No way to display 32bit addresses in pointer table #348
Closed
Marc-Pierre-Barbier
started this conversation in
Troubleshooting
Replies: 2 comments 28 replies
-
|
That's weird, it should work. Are you running it through Vanilla WINE or Proton? If it's vanilla WINE, you might be running it as New-WoW64 mode. Can you tell me if you see 64 bits registers in Memory View while connected to Peggle? |
Beta Was this translation helpful? Give feedback.
28 replies
-
|
i hook into popcapgame1.exe because peggle.exe is not the game (weirdly enough) so here are both maps: Peggle.exe popcapgame1.exe |
Beta Was this translation helpful? Give feedback.
-
|
I think I know what might cause it. Old games like Peggle don't have the DEP/NX-compat flag in their PE header so WINE runs the whole process with execute perms on all, which results in the kernel merging it with the code section into one big mapping. Libmemscan's PE image detection expects the header page to be mapped on its own (which is how the modern NX aware exes look, like nano) so it will fail to recognize I managed to repro on an NX enabled exe by stripping the NX flag and the same issue as on Peggle happened. Stand by for a scanner fix... |
Beta Was this translation helpful? Give feedback.
-
|
Try now with the latest commit, issue should be fixed. Both real modules (peggle executable not wine-preloader) should appear and pointer resolving should work. |
Beta Was this translation helpful? Give feedback.
-
|
it just tried and i works, it's still relative de wine_preloaded but all pointers are resolved properly |
Beta Was this translation helpful? Give feedback.
-
|
Wine preloader will still exist but now the main proper exe will also appear |
Beta Was this translation helpful? Give feedback.
-
|
Seems resolved, thanks for the report |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
I was debugging an old 32bit game (peggle deluxe) and i discovered that while the pointer scanner do handle very well the 4byte adresses once added to the Cheat Table it would fail to resolve it.
Beta Was this translation helpful? Give feedback.
All reactions