Podchaser Logo
Home
Inside Show (Audio) - Channel 9

Inside Show (Audio) - Channel 9

A Technology podcast
Good podcast? Give it some love!
Inside Show (Audio) - Channel 9

Inside Show (Audio) - Channel 9

Episodes
Inside Show (Audio) - Channel 9

Inside Show (Audio) - Channel 9

A Technology podcast
Good podcast? Give it some love!
Rate Podcast

Episodes of Inside Show

Mark All
Search Episodes...
The Windows-X menu provides a rich launch experience into the troubleshooting tools of Windows, including Power Options, Event Viewer, System (also Win-Pause), Device Manager, Network Connections, Disk Management, Computer Management and Comman
The defaults for WinDbg (font, window layout, etc.) can be set by running WinDbg without a dump file. You configure your preferred look-and-feel and then use File | Save Workspace.We go over our preferences, of note, the colorization of output,
The (Windows) Event Viewer shows the event of the system.The "Windows Logs" section contains (of note) the Application, Security and System logs - which have existed since Windows NT 3.1.Event Tracing for Windows (ETW) providers are displayed i
The (Windows) Task Manager allows a user to view the performance of the system.It contains views that show the overall performance, and the performance per Package/Process. It also shows the currently logged on Users and Services of the compute
The (Windows) Device Manager allows a user to view the hardware on the computer.You can use it to installed/update/remove the drivers for the device.The devices can be viewed by Type (e.g. Display adapter, Network adapter, etc.) or Connection (
The !teb extension displays a formatted view of the information in the thread environment block (TEB).The TEB contains information such as the Stack Memory Limits and Last Error/Status Codes.
The !peb extension displays a formatted view of the information in the process environment block (PEB).The PEB contains information such as Process Name, Module List, Environment Variables, Command Line, and many more process level things.
Commands to display Bugcheck Secondary Dump Data.Microsoft Docs:.enumtag (Enumerate Secondary Callback Data)!pde.tagsBugCheckSecondaryDumpDataCallback routine!ext.blackbox*!sysinfo smbios!sysinfo registers 
The 32bits in an HRESULT error code have meanings, allowing the reader to gain additional insights into the error.Of note:The 32nd bit (the top bit) indicates if an error occurred or not. This is why errors are 0x8xxxxxxx.The 16-26 bits are the
An Execute Access Violation occurs when the application attempts to execute code from a memory address that is invalid. To be valid, the memory page must have a valid state, protection and type.The memory must be in the MEM_COMMIT state.The mem
A Read or Write Access Violation occurs when the application attempts to read or write memory from a memory address that is invalid. To be valid, the memory page must have a valid state, protection and type.The memory must be in the MEM_COMMIT
An Access Violation is a type of Exception caused when an application Reads, Writes or Executes an invalid Memory Address.The Exception Code is 0xC0000005The first Exception Parameter (0) is the type of the violation; Read (0), Write (1) or Exe
A CLR Exception is a type of Exception made by .NET applications. The exception is encapsulated in a class derived from the System.Exception class.The Exception Code is 0xE0434352 (a.k.a. Error "CCR" in ASCII).The first Exception Parameter (0)
A Fail Fast Exception is a type of Exception made by User Mode applications.The Exception Code is 0xC0000409 (a.k.a. STATUS_FAIL_FAST_EXCEPTION).The first Exception Parameter (0) defines the Sub-Code. Some sub-codes use additional Exception Par
A Point-of-Failure (POF) Exception is a type of Exception made by UWP applications. It was introduced in the Windows 10 Fall Creators Update (Sept. 2017).The Exception Code is 0xC000027C.The first Exception Parameter (0) is an HRESULT. In 64bit
A Stowed Exception is a type of Exception made by UWP applications. It was introduced in Windows 8.0 as part of WinRT API (now known as UWP).The Exception Code is 0xC000027B.The first Exception Parameter (0) is the starting address of an array
The DRIVER_IRQL_NOT_LESS_OR_EQUAL bug check has a value of 0x000000D1. This indicates that a kernel-mode driver attempted to access pageable memory at a process IRQL that was too high.At the higher IRQL (levels), the kernel blocks attempts to p
The DRIVER_POWER_STATE_FAILURE bug check has a value of 0x0000009F. This bug check indicates that the driver is in an inconsistent or invalid power state.Parameter 1 indicates the type of violation. Refer to the Microsoft Docs page for details.
The MANUALLY_INITIATED_POWER_BUTTON_HOLD bug check has a value of 0x000001C8.The bug check occurs when the power button is held for 7 seconds, but released before the UEFI Reset occurs at 10 seconds.To support Long Power Button Hold, the device
MANUALLY_INITIATED_CRASH bug check has a value of 0x000000E2.The bug check occurs when a keystroke combination is entered on a PS/2 and/or USB Keyboard. To support the Ctrl-Ctrl-Scroll Lock keystroke on USB keyboards, add the kbdhid setting; fo
The .trap command change to, and displays the trap frame register state of the context at the specified address. Trap Frames only exist in Kernel Mode. Trap Frames are used to store the registers of the current thread when an interrupt occurs,
The .cxr command changes the debugger context.Using .cxr (without an address) resets the context to the default context.Using .cxr
sets the debugger context to the CONTEXT structure values at the specified address.Additional Resources
The .exr command displays the contents of an exception record (a EXCEPTION_RECORD structure).The EXCEPTION_RECORD structure contains the Instruction Address (the function raising the exception), the Exception Code, and (max 15) Exception Parame
The .ecxr command changes to the context that is associated with the dump's exception. It displays the registers at that context.Use .cxr to reset the context to the default context.In general, start the debugging of a dump file by executing .e
The .lastevent command displays the most recent exception or event that occurred.The default debugger context is automatically set to the TID specified.To change the context manually, use the TID as an index: ~~[TID]sMicrosoft Docs:.lastevent (
Rate

Join Podchaser to...

  • Rate podcasts and episodes
  • Follow podcasts and creators
  • Create podcast and episode lists
  • & much more

Unlock more with Podchaser Pro

  • Audience Insights
  • Contact Information
  • Demographics
  • Charts
  • Sponsor History
  • and More!
Pro Features