When a Windows system crashes or stops unexpectedly, it is programmed to automatically save information that is present right before the malfunction. This information, called crash dump files, is stored in System Properties under the Control Panel. There are three kinds of dump files: complete memory, kernel memory and small memory. Reading small memory dump files, which contain about 2MB of vital data, can help you determine the cause of the crash. But these dump files are impossible to comprehend without first configuring them into a readable format.
Edit Steps
- 1Understand the available information and its potential usefulness.
- Realize that small dump files contain a very limited amount of data. This data includes the stop message, a record of loaded drivers, the processor context for the malfunctioning processor, the kernel context for the malfunctioning processor, the processing information and kernel context for the thread, and kernel-mode information relating to the malfunctioning thread.
- Use small memory dump files when you have limited hard disk space. These small dump files contain vital information, but they do not provide a complete picture of the stoppage. The particular small memory dump file you read might not include the information that explains the cause of the breakdown.
- 2Configure the dump file type.
- Select "Start" > "Settings" > "Control Panel" > "System."
- Choose the "Advanced" tab within your system properties and then "Settings" within the "Startup and Recovery" options.
- Find the list titled "Write debugging information" and choose the small memory option.
- 3Use the Dump Check Utility (Dumpchk.exe) to read the dump file.
- Insert the Windows XP CD-ROM (or the CD-ROM that corresponds with your version of Windows).
- Choose the Support/Tools folder from the disk and run Setup.exe to install it.
- Open Dumpchk.exe from the downloaded Support Tools folder.
- Scan the options that Dumpchk.exe provides for reading and scanning the file. This includes dump validation, extra file validation, dump exam, symbol search for the dump exam, image search for the dump exam, etc.
- Run the scan and read the output. Dumpchk.exe will report any errors found within the dump file information. The program will not repair the damage, but it will display where the problem lies.
- 4Debug the dump file.
- Download the Windows debugging tools from their website and install the program onto your system.
- Open the dump file by selecting "Start" > "Run" > typing "cmd" > "OK."
- Type "cd c:\program files\debugging tools for windows" and press "Enter" to obtain the folder and type "kd-y Symbol Path �i ImagePath �z DumpFilePath" to load the dump file.
- Enter "kd �y srv*c:\symbols*http://msdl.microsoft.com/download/symbols -i c:\windows\i386 -z c:\windows\minidump\minidump.dmp" to open the dump file within the debugger.
Edit Tips
- The steps for configuring and reading your small dump files might vary depending on your particular version of Microsoft Windows, but they are similar and replicable using this guide.
- Consult the documentation about debugging tool commands on the Microsoft website.
Edit Related wikiHows
Edit Sources and Citations
Articles for You to Write
Article Info
Last edited:
January 29, 2012 by Cheeser
Categories:
Computers and Electronics
Recent edits by: Roxane, Chris B(Byankno1) (see all)