chentiangemalc

Maybe on Windows 11 you are having issues like Notepad won’t launch This is how you can replicate a classic style notepad as a PowerShell script, which you can then modify to add your desired features.

It can be useful to dump the complete string of printf or similar style variable argument functions in WinDbg.

Generally, my go-to debugging technique is Time Travel Tracing (TTD.exe).

Sometimes I’m working in environments where I can’t copy in any tools for troubleshooting and sometimes simply analyzing the strings in an .EXE gives many useful clues to how it works.

Here is a script I wrote experimenting with resolving API Set function calls to on disk module/function/offset. <# .SYNOPSIS This script resolves an API set and API name to a specific module and function name. .DESCRIPTION This script uses the Na…

Replicating the behavior of classic command line tool tree in PowerShell.

An issue you will likely come across if debugging VB6 apps with the inbuilt VB6 runtime built into Windows 8+ is that symbols don’t seem to be available via the Microsoft Symbol Server.

Trying to create a DART recovery image, got the message during the installation from Microsoft Desktop Optimization Pack 2015 running installer from \DaRT\DaRT 10\Installers\en-us\x64\MSDart100.msi However, the latest Windows ADK + Windows PE ADK component

First you will need to download PDF Sharp and build with Visual Studio the solution “BuildAll-PdfSharp.sln” and then obtaining the output PdfSharp.dll and placing in same directory as script.

Previously we looked at removing Office Macro Passwords with PowerShell here.