Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
  • Jan 27 10:14
    OutScop edited #3010
  • Jan 27 10:10
    OutScop labeled #3010
  • Jan 27 10:10
    OutScop opened #3010
  • Jan 26 06:46
    mrexodia closed #3009
  • Jan 26 06:46
    mrexodia commented #3009
  • Jan 26 06:23
    steve007iii edited #3009
  • Jan 26 06:18
    steve007iii edited #3009
  • Jan 26 05:39
    steve007iii edited #3009
  • Jan 26 05:35
    steve007iii opened #3009
  • Jan 25 22:19
    mrexodia commented #1822
  • Jan 25 21:42
    TreeOone commented #1822
  • Jan 25 21:40
    TreeOone commented #1822
  • Jan 25 10:48

    mrexodia on development

    Fix a crash introduced by the r… (compare)

  • Jan 25 10:39
    mrexodia commented #3008
  • Jan 25 10:28
    mrexodia commented #1822
  • Jan 25 10:27
    mrexodia commented #1822
  • Jan 25 09:32
    mrexodia closed #3008
  • Jan 25 09:32
    mrexodia commented #3008
  • Jan 25 06:20
    TreeOone commented #1822
  • Jan 25 06:18
    TreeOone commented #1822
x64dbgbot
@x64dbgbot
<mrexodia> It’s in settings (re @ARCHANGEL_ahteam: Hi, guys. Maybe somebody knows is it possible to disable logging the exceptions into main log window?)
x64dbgbot
@x64dbgbot
<ARCHANGEL_ahteam> Could you point where is it in a bit more details? (re @mrexodia: It’s in settings)
<mrexodia> On the phone
<mrexodia> Looking at the 5 settings tabs might help
<mrexodia> Probably it has “exception” in the name
x64dbgbot
@x64dbgbot
<Prassert> My main problem is on $result variable I have allocated memory and I want copy bytes there into &result var I cant figure that out (re @mrexodia: What doesn’t work?)
x64dbgbot
@x64dbgbot
<mrexodia> DbgMemWrite? (re @Prassert: My main problem is on $result variable I have allocated memory and I want copy bytes there into &result var I cant figure that out)
x64dbgbot
@x64dbgbot
<ARCHANGEL_ahteam> Yes, Options -> Preferences -> Exceptions, than it important to choose type of exception in the list (if some of them are already there), and remove checkbox on logging option. Maybe it would be helpful to others. (re @mrexodia: Looking at the 5 settings tabs might help)
x64dbgbot
@x64dbgbot
<EvilSapphire> Why does the gs, fs registers always have fixed values 2b and 53 which arent real memory locations, but when i follow the tib address in the dump from an assembly instruction like gs[0] it would take me to a mapped address? I know gs is a segment register, but how does x64dbg calculate the gs:0 memory location?
x64dbgbot
@x64dbgbot
<ARCHANGEL_ahteam> Segment register points to structure called selector. Selector now usually describes the whole flat memory so it is not important what actually value is set to segment register because all of them (if they are valid) discribes the whole address space. So the beginning of address space extracts from selector and offset adds to it after : . 0 on your case. Intel manuals have more detailed description (re @EvilSapphire: Why does the gs, fs registers always have fixed values 2b and 53 which arent real memory locations, but when i follow the tib address in the dump from an assembly instruction like gs[0] it would take me to a mapped address? I know gs is a segment register, but how does x64dbg calculate the gs:0 memory location?)
x64dbgbot
@x64dbgbot
<EvilSapphire> I know this is asking a lot, but how does this work with paging? Does the segment:offset gives us a final virtual address which is then translated to physical address via a page table. It's so hard to get a concise, bird's eye view of this process on the internet. (re @ARCHANGEL_ahteam: Segment register points to structure called selector. Selector now usually describes the whole flat memory so it is not important what actually value is set to segment register because all of them (if they are valid) discribes the whole address space. So the beginning of address space extracts from selector and offset adds to it after : . 0 on your case. Intel manuals have more detailed description)
<mrexodia> https://wiki.osdev.org/Global_Descriptor_Table (re @EvilSapphire: I know this is asking a lot, but how does this work with paging? Does the segment:offset gives us a final virtual address which is then translated to physical address via a page table. It's so hard to get a concise, bird's eye view of this process on the internet.)
<mrexodia> I've been meaning to write a blog post about it
<mrexodia> on 64-bit it's all a bit simpler, but you have a GDT which contains descriptors about the memory
<mrexodia> the segment register is an offset in this table
x64dbgbot
@x64dbgbot
<mrexodia> x64dbg doesn't know about any of this though, the FS/GS segment is simply translated to the TEB base
<mrexodia> Here you can see what Windows' GDT looks like
<mrexodia> The virtual->physical translation happens after this and is unrelated as far as I understand
x64dbgbot
@x64dbgbot
<Prassert> (re @mrexodia: DbgMemWrite?)
<Prassert> Every API I use not working is compile ok but in allocated memory not bytes which I enter by getdlgitemtext
<Prassert> I cant copy them to alocated memory
<Prassert> Address of alocated memory is in result variable
x64dbgbot
@x64dbgbot
<ZehMatt> the code makes no sense, pass an actual address as the first parameter to DbgMemWrite and not a string (re @Prassert: )
x64dbgbot
@x64dbgbot
<Wacy ;)> hi can somebody help
<Wacy ;)> i open x64dgb and after 1-2 sec it crashes
x64dbgbot
@x64dbgbot
<Не кусай меня> Hello, who can teach louder to bypass the paid c++ cheat and dumping cheat?
x64dbgbot
@x64dbgbot
<mrexodia> could you share the minidump that's created? (re @Wacy ;): i open x64dgb and after 1-2 sec it crashes)
<mrexodia> and details about your OS, what you opened, etc
x64dbgbot
@x64dbgbot
<ARBU> Hey can anyone help me with a simple watermark removal from a pdf file in x64dgb please
<Dmitriy_Karbovskiy> Which means cracking.
<Dmitriy_Karbovskiy> Check the rules.
x64dbgbot
@x64dbgbot

<mxits> Hi,

i will find out what the file do.

x64dbg say
Invalid PE file

<MaxZZ> Hi, i hope anyone can help me

<MaxZZ> i will find out what the file do.

x64dbg say
Invalid PE file

<MaxZZ> CSPUpdateV2: file format elf64-x86-64
x64dbgbot
@x64dbgbot
<Atn> Does anybody face a problem when loading C++ exe file with Dotnet library?
x64dbgbot
@x64dbgbot
<MrWhois7> Hey how can crack wondershare demo software?
<Atn> Answer @MrWhois7 (re @MrWhois7: Hey how can crack wondershare demo software?)
<Atn> Unknown
<MrWhois7> Today i most try in YouTube videos but nothing 😩 (re @Atn: Unknown)
x64dbgbot
@x64dbgbot
<DeScario> Salut
Je suis sous un distro linux, backbox linux. j'arrive pas à installer x64dbg. Besoin d'aide svp
x64dbgbot
@x64dbgbot
<Smiling_Wolf> Yeah sure: https://linux.x64dbg.com/
x64dbgbot
@x64dbgbot
<Atn> 😂😂
x64dbgbot
@x64dbgbot
<TheresnoKNOWLEDGEthatISnotPOWER> lol, it's officially forwarding? (re @Smiling_Wolf: Yeah sure: https://linux.x64dbg.com/)
x64dbgbot
@x64dbgbot
<KwDeV> Yeah (re @TheresnoKNOWLEDGEthatISnotPOWER: lol, it's officially forwarding?)
x64dbgbot
@x64dbgbot
<prnggod> anyone has access to armadillo protector? different versions? I'm studying software protection systems. I recently came across this challenge that is based on armadillo protector's system and I wanna see how the actual software worked
x64dbgbot
@x64dbgbot
<ARCHANGEL_ahteam> Google is your friend (re @prnggod: anyone has access to armadillo protector? different versions? I'm studying software protection systems. I recently came across this challenge that is based on armadillo protector's system and I wanna see how the actual software worked)
x64dbgbot
@x64dbgbot
<renewbie> hi