Welcome to MSDN Blogs Sign in | Join | Help

Browse by Tags

All Tags » Windbg Scripts   (RSS)

[WinDbg Script] Displaying Queries/Stored Procedures from Threads Running Managed Code

There’s another script that gives you all queries/stored procedures from SQL Server or Oracle that are stored in the managed heap. This script is more specific because it gives you the query/stored procedure running in a specific thread. It has the option Read More...
Posted Sunday, February 01, 2009 7:18 PM by Roberto Farah | 2 Comments

Special Command—Advanced Programming Techniques for WinDbg Scripts

It has been a long time since my last post, but I’m back on the blog. The article for today is about the black art of WinDbg scripting. When I first started creating my scripts, I learned by trial and error. It was tough; however, it gave me the basis Read More...
Posted Saturday, January 31, 2009 5:32 AM by Roberto Farah | 1 Comments

[Windbg Script] Disassembling Routines and Searching for Instructions

Sometimes you cannot avoid reading the disassembled code to look for a specific assembly instruction. You may want to see if a particular function is doing some specific operation, using some specific register, or calling other functions. You can do that Read More...
Posted Friday, July 20, 2007 9:45 PM by Roberto Farah | 4 Comments

[Windbg Script] Saving a Module - Extracting Base Address and Image Name from a method call

After creating this script, I have used it in almost every case that requires decompilation, and I guess you are going to use it, too. This script gives you the base address and module name, so you can use !SaveModule from SOS to save the module. Ok… Read More...
Posted Monday, July 02, 2007 7:12 PM by Roberto Farah | 5 Comments
Filed under: ,

[Windbg Script] Serviced Components

A few days ago a friend of mine, Fabrício Catae, a SQL Server Ranger here at Microsoft, gave me an idea: to create a script that shows if Serviced Components are or are not disposed. I thought it was a great idea, so I decided to create a script for it. Read More...
Posted Monday, June 04, 2007 10:24 PM by Roberto Farah | 3 Comments

[Windbg Script] Disabling IsDebuggerPresent()

Years ago I needed to debug an application that just had the binary code with no symbols or source code. To make things even more difficult, I found out the application had some kind of anti-debugger protection. After analyzing the dead listing of the Read More...
Posted Wednesday, May 23, 2007 6:42 PM by Roberto Farah | 5 Comments

[Windbg Script] Get Portable Executable Headers

There are several tools you can use to read the image headers, like Dumpbin.exe and Link.exe, for instance. You can, however, also use Windbg for doing that! In other words, during your debugging session you can see the header from an image file without Read More...
Posted Thursday, May 03, 2007 8:59 PM by Roberto Farah | 10 Comments

[Windbg Script] Tracing MessageBox calls

In the past I worked on a support case where I needed to find out if some MessageBox from a C++ application was displayed and, if positive, what the message was. I got inconsistent answers whenever I asked the user, so I didn’t know if the MessageBox Read More...
Posted Friday, April 27, 2007 2:24 AM by Roberto Farah | 0 Comments

[Windbg Script] Extracting Performance Monitor counters from .NET application

Have you ever had a situation where you find yourself debugging a dump from ASP.NET when suddenly you notice you forgot to get the Performance Monitor log? If sometimes you face this situation, I have great news for you: this script shows you some of Read More...
Posted Thursday, April 19, 2007 2:34 AM by Roberto Farah | 21 Comments

[Windbg Script] Tracing API calls

This is a very simple script, yet powerful script. You can use it to see the APIs an application is using from your Windbg screen without using another tool. If you need more details from the APIs, just execute LogViewer.exe and open the .lgv file that Read More...
Posted Saturday, April 14, 2007 2:53 AM by Roberto Farah | 28 Comments
Filed under: ,

[Windbg Script] Playing with Notepad

This is one of my “just for fun” scripts. It’s very simple and has some limitations, but it’s fun! What does it do? Open Notepad.exe then copy and paste a text on it or just write some stuff. After that, open the script and replace the StringsToFind and Read More...
Posted Wednesday, April 11, 2007 12:58 AM by Roberto Farah | 3 Comments

[Windbg Script] Retrieving queries/stored procedures from .NET application

Ok, you are debugging a .NET application. You need to find out the queries and stored procedures being executed from the threads accessing the database, but you don’t know how. . . Good news! It’s not a problem anymore! This script shows you all the queries Read More...
Posted Wednesday, April 04, 2007 7:52 PM by Roberto Farah | 9 Comments

[Windbg Script] Connections from Pool

If you are like me, you may forget the classes and namespaces you need to find out some specific information. Or maybe you forget the field names you need to look for. It happens to me when I need to take a peek at information from System.Data.SqlClient Read More...
Posted Saturday, March 31, 2007 12:39 AM by Roberto Farah | 12 Comments

[Windbg Script] Playing with Minesweeper

First, this script is not really about cheating. It does that with Minesweeper, but there are several other possibilities using a bit more bytes that do a better job to fool the application. However, the point here is to show you how powerful the debugger Read More...
Posted Wednesday, March 28, 2007 2:33 AM by Roberto Farah | 17 Comments

[Windbg Script] Retrieving information from ASP

Have you ever had this situation: You need to get ASP information from an IIS process? If yes, you can use the DebugDiag tool to analyze your dump file. Oh, I see… sometimes you use DebugDiag, but you need to manually debug the dump/application to get Read More...
Posted Thursday, March 22, 2007 2:16 AM by Roberto Farah | 3 Comments
Filed under: ,
More Posts Next page »
 
Page view tracker