Monthly Archives: December 2013

Happy New Year 2014 (Almost)

Well, as we all know, it’s the first day of 2014 tomorrow; New Year’s Day. I thought I would write a very quick blog post wishing all my readers a Happy New Year, just in case I don’t have time … Continue reading

Posted in Miscellaneous | Leave a comment

Timeout Detection and Recovery (Stop 0x116) Internals

Stop 0x116’s and Stop 0x117’s are largely the same bugcheck. There is also the Stop 0x119, which is related to the video scheduler causing problems. However, this blog post is going to look at the internals of Timeout Detection and … Continue reading

Posted in Stop 0x116, Windows Internals | Leave a comment

Advanced Debugging Tools

OllyDbg (V2.1) – This tool is mostly for examining malware and programs. I find the tool really useful, the Assembly is very good too, especially with tracing JMPs. Download – OllyDbg 2.0 Hook Analyser (2.6) – Able to view application … Continue reading

Posted in Debugging | Leave a comment

Tis’ The Season To Be Sharing – Sharing and Mapping Memory

This blog post is going to look at sharing memory, control areas and section objects, and how to view information about these mechanisms. Let’s begin by looking at the general concept of sharing physical memory between two processes. Process A … Continue reading

Posted in Windows Internals | 1 Comment

Physical Address Extension (PAE)

This blog post is going to explain the fundamentals and the internals of Physical Address Extension (PAE) on Windows. Physical Address Extension PAE Mode enables x86 operating systems to be to address up to 64GB of Physical Memory (x86 processors), … Continue reading

Posted in Windows Internals | Leave a comment

Where Did My Kernel Memory Dump Go?

Okay, this going to be a very short blog post about the common problem with Kernel Memory Dumps not being saved, despite your efforts to following all the instructions listed in this Sysnative Tutorial, Windows still doesn’t seem to be … Continue reading

Posted in Debugging | Leave a comment

Translation Lookaside Buffer (TLB) and Look Aside Lists

TLB Cache The TLB Cache is very much a key part for the necessary performance of Virtual to Physical Address Translation. It’s main purpose is to improve the performance of Virtual Address Translation. All modern CPUs and their MMUs (Memory … Continue reading

Posted in Windows Internals | 1 Comment