Comments for Software Generalist http://www.softwaregeneralist.com Connecting Software with Engineering, Science, Religion, Philosophy and Politics Sat, 04 Feb 2012 15:39:13 +0000 http://wordpress.org/?v=2.5 Comment on Mod N Reading System by Crash Dump Analysis » Blog Archive » Sizeof(MyLibrary) >= 1600 http://www.softwaregeneralist.com/2009/11/17/mod-n-reading-system/#comment-1270 Crash Dump Analysis » Blog Archive » Sizeof(MyLibrary) >= 1600 Sat, 04 Jun 2011 23:07:08 +0000 http://www.softwaregeneralist.com/?p=90#comment-1270 [...] sizeof […] sizeof

]]> Comment on Mod N Reading System by Literate Scientist » Blog Archive » Resuming Literate Scientist Blog http://www.softwaregeneralist.com/2009/11/17/mod-n-reading-system/#comment-1238 Literate Scientist » Blog Archive » Resuming Literate Scientist Blog Sun, 20 Mar 2011 15:20:10 +0000 http://www.softwaregeneralist.com/?p=90#comment-1238 [...] to my Mod N Reading System […] to my Mod N Reading System

]]> Comment on Reading Notebook: 20-September-10 by Dmitry Vostokov http://www.softwaregeneralist.com/2010/09/28/reading-notebook-20-september-10/#comment-1146 Dmitry Vostokov Mon, 11 Oct 2010 21:16:29 +0000 http://www.softwaregeneralist.com/?p=116#comment-1146 There was only one instance on that machine after I inserted a USB stick There was only one instance on that machine after I inserted a USB stick

]]> Comment on Reading Notebook: 20-September-10 by Marc Sherman http://www.softwaregeneralist.com/2010/09/28/reading-notebook-20-september-10/#comment-1137 Marc Sherman Fri, 01 Oct 2010 13:24:11 +0000 http://www.softwaregeneralist.com/?p=116#comment-1137 How did you know which instance of WUDFHost.exe to attach to? Marc How did you know which instance of WUDFHost.exe to attach to?

Marc

]]> Comment on Software Labour and Alienation by Management Bits and Tips » Blog Archive » Software Industrial Language http://www.softwaregeneralist.com/2009/02/18/software-labour-and-alienation/#comment-1130 Management Bits and Tips » Blog Archive » Software Industrial Language Wed, 22 Sep 2010 10:01:21 +0000 http://www.softwaregeneralist.com/?p=44#comment-1130 [...] Delete (this might be offensive to […] Delete (this might be offensive to

]]> Comment on Reading Notebook: 18-March-10 by Sol_Ksacap http://www.softwaregeneralist.com/2010/03/19/reading-notebook-18-march-10/#comment-718 Sol_Ksacap Sun, 21 Mar 2010 18:56:01 +0000 http://www.softwaregeneralist.com/?p=101#comment-718 >PsPrioritySeperation Indeed, this variable's name was fixed in w7 – no more 'PsPrioritySeperation', but 'PsPrioritySeparation' present instead. That's slightly surprising, since misprints in some other places in windows code tend to persist from build to build. For example, 'bHasMeun' member of window structure: lkd> dt win32k!tagWND +0x000 head : _THRDESKHEAD +0x028 state : Uint4B +0x028 bHasMeun : Pos 0, 1 Bit +0x028 bHasVerticalScrollbar : Pos 1, 1 Bit Or misprint in address space layout table (\ntos\mm\amd64\miamd.h): FFFF080000000000 | Start of System space | MM_SYSTEM_RANGE_START Here, author of original layout probably meant "FFFF800000000000", since for virtual address to be regarded as Canonical, its bits 63..48 shall be sign-extension of bit 47 – but back in the day that erratum slipped through and its results are still there, in w7 kernel: lkd> dp MmSystemRangeStart l1 fffff800`02aa90e0 ffff0800`00000000 (Althought there might actually be some valid reason for this value – we don't really know). >PsPrioritySeperation
Indeed, this variable’s name was fixed in w7 – no more ‘PsPrioritySeperation’, but ‘PsPrioritySeparation’ present instead.
That’s slightly surprising, since misprints in some other places in windows code tend to persist from build to build. For example, ‘bHasMeun’ member of window structure:

lkd> dt win32k!tagWND
+0×000 head : _THRDESKHEAD
+0×028 state : Uint4B
+0×028 bHasMeun : Pos 0, 1 Bit
+0×028 bHasVerticalScrollbar : Pos 1, 1 Bit

Or misprint in address space layout table (\ntos\mm\amd64\miamd.h):
FFFF080000000000 | Start of System space | MM_SYSTEM_RANGE_START

Here, author of original layout probably meant “FFFF800000000000″, since for virtual address to be regarded as Canonical, its bits 63..48 shall be sign-extension of bit 47 – but back in the day that erratum slipped through and its results are still there, in w7 kernel:

lkd> dp MmSystemRangeStart l1
fffff800`02aa90e0 ffff0800`00000000
(Althought there might actually be some valid reason for this value – we don’t really know).

]]> Comment on Mod N Reading System by Crash Dump Analysis » Blog Archive » Mod N Reading Now (Part 1) http://www.softwaregeneralist.com/2009/11/17/mod-n-reading-system/#comment-712 Crash Dump Analysis » Blog Archive » Mod N Reading Now (Part 1) Sun, 21 Mar 2010 01:22:20 +0000 http://www.softwaregeneralist.com/?p=90#comment-712 [...] I’m Reading Now” but then decided to show it as another satisfying example of my Mod N Reading technique. During my 7 years in memory dump analysis captivity I didn’t pay much attention to [...] […] I’m Reading Now” but then decided to show it as another satisfying example of my Mod N Reading technique. During my 7 years in memory dump analysis captivity I didn’t pay much attention to […]

]]> Comment on Reading Notebook: 25-November-09 by Dmitry Vostokov http://www.softwaregeneralist.com/2009/11/25/reading-notebook-25-november-09/#comment-699 Dmitry Vostokov Thu, 18 Mar 2010 11:01:54 +0000 http://www.softwaregeneralist.com/?p=92#comment-699 Windows Server 2008 Windows Server 2008

]]> Comment on Reading Notebook: 25-November-09 by Martin Rakhmanov http://www.softwaregeneralist.com/2009/11/25/reading-notebook-25-november-09/#comment-695 Martin Rakhmanov Tue, 16 Mar 2010 20:29:02 +0000 http://www.softwaregeneralist.com/?p=92#comment-695 "Viewing services inside processes (pp. 315 - 316) - We can also see them in Task Manager when we sort Processes by PID" Which OS is that? “Viewing services inside processes (pp. 315 - 316) - We can also see them in Task Manager when we sort Processes by PID”

Which OS is that?

]]> Comment on Mod N Reading System by Crash Dump Analysis » Blog Archive » Memorianic Ritual: Lunch with Books http://www.softwaregeneralist.com/2009/11/17/mod-n-reading-system/#comment-638 Crash Dump Analysis » Blog Archive » Memorianic Ritual: Lunch with Books Wed, 13 Jan 2010 15:12:07 +0000 http://www.softwaregeneralist.com/?p=90#comment-638 [...] for combining lunches with book and  magazine (a mini-book) reading (also combined with Mod N reading system). From now on this activity obtains the status of a ritual in Memorianity and depicted on this [...] […] for combining lunches with book and  magazine (a mini-book) reading (also combined with Mod N reading system). From now on this activity obtains the status of a ritual in Memorianity and depicted on this […]

]]>