "$WORK/maa-fw.zip"
unzip -joq "$WORK/maa-fw.zip" 'symbol/*.pdb' -d "$WORK/pdb/"

PDB files inside symbol/:

PDB	Corresponding Module
MaaFramework.pdb	MaaFramework.dll — core pipeline runtime
MaaUtils.pdb	MaaUtils.dll — utility library
MaaToolkit.pdb	MaaToolkit.dll — toolkit
MaaWin32ControlUnit.pdb	MaaWin32ControlUnit.dll — Win32 controller
MaaAdbControlUnit.pdb	MaaAdbControlUnit.dll — ADB controller
MaaAgentServer.pdb	MaaAgentServer.dll — agent server
MaaAgentClient.pdb	MaaAgentClient.dll — agent client
MaaPiCli.pdb	MaaPiCli.exe — CLI entry

MXU

MXU_VER="<version>"   # e.g. 1.21.2
curl -sL "https://github.com/MistEO/MXU/releases/download/v${MXU_VER}/MXU-win-x86_64-v${MXU_VER}.zip" \
  -o "$WORK/mxu.zip"
unzip -joq "$WORK/mxu.zip" 'mxu.pdb' -d "$WORK/pdb/"

5. Convert PDB → Breakpad .sym

mkdir -p "$WORK/symbols"
for pdb in "$WORK/pdb/"*.pdb; do
  name=$(basename "$pdb" .pdb)
  header=$(dump_syms "$pdb" 2>/dev/null | head -1)
  debug_id=$(echo "$header" | awk '{print $4}')
  dest="$WORK/symbols/${name}.pdb/${debug_id}"
  mkdir -p "$dest"
  dump_syms "$pdb" > "$dest/${name}.sym" 2>/dev/null
done

6. Full symbolicated stack walk

minidump-stackwalk "$WORK/crash.dmp" "$WORK/symbols" 2>/dev/null

7. Analyze results

What to focus on

Crashing thread — read stack top-down.
Exception type:
- EXCEPTION_ACCESS_VIOLATION (0xC0000005) — null/dangling pointer, use-after-free
- EXCEPTION_STACK_OVERFLOW (0xC00000FD) — infinite recursion or oversized stack allocation
- EXCEPTION_ILLEGAL_INSTRUCTION (0xC000001D) — corrupted code or wrong CPU feature
- STATUS_STACK_BUFFER_OVERRUN (0xC0000409) — NOT always a real buffer overrun. Check the first exception parameter:
  - 0x7 = FAST_FAIL_FATAL_APP_EXIT — std::terminate() / abort() was called, typically from an unhandled C++ exception (e.g. cv::Exception from OpenCV). This is the most common crash pattern.
  - 0x2 = FAST_FAIL_RANGE_CHECK_FAILURE
  - Other values: see FAST_FAIL codes
- EXCEPTION_BREAKPOINT (0x80000003) — deliberate crash / assertion failure / Rust panic
Faulting module ownership:
- Maa*.dll → MaaFramework → upstream MaaXYZ/MaaFramework
- mxu.exe → MXU → upstream MistEO/MXU
- onnxruntime_maa.dll, opencv_world4_maa.dll → third-party inference/vision
- DirectML.dll → DirectX ML runtime
- ntdll.dll, KERNELBASE.dll, ucrtbase.dll → OS / CRT; look at the caller frames above
- If crash address is in ucrtbase.dll with code 0xC0000409, the real crash site is in the caller frames, not ucrtbase itself

8. Cross-reference with source

If the crash is in MaaFramework:

git clone --depth 1 --branch "v${MAA_VER}" \
  https://github.com/MaaXYZ/MaaFramework.git ".cache/upstream-src/MaaFramework"

If the crash is in MXU:

git clone --depth 1 --branch "v${MXU_VER}" \
  https://github.com/MistEO/MXU.git ".cache/upstream-src/MXU"

Look up the function and line from the symbolicated stack trace in the cloned source.

Output Format

## DMP 分析结果

- DMP 文件：`<filename>`
- 操作系统：`<OS version>`
- 异常类型：`<EXCEPTION_*>`
- 崩溃模块：`<module_name>` (版本 `<version>`)
- 崩溃函数：`<symbolicated function name>`

## DMP 崩溃分析

### 崩溃堆栈（crashing thread）

<crashing thread 的全部有效符号化堆栈帧>

### 关键模块版本

| Module           | Version |
| ---------------- | ------- |
| mxu.exe          | ...     |
| MaaFramework.dll | ...     |
| ...              | ...     |

### 根因判断

- 崩溃归属：MaaFramework / MXU / 第三方依赖 / 未知
- 分析：...
- 置信度：高 / 中 / 低

### 建议

- 对用户的建议（升级、绕过方案等）
- 对开发者的建议（上游报告、修复方向）

Cleanup

After analysis is complete:

rm -rf ".cache/dmp-analysis/issue-<NUMBER>"

---name: windows-dmp-analysisdescription: 分析 Windows 崩溃转储文件（.dmp），诊断 MaaNTE 及其依赖项（MaaFramework、MXU）的崩溃。自动从 GitHub Releases 下载对应版本 PDB 符号，使用 minidump-stackwalk 解析堆栈轨迹并定位崩溃根因。当 issue 日志包或附件中发现 .dmp 文件，或用户要求分析 DMP/崩溃转储时使用。---# Windows DMP Analysis## Scope- Windows minidump (.dmp) files from MaaNTE.- MaaNTE crashes almost always originate in **MaaFramework** (C++) or **MXU** (Rust/Tauri), not MaaNTE's Python code.- Only x86_64 covered below; for aarch64, substitute `x86_64` → `aarch64` in all download URLs.## Prerequisites在本仓库的 CI workflow 中会安装并确保 `minidump-stackwalk` 和 `dump_syms` 可用。如果你在本地复现或手动运行本流程，需要自行安装这些工具：```bashwhich minidump-stackwalk && which dump_syms```If either is missing, install via:```bashcurl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | bashcargo binstall -y --no-confirm minidump-stackwalk dump_syms```## Workflow### 1. Obtain DMPDownload `.dmp` to `.cache/dmp-analysis/issue-<number>/`.Sources:- Direct issue attachment (image/file link ending in `.dmp`)- Inside `MaaNTE-logs-*.zip` log package```bashWORK=".cache/dmp-analysis/issue-<NUMBER>"mkdir -p "$WORK"curl -L "<dmp_url>" -o "$WORK/crash.dmp"```### 2. Quick unsymbolicated analysis```bashminidump-stackwalk "$WORK/crash.dmp" 2>/dev/null```This gives without any symbols: OS info, exception type, module list with versions, raw stack frames.Identify the **crashing module** from the exception address or the top stack frame.### 3. Determine dependency versionsDMP module version info is frequently empty/unavailable. Prefer log and config sources:| Priority | Source | How || -------- | ------ | --- || 1 | MXU logs | `maa_init success, version: v5.x.x` || 2 | Agent logs | `PI_CLIENT_MAAFW_VERSION` in PI environment log || 3 | Config files from logs package | `interface.json`, config files || 4 | Issue text | User-reported version || 5 | Module list in stackwalk output | Version column (often shows `?`) |Record:- **MaaFramework version** (e.g. `5.9.2`)- **MXU version** (e.g. `1.21.2`)### 4. Download PDB symbols#### MaaFramework```bashMAA_VER="<version>" # e.g. 5.9.2curl -sL "https://github.com/MaaXYZ/MaaFramework/releases/download/v${MAA_VER}/MAA-win-x86_64-v${MAA_VER}.zip" \ -o "$WORK/maa-fw.zip"unzip -joq "$WORK/maa-fw.zip" 'symbol/*.pdb' -d "$WORK/pdb/"```PDB files inside `symbol/`:| PDB | Corresponding Module || --- | -------------------- || MaaFramework.pdb | MaaFramework.dll — core pipeline runtime || MaaUtils.pdb | MaaUtils.dll — utility library || MaaToolkit.pdb | MaaToolkit.dll — toolkit || MaaWin32ControlUnit.pdb | MaaWin32ControlUnit.dll — Win32 controller || MaaAdbControlUnit.pdb | MaaAdbControlUnit.dll — ADB controller || MaaAgentServer.pdb | MaaAgentServer.dll — agent server || MaaAgentClient.pdb | MaaAgentClient.dll — agent client || MaaPiCli.pdb | MaaPiCli.exe — CLI entry |#### MXU```bashMXU_VER="<version>" # e.g. 1.21.2curl -sL "https://github.com/MistEO/MXU/releases/download/v${MXU_VER}/MXU-win-x86_64-v${MXU_VER}.zip" \ -o "$WORK/mxu.zip"unzip -joq "$WORK/mxu.zip" 'mxu.pdb' -d "$WORK/pdb/"```### 5. Convert PDB → Breakpad .sym```bashmkdir -p "$WORK/symbols"for pdb in "$WORK/pdb/"*.pdb; do name=$(basename "$pdb" .pdb) header=$(dump_syms "$pdb" 2>/dev/null | head -1) debug_id=$(echo "$header" | awk '{print $4}') dest="$WORK/symbols/${name}.pdb/${debug_id}" mkdir -p "$dest" dump_syms "$pdb" > "$dest/${name}.sym" 2>/dev/nulldone```### 6. Full symbolicated stack walk```bashminidump-stackwalk "$WORK/crash.dmp" "$WORK/symbols" 2>/dev/null```### 7. Analyze results#### What to focus on1. **Crashing thread** — read stack top-down.2. **Exception type**: - `EXCEPTION_ACCESS_VIOLATION` (0xC0000005) — null/dangling pointer, use-after-free - `EXCEPTION_STACK_OVERFLOW` (0xC00000FD) — infinite recursion or oversized stack allocation - `EXCEPTION_ILLEGAL_INSTRUCTION` (0xC000001D) — corrupted code or wrong CPU feature - `STATUS_STACK_BUFFER_OVERRUN` (0xC0000409) — **NOT always a real buffer overrun.** Check the first exception parameter: - `0x7` = `FAST_FAIL_FATAL_APP_EXIT` — `std::terminate()` / `abort()` was called, typically from an **unhandled C++ exception** (e.g. `cv::Exception` from OpenCV). This is the most common crash pattern. - `0x2` = `FAST_FAIL_RANGE_CHECK_FAILURE` - Other values: see [FAST_FAIL codes](https://learn.microsoft.com/en-us/windows/win32/debug/fast-fail-constants) - `EXCEPTION_BREAKPOINT` (0x80000003) — deliberate crash / assertion failure / Rust panic3. **Faulting module ownership**: - `Maa*.dll` → MaaFramework → upstream `MaaXYZ/MaaFramework` - `mxu.exe` → MXU → upstream `MistEO/MXU` - `onnxruntime_maa.dll`, `opencv_world4_maa.dll` → third-party inference/vision - `DirectML.dll` → DirectX ML runtime - `ntdll.dll`, `KERNELBASE.dll`, `ucrtbase.dll` → OS / CRT; look at the caller frames above - If crash address is in `ucrtbase.dll` with code 0xC0000409, the real crash site is in the **caller frames**, not ucrtbase itself### 8. Cross-reference with sourceIf the crash is in MaaFramework:```bashgit clone --depth 1 --branch "v${MAA_VER}" \ https://github.com/MaaXYZ/MaaFramework.git ".cache/upstream-src/MaaFramework"```If the crash is in MXU:```bashgit clone --depth 1 --branch "v${MXU_VER}" \ https://github.com/MistEO/MXU.git ".cache/upstream-src/MXU"```Look up the function and line from the symbolicated stack trace in the cloned source.## Output Format```markdown## DMP 分析结果- DMP 文件：`<filename>`- 操作系统：`<OS version>`- 异常类型：`<EXCEPTION_*>`- 崩溃模块：`<module_name>` (版本 `<version>`)- 崩溃函数：`<symbolicated function name>`## DMP 崩溃分析### 崩溃堆栈（crashing thread）<crashing thread 的全部有效符号化堆栈帧>### 关键模块版本| Module | Version || ---------------- | ------- || mxu.exe | ... || MaaFramework.dll | ... || ... | ... |### 根因判断- 崩溃归属：MaaFramework / MXU / 第三方依赖 / 未知- 分析：...- 置信度：高 / 中 / 低### 建议- 对用户的建议（升级、绕过方案等）- 对开发者的建议（上游报告、修复方向）```## CleanupAfter analysis is complete:```bashrm -rf ".cache/dmp-analysis/issue-<NUMBER>"```

1bananachicken/maante/tree/main/.claude/skills/dmp-analysis commit 3d29f7ce9c

Frequently asked questions

npx skillmds@latest add 1bananachicken/windows-dmp-analysis