Forum Discussion

netcat's avatar
netcat
Icon for Bronze III rankBronze III
2 months ago

WinDbg: Ep.4 – Debugging a Windows Crash

Hi Q7: Identify the invalid reference to a memory address that causes the crash. instead of instructions, what characters are shown at this location? It seems I have issues understanding the questi...
  • netcat's avatar
    17 days ago

    Solved, just enter the symbol that WinDbg displays when it can't access the memory location or can't disassemble the data. And if you have no idea what symbol is used, you may try to disassemble the memory referenced.

    I can't understand why the question contains the wording "instead of instructions", as nobody would disassemble data that is getting unpacked, it just directed my there should be instructions but I shall, for whatever reason, enter the characters representation instead. These vague questions are really a pain. And yes, I know, it's hard to write clear and concise texts and questions.