creating a memory dump

A small memory dump file is a debugging tool for when your computer crashes. It records the smallest set of useful information that may help. But you need to make some configuration settings to create the minidump.

The file is stored in a time encoded file name (MINImmddyy-nn.dmp) in "%SystemRoot%\Minidump".

The file name is based on the month, day, year and copy#. For example; the fourth minidump on January 2nd, 2003 the file will be name MINI010203-04.dmp The files are placed in the %SystemRoot%\Minidump directory.

You need to be logged on as administrator for the logging to occur.

Then a developer can have that minidump file sent them and they will have access to the information as if it happened on their machine.

The dump file includes the following information:

  • The Stop message and its parameters and other data
  • A list of loaded drivers
  • The processor context (PRCB) for the processor that stopped
  • The process information and kernel context (EPROCESS) for the process that stopped
  • The process information and kernel context (ETHREAD) for the thread that stopped
  • The Kernel-mode call stack for the thread that stopped

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options