[SOLVED] WINDBG: Display dump file capture flags

WINDBG: Display dump file capture flags

This is a very quick question. I searched and can't seem to find the windbg command that would show what options exist in a minidump file.

Additionally, I would like to get back the equivalent argument to the .dump command that would generate the same type of minidump, for example .dump /ma.

Solution

.dumpdebug will give you the flags that the mini-dump was created with. For example:

0:000> .dumpdebug
----- User Mini Dump Analysis

MINIDUMP_HEADER:
Version         A793 (6C02)
NumberOfStreams 11
Flags           1806
                0002 MiniDumpWithFullMemory
                0004 MiniDumpWithHandleData
                0800 MiniDumpWithFullMemoryInfo
                1000 MiniDumpWithThreadInfo

It will also spew lots of other information, so just be patient and then scroll back to the top or use .shell -ci ".dumpdebug" findstr MiniDump if you don't mind opening a shell.