DUMPCHK.EXE is a command-line utility that you can use to verify that a dump file has been created correctly. DUMPCHK does not require access to symbols.
DUMPCHK has the following command line parameters:
dumpchk [options] CrashDumpFile
where the options are as follows:
-?
Displays the command syntax.
-p
Prints the header only (with no validation).
-v
Specifies verbose mode.
-q
Performs a quick test.
DUMPCHK displays some basic information from the dump file and then verifies all the virtual and physical addresses in the memory dump. If any errors are found in the dump file, it reports them. The following is an example of the output of a DUMPCHK command:
Filename . . . . . . .memory.dmp Signature. . . . . . .PAGE ValidDump. . . . . . .DUMP MajorVersion . . . . .free system MinorVersion . . . . .807 DirectoryTableBase . .0x00030000 PfnDataBase. . . . . .0xffb7e000 PsLoadedModuleList . .0x80196d40 PsActiveProcessHead. .0x80196c38 MachineImageType . . .i386 NumberProcessors . . .1 BugCheckCode . . . . .0xc000021a BugCheckParameter1 . .0xe17b7b68 BugCheckParameter2 . .0xc0000005 BugCheckParameter3 . .0x00000000 BugCheckParameter4 . .0x00000000 ExceptionCode. . . . .0x80000003 ExceptionFlags . . . .0x00000001 ExceptionAddress . . .0x8015f015 NumberOfRuns . . . . .0x3 NumberOfPages. . . . .0x3f9e Run #1 BasePage . . . . . .0x1 PageCount. . . . . .0x9e Run #2 BasePage . . . . . .0x100 PageCount. . . . . .0xec0 Run #3 BasePage . . . . . .0x1000 PageCount. . . . . .0x3040 ************** **************--> Validating the integrity of the PsLoadedModuleList ************** ************** **************--> Performing a complete check (^C to end) ************** ************** **************--> Validating all physical addresses ************** ************** **************--> Validating all virtual addresses **************
In this example, the most important information (from a debugging standpoint) is the following:
MajorVersion . . . . .free system MinorVersion . . . . .807 MachineImageType . . .i386 NumberProcessors . . .1 BugCheckCode . . . . .0xc000021a BugCheckParameter1 . .0xe17b7b68 BugCheckParameter2 . .0xc0000005 BugCheckParameter3 . .0x00000000 BugCheckParameter4 . .0x00000000
This information can be used to determine what STOP error occurred and, to a certain extent, what version of Windows NT was in use.