Day: November 2, 2020

  • Home
  • November 2, 2020

Wireshark Basics Playlist

Wireshark is a free and open-source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education. Originally named Ethereal, the project was renamed

Read More

System Architecture & BIOS

[yotuwp type=”playlist” id=”PLBTQvUDSl81dTG_5Uk2mycxZihfeAYTRm” template=”big-left”]    

Read More

Lauterbach Basics Playlist

Lauterbach is a company that serves a niche-market of in-circuit emulators, especially on systems using JTAG, which it sells under the brand name TRACE32. Practice script is a file containing

Read More

Interrupts and Exceptions 101

So far we have seen various bugchecks depicted. What I left there is the explanation of how exceptions happen in the first place and how the execution flow reaches KiDispatchException. When some abnormal condition happens such as breakpoint, division

Read More

Forcing Symbols to match in WinDbg

Use the Microsoft Symbol Server to obtain debug symbol files http://support.microsoft.com/kb/311503 other useful commands: !symfix .reload !analyze -v !sym noisy .symopt+ 0×40 .sympath SRV*f:\localsymbols*http://msdl.microsoft.com/download/symbols Sometimes we could have a

Read More

Setting Symbols in WinDbg

The symbol path specifies locations where the Windows debuggers (WinDbg, KD, CDB, NTST) look for symbol files. Microsoft OS symbols are located at: https://msdl.microsoft.com/download/symbols You can set the symbols in multiple

Read More

Making sense of Device objects & Driver Objects from a dump

The !devstack extension displays a formatted view of the device stack associated with a device object. The !devnode extension displays information about a node in the device tree. 1.

Read More

0x9F BugCheck with Param 3? Here is how you go about it

This post is for driver or kernel developers/enthusiasts who have encountered a Blue Screen of Death on Windows where the bugcheck code is 0x9F, DRIVER_POWER_STATE_FAILURE, and parameter 1 is 0x3.

Read More

Dumping a module’s memory space (via WinDbg)

The command .WRITEMEM allows us to save memory into a disk file. The cool thing about it is that we can save modules too, because they are just raw

Read More