[Bug 27349] SafeDisc v2.x API entry analyzer flags Wine's user32.dll as "bad" (too many exports with PIC loads in prolog code) (SimCity 4, IL-2 FB, NFSU)
wine-bugs at winehq.org
wine-bugs at winehq.org
Tue Jun 7 17:41:00 CDT 2011
http://bugs.winehq.org/show_bug.cgi?id=27349
Anastasius Focht <focht at gmx.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
Keywords| |obfuscation
Summary|SafeDisc v2.x API entry |SafeDisc v2.x API entry
|analyzer flags Wine's |analyzer flags Wine's
|user32.dll as "bad" (too |user32.dll as "bad" (too
|many exports with PIC loads |many exports with PIC loads
|in prolog code) (SimCity 4, |in prolog code) (SimCity 4,
|IL-2 FB) |IL-2 FB, NFSU)
--- Comment #5 from Anastasius Focht <focht at gmx.net> 2011-06-07 17:40:59 CDT ---
Hello,
adding game "Need for Speed: Underground (NFSU)" (2 CD set)...
Tested/debugged with original media.
--- snip ---
...
Scanning -> H:\.wine\drive_c\Program Files\EA GAMES\NFS Underground\Speed.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 4000456 (03D0AC8h)
Byte(s)
-> File has 846536 (0CEAC8h) bytes of appended data starting at offset 0302000h
[File Heuristics] -> Flag : 00000000000000000100000000000111 (0x00004007)
[!] Safedisc v2.90.040 detected !
[i] Appended data contents....
[.] o: 0x00302028 / t: <0xA8726B03> <0xEF01996C> <0x00000001> / s: 00180413
byte(s) -> ~ded303.tmp
[.] o: 0x0032E10C / t: <0xA8726B03> <0xEF01996C> <0x0000044C> / s: 00011924
byte(s) -> clcd32.dll
[.] o: 0x00330FC7 / t: <0xA8726B03> <0xEF01996C> <0x0000044C> / s: 00004122
byte(s) -> clcd16.dll
[.] o: 0x00332005 / t: <0xA8726B03> <0xEF01996C> <0x0000044D> / s: 00037971
byte(s) -> mcp.dll
[.] o: 0x0033B47F / t: <0xA8726B03> <0xEF01996C> <0x00000002> / s: 00007039
byte(s) -> SECDRV.SYS
[.] o: 0x0033D025 / t: <0xA8726B03> <0xEF01996C> <0x00000002> / s: 00019048
byte(s) -> DrvMgt.dll
[.] o: 0x00341AB6 / t: <0xA8726B03> <0xEF01996C> <0x0000000B> / s: 00005446
byte(s) -> SecDrv04.VxD
[.] o: 0x00343024 / t: <0xA8726B03> <0xEF01996C> <0x00000000> / s: 00046080
byte(s) -> ~e5d141.tmp
[.] o: 0x0034E44C / t: <0xA8726B03> <0xEF01996C> <0x00000000> / s: 00534056
byte(s) -> ~df394b.tmp
[CompilerDetect] -> Visual C++ 7.0 (Visual Studio 2002)
- Scan Took : 0.612 Second(s)
--- snip ---
--- snip ---
$~/.wine/drive_c/Program Files/EA GAMES/NFS Underground$ xxd -g 4 Speed.exe |
grep "BoG_" -A 2
0000fd0: 00000000 426f475f 202a3930 2e302621 ....BoG_ *90.0&!
0000fe0: 21202059 793e0000 00000000 00000000 ! Yy>..........
0000ff0: 00000000 02000000 5a000000 28000000 ........Z...(...
--- snip ---
Regards
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
More information about the wine-bugs
mailing list