windbg

I downloaded the symbols from http://www.microsoft.com/whdc/devtools/debugging/symbolpkg.mspx the package (Windows 7 RTM x86 retail symbols, all languages) but it still gives me the same error! Done .sympath but still not working .sympath C:\inetpub\wwwroot\ProductsService\bin\ProductsEntityModel.pdb;srv c:\Symbols http://msdl.microsoft.com/download/symbols Microsoft (R) Windows Debugger Version 6.12.0002.633 X86 Copyright (c) Microsoft Corporation. All rights reserved. Microsoft (R) Windows Debugger Version 6.12.0002.633 X86 Copyright (c) Microsoft Corporation. All rights reserved.

I'm trying to use windbg more, and I keep having problems with the symbol cache. It isn't clear to me what the format of the string is supposed to be. I have a few requirements: use Microsoft's server http://msdl.microsoft.com/download/symbols use symbols from our software that are archived at \\foo\Build1234 use a local cache at c:\dev\symbols The archive of symbols from our distributed build at \\foo\Build1234 are not organized as a symbol server. If I understand it correctly, I need to use the cache keyword. Given these requirements, does this look like a properly formatted srvpath: cache*\

As mentioned in this other question , I'd like to start Windbg , open a dump, and launch some commands ( .load pykd.pyd and !py heap_stat.py ). I thought this would be easy, but even starting Windbg and open a crash dump seems not that easy, as you can see from following unsuccessful examples: Prompt>windbg.exe /? Prompt>windbg.exe --help Prompt>windbg.exe E:\Bugs\program.exe_181212_215503.dmp Prompt>windbg.exe -D E:\Bugs\program.exe_181212_215503.dmp Prompt>windbg.exe -zertyuiopqsdfghjklwxcvbn Prompt>windbg.exe -help Prompt>windbg.exe help The idea is to get something like: Prompt>windbg.exe

I'm trying to learn about reverse engineering, using Minesweeper as a sample application. I've found this MSDN article on a simple WinDbg command that reveals all the mines but it is old, is not explained in any detail and really isn't what I'm looking for. I have IDA Pro disassembler and the WinDbg debugger and I've loaded winmine.exe into both of them. Can someone provide some practical tips for either of these programs in terms of finding the location of the data structure that represents the mine field? In WinDbg I can set breakpoints, but it is difficult for me to imagine at what point to

I have come to realize that Windbg is a very powerful debugger for the Windows platform & I learn something new about it once in a while. Can fellow Windbg users share some of their mad skills? ps: I am not looking for a nifty command, those can be found in the documentation. How about sharing tips on doing something that one couldn't otherwise imagine could be done with windbg? e.g. Some way to generate statistics about memory allocations when a process is run under windbg. Kris Kumler My favorite is the command .cmdtree <file> (undocumented, but referenced in previous release notes). This

I have a tough scenario I'm trying to debug... On a web forms page, when I click submit, the web server hits some error and restarts the w3svc process. I do not see any stack trace dumped to the event log. The only entry in the Windows Application Log is: Faulting application name: w3wp.exe, version: 7.5.7600.16385, time stamp: 0x4a5bd0eb Faulting module name: KERNELBASE.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdfe0 Exception code: 0xe053534f There is no mini dump created for me to attach windbg to... Any ideas how to debug my issue? I suspect that you make a loop call like public