Winternals
First pre-con session is Winternals from Mark & David @ sysinternals. They will hopefully present those sysinternals tools that I’m not used to use and ways I didn’t use them before.
For example I heard about:
* local kernel debugging with /debug windows, and windbg ctrl+K/local
* LiveKD - gives the opportunity to debug a local kernel as a crash dump, gives better accessibility to some functionality, that normal local kernel debugging doesn’t allow; like full call stack
* They just argued about whether the fake dump file exists, or not ![]()
* And we could see some x64/Itanium secrets about addresses, memories, etc.
* Many information about 32bit/64 bit things. Like 32 bit dlls are in the folder syswow64. And 64 bit dlls are in the system32 folder. Easy :S:S:S
* Vista won’t have uniprocessor kernel - that means something…
* Checked builds are multiprocessor builds - didn’t know this…
* DebugView can be used to capture kernel debug messages when in checked build
* And many more small infos

