My 4th MSDN Magazine article is now available online: Writing a Plug-in for Sysinternals ProcDump v4.0 http://msdn.microsoft.com/en-us/magazine/hh580738.aspx

Just posted an article on the NTDebugging blog about ICorDebugUnmanagedCallback::DebugEvent ">ICorDebugUnmanagedCallback::DebugEvent . http://blogs.msdn.com/b/ntdebugging/archive/2011/11/29/fixing-an-icordebugunmanagedcallback-induced-hang.aspx

Today I wanted to find out what the Debugger Engine (DbgEng) changes are between Windows 7 and the Windows 8 Developer Preview. To get the differences, I did a WinDiff between the SDK 7.1 ‘DbgEng.h’ header file and the new version (C:\Program...

To cut a long story short, if you install SQL Server 2008 R2 via ISO mount in Virtual PC, the install will fail with a Database Engine Handle error. To get out of this issue: Uninstall everything to do with SQL Server (from Programs and Features...

My blog post on a BugCheck 0x101 - CLOCK_WATCHDOG_TIMEOUT is now live on the NTDebugging blog... http://blogs.msdn.com/b/ntdebugging/archive/2011/10/26/debugging-a-clock-watchdog-timeout-bugcheck.aspx

For some unfathomable reason, there seems to be no simple chart cross referencing the common CPU names, their basic features, and the internal CPU information identification (provided by !cpuid and !sysinfo cpuinfo ).  (There is also no clear description...

For a long time now I've had a registry file to make context menu entries for WinDbg. The entries allow you to select the x86 or x64 debugger. Internally at Microsoft, I have another version of the registry file that contains two more context menu entries...

ProcDump v3.04 has been released . The release just contains a tiny (edge case) sanity check I wrote in the MiniPlus stack traversal code. Specifically, it caters for the case where esp/rsp is not within the stack base and stack limit. In this highly...

These David Solomon talks on Memory Management (circa 2005) used to be on TechNet Spotlight but got pulled last year. I've found a repost of them here: http://www.opsvault.com/david-solomon-technet-talks/

I've written a three part series in MSDN Magazine that covers the Debugging API (specifically, DbgEng). Writing a Debugging Tools for Windows Extension - Part 1 - March 2011 Covers the build environment and the basics of Output, reading Memory...

A Traditional Linked List At some point in every developer’s life, you’ll have to write some code that works with a Linked List. You’ll start by making a structure like this: typedef struct { ULONG64 ulStartAddress; ULONG64 ulEndAddress;...

One of my debugger extensions commands uses IDebugDataSpaces2::QueryVirtual to iterate through the target’s address space to find particular size allocations (regions that are used for the TEB if you must know).  The code was working fine but on...

To save a symbol lookup in a debugger extension, here are the hardcodes to use for StackBase and StackLimit. User Mode 32bit 0:000> dt nt!_TEB.Stack* ntdll!_TEB +0x000 NtTib : +0x004 StackBase : Ptr Void +0x008 StackLimit : Ptr Void...