inspect_crash_dump
Reads crash dump headers to determine the crash cause: bug check/exception code, faulting address, and module, with flags for anti-cheat overlay modules.
Instructions
Read a dump file's headers and report what crashed.
For a kernel dump this returns the bug check code, its four parameters and what they mean — the same information the blue screen showed.
For an application dump it returns the exception code, the faulting address, and the module that address belongs to, which is normally the answer. It also flags overlay and anti-cheat modules loaded into the crashed process, since those are a frequent cause of game crashes.
Only header structures are read, so this is fast even on a multi-gigabyte MEMORY.DMP. Full stack analysis still needs WinDbg.
Args: path: Absolute path to a .dmp file, from list_crash_dumps. include_modules: Also return the complete loaded-module list.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | ||
| include_modules | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |