[Bug 22545] Multiple applications wrapped with Themida/WinLicense 2.0.x/ 2.1.x software protection need ntdll.dll.DbgUiRemoteBreakin stub ( WinDVD 2010)

wine-bugs at winehq.org wine-bugs at winehq.org
Mon Apr 23 05:57:08 CDT 2018


https://bugs.winehq.org/show_bug.cgi?id=22545

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |patch

--- Comment #12 from Anastasius Focht <focht at gmx.net> ---
Hello Austin,

the patch works.

Interesting that 'DbgUiRemoteBreakin' prototype from process hacker github
project has different signature than Reactos, carrying additional context
parameter.

Anyway, the function is never called by Wine and is not meant to be used as
public API so it wouldn't really matter in the end.
It just needs to be hookable (trampoline).

While searching for further 'DbgUiRemoteBreakin' examples I found some other
interesting projects showcasing anti-attach techniques that might be useful for
validating Wine (will look into that later):

https://github.com/waleedassar/antidebug/tree/master/Anti-Attaching

https://github.com/nihilus/ScyllaHide/blob/master/Test/TestMain.cpp

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.



More information about the wine-bugs mailing list