How to create a mini dump with more than Application data in it?

Asked Nov 12 '13 at 00:28

Active Nov 12 '13 at 00:28

Viewed 486 times

I have configured my WER to create a full memory mini dump:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps]
"DumpType"=dword:00000002

When I generate such a dump and open it in windbg it prints the following line:

User Mini Dump File with Full Memory: Only application data is available

As you can see, not everything is included (like the handles are missing).

OK, so I have tried a custom dump type:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps]
"DumpType"=dword:00000000
"CustomDumpFlags"=dword:00000006

According to the documentation it corresponds to MiniDumpWithFullMemory|MiniDumpWithHandleData, however, opening the new dump in windbg prints out the same line, no handle data.

So, my question is how can I configure my Windows 8 to automatically produce crash dumps with more than just the Application Data in it? For example, with the handles?

asked Nov 12 '13 at 00:28

mark

59,016
79
296
580

Looks okay. Use Regedit.exe and make sure the keys are actually there and didn't end up in HKLM\Software\Wow6432Node\etc instead. – Hans Passant Nov 12 '13 at 03:20
They are there, alright. – mark Nov 12 '13 at 18:24
A DumpType of 2 is a full memory dump. Did you actually try `!handle` and it failed? – Marc Sherman Nov 13 '13 at 15:25

How to create a mini dump with more than Application data in it?

0 Answers0