http://blogs.msdn.com/b/reiley/Reiley&#39;s technical blogen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.msdn.com/b/reiley/archive/2011/11/09/the-main-thread-problem.aspx#10346737Wed, 05 Sep 2012 22:45:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:10346737Tony<p>I would prefer some combination of these. For example, in GUI application I would refuse 5, if there is just one thread running the message loop and it is different from 5. You can have multiple threads with message queue and each servicing its own main window (or Frame window style). In that case the oldest would win.</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10346737" width="1" height="1">http://blogs.msdn.com/b/reiley/archive/2011/08/28/side-effects-of-debugger.aspx#10307162Sat, 19 May 2012 03:12:35 GMT91d46819-8472-40ad-a661-2c78acb4018c:10307162Reiley Yang<p>What&#39;s a digital media application:</p> <p> * <a rel="nofollow" target="_new" href="http://msdn.microsoft.com/en-us/library/windows/hardware/ff536256.aspx">msdn.microsoft.com/.../ff536256.aspx</a></p> <p> * <a rel="nofollow" target="_new" href="http://msdn.microsoft.com/en-us/library/windows/hardware/ff536358.aspx">msdn.microsoft.com/.../ff536358.aspx</a></p> <p>How can the windows kernel help anti-debugging:</p> <p> * DRMK.SYS driver has a private contract with the debugging subsystem</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10307162" width="1" height="1">http://blogs.msdn.com/b/reiley/archive/2011/08/28/side-effects-of-debugger.aspx#10299654Tue, 01 May 2012 20:16:17 GMT91d46819-8472-40ad-a661-2c78acb4018c:10299654Ofek<p>&#39;Digital media application can take advantage of the windows kernel to protect itself from being debugged&#39; - can you please elaborate? &nbsp;What&#39;s a digital media application? &nbsp;How can the windows kernel help anti-debugging?</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10299654" width="1" height="1">http://blogs.msdn.com/b/reiley/archive/2011/07/21/data-breakpoint.aspx#10296228Sun, 22 Apr 2012 16:58:27 GMT91d46819-8472-40ad-a661-2c78acb4018c:10296228Ofek<p>I always wondered - why doesn&#39;t VS support *read/write* data breakpoints? x86 processors do expose such states. Is it a legacy matter of conforming to other architectures?</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10296228" width="1" height="1">http://blogs.msdn.com/b/reiley/archive/2011/07/30/a-debugging-approach-to-ifeo.aspx#10251996Fri, 30 Dec 2011 08:06:46 GMT91d46819-8472-40ad-a661-2c78acb4018c:10251996Mike Dos Zhang<p>This helped me a lot!!!</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10251996" width="1" height="1">http://blogs.msdn.com/b/reiley/archive/2011/07/30/a-debugging-approach-to-ifeo.aspx#10233919Fri, 04 Nov 2011 09:32:20 GMT91d46819-8472-40ad-a661-2c78acb4018c:10233919Yi-Lun Luo<p>This is very useful. Unfortunately it doesn&#39;t seem to work for Metro applications... I get 193 ERROR_BAD_EXE_FORMAT for both x86 and x64 builds.</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10233919" width="1" height="1">http://blogs.msdn.com/b/reiley/archive/2011/10/30/undocumented-windbg.aspx#10232487Wed, 02 Nov 2011 14:26:23 GMT91d46819-8472-40ad-a661-2c78acb4018c:10232487Reiley Yang<p>The real scenario is I got unexpected &quot;Unable to open file&quot; error while using .readmem to load some DLL&#39;s PE/COFF header, in order to determine if there is an IAT hijack.</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10232487" width="1" height="1">http://blogs.msdn.com/b/reiley/archive/2011/10/30/undocumented-windbg.aspx#10232248Tue, 01 Nov 2011 21:38:00 GMT91d46819-8472-40ad-a661-2c78acb4018c:10232248Thomson<p>What&#39;s the real scenario for the analysis of dbgeng!DotReadMem in the last part.</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10232248" width="1" height="1">http://blogs.msdn.com/b/reiley/archive/2011/10/23/use-windows-debuggers-for-non-debugging-tasks.aspx#10229034Sun, 23 Oct 2011 13:11:35 GMT91d46819-8472-40ad-a661-2c78acb4018c:10229034Reiley Yang<p>MSDN has dedicated pages <a rel="nofollow" target="_new" href="http://msdn.microsoft.com/en-us/library/ff541398.aspx">msdn.microsoft.com/.../ff541398.aspx</a></p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10229034" width="1" height="1">http://blogs.msdn.com/b/reiley/archive/2011/10/23/use-windows-debuggers-for-non-debugging-tasks.aspx#10229032Sun, 23 Oct 2011 12:58:03 GMT91d46819-8472-40ad-a661-2c78acb4018c:10229032Luigi Bruno<p>Is there any web site that can be a useful reference for this kind of tasks?</p> <div style="clear:both;"></div><img src="http://blogs.msdn.com/aggbug.aspx?PostID=10229032" width="1" height="1">