Posts on Xusheng Li

简体中文版 Chinese Chess Master III: Jiangzu (象棋大師 III／將族) was a popular DOS Xiangqi game.

My wife used to play an iOS puzzle game called Block Crush Blitz.

TL;DR Windows’ new age API is supposed to give an app only your age range The current implementation first obtains your date of birth, then calculates the range inside the requesting app’s process The requesting process can intercept the token or DOB The…

Bring Your Own Vulnerable Driver (BYOVD) is a familiar Windows attack technique: an attacker loads a legitimate, signed driver and abuses a flaw in it to gain kernel-level capabilities.

TL;DR Zoom can notice that Google Meet, Teams, Slack, and other applications may be in a meeting and offer to start My Notes On macOS, Zoom monitors Control Center’s sensor-indicators log stream The messages contain records such as [mic] Google Chrome (co…

TL;DR Teams has a feature that can detect third-party recording and AI note-taking applications during a meeting On Windows and macOS, it enumerates running processes every 30 seconds and compares their names with a classification table The local user sees

TL;DR I collected 38 UCPD.sys binaries representing 24 versions UCPD first shipped in August 2023, seven months before its public discovery It grew from a 29 KB browser-association filter into a 196 KB registry and process policy engine Later versions add…

TL;DR Microsoft Paint supports both local and cloud image generation Paint and Photos also ship local AI models The two apps send the prompt to a remote server for moderation The server returns a GUID along with the moderated prompt The GUID is embedded i…

Earlier this month, a post on X went viral by claiming Microsoft had quietly slipped a spy into Windows 11: MICROSOFT ADDED A NEW BACKGROUND SERVICE TO YOUR PC IN WINDOWS 11.

I recently poked at Sogou Browser (version 13.9.6121.400) out of curiosity and found that it rewrites hundreds of affiliate codes in Baidu or Sogou search URLs.

Dev Hunter is a small game hidden inside Microsoft Excel 2000.

I recently bought an LG 34-inch UltraWide monitor.

Recently, my friend Towel created a VM challenge.

I was awarded the title of International Grand Master for Xiangqi in late 2020.

I used to be a keen photographer.

I spent some time with Hugo and now my blog is hosted on GitHub.

Recently, I was promoted to a reviewer on crackmes.one (along with @zed).

Earlier this year, my friend Towel uploaded two OCaml crackmes to crackmes.one.

It has been a long while since I last wrote about anything.

Unfortunately, this writeup is delayed for almost a week because I am super busy recently.

This time the writeup is a little bit different – I am the maker of this challenge so the narrative is from a different perspective.

The last week’s challenge is called Recursion.

The last week’s challenge was created by Dennis Yurichev.

Encountering a Weird Issue Recently, I needed to write one function that returns a bitmask according to the number of bits.

First Impression The last week’s challenge is hosted at https://crackmes.one/crackme/5edb0b8533c5d449d91ae73b.

Our first challenge is an Android challenge that features native library reverse engineering and debugging.

Over the weekend I had some fun with the Houseplant CTF.

Last summer, I broke a fan and managed to repair it.

车八退一 士４进５ 车八平六 士５进４ 炮八进九 马５退４ 炮八退三 马４进３ 马九退七 将５平４ 兵四平五 炮７平５ 炮八进三 象３进５ 兵五进一 将４进１ 炮八退一

炮六平八 士４进５ 马四进五!

兵六平五 炮７平５ 兵三平四 马５退６ 马一进二 车７退７ 炮七进一 士５退４ 马四进六 士４退５ 炮七退七 由此红方转为进攻黑方底士，此亦本局取名《峰回路转》之意。

帅六退一 士５进６ 兵五平四 将４退１ 炮五平七 将４进１ 炮七平四 将４平５ 炮四退一 将５平４ 炮四平五 士６退５ 兵四平五 士５退６ 炮五进一 士６进５ 炮五平六

兵九平八 将４进１ 兵八平七 将４退１ 帅五退一 象３进１ 马七进八 象１进３ 兵七进一 将４退１ 马八进七 象３退５ 兵七平六 将４平５ 马七退五 车１退１ 仕六退五 车１平４ 马五进四 将５平６ 兵六平五 车４退２ 马四进二

车四平六 将４平５ 车六平五 将５平６ 相五进三 车７平６ 车五平二 将６退１ 帅五平六 车６平９ 车二进五 将６退１ 车二退八 车９平７ 车二进三 车７平９ 帅六进一 车９进１ 帅六进一 车９平２ 帅六平五 车２退２ 仕五进六 车２退６ 车二进六 将６进１ 车二退一 将６退１ 车二平八

炮九平六 士５进４ 仕六退五 车４平５ 炮六平八 卒６平７ 炮八退八 卒７平６ 帅五平六 士４退５ 炮八进四 卒６平７ 炮八平五 卒７平６ 炮五平一 卒６平７ 炮一退四 卒７平６ 相九进七 将６进１ 相七退五 将６退１ 炮一进四 卒６平７ 炮一平八 卒７平６ 炮八退四 将６进１ 仕五退四 车５平６ 炮八平四

马七退五 将６退１ 马五进三 将６进１ 马三退一 士５退４ 前马退二 将６退１ 马一进二 将６平５ 帅五平六 象５进７ 后马退四 象７退９ 马四退二 将５进１ 后马进三 将５平６ 马三进二 将６平５ 后马进四 象９进７ 马四退三 将５退１ 马二退一 象３进５ 马一进三 将５平６ 前马进二 将６平５ 马二退四 象５退３ 马四退五 象７退９ 马五进七

马六退七 将５退１ 马七进八 象１进３ 相九进七 象３退１ 帅四退一 象１进３ 相七退五 象３退１ 帅四平五 象１进３ 帅五平六 象３退１ 帅六退一 象１进３ 炮九退一 将５进１ 马八退七 将５平６ 马七进六 将６平５ 炮九退七 将５退１ 炮九平五 象３退５ 相五进七 象５进７ 马六退五 象３进５ 马五进三 将５平６ 炮五进八

车五退一 炮５进６ 兵五平四 卒９平８ 相三退一 象７退５ 后兵进一 炮５退４ 后兵进一 卒６平５ 帅五平四 第一步只有车五退一可以获胜

2b6/9/3k5/9/6b2/6B2/9/3A5/4AK3/p4CB1p w 如图形势，红方当然可以连续打掉两个黑卒。

4ka3/9/5a3/6CC1/9/9/9/3K5/9/8c w 如图形势，红方仅有双炮做攻，似乎难以进取。

3r1r3/5k3/3a1a3/4C4/9/9/9/C8/5K3/3A5 w 如图形式，红方双炮巧妙腾挪，迫使黑方子力自相堵塞，最终一举获胜。

6R2/3r5/3kr4/9/9/9/9/5C3/4A4/3A1K3 w 如图，红方似乎可以车三退三叫杀得车．可红方的取胜之路真的如此简单嘛？

1R1ara3/9/4k4/9/2b6/6B2/9/5K3/7p1/9 w 如图形势，红方进攻子力仅有一车，如何才能利用黑车的位置取得胜利？

2rr5/9/3a1k3/3P5/2R6/2B6/9/9/3K5/9 w 如图，黑方将位不安，且双车略背，红方如何凭借先行之利取胜？

rr1ak4/9/9/9/9/9/9/5K3/R8/3AC4 w 如图，双方子力不多，且黑方双车通头，红方怎样才能借先行之利取胜？

9/9/5k3/9/9/9/9/4BA2B/3K5/3A3Cc w 如图局面，是我不久前从残局库中发现的一个挺有意思的局面，红先胜。