Category Archives: Computer Science

Understanding Atom Tables

Atom Tables have been a structure on Windows which I wanted to investigate for a while, but only have managed to find the time to write about now. Atom Tables enable strings to be encoded by with a 16-bit integer … Continue reading

Posted in Computer Science, WinDbg, Windows Internals | Leave a comment

The Complete Debugging Guide to Stop 0x124 – Part 3

In the previous two parts, we examined error packets and error records, now we will begin to discuss the debugging methodology involved with a Stop 0x124 bugcheck, and how to gather useful debugging information from the dump file using WinDbg. … Continue reading

Posted in Computer Science, Debugging, Stop 0x124, WinDbg, Windows Internals | 1 Comment

The Complete Debugging Guide to Stop 0x124 – Part 2

We looked at the error packets in the first part, but now we need to investigate the structure of error records, and understand how to gather useful information from these error records to assist us in our debugging efforts. There … Continue reading

Posted in Computer Science, Debugging, Stop 0x124, WinDbg, Windows Internals | Leave a comment

Superfish – There’s Nothing Super About It

Lenovo has recently been given some bad press about its bundled software (more commonly called bloatware) which is being shipped with Lenovo systems. The software which is causing a large concern is Superfish. An add-on which is supposedly designed to … Continue reading

Posted in Computer Science, System Security | Leave a comment

McNugget Numbers

McNugget Numbers are any integer n which can be satisfied with the linear combination of 6a + 9b + 20c. Although it is known that all integers (with some exceptions*) are McNugget Numbers, it is still interesting to see how … Continue reading

Posted in Computer Science, Mathematics, Number Theory | Leave a comment

Resolving nt! ?? ::FNODOBFM::`string’+0x32c3b In Call Stacks

The nt! ?? ::FNODOBFM::`string’+0x32c3b function name strings are a common problem when examining call stacks with WinDbg, and aren’t a result of any symbol misconfiguration which is deemed the common cause. The problem lies with optimisation strategies added by Microsoft. … Continue reading

Posted in Computer Science, Debugging, WinDbg | 1 Comment

UPX Packing and Anti-Packing Techniques

Packing is a very common technique used by malware for obfuscation. The most popular and well-known packer is called UPX (Ultimate Packer for Executables). By packing malware binary files, the data stored within the file becomes unreadable, and thus will … Continue reading

Posted in Computer Science, Debugging, System Security | Leave a comment