[Bug 39989] nProtect GameGuard (x64) 'GameMon64.des' crashes on startup ( stack pointer (RSP) must be 16-byte aligned when making a call to Win64 API)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=39989

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|The Gameguard 64.des        |nProtect GameGuard (x64)
                   |program crashes when it is  |'GameMon64.des' crashes on
                   |running with wine           |startup (stack pointer
                   |                            |(RSP) must be 16-byte
                   |                            |aligned when making a call
                   |                            |to Win64 API)
          Component|-unknown                    |ntdll
             Status|UNCONFIRMED                 |RESOLVED
                 CC|                            |focht at gmx.net
            Version|unspecified                 |1.9.1
                URL|                            |http://fs2.download82.com/s
                   |                            |oftware/bbd8ff9dba17080c0c1
                   |                            |21804efbd61d5/nprotect-game
                   |                            |guard-personal/ggp3d.exe
         Resolution|---                         |DUPLICATE
           Keywords|                            |download, obfuscation

--- Comment #2 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

dupe of bug 27680

--- snip ---
...
Unhandled exception: page fault in 64-bit code (0x00007f4b506a7761).
Register dump:
 rip:00007f4b506a7761 rsp:000000000023fb88 rbp:000000000023fdb0 eflags:00010246
(  R- --  I  Z- -P- )
 rax:0000000000000000 rbx:000000000023fdb8 rcx:ffffffffffffffff
rdx:000000000023fdb0
 rsi:00000001400ed000 rdi:000000014000016f  r8:000000000023fdb8 
r9:0000000000000004 r10:0000000000000004
 r11:000000000003b398 r12:000000000023fde8 r13:000000007b87a2a0
r14:ffffffffffffffff r15:00007ffcad704330
...
Backtrace:
=>0 0x00007f4b506a7761 NtProtectVirtualMemory+0x41() in ntdll
(0x000000000023fdb0)
  1 0x000000007b89edb8 VirtualProtectEx+0x27() in kernel32 (0x00007ffcad703c90)
  2 0x000000007b89edfe VirtualProtect+0x1d() in kernel32 (0x00007ffcad703c90)
  3 0x000000014004f9cb in gamemon64.des (+0x4f9ca) (0x00007ffcad703c90)
  4 0x000000007b89ede0 in kernel32 (+0x7eddf) (0x00007ffcad703c90)
0x00007f4b506a7761 NtProtectVirtualMemory+0x41 in ntdll:     
Modules:
Module    Address                    Debug info    Name (43 modules)
ELF            7b800000-        7bc8f000    Dwarf           kernel32<elf>
  \-PE            7b820000-        7bc8f000    \               kernel32
ELF            7be00000-        7c103000    Deferred        <wine-loader>
PE           140000000-       1400f1000    Export          gamemon64.des
...
Threads:
process  tid      prio (all id:s are in hex)
...
0000006e (D)
D:\gameforgelive\Games\DEU_deu\Elsword\data\GameGuard\GameMon64.des
    0000006f    0 <==
...
--- snip ---

Regards

*** This bug has been marked as a duplicate of bug 27680 ***

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.