CODEWITHSUNDEEP
windbgminidump
Flame
Flame

Reputation: 2207

WINDBG: Display dump file capture flags

This is a very quick question. I searched and can't seem to find the windbg command that would show what options exist in a minidump file.

Additionally, I would like to get back the equivalent argument to the .dump command that would generate the same type of minidump, for example .dump /ma.

Upvotes: 2

Views: 2560

Answers (2)

snoone
snoone

Reputation: 5499

.dumpdebug will give you the flags that the mini-dump was created with. For example:

0:000> .dumpdebug
----- User Mini Dump Analysis

MINIDUMP_HEADER:
Version         A793 (6C02)
NumberOfStreams 11
Flags           1806
                0002 MiniDumpWithFullMemory
                0004 MiniDumpWithHandleData
                0800 MiniDumpWithFullMemoryInfo
                1000 MiniDumpWithThreadInfo

It will also spew lots of other information, so just be patient and then scroll back to the top or use .shell -ci ".dumpdebug" findstr MiniDump if you don't mind opening a shell.

Upvotes: 6

Zipper
Zipper

Reputation: 7204

When you first open a dump usually the 4th line of text will be something like this:

User Mini Dump File with Full Memory: Only application data is available

or

User Mini Dump File: Only registers, stack and portions of memory are available

This will obviously change depending upon what the options were.

Upvotes: 1

Related Questions