Tag
Raymond Chen explains how he identified CcNamespace.dll as the key DLL in a chain of prematurely unloaded DLLs by analyzing the debugger's unloaded DLL list and noting naming patterns and order.
A technical blog post by Raymond Chen investigating a memory corruption bug where a single byte 0x01 corrupts HMODULE handles, causing DLLs to be improperly freed and leading to crashes at process termination.
A bug in the Windows debugging engine for x86-64 incorrectly reported the parity flag, going unnoticed for over two decades, highlighting how rarely the flag is debugged.