[SOLVED] Which custom dump flags are used in a WER mini dump?

Which custom dump flags are used in a WER mini dump?

I'm using Windows Error Reporting's registry settings to capture mini dumps from crashes of my Win32 C++ program.

I want to include string data from my process, at least the string data in scope of the stack trace. However, all string data is excluded when using DumpType 1: Mini dump.

Using the custom dump option and only MINIDUMP_TYPE MiniDumpWithIndirectlyReferencedMemory, the dump captures the desired string data. However, the file is much smaller than the standard mini dump (~400 KB vs. 15 MB) so I worry I'm leaving out crucial information.

Which combination of MINIDUMP_TYPE flags are used in the registry's DumpType 1: Mini dump option?

Solution

Perhaps Collecting User-Mode Dumps lists default flags: 0x00000121 (MiniDumpWithDataSegs MiniDumpWithUnloadedModules MiniDumpWithProcessThreadData == 0x00000001 0x00000020 0x00000100)

I have created mini-dump with DumpType set to 1 (mini dump). .dumpdebug command in WinDbg lists following flags for this mini dump:

Flags           00200121
                00000001 MiniDumpWithDataSegs
                00000020 MiniDumpWithUnloadedModules
                00000100 MiniDumpWithProcessThreadData
                00200000 MiniDumpWithAvxXStateContext

I assume that MiniDumpWithAvxXStateContext depends on processor architecture.