The !bugdump extension formats and displays the information contained in the bug check callback buffers.

    !bugdump [Component] 


Specifies the component whose callback data is to be examined. If omitted, all bug check callback data is displayed.




This extension can only be used after a bug check has occurred, or when you are debugging a kernel-mode crash dump file.

The Component parameter corresponds to the final parameter used in KeRegisterBugCheckCallback.

The buffers that hold callback data are not available in a Small Memory Dump. These buffers are present in Kernel Memory Dumps and Full Memory Dumps. However, in Windows XP SP1, Windows Server 2003, and later versions of Windows, the dump file is created before the drivers' BugCheckCallback routines are called, and therefore these buffers will not contain the data written by these routines.

If you are performing live debugging of a crashed system, all callback data will be present.

Additional Information

For more information, see Reading Bug Check Callback Data.