Sunday, 12 January 2014

Debugging Stop 0xC4 - DDI Compliance Rules

›
Driver Verifier in Windows 8/8.1 has added more new debugging and testing procedures, the example in this blog post is going to be about DDI...
Saturday, 11 January 2014

Debugging Stop 0x1E - Finding the Exception Record Address in the Stack

›
This is going to be a very short blog post, just to demonstrate how to find the Exception Record address in the stack, and how many times it...

Internals of Direct Memory Access Part 1

›
Introduction   I've briefly explained Direct Memory Access, and then applied it specifically to Windows and graphics cards, however, t...
Friday, 10 January 2014

Debugging Stop 0xA5 - ACPI_BIOS_ERROR

›
To begin this is the first time I've personally seen this bugcheck, however, Patrick (@bsodanalysis) has beeen noticing this bugchecks o...
1 comment:
Wednesday, 8 January 2014

Shadow SSDT Hooking with Windbg

›
The Shadow System Service Dispatch Table can be hooked into much like the IDT and the SSDT. The SSDT for the Windows Kernel, and the Shadow ...
1 comment:
Monday, 6 January 2014

Debugging Heaps and Heap Internals Part 2

›
Heap Segments Heap Segments refer to the Heap Segment of a program, much like when you have a Code Segment and a Data Segment, there is a ...
1 comment:

Debugging Heaps and Heap Internals Part 1

›
Personally, I didn't know really where to start this blog post from at first, but I think it's best to first define the heap and it...