Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
  • May 09 19:34
    mrexodia commented #2660
  • May 09 18:57
    Serqati commented #2660
  • May 09 15:18
    mrexodia commented #2660
  • May 09 14:37
    Serqati commented #2660
  • May 09 10:01
    mrexodia closed #2660
  • May 09 10:01
    mrexodia commented #2660
  • May 09 07:20
    Serqati opened #2660
  • May 08 12:07

    mrexodia on development

    Show ordinal names in the undec… (compare)

  • May 08 02:21
    wonderzdh opened #61
  • May 07 15:01
    mrexodia closed #2659
  • May 07 15:01
    mrexodia commented #2659
  • May 07 14:50
    Serqati opened #2659
  • May 07 08:17
    mrexodia closed #2658
  • May 07 08:17
    mrexodia commented #2658
  • May 07 07:28
    Serqati opened #2658
  • May 06 20:26
    mrexodia commented #2657
  • May 06 20:24
    mrexodia commented #2657
  • May 06 19:14
    Serqati commented #2657
  • May 06 17:44
    mrexodia closed #2657
  • May 06 17:44
    mrexodia commented #2657
x64dbgbot
@x64dbgbot
<sudolk> zerodaylab backup channel
<sudolk> Hi guys our @zerodaylab channel was suspended
Join here our new channel - https://t.me/zer0daylab
please share this massage
@zer0daylab
<c0m_rade> thx
x64dbgbot
@x64dbgbot
<ALMUBAEASIS>
<ALMUBAEASIS> Please help me
<ALMUBAEASIS> How to unpack
<ALMUBAEASIS>
x64dbgbot
@x64dbgbot
<ALMUBAEASIS> Friend's ?
<morsisko> this is not RE discord
<ALMUBAEASIS> I do not understand
<morsisko> this is x64dbg discord
<morsisko> to talk about questions specific to x64dbg, not about general reverse engineering unpacking etc
x64dbgbot
@x64dbgbot
<ALMUBAEASIS> Ok
<ALMUBAEASIS> Is there a script unpack with x64dbg
x64dbgbot
@x64dbgbot
<mrexodia> 🔨
x64dbgbot
@x64dbgbot
<Arthuria> aaa
x64dbgbot
@x64dbgbot
<mrexodia> Ehh
<mrexodia> Yes?
x64dbgbot
@x64dbgbot
<pmhdii> Hi . I cant speak english. I have 1 or 3 Question.
<Antitrack> try translate.google.com
<GroupAnonymousBot> Or deepl.com
x64dbgbot
@x64dbgbot
<pmhdii> Ok . What is Address Offset ?
For ex: ss:[eax+300]
For ex: ss:[eax+30C]
300 30C
This Is address offset ?
This address mapped to virtual address ?
x64dbgbot
@x64dbgbot
<l1unk> both are offsets (re @pmhdii: Ok . What is Address Offset ?
For ex: ss:[eax+300]
For ex: ss:[eax+30C]
300 30C
This Is address offset ?
This address mapped to virtual address ?)
x64dbgbot
@x64dbgbot
<mrexodia> Probably eax contains a pointer to a structure and the 300 and 30c are offsets from that bade (re @pmhdii: Ok . What is Address Offset ?
For ex: ss:[eax+300]
For ex: ss:[eax+30C]
300 30C
This Is address offset ?
This address mapped to virtual address ?)
x64dbgbot
@x64dbgbot
<chief> hi
<chief> how to remove x64dbg from the right click menu
<chief> nobody with a mod role so ill ping @mrexodia as you probably own the program
<morsisko> reverse it
<chief> reverse what
x64dbgbot
@x64dbgbot
<morsisko> the setup file that adds the thing to context menu
<chief> how do i do that
<morsisko> using x64dbg 😉
<GroupAnonymousBot> cb
<GroupAnonymousBot> Q: How do I remove the Debug with x64dbg entries from my context menu?
A: Download & execute this regfile (remember to Save as...).
<chief> thanks groupanonymous
x64dbgbot
@x64dbgbot
<pmhdii> Thanks thanks (re @mrexodia: Probably eax contains a pointer to a structure and the 300 and 30c are offsets from that bade)
<pmhdii> Thanks (re @l1unk: both are offsets)
Torusrxxx
@torusrxxx
hello @mrexodia @x64dbgbot
x64dbgbot
@x64dbgbot
<mrexodia> Hello @torusrxxx
<mrexodia> Hope you’re doing well
x64dbgbot
@x64dbgbot
<fauxlefam> Guys, how do you deal with addresses that are not directly editable in the main window? like I found a potential string but it redirect me to the dump. I can change it there but how do I gather more information about this address?
<morsisko> breakpoint on read
<fauxlefam> Ah I see
<fauxlefam> let me debug this thing further
x64dbgbot
@x64dbgbot
<fauxlefam> Can't quite figure it out here...if I set a breakpoint on read I get redirected to ntdll.dll debugging there usually causes me to rise an access violation error
<fauxlefam> I dont think patching that file is a good idea lol
<morsisko> well this is related more to RE, not to the x64dbg itself
<morsisko> probably it just garbage at this point, and it gets reallocated at ntdll
<fauxlefam> how am I suppose to tackle this issue? the idea is to remove a button but there are no direct strings found by x64dbg