Latest News

Stuck in the Apps Debug mode for a Kernal Crash dump?

  !wow64exts.sw Switches between x86 and native mode. I’d like to introduce you to how to switch to a kernal mode from a apps mode. This is how a

Read More

Creating a memory dump along with symbols using WinDbg

We can create a dump file from a running application or active driver crash using WinDbg. After the dump file is collected, it can be copied to another machine

Read More

Integer Divide by Zero leading to UNEXPECTED_KERNEL_MODE_TRAP (0x7f)

It is easily recognizable in process crash dumps by the processor instruction that caused this exception type (DIV or IDIV): FAULTING_IP: DLL!FindHighestID+278 1b2713c4 f775e4 div dword ptr [ebp-0×1c] EXCEPTION_RECORD:

Read More

Computer Architecture (Windows/Intel): What a system debug engineer needs to know?

[yotuwp type=”playlist” id=”PLHHlJEig7Oc6WJLdnq7puK3oK_VAfHgU3″ template=”big-left” meta_position=”after_link” date_format=”timeago” meta_align=””]

Read More