Search code examples
c#windowsregistrydump

Collecting User-Mode Dumps

I'm trying to collect Dumps from crashing applications using WER - by modifying Registry Key: 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps

As stated here: https://msdn.microsoft.com/en-us/library/windows/desktop/bb787181(v=vs.85).aspx

However, the dumps - generated in the default folder location only : %LOCALAPPDATA%\CrashDumps

And not in a custom folder, such as C:\Dump for example.

I tried modifying registry manually (using regedit) and from code - same result When I'm done this is the result:

enter image description here

This is my code:

const string USER_MODE_DUMPS_CONFIG_REGKEY = @"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps";
const string DUMP_FOLDER_KEY = "DumpFolder";
......
Registry.SetValue(USER_MODE_DUMPS_CONFIG_REGKEY, valueName, "C:\Dumps", RegistryValueKind.String);

Any help will be appreciated!

Solution

  • Thanks to @RdMm. I got the solution.

    I ran my process as 32bit which accessed by default the :

    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Wi‌​ndows Error Reporting\LocalDumps

    registry key.

    Windows OS ignores that key, WER works only with 64 bit Registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps

    So, running as 64 bit process solved the issue! :)