RSSAmplifier

Blog

chentiangemalc

Windows 10 / ConfigMgr / winPE / virtualization / mobility / scripting / .NET / app compatibility / random

chentiangemalc.wordpress.comRSS feed ↗10 posts

Latest posts

Replicating Classic Notepad On Windows 11 Using PowerShell and Inline C#

Maybe on Windows 11 you are having issues like Notepad won t launch This is how you can replicate a classic style notepad as a PowerShell script, which you can then modify to add your desired features. Source on github: https://github.com/chentiangemalc/PowerShellScripts/blob/master/Notepad.ps1

Parsing Variable Argument Functions In WinDbg (va_list)

It can be useful to dump the complete string of printf or similar style variable argument functions in WinDbg. Here is a JavaScript function to use with WinDbg which should support the following (every variation not extensively tested, so may Continue reading

Automatically Attach API Monitor to New Processes

Generally, my go-to debugging technique is Time Travel Tracing (TTD.exe). However, without full Symbols for Windows, some types of analysis can be a little tedious creating scripts to dump the API parameters etc. In addition, while you can use breakpoint Continue reading

Strings Utility In PowerShell

Sometimes I m working in environments where I can t copy in any tools for troubleshooting and sometimes simply analyzing the strings in an .EXE gives many useful clues to how it works. Here is a simple version of strings utility that Continue reading

Resolve an API Set Function Name to On Disk Module and Function or Offset

Here is a script I wrote experimenting with resolving API Set function calls to on disk module/function/offset.

Get Directory Listing in Console Tree View via PowerShell

Replicating the behavior of classic command line tool tree in PowerShell. By default only displays directories, add -ShowFileNames switch to show filenames as well. Script is here https://github.com/chentiangemalc/PowerShellScripts/blob/master/Get-TreeView.ps1 Usage:

Visual Basic 6 Runtime Debugging Symbols (PDBs)

An issue you will likely come across if debugging VB6 apps with the inbuilt VB6 runtime built into Windows 8+ is that symbols don t seem to be available via the Microsoft Symbol Server. This makes VB6 stack traces completely bonkers Continue reading

DART Setup Wizard Doesn’t Detect Installed ADK

Trying to create a DART recovery image, got the message during the installation from Microsoft Desktop Optimization Pack 2015 running installer from \DaRT\DaRT 10\Installers\en-us\x64\MSDart100.msi However, the latest Windows ADK + Windows PE ADK component has been installed. Suspected the issue Continue reading

Merge Multiple PDFs with PowerShell and PDFSharp

First you will need to download PDF Sharp and build with Visual Studio the solution BuildAll-PdfSharp.sln and then obtaining the output PdfSharp.dll and placing in same directory as script. Takes a specified folder of PDFs and combines them into an Continue reading

Extract Access Database Password with PowerShell

Previously we looked at removing Office Macro Passwords with PowerShell here. This script can be used to retrieve the master password (i.e. database design password) for many Microsoft Access Database files (.mdb) Note this does not work with databases that Continue reading