วีดีโอ

Thank you. These improvements will definitely help.

The initial step was just looking at my own programs with a debugger. There were no real books about the topic 30 years ago. Once the internet came around, things got easier. I think the main key is "reading" and mostly "being interested".

Hello, sadly no. It's a C++ solution only.

Yes it is possible, but will require some extra work. This is an older question about the inverse: github.com/asmjit/asmjit/issues/111 I've not done anything similar myself, but as suggested by the answers in Git, you will need to create a manual build of AsmJit.

@@RCE-With-Peter Thanks. Yeah, figured as much. I don't know why they did it that way. There are a couple of cases where this can be useful. I found that Keystone library or Fasm DLL is a better choice for this specific case.

From my own experience, I can only suggest you to be careful with Keystone Engine, especially for x64 output. Fasm DLL may be a much better choice depending on your specific use case. I'm referring to this open issue: github.com/keystone-engine/keystone/issues/433 --- which is really has been a deal-breaker for me.

@@RCE-With-Peter Oh wow, that's really odd. Such a critical bug that's been unresolved for over 3 years. Guess I'll stay away from that library then. Thanks for the heads up. 👍

Thank you for your kind words. It's probably my own fault for not putting more content online.

Yes

Hello, I'm not sure I fully understand your question. You can do: mov $myvar, bswap(eax) and then later on do: mov [dword(esp)], $myvar I do not think there is already an existing function in x64dbg to convert a string to an integer such as strtoi. For such a feature you need to create plugin with your own custom expression function.

@@RCE-With-Peter Thank you u helped me a lot.

Thank you. I am working on it! Taking more time than anticipated but new content will come.

@@RCE-With-Peter thanks

Yes, of course it is. in 32-bit you can get the pointer from the stack on return, in 64-bit you need 2 breakpoints: one at the start to store the pointer, one at the 'ret' to log the returned value It's a nice question actually, I'll make a video on it to clarify it better.

@@RCE-With-Peter thank you sir

Difficult to tell what the exact problem is. If the "cmake" command succeeded, than I think that the msbuild is executed with the wrong directory set as current directory.

Hello. It looks like I forgot to add the batch file to the description. I've added it now. You can find a direct link here: github.com/Fibergeek/ucengine-build_all/blob/main/build_all.cmd

Thank you for the recommendation. It simplifies the batch file itself enormously.

Hi I think IDA isn't the best choice for Python based projects. You're better of with dedicated tools written in Python itself, such as : github.com/rocky/python-decompile3 pypi.org/project/uncompyle6/

@@RCE-With-Peter I understand it may be too much to ask but we'll you consider having a vid on it?

Thank you for the idea. I'll consider it and look out for a good crackme/CTF written in Python.

You're welcome. It took me some time, but I finally finished my next "Solving a Go Crackme" video. I take a more in-depth look of Go stack and register usage: th-cam.com/video/_kV1vMyf8qY/w-d-xo.html

Hello, thank you for your comment. It have prepared some video about this SetPageRights command and creating a custom plugin, but due to a lack of energy I never really finished that video :(. I think that coding a plugin makes more sense than using a script. Plugins are not that difficult if you know C. If you code a plugin, you can create your own command and then use a script to call your command and do other clever things. With a plugin, you can also create your own function, that will help in solving "removing the EXECUTE option". My own plugin which extends SetPageRights : github.com/Fibergeek/setmemrights

Thank you for watching. To answer your question, yes indeed. The code is printed using std::cout without the std::hex modifier. So it's decimal by default, 969342 is 0xECA7E. I was expecting a bigger decimal number. Let's assume we input "AAAA" aka 0x41414141, then the expected value should be atleast 1094795585 (0x41414141) in decimal. To look at it in another way, 0x40000000 is one fourth of the maximum value a 32-bit unsigned integer can hold. 4GB / 4 = 1GB. Which is 1 billion rounded down. The initial value 969342 is not even 1 million. Too low. :)