Welcome to MSDN Blogs Sign in | Join | Help

Browse by Tags

All Tags » Exceptions   (RSS)

Special Command—Unassembling code with u, ub and uf

When debugging sooner or later you will need to disassemble code to get a better understanding of that code. By disassembling the code, you get the mnemonics translated from the 0s and 1s that constitute the binary code. It is a low level view of the Read More...
Posted Thursday, November 05, 2009 9:27 PM by Roberto Farah | 2 Comments

Special Command—Using .dump/.dumpcab to Get Dumps and Symbols from Production Servers

Using WinDbg you can create a dump file from an application running, for instance, in a production server. After collecting the dump file, you can load it in another machine and debug it. However, to be more effective during your debugging session you Read More...
Posted Wednesday, September 16, 2009 12:55 AM by Roberto Farah | 3 Comments

[PowerShell Script] Statistics from .NET Applications

This script is more a template to show you how to use PowerDbg. I must say the idea is from my teammate Aaron Barth! This script collects information from all threads running managed code and gives the user statistics by threads like: - CLR stack. - Managed Read More...
Posted Wednesday, April 15, 2009 6:52 AM by Roberto Farah | 1 Comments

[PowerShell Script] PowerDbg v5.1—Using PowerShell to Control WinDbg

So, here we go again. This is a minor version with a few new cmdlets. These new cmdlets are those that we use most of the time. DOWNLOAD POWERDBG Download PowerDbg POWERDBG FILES WinDbg.PSM1 ß Contains cmdlets used to communicate with WinDbg . Microsoft.PowerShell_Profile. Read More...
Posted Thursday, March 19, 2009 7:28 PM by Roberto Farah | 3 Comments

Special Command—Parsing Commands Using .shell

Finally I’m writing about this command. I love it! It’s so powerful! .shell command launches a shell process and redirects its output to the debugger or to a specified file. Usage: .shell [ Options ] [ ShellCommand ] .shell -i InFile [ -o OutFile [ -e Read More...
Posted Thursday, February 19, 2009 8:51 PM by Roberto Farah | 1 Comments

[PowerShell Script] PowerDbg v5.0—Using PowerShell to Control WinDbg

I’m very excited to present the new PowerDbg v5.0! There’s just one change, but it’s a HUGE change that makes PowerDbg extremely fast and easier to use. Let me explain: Send-PowerDbgCommand is the heart of PowerDbg . This is the cmdlet that sends information Read More...
Posted Wednesday, February 04, 2009 3:38 AM by Roberto Farah | 1 Comments

[PowerShell Script] PowerDbg v4.0 - Using PowerShell to Control WinDbg

Good news! Here’s the newest PowerDbg library. This version is more stable and has more features. Let me tell you about them and how to install it. New Features - Send-PowerDbgCTRL-BREAK / Send-PowerDbgResumeExecution If you’re wondering why do you need Read More...
Posted Friday, August 15, 2008 12:14 AM by Roberto Farah | 3 Comments

[PowerShell Script] Displaying the Top 5 Exceptions and Up to 5 Different Call Stacks For Each Exception

During a lab I had about a month ago, one of my colleagues, Tag, whom I had opportunity to mention in a previous post, asked me if I could create a PowerShell script that displays statistics of exceptions, with call stacks included. For me it sounded Read More...
Posted Monday, April 14, 2008 11:35 PM by Roberto Farah | 9 Comments

[PowerShell Script] PowerDbg v3.1 - Using PowerShell to Control WinDbg

This new version has one more parser for !PrintException and a killer feature that my colleagues and myself have wanted since the beginning: PowerDbg, more specifically Send-PowerDbgCommand , which now has the ability to wait until a command finished Read More...
Posted Friday, April 04, 2008 8:17 AM by Roberto Farah | 5 Comments

Special Command: Using s to Explore The Memory

Very often I found myself scanning the stack or the entire virtual memory for the process to find information that may help me. This information may be strings, DWORDS, bytes, chars, etc… To accomplish this you should use the s command. Here I exemplify Read More...
Posted Tuesday, March 11, 2008 5:58 PM by Roberto Farah | 1 Comments

[PowerShell Script] Displaying the Call Stack for Inner and Hidden Exceptions

This script automates a technique I’ve been using for a long time whenever I need to see the stack for exceptions hidden in a call stack and if you are like me, you prefer to use an automated approach rather than a manual approach. I’m not going to write Read More...
Posted Tuesday, January 15, 2008 11:14 PM by Roberto Farah | 7 Comments
 
Page view tracker