Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
  • 01:03
    stevemk14ebr review_requested #2283
  • Jan 26 14:10
    mrexodia commented #2282
  • Jan 26 12:59
    xujintao commented #2246
  • Jan 26 12:47
    Mattiwatti commented #2246
  • Jan 25 18:45
    lurumdare commented #2282
  • Jan 25 18:42
    mrexodia commented #2282
  • Jan 25 18:36
    lurumdare commented #2282
  • Jan 25 18:32
    mrexodia commented #2282
  • Jan 25 18:29
    lurumdare commented #2282
  • Jan 25 18:21
    mrexodia commented #2282
  • Jan 24 18:36
    lurumdare commented #2282
  • Jan 24 17:04
    mrexodia commented #2282
  • Jan 24 16:10
    lurumdare commented #2282
  • Jan 24 14:24
    mrexodia commented #1908
  • Jan 24 12:03
    stevemk14ebr commented #1908
  • Jan 24 12:02
    stevemk14ebr commented #1908
  • Jan 24 09:56
    mrexodia commented #2282
  • Jan 24 09:51
    mrexodia commented #1908
  • Jan 24 02:38
    stevemk14ebr edited #2283
  • Jan 24 02:37
    stevemk14ebr commented #1908
x64dbgbot
@x64dbgbot
<Konrad> maybe unless you manually map your driver.. with some vulnerable driver
<Konrad> and that driver is not blacklisted too
x64dbgbot
@x64dbgbot
<Gabriele_Vezzani> No, its an archaic pattern. Things are changed nowadays. (re @giuseppe_brutto: Hi.
Hasp for 64 bit applications has a signature (for example for 32 bit applications was "cmp bh, 32" 80FF32h)?)
x64dbgbot
@x64dbgbot
<Antitrack> one could use any "mov rax, 0123456789abcdef" and use THAT value as signature (or xor rax, 0123456789abcdef)
<Antitrack> (just saying)
x64dbgbot
@x64dbgbot
<levitanious> That's probably not a 64-bit addressing.
<levitanious> 16 bytes, that's more like 128 bit.
<levitanious> Wait a second. My brain didn't switched properly (that's not a string, damn it!). <siiiiiiiiigh>
I blame the lack of 0x notation >_>
As my assembler would say............ error: illegal instruction
x64dbgbot
@x64dbgbot
<levitanious> No, wait, i was right
<levitanious> The addressing is actually off. I need sleep, apparently.
x64dbgbot
@x64dbgbot
<Antitrack> 8 bytes... dont code and drive drivel on irc! :D
<levitanious> ...hic!
<levitanious> Still, RAX isn't as fat
<levitanious> Come on
<levitanious> You are trying to cram too much, it won't fit!
x64dbgbot
@x64dbgbot
<Antitrack> 64bits = 8 bytes
<Antitrack> RAX is fatter than your brain! :D
<levitanious> Also as the immediate operands for 64-bit operations only the signed 32-bit values are possible, with the only exception being the mov instruction with destination operand being 64-bit general purpose register. Trying to force the 64-bit immediate with any other instruction will cause an error.
<levitanious> ~_~ Stop abusing my sleepy brain
<levitanious> Will you
<Antitrack> hrhrhr
<levitanious> Use memory
<levitanious> Or stack
<levitanious> Actually stack works nice.
<levitanious> (by memory i meant heap)
<Antitrack> stackoverflow!
<levitanious> ...hic!*
<Antitrack> prost
<Antitrack> mov ah, al ; shr ax, 4
x64dbgbot
@x64dbgbot
<levitanious> Ohoho, tasty
<levitanious> 👌
x64dbgbot
@x64dbgbot
<levitanious> movabs rax, 0x0123456789abcdef; xor rax, rax
<levitanious> 😂! You wanted to cram it in, right? Let's cram it in all the way!
<levitanious> <highfives>
x64dbgbot
@x64dbgbot
<mrexodia> 😀
x64dbgbot
@x64dbgbot
<Jojo00182> Hi, is this the right place to ask a question?
x64dbgbot
@x64dbgbot
<mrexodia> Yea about x64dbg
x64dbgbot
@x64dbgbot
<Jojo00182> thx, i think i fixed it at least for one exe. When i load steam game into the debugger and let it run it says terminated "debugging stopped" but the game runs
x64dbgbot
@x64dbgbot
<Forlax> x64dbg can be scripted to auto add patches?
Cos there is nothing about that beside debugging stuffs in the documentations https://i.imgur.com/nBb9ndV.png
x64dbgbot
@x64dbgbot
<mrexodia> Put a steam_appid.txt next to the game with the correct appid (re @x64dbg_bot: <Jojo00182> thx, i think i fixed it at least for one exe. When i load steam game into the debugger and let it run it says terminated "debugging stopped" but the game runs)
<Forlax> mrexodia, is this possible with the current engine that x64dbg uses or it's not in there yet. Because I got no clue, I asked around and they sent me here.
<mrexodia> What are you trying to do?
x64dbgbot
@x64dbgbot
<Forlax> well to code a simple script that append some specific instructions in the nullbytes of modules, more of a codecaver
x64dbgbot
@x64dbgbot
<kofteror> Hey, can i add assembly lines in x64dbg?
<Atn> Add ?
<kofteror> Yup..
x64dbgbot
@x64dbgbot
<mrexodia> Some elaboration would be good. What do you mean with “add”? Like append to the executable? (re @kofteror: Hey, can i add assembly lines in x64dbg?)
<mrexodia> Sorry I forgot to answer. Check the “mov” instruction (re @x64dbg_bot: <Forlax> mrexodia, is this possible with the current engine that x64dbg uses or it's not in there yet. Because I got no clue, I asked around and they sent me here.)
<mrexodia> You can mov a byte pattern in a location
<mrexodia> And there is also a command to assemble