Friday, 13 December 2013

Virtual to Physical Address Translation (Part 1)

›
This is going to be one of the most fundamental blog posts for debugging. The importance of virtual to physical memory address translation, ...
2 comments:

Using !validatelist, !exchain and !mca

›
This blog post is going to show a few extensions available in WinDbg, which we can use with our debugging. I'm going to cover !validatel...

Debugging Stop 0x9F - Multiple Completion Status Fields

›
Usually, you may notice when using !irp in with a Stop 0x9F, that the completion status shows three different fields; sometimes with the ad...
Thursday, 12 December 2013

Understanding MDLs (Memory Descriptor Lists) [Updated Version]

›
Before, my blog post about MDLs was a simple link back to Vir Gnarus' tutorial on MDLs. This time I'm going to write a proper blog p...
5 comments:

Understanding Data Alignment and Alignment Exceptions

›
The following topic, is much more related to CPUs rather than the operating system. CPUs are able to work much faster when data has been ali...
1 comment:
Tuesday, 10 December 2013

Investigating Pool with Pool Data Structures

›
Pool is such as fundamental resource, and something which that can cause a few bugchecks if not handled properly. Here I'm going to expl...

Looking at Virtual Memory - !vm

›
This is going to be brief overview at the !vm extension, which provides Virtual Memory statistics. I've added the 0x20 flag, since it a...
1 comment: