Monthly Archives: September 2013

Debugging Stop 0xC1 – Sloppy Bytes and Special Pool

Another memory corruption related bugcheck, but this time, it related to the use of the Special Pool option available within Driver Verifier. MSDN Blogs (NT Debugging) wrote a excellent article explaining Special Pool, and how it works which I’ve added … Continue reading

Posted in Stop 0xC1 | Leave a comment

Debugging Stop 0x4E – Bad Share Count

Okay, each time I come across a Stop 0x4E, it always seems to point to memory corruption and the last instruction being the MiBadShareCount line. By the way, I’ve learned that Mi prefix most likely means Internal Memory Management/Manager. I’ll … Continue reading

Posted in Stop 0x4E | Leave a comment

Using .chain and .help

This is going to be a very simple blog post, listing how to view all the DLL extensions you have loaded and how to list all the extensions available from that DLL. Firstly, let’s start with the .chain command which … Continue reading

Posted in WinDbg | Leave a comment

Debugging Stop 0x74

A Stop 0x74 is usually related to registry corruption, especially the System hive, whereby all the system configuration information is stored. Although, this bugcheck can be related to the wrong file permissions set for a registry file, and RAM corruption. … Continue reading

Posted in Stop 0x74 | Leave a comment

Debugging Stop 0xAB

Note: Before reading this article, please take into consideration this is a old dump file, and the cause of the crash was due to a bug in Windows 8, which Microsoft have now released a fix for, which can be … Continue reading

Posted in Stop 0xAB | Leave a comment

CMKD.DLL – !stack, !ptelist, !packet, !kvas,

Here’s a another custom made .DLL, I’ve actually had this library for a while now, but I’ve only just remembered it, so you may see this used in the future too. CodeMachine Debugger Extension DLL (CMKD.dll) If you don’t understand … Continue reading

Posted in WinDbg | Leave a comment

Loading Custom Debugger Extensions – !load and !dpx

Andrew Richards has developed a really custom .DLL, with some really nice debugger extensions for us debuggers to test out and use with dump files. The only one. I’ve used so far is the !dpx extension, which dumps all the … Continue reading

Posted in WinDbg | Leave a comment