windbg

Visual Studio Integrated Web Server error without elevation

Hi all, I have asp.net project in Visual Studio running in Windows Vista with UAC activated in standar user (not elevated). When I try to run my asp.net project inside Visual Studio Web Server, the process hang and start using so much CPU. If i run Visual Studio elevated It's works perfectly. Here is what the process is doing. It's ...

How do I determine which are the foreground .NET threads from WinDBG ?

How do I determine which are the foreground .NET threads from WinDBG ? Using the !threads command the SOS extenstion tells us the count of the foreground threads but not which ones. ...

What does the windbg command "kd" do?

I ran kd by mistake and got some output that inteerested me, a reference to a line of code in my module that I can't see on the call stack of any thread. The lines weren't the beginnning of the method so I don't think the reference is to a function pointer, but possibly the result of an exception being stored in memory??? Of course, that...

Help catching StackOverflowException with WinDbg and ADPlus

Short Version I want an ADPlus script that will do a full memory dump on the first-chance StackOverflowException, before anything is cleaned up, and ignore all other exception types. Log Version After a release of new ASP.NET code, we started getting intermittent StackOverflowExceptions. We've looked for infinite recursions and all t...

How to see managed exception details in WinDBG?

VS2005 C# Compiler crashes during our team's nightly build process. I attach to it with WinDBG, load SOS extensions, print the callstack, but cannot see exception info. I tried !PrintException, as follows: 0:000> !PrintException There is no current managed exception on this thread Here's the top of callstack: 0:000> !...

How to get VBScript and ASP Symbol Files

Many Windows system files are available from Microsoft through a download page or http path. My WinDbg can't find the symbol files for VBScript.dll and ASP.dll and I can't seem to find them on the Internet. The VBScript.dll on the server is 5.6.0.8835 and the ASP.dll is 6.0.3790.4195. Both have younger file dates than their symbol fil...

windbg dump command fails with error 0x8007012b

A customer is attempting to capture a minidump of a hang. He fires up WindDbg and successfully attaches to the process. WinDbg displays its header: Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. and the loaded modules are enumerated. He enters a dump command: .d...

I'm looking for links to cdb/windbg + .net help.

I just started using cdb and I love it! I've found and bookmarked a few interesting articles I've found on using cdb, but I'd love to see other peoples resources. What sites do you use to extract the max usefulness from cdb (windbg) ...

Is my heap fragmented

0:000> !dumpheap -stat total 1755874 objects Statistics: MT Count TotalSize Class Name 7b9b0c64 1 12 System.Windows.Forms.Layout.TableLayout+ColumnSpanComparer .... 7933303c 14006 4926456 System.Collections.Hashtable+bucket[] 65246e00 804 4982192 System.Data.RBTree`1+Node[[System.Int32, mscorlib]]...

Symbols (pdb) for native dll are not loaded due to post build step

I have a native release dll that is built with symbols. There is a post build step that modifies the dll. The post build step does some compression and probably appends some data. The pdb file is still valid however neither WinDbg nor Visual Studio 2008 will load the symbols for the dll after the post build step. What bits in either ...

.Net Memory Dump: !eeheap -gc: where do the GC generations start and end?

I think I'm missing some fundamentals here so hopefully this post can clarify this. I've taken a dump and am looking at the managed heap and am interested in looking specifically at what objects are within each heap. Here is the output from the debugger: 0:000> !eeheap -gc Number of GC Heaps: 1 generation 0 starts at 0x3cca447c generat...

Use Windbg find argumet passed to a COM+ method

Generated a debug diagnostic dump file for a COM+ application. Upon analysis look like threads deadlocks at line OLE32!SwitchSTA. My symbol path is pointing to msdl.microsoft.com/download/symbols. Is there way to know what arguments were passed to this method? In general, how does one use Windbg to find the input argument value to the m...

windbg disassemble function command (uf) need some formatting

Hi I did a uf command in windbg after attaching notepad.exe Command was uf notepad!WinMain i got the following output 0:000> uf notepad!WinMain notepad!WinMain: 0021138d mov edi,edi 0021138f push ebp 00211390 mov ebp,esp 00211392 sub esp,1Ch 00211395 push esi 00211396 push edi 00211397 push 6 002113c8 test eax...

How can I find the data structure that represents mine layout of Minesweeper in memory?

I'm trying to learn about reverse engineering, using Minesweeper as a sample application. I've found this MSDN article on a simple WinDbg command that reveals all the mines but it is old, is not explained in any detail and really isn't what I'm looking for. I have IDA Pro disassembler and the WinDbg debugger and I've loaded winmine.exe...

does user.dmp contain only the most recent crash

Hi, I wanted to know if the "user.dmp" created by drwtsn32 has only the most recent crash. I tried to capture a few crashes. But when i tried to analyse it, I just see one crash. Thanks for the help, Arun ...

How to attach to a already running process noninvasively

I have a process suspended at breakpoint under visual studio debugger. I can attach as many as cdb (Microsoft's console debugger) in non-invasive mode as cdb -p pid -pvr How to achieve the same using my own program which uses Debug Engine API. IDebugClient* debugClient = 0; (DebugCreate( __uuidof(IDebugClient), (void **)&debugCli...

_NT_SYMBOL_PATH format

I'm trying to use windbg more, and I keep having problems with the symbol cache. It isn't clear to me what the format of the string is supposed to be. I have a few requirements: use Microsoft's server http://msdl.microsoft.com/download/symbols use symbols from our software that are archived at \\foo\Build1234 use a local cache at c:\d...

Help needed for DIA SDK & DbgEng

Hi everyone, Are DIA SDK & DbgEng (Not the DbgHelp) both COM based API and based on DbgHelp? If so, how can I call DbgEng API from a C# application. I can import the DIA library to C# project using idl file (tlibimp for generated tlib file), but DbgEng doesn't have any IDL file. I have seen an incomplete wrapper for DbgEng which man...

Diagnosing an app that fails to halt

Our Windows app is often hanging in memory and I'm trying to use windbg to track down the problem. I'm very new to windbg and could use some advice (I have started to read Advanced Windows Debugging though). The app is a mix of C++ and COM objects written in VB. Occasionally when you exit, the app appears to go away but task manager sho...

Breakpoint on api exposed from COM interface.

Lets say thers is one interface interface Ifoo { HRESULT foo(); }; which is part of a binary dll. I dont have source code for this. Can I put a breakpoint on foo() API exposed from the interface Ifoo of this binary dll using Windbg? I know we can put breakpoints on binary dll's using windbg but using COM I am not sure. ...