Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

x32dbg doesn't correctly map all exe sections #2256

Open
sunbeam906 opened this issue Nov 25, 2019 · 3 comments

Comments

@sunbeam906
Copy link

@sunbeam906 sunbeam906 commented Nov 25, 2019

Hi there,

I've recently wanted to have a go at a childhood game and scour the engine for stuff I overlooked when I was young and stumbled across this problem:

image

Having said the above, I can tell you that debugging the game with Cheat Engine for, say, weapon ammunition, returns an address which I can inspect in CE, but I can't go to in x64dbg:

image

Kindly have a look at the attached .exe (I've uploaded the GOG installer as well, just in case you want to run the executable to figure out what's going on).

EXE: https://www.mediafire.com/file/74d69sv17r4brz6/Df.exe/file
Installer: https://www.mediafire.com/file/mzg4o0vafeuxgid/setup_delta_force_1.00.03.03p_%2810720%29.exe/file

The x32dbg version I ran this with is the one from 1 Sep 2019.

BR,
Sun

@sunbeam906

This comment has been minimized.

Copy link
Author

@sunbeam906 sunbeam906 commented Nov 25, 2019

The funny thing about it is x32dbg can step into code and execute instructions in the section I can't see, though going to the section doesn't work at all:

image

And here's me having executed 2 lines past that RET:

image

What the actual F? :D :D :D

BR,
Sun

@sunbeam906

This comment has been minimized.

Copy link
Author

@sunbeam906 sunbeam906 commented Nov 25, 2019

I even tried changing the names and properties of the sections with CFF Explorer, forcing the "invisible" one to 'have code':

image

BR,
Sun

@sunbeam906

This comment has been minimized.

Copy link
Author

@sunbeam906 sunbeam906 commented Nov 25, 2019

And since OllyDbg works on the unaltered .exe...

image

...I can only say this is an x32dbg bug.

BR,
Sun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
1 participant
You can’t perform that action at this time.