Hi there,

In x32dbg when i try to patch file it shows me 0/x patch(es) applied knowing that i try to change Jne to Jmp or adding mov al,1 to an empty byte as in these images 

There can be various reasons for this. From the looks of it x64dbg cannot convert the VA to file offsets. This can be because of packing (eg your section has no raw size) or because of a bug in x64dbg.

Thanks for helping , but what should i do? if it is bugged? 

You could try to diagnose the VA to offset conversion. Can you find those instructions with something like CFF Explorer or a hex editor? I'm checking now with http://www.flightsimsoft.com/downloads/AS_PFPX_V126.exe but I'm not sure if that's the program you're looking at.

Yeah so in your case the problem is that the section has no raw space at that point (it's packed with Themida):

yes it is the same program but version 105 .

i tried to unpack it but when i open the unpacked one it tells me that the program maybe debugged or damaged and it doesn't open maybe i should rebuild imports? 

 

Edited August 25, 20169 yr by Shefo

No it is not the same program unfortunately

Do you know any good tutorial about Themida unpacking?