<SunBeam> another problem..
<SunBeam>
00007FF763AE270E | 48:8B0D 33F51D03 | MOV RCX,QWORD PTR DS:[7FF766CC1C48]
<SunBeam> if I were to use that plugin on x64
<SunBeam> I can't "select the bytes" of MOV RCX,QWORD PTR DS:[7FF766CC1C48]
<SunBeam> because they are based on RIP
<SunBeam> 48:8B0D [33F51D03] <- those last 4 are based on position of the array of bytes; where rip is at
<SunBeam> so I can't scan entire map for 48:8B0D 33F51D03
<SunBeam> as it would only find 1 single result.. that spot
<SunBeam> it's not like in x86 where you have the address as part of the array of bytes
<qlrdwe> now im curious what the original message was about 😳 (re @fabio1337br: Not only that. The Intel developers would have to bake new chips on the fabs specially for you. Not to mention changing the design prior to that. Unless they have hidden locked features under special opcodes.)
<SunBeam> so finding all code locations where 7FF766CC1C48 is used won't work with scanning for 48 8B 0D ?? ?? ?? ??
<SunBeam> as that would return all sorts of addresses based on rip by those wildcards
<SunBeam> doing Ctrl+F in x64dbg and pasting MOV RCX,[0x7FF766CC1C48] does find all instances; and that's cuz of how Ctrl+F is implemented in x64dbg (it doesn't do scanning like that plugin that was referred)
<SunBeam> but it's limited to 1 single command scan
<SunBeam> so you can't find a sequence of 2 or 3, the MOV + other lines
<SunBeam> there is a feature called Patching in x64dbg
<SunBeam> and yes, the current file's handle will always be locked; it doesn't make sense to patch the current running one o_O
<SunBeam> so give it another name when using Patching > file1.exe
<SunBeam> it will be a copy of the original + your patched bytes
<SunBeam> then delete the original, rename file1.exe to file.exe and you're set
<SunBeam> (of course, after closing x64dbg)
1 reply
<fabio1337br> Sorry I thought it was memory patching (re @x64dbg_bot: <SunBeam> there is a feature called Patching in x64dbg)
<SunBeam> man, if you want the changes to be applied to the physical file, then that's how
<SunBeam> if not, simply modifying some command in x64dbg while the process is running is the actual 'patching' (e.g.: change a 'MOV RAX,RCX' on a line to something else == memory patching)
<sodaxml> do all hex editors work the same?
<sodaxml> i'm trying to crack steam games i have bought for fun
<sodaxml> and thanks
<Adam> I am a reverse engineering expert.
<Adam> Any time I can work for you
<SunBeam> but if you meant you would do it when you can, then no rush
<SunBeam> I know it's a wanted feature :)
<mrexodia> maybe one day if I need it
<sodaxml> it's a matrix thing
<sodaxml> with element
<hackdynamics> Free VPN
У Нас открылся Бесплатный VPN сервер. Данные для входа:
Сервер: dchub.one
Логин: vpn
Пароль: vpn
Ключ: +Trd78hd84YDa90-
L2TP+IPSec
Welcome to DC++ https://dchub.one