Friday 12 September 2014

WinDbg Commands and Extensions - SwishDbgExt Library

The SwishDbgExt library contains a number of interesting extensions which are imperative for deep debugging results. The SwishDbgExt library was written by Matt Suiche.

Note: If you wish to use the ProcDumpExt DLL for WinDbg, and also view the help information for the extensions provided in SwishDbgExt, then you'll need to unload ProcDumpExt first since ProcDumpExt will overload the !help extension with it's own version. You can simply load ProcDumpExt again afterwards. Alternatively, if you do not wish to unload the ProcDumpExt DLL, then simply use the longhand method of !SwishDbgExt.help <SwishDbgExt Extension>.

You must also omit the exclamation mark (!) from the extension name, otherwise the !help extension will not work.

Note: You can use the .chain command to check if you have the ProcDumpExt DLL loaded or not. The .chain command will dump all loaded DLLs for the dump file.

The available extensions from the DLL can be found by using the !SwishDbgExt.help extension without any extensions added.


I will provide a quick overview for the extensions which can be used with SwishDbgExt.

!ms_drivers:

The !ms_drivers extension is basically the same as the lm or lmnst command. There are some additional parameters you can add to the !ms_drivers extension to spice up the command. 


The !ms_drivers /scan extension can be used to find drivers using IRP Hooking.

IRP Hooking involves a hook within the array stored within the DRIVER_OBJECT structure, this array or table of IRP_MJ_ functions is hooked and the code responsible for the IRP is redirected to malicious code. Please note hooking is used for legitimate processes such as debugging and patch releases.

!ms_gdt

The !ms_gdt extension can be used to view the GDT and LDT within the GDT. The GDT is public for all processes, whereas, the LDT is designed to be private for a specific process.



!ms_ssdt

The !ms_ssdt extension will dump the SSDT and if any functions have been patched or hooked. Remember that hooking the SSDT is used by legitimate programs, and most modern rootkits tend to do not use this method anymore.


!ms_idt

The !ms_idt extension is the same as the traditional !idt extension but with the added feature of detecting hooks within the dump file.


!ms_timers



I wouldn't consider the !ms_timers as a replacement for !timer, however, it is a great extension for being used to conjunction with the WinDbg !timer extension. The !ms_timers can detect hooking within the _KTIMER_TABLE.



70 comments:

  1. Thanks for sharing such a wonderful post. My all doubts related to online Assignment Help services are cleared.
    Assignment Help Online
    Online Assignment Help
    Assignment Help Online Services

    ReplyDelete
  2. Students can take assignment help UK instantly when they need by 24*7 on StudentsAssignmentHelp.com in the UK. Here you can get unique and on-time delivery of your assignments under the guidance of experts.

    ReplyDelete

  3. Thank you for sharing this informative post.MyAssignmenthelp.co.uk is giving assignment help to students.we are already trusted by thousands of students who struggle to write their academic papers and also by those students who simply want project management Writing Help .to save their time and make life easy.

    ReplyDelete
  4. This is a great article and great read for me. It's my first visit to your blog, and I have found it so useful and informative especially this article.
    Assignment Help Sydney

    ReplyDelete
  5. Thanks for sharing the great information. I read the content and it is really useful. I was looking for the right information.MyAssignmenthelp.com is giving assignment help to students.we are already trusted by thousands of students who struggle to write their academic papers and also by those students who simply want psychology dissertation to save their time and make life easy.

    ReplyDelete
  6. Excellent information Providing by your Article, thank you for taking the time to share with us such a nice article. Amazing insight you have on this, it's nice to find a website that details so much information about different artists. Kindly visit livewebtutors website we providing the best assignment help services in Australia.
    Read more now :- online Assignment Help

    ReplyDelete
  7. Thank you for this wonderful information looking forward for more. We are Providing the best quality assignment help. You will find out online Assignment Help service on firstassignmenthelp. And these services are very reliable, and they can provide information about any topic related to the academics. If you need any college level Assignment Help at reliable quality with better work. Kindly visit our website firstassignmenthelp.

    ReplyDelete
  8. Hello Friends, I am Johnson, I am a Dissertation Writer. Dissertation Editing Services reviews are our very first step in determinative the quality of content. Writing quality essays is that the principal use of our services. Finding professional editing services has never been easier.

    ReplyDelete
  9. Hi, this is a nice blog thanks for sharing the Informative blog. Myassignmenthelp.com provide the IKEA case study for a assist to student queries. Our writers conduct thorough research to provide you with a flawless IKEA case study. My Assignment help brings Microsoft case study online .Writing an elaborate Microsoft case study online is anything but easy and most students lack the tenacity to work on the details accurately. If you get the more details Please visit the site through Link.

    ReplyDelete
  10. Are you too busy that you don’t have the time to complete your homework? Or your homework is difficult to do easy? Whatever be the reason, we are here to help your homework. We ensure the timely completion of your homework that even at affordable rates. Be it any subject, we provide service to every type of homework. So, your HomeWork Help provider is just a few clicks away from you. Only you have to click on our site and contact us. Our professionals would understand your homework and complete it within the time limit.

    ReplyDelete
  11. Very informative and well written post! Quite interesting and nice topic chosen for the post. My Assignment Help Au has been a pioneer within the Best Assignment writing services on-line services and within the Australia and different countries ceaselessly for over Seven years. Make an order now for professional work, delivered on time and pure.

    ReplyDelete
  12. My friend promised to buy me a cup of coffee for referring him to your site. Thank you for coffee. Kindly keep updating us on new articles. Looking for water heaters reviews, best brands, and models? then you have landed at the right place. Heating water has its struggles especially if you are using the wrong heaters. Visit Best Hot Water Heater for more.

    ReplyDelete
  13. ABC Assignment help is ready to provide best physics assignment help for those students, who have trust on our assignment help due to our amazing features like, plagiarism free content, after sales service, 24*7 support and error free papers, etc.

    ReplyDelete
  14. Awesome blog and superb content. It's really meaningful content, I appreciate your work. Like you, I am also here for the information about HP Support. The printer is an essential and very useful product nowadays, so before using a printer, you should have information about the printer. We are here for support, so for info, visit our webpage or for support contact our experts from our HP Printer Support Number. We are here to help, so never hesitate to contact us.
    You may also click given keywords for more information.
    HP Printer Help,
    HP Printer Support,
    HP Support Number,
    HP Printer Customer Service,
    HP Technical Support Number,
    How do I troubleshoot my HP printer?,
    Does HP have a customer service number?,
    Where is HP Support Assistant?
    Thank You

    ReplyDelete
  15. Hi, I am stella brown I am reading your blog, It is amazing blog thanks for the sharing the blog. Allassignmentservices.com provide the Business Logistics Assignment Help such as a information about education for students queries. allassignmentservices also provide the biochemical Assignment Writing Service. Students from different walks of life can afford our assignment help services as we are affordable. Moreover, our team of academic writers is highly efficient at their work.

    ReplyDelete
  16. It’s a very attractive article thank you for sharing. A Statement of Purpose (SOP) is an application document that basically tells the reader who you are, your professional interests, what has influenced your career as well as your professional goals. The SOP gives you a platform to talk directly to the admissions committee. In other words, a statement of purpose gives you an opportunity to convince the admission committee that you are the right candidate among many qualified applicants. Learn more from SOP Writing Services .

    ReplyDelete
  17. This is article elaborate all that a person can be looking for. Thank you. A lifting belt is an essential tool if you’re planning to go far in the powerlifting world. However, finding the best powerlifting is a wish we all have. But with the number of powerlifting belts on the market, it is quite difficult to decide what product to buy. Learn more on Best Powerlifting Belts .

    ReplyDelete
  18. How lucky to find your article after turning internet upside down. An article critique is an assignment that requires a student to critically read a research article and reflect upon it. The key task is to identify the strong and weak sides of the piece and assess how well the author interprets its sources. Simply put, a critique reflects upon the validity and effectiveness of the arguments the article’s author used in his or her work. Article Critique Help is here for you.

    ReplyDelete
  19. Hey there! You have a nice blog and great article, allow me to say that a weightlifting is a form of physical activity that involves hoisting a barbell at a certain height while maintaining a proper form. The goal of this activity is to develop the musculature and improve a person’s overall fitness. For most people, weight training gets done wearing whatever footwear is at their disposal, be it their regular running shoes or gym footgear and sometimes even their casual sneakers. For the most part, these pairs would suffice for those who are still on the fence about the activity or those who train with very light weights. Read more on Best Weightlifting Shoes .

    ReplyDelete
  20. I have bookmarked your site for future reference. Good work. Most of the students come up to us for capsim homework help and always return satisfied. Our main purpose is to help you gain the best grades through your paper. We don’t have any concern with the reason behind asking for help; our main aim is delivering you the best capsim homework help. Captive simulation is named as capsim that is basically designed to teach students the different functional elements and the linking of decision and operational results. Moreover, it also develops the strong skills and commitments in the students to ensure academic and professional life success. Go ahead and reach out to us for Capsim Assignment help

    ReplyDelete
  21. I couldn’t ignore the art of writing you have to ensure you deliver the best. If you are a student working on a paper that requires data analysis such as a statistical research project or a dissertation on the location of features and boundaries around the earth, the major challenge you are likely to face is getting a better understanding of the data and materials that you’ve gathered. Go ahead and reach out to us for Dissertation Data Analysis Help

    ReplyDelete
  22. I love the way you put your points. Thank you. Did you know that the first law of thermodynamics is that energy cannot be created or destroyed?. While this law is always true, energy can be transformed from one type to another. Heat can be changed into kinetic (moving) or latent/potential (stored) energy. Thermodynamics uses P-V-T (pressure, volume, and temperature) diagrams to model these transformations. Get Thermodynamics Help

    ReplyDelete
  23. This post is not just informative but impressive also. The post is so persuasive that it created an urge to choose mobile app development company. You can email us at sales@appsquadz.com or Phone Number: +91- 9717270746.

    ReplyDelete
  24. This might lead to some considerations of how future architectures might be designed so that software is self-configurable, and then even perhaps self-optimizing.hire an essay writer

    ReplyDelete
  25. I’ve enjoyed reading through your article. This is a great post. Before you know it, you’ve run out of all of the time. At that point, the project becomes some sort of an emergency. That’s when finding some DNP capstone project help starts feeling conceivable. This page presents a few tips to help you successfully manage the DNP project writing process. Read more on DNP Capstone Project Writing Help .

    ReplyDelete
  26. Our experts have the knowledge, skills, and experience to help college and university students with their research papers, essays, case studies and Thesis projects. Looking for My Assignment Help or need Urgent Assignment Help? then look no further and avail our assignment help sydney service which offers the best assignment writing services in Australia.

    ReplyDelete
  27. How to Write an Essay are a focused piece of writing which develops a narrative or argument based on analysis, evidence and interpretation. Essays are of different types such as argumentative, expository, descriptive, critical, narrative and many others which a student comes across.

    ReplyDelete
  28. Experts from our thesis writing service experts in USA will make a profound jump into research and fill each part of your future paper with very much custom fitted content.

    ReplyDelete
  29. Our Homework Help writers have experience in writing assignments for students across the United States and understand the necessities of the professors. This way, we guarantee that you will get the best marks by submitting other assignments without any hassle. So get ready to improve your overall results with our exclusive writing services in the United States. Also, look out for our additional deals and discounts that we mention on our website.

    Read More Blog : https://bit.ly/3pHVmZ8

    ReplyDelete
  30. Gotoassignmenthelp is team of leading professional writers for Assignment Assistance Writing Services to students all around the world. Contact us today for Best University Assignment Help at very affordable price. Under GotoAssignmentHelp we provide many types of help to the students. We are the most reliable assignment helpers. We have gained our specialization after spending most of our times in making ourselves perfect. We providing 100% plagiarism free Assignment Help. At the point when you pick our Do my assignment assistance, our faculty will consider the quality and your evaluation criteria.

    ReplyDelete
  31. Get your dream watch at the bets price in India. Everyone desires to have luxury watches but due to budget issue, we can’t afford premium watches. But now you can get the premium Replica watches in mumbai at the best price with complete customer satisfaction. We believe in 100% quality and customer satisfaction. Our main motive is to provide the top end premium watches at the best price. Get the Replica Patek Phillipe watches in India at the best price.

    ReplyDelete
  32. Thank you so much for such a quality article. Students seeking Nursing assignment help from us can rest assured as we only deliver them with assignments made followed by intensive research-based paper. Our in-house Nursing assignment help writers never fall short to research across online, offline, and updated sources of information to support the claims made in the assignment. Now you can get Buy Nursing Assignments

    ReplyDelete
  33. It is really helpful for readers who are looking for online assignment help. I also work in the same area and provide assignment help to students for various subjects. Most of my students are from parts of the UK, USA, India, and Singapore. Our team of professors are from reputed Colleges. Visit our website to know our areas of expertise and let us know if we can be of help. Also Read:
    how many pages is 1000 words,
    how many pages is 2000 words,
    how many pages is 1500 words.

    ReplyDelete
  34. This article has brought to an end my long internet search thank you. You’re a fresh DNP candidate. At this time, it’s too early to start worrying about your DNP capstone project. Possibly, the idea of working with a quality DNP capstone project writing service hasn’t crossed your mind. You still have time, don’t you? But time keeps playing tricks on people. At the start, it may feel like you’ve got more than enough time. Time flies, though. Before you know it, you’ve run out of all of the time. Read more on DNP Project Writing Services

    ReplyDelete
  35. Assignment Help Liverpool

    Hire only the best and number 1 Best Assignment Experts service providers to get high-quality assignments, tailor-made and plagiarism-free all academic Assignment Help in Liverpool. Each of our assignments is prepared by qualified subject experts, professors, writers, and editors who themselves hold Doctorate degrees from renowned universities. Best Assignment Experts provides the best quality Assignment Help Liverpool. Our service is very affordable, cheap and offers 15 % discounts.

    ReplyDelete
  36. This article has brought to an end my long internet search thank you. This ground-breaking book is an indispensable practical guide to the successful execution of research with particular attention to data analysis to arrive at indispensable findings, conclusions, and generalizations. Studying this book endows you with the requisite mastery knowledge for personally applying the most appropriate statistical tests accurately, swiftly, effortlessly and pleasurably in situations of data analysis. It is a most clearly written modern and practical book with simple, direct, easy-to-understand and highly motivating information. Read more on SPSS Analysis

    ReplyDelete
  37. Amantel - International Calling APK
    Nice Post Amantel Best App For Calling
    With Amantel Login & Signup, there are two ways for you to call internationally:
    International calls to anyone, anywhere
    With our subscriptions, you can connect as much as you want to any cell phone or landline and Mobile phone in more than 70 countries.
    Or you can choose the World Credits prepaid payment method and Online Recharge payment to call any country in the world with the lowest possible rates.
    How to call India from USA

    ReplyDelete
  38. Hi, I am John Smith I am Web Developer, It is an amazing blog thanks for the sharing the blog. Frantic infotech provide the flutter app development company in india such as an information about software development for costumer service. Franti infotech also provide the ionic mobile app development. The development of advanced web applications is Orient Software’s specialty and we will successfully fulfill all your web application development requirements, from small-sized to wider-ranged projects.

    ReplyDelete
  39. We are a top rated
    marketing assignment help
    Online service here with experts specializing in a wide range of disciplines ensuring you get the assignments that score maximum grades.

    ReplyDelete

  40. The Guarantee That Makes Us a Reliable Online Coursework Help Website. Sowing the seeds of faith in the mind and soul of the students was not an overnight task. But, slowly and steadily, we achieved our target. We established ourselves as a trusted and credible research writing help website and have managed to win the trust of the students. Our guarantees played an important role in this battle of trust. The bond of truth was well woven by our assurance, with the aim of imparting trust.

    ReplyDelete
  41. There are many areas where Capsim application can be found, including the military. Each branch of the armed forces has their own training and classroom simulator that uses a CAPSIM-like program to help teach different tactics or strategies. Students have reported working on CAPSIM programs in nursing school as well as business schools. Read more on Capsim Homework Help

    ReplyDelete
  42. Awesome website plus all blogs. I’m a normal visitor of your website articles and I appreciate you taking the time to maintain the very helpful website. I’ll be a frequent visitor for a long time. Thankyou so much for sharing. I found a lot of interesting information here. Many best wishes for your future posts. paraphrasing tool online - cheap assignment help australia - assignment help in sydney - assignment help melbourne

    ReplyDelete
  43. We provide the bestGIS homework help services in the market with th best rates.

    ReplyDelete
  44. Great Nice Post!!Are your looking for assignment on linking words ,reach out to me . Here I am telling you how to give right position of linking words in assignment . So there are only three place where you set connecting words in begging ,middle and last paragraph, if you are feeling doubts go to my website.

    ReplyDelete
  45. This comment has been removed by the author.

    ReplyDelete

  46. Assignments are considered an integral part of academics for business management students as they help them to maintain their academic performance. But due to busy schedules, it becomes complex for students to compose business management assignments on their own. Therefore, they hire experts to complete their assignments on time and to pass their courses with the best academic grades. It is said that there are several advantages of taking assignment help Melbourne from experienced academic writers
    The Most Popular Disciplines of Medical Science
    An Online Guide To Study Biology
    What You Should Know Before Pursuing a Bachelor’s Degree in Business Management
    Career Option in Political Science

    ReplyDelete
  47. "Best Recipe website for make delicious food of your choice in easy steps at your home. Kindly go to our website and read and watch the method with video
    dal dhokli
    paneer briyani recipe
    Dahi ke sholay
    akki roti
    palak paneer pulao
    desserts recipe
    best recipe
    easy recipe"












    ReplyDelete
  48. ambubachi mela date The Ambubachi Mela will begin on June 22 and end on June 26 in the year 2022. On June 25, 2022, the temple will reopen.

    ReplyDelete
  49. Interesting read, I loved the content I bookmarked the website for regular read CMI Assignment Help is tailor made and pocket friendly to our client.

    ReplyDelete
  50. This is a great post and thanks for sharing this informative information. I will visit your blog regularly for some new latest posts. For now, if you need any writing help like assignment writing services or Assignment Help Australia services let me know so that I can help you.

    ReplyDelete
  51. This comment has been removed by the author.

    ReplyDelete
  52. Thank you so much for sharing this fantastic knowledge; it's truly helpful. Apental Calc

    ReplyDelete
  53. I sincerely value this updates and as well appreciate you owner for the good work command and extension library. Thanks so much for sharing. . fedcodtten jamb cut off mark

    ReplyDelete
  54. I am really impressed to read alot of useful inspiring articles. You are such a fantastic weblog. Keep it up! Thank you for sharing. villanova polytechnic hnd admission portal

    ReplyDelete
  55. The content that this site delivered is knowledgeable. I agree with the blogs that are posted and will be reading more in the future .So like this only we provide primary school tuition for various subjects and standards ,you just need to connect with experts.

    ReplyDelete
  56. Embarking on the journey of Class 8 education is a critical step in a student's academic life. To ensure a strong foundation and success in this crucial phase, look no further than our comprehensive NCERT Solutions for class 8.

    ReplyDelete
  57. Journey through the stories of clients who found relief and rejuvenation at Healing Buddha. Their success stories are a testament to our transformative power.
    pranic healing

    ReplyDelete
  58. The construction of the Adhoya Ram Mandir stands as a testament to the enduring spirit of faith, perseverance, and unity in the diverse tapestry of India. Located in the village of Adhoya in Uttar Pradesh, this temple holds immense cultural and historical significance, marking the culmination of a decades-long struggle for the reconstruction of a grand Ram temple at the birthplace of Lord Ram in Ayodhya. ayodhya-ram-mandir

    ReplyDelete
  59. If you are struggling with your assignment, then connect with Global assignment expert. Global assignment help is leading and popular assignment writer, and We serve worldwide. Economics assignment help has a team of an expert with more than 5 plus year of experiences. Our team of an expert will help you in your assignment and also help you to achieve good grades. We help a student in all possible ways to clear their assignment related doubts. So connect with us on our administrative website for more queries.

    ReplyDelete