[Bug 27349] SafeDisc v2.x API entry analyzer flags Wine's user32.dll as "bad" (too many exports with PIC loads in prolog code) (SimCity 4, IL-2 FB, NFSU)

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=27349

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |obfuscation
            Summary|SafeDisc v2.x API entry     |SafeDisc v2.x API entry
                   |analyzer flags Wine's       |analyzer flags Wine's
                   |user32.dll as "bad" (too    |user32.dll as "bad" (too
                   |many exports with PIC loads |many exports with PIC loads
                   |in prolog code) (SimCity 4, |in prolog code) (SimCity 4,
                   |IL-2 FB)                    |IL-2 FB, NFSU)

--- Comment #5 from Anastasius Focht <focht at gmx.net> 2011-06-07 17:40:59 CDT ---
Hello,

adding game "Need for Speed: Underground (NFSU)" (2 CD set)...
Tested/debugged with original media.

--- snip ---
...
Scanning -> H:\.wine\drive_c\Program Files\EA GAMES\NFS Underground\Speed.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 4000456 (03D0AC8h)
Byte(s)
-> File has 846536 (0CEAC8h) bytes of appended data starting at offset 0302000h
[File Heuristics] -> Flag : 00000000000000000100000000000111 (0x00004007)
[!] Safedisc v2.90.040 detected !
[i] Appended data contents....
   [.] o: 0x00302028  / t: <0xA8726B03> <0xEF01996C> <0x00000001> / s: 00180413
byte(s) -> ~ded303.tmp
   [.] o: 0x0032E10C  / t: <0xA8726B03> <0xEF01996C> <0x0000044C> / s: 00011924
byte(s) -> clcd32.dll
   [.] o: 0x00330FC7  / t: <0xA8726B03> <0xEF01996C> <0x0000044C> / s: 00004122
byte(s) -> clcd16.dll
   [.] o: 0x00332005  / t: <0xA8726B03> <0xEF01996C> <0x0000044D> / s: 00037971
byte(s) -> mcp.dll
   [.] o: 0x0033B47F  / t: <0xA8726B03> <0xEF01996C> <0x00000002> / s: 00007039
byte(s) -> SECDRV.SYS
   [.] o: 0x0033D025  / t: <0xA8726B03> <0xEF01996C> <0x00000002> / s: 00019048
byte(s) -> DrvMgt.dll
   [.] o: 0x00341AB6  / t: <0xA8726B03> <0xEF01996C> <0x0000000B> / s: 00005446
byte(s) -> SecDrv04.VxD
   [.] o: 0x00343024  / t: <0xA8726B03> <0xEF01996C> <0x00000000> / s: 00046080
byte(s) -> ~e5d141.tmp
   [.] o: 0x0034E44C  / t: <0xA8726B03> <0xEF01996C> <0x00000000> / s: 00534056
byte(s) -> ~df394b.tmp
[CompilerDetect] -> Visual C++ 7.0 (Visual Studio 2002)
- Scan Took : 0.612 Second(s)
--- snip ---

--- snip ---
$~/.wine/drive_c/Program Files/EA GAMES/NFS Underground$ xxd -g 4 Speed.exe |
grep "BoG_" -A 2
0000fd0: 00000000 426f475f 202a3930 2e302621  ....BoG_ *90.0&!
0000fe0: 21202059 793e0000 00000000 00000000  !  Yy>..........
0000ff0: 00000000 02000000 5a000000 28000000  ........Z...(...
--- snip ---

Regards

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.