x64dbg patching 0/x

[Shefo]

Hi there,

In x32dbg when i try to patch file it shows me 0/x patch(es) applied knowing that i try to change Jne to Jmp or adding mov al,1 to an empty byte as in these images 

[mrexodia]

There can be various reasons for this. From the looks of it x64dbg cannot convert the VA to file offsets. This can be because of packing (eg your section has no raw size) or because of a bug in x64dbg.

[Shefo]

Thanks for helping , but what should i do? if it is bugged? 

[mrexodia]

You could try to diagnose the VA to offset conversion. Can you find those instructions with something like CFF Explorer or a hex editor? I'm checking now with http://www.flightsimsoft.com/downloads/AS_PFPX_V126.exe but I'm not sure if that's the program you're looking at.

[mrexodia]

Yeah so in your case the problem is that the section has no raw space at that point (it's packed with Themida):

[Shefo]

yes it is the same program but version 105 .

i tried to unpack it but when i open the unpacked one it tells me that the program maybe debugged or damaged and it doesn't open maybe i should rebuild imports? 

 

Edited August 25, 2016 by Shefo

[Shefo]

No it is not the same program unfortunately

[Shefo]

Do you know any good tutorial about Themida unpacking?