Archive for January, 2009

Offline domain join is a new process that joins computers running Windows® 7 or Windows Server 2008 R2 to a domain in Active Directory Domain Services (AD DS)—without any network connectivity. This process includes a new command-line tool, Djoin.exe, which you can use to complete an offline domain join. Run Djoin.exe to provision the computer  [ Read More ]

If you’re generating a Microsoft Crash Dump file under Windows Seven you might noticied that DirectoryTableBase field in the crash dump header is set to zero. The reason is the current version of win32dd choosed to retrieve cr3 register through the PROCESSOR_STATE structure stored into KPRCB. But since KPRCB had been updated in Windows 7  [ Read More ]

Update: win32dd 1.2.1

January - 6 - 2009
Posted by Matthieu Suiche

First of all problem reported and explained in my previous blogpost regarding multi-processors computers and Microsoft crash dump generation is fixed. The limitation had been raised from 1 to 32 processors. KeQueryActiveProcessorCount() API only exist in Vista and later version of Windows, that’s why I wrote xxxKeQueryActiveProcessorCount in driver/private/ke.c because compatibility matter. By the way,  [ Read More ]

Multi-Processors and KdVersionBlock

January - 5 - 2009
Posted by Matthieu Suiche

Tomorrow, I’ll publish a bugfix for win32dd about the following problem: on multi-processors computers a BSOD occurs when user try to generate a Microsoft Crash dump file through the -d option. The problem is located inside KdGetDebuggerDataBlock function, when the function try to read KdVersionBlock field an invalid pointer is returned because this field is  [ Read More ]

Hey people ! Happy new year from a lazy man 2.0 :-)

January - 2 - 2009
Posted by Matthieu Suiche

I was looking for the shortest way to wish to people I know happy new year for 2009. Here is a flowchart to explain what’s going on just after I press the “Publish” wordpress button. As you can see I use WordPress, Twitter, and Facebook technology — that’s pretty useless but that’s funny :-) Update  [ Read More ]

Sponsors