Monday, April 15, 2019

How to tell where and what files a windows program is trying to open?

Have you ever tried to wonder what files a windows program is trying to open behind the scene?

There are many reasons why people would want to know this information, but for development
these information are very useful not only for troubleshooting but also fixing the program from not running correctly.

 Below is a screenshot showing you  what the Admintool program is trying to read. In this example, process monitor says that Admintool.exe was trying to read a file called tnsnames.ora. It even tells you the path the program is expecting the file to be located. So if you were to put the file in the wrong location, the reading would fail. Besides telling the files, process monitor also tells you the followings:

1. registry keys the program tries to read.
2. dll files the application is trying to load including their paths as well.
3. TCP message that the application tries to send and the destination

After you installed process monitor, you can tell it to include events from your program only by using the "Include Process From Window" button.  This button has a shooting target icon.