[Bug 47864] a program called fg768.exe(free gate) crashed

WineHQ Bugzilla wine-bugs at winehq.org
Thu Oct 3 06:16:34 CDT 2019


https://bugs.winehq.org/show_bug.cgi?id=47864

Louis Lenders <xerox.xerox2000x at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever confirmed|0                           |1

--- Comment #5 from Louis Lenders <xerox.xerox2000x at gmail.com> ---
(In reply to Nikolay Sivov from comment #4)
> It's not a typo, non-zero value means wow64.

Yeah i see, after better look then this morning , and also I checked that the
spec entries for Rtl{Re}AllocateHeap are _not_ present in windows kernel32.

So funnily enough i have now two obviously wrong hacks that make the program
start ;) 
Mystery, maybe program is obfuscated, this needs expert to look into. 

Here`s first crash:

0009:Call KERNEL32.GetModuleHandleA(00b257e0 "kernel32.dll") ret=00ccc871
.
.
0009:Ret  KERNEL32.GetModuleHandleA() retval=7b420000 ret=00ccc871
.
0009:Call KERNEL32.GetProcAddress(7b420000,7b6705a0 "RtlAllocateHeap")
ret=00c5e64c
0009:Ret  KERNEL32.GetProcAddress() retval=00000000 ret=00c5e64c
0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0xc82155 ip=00c82155
tid=0009
.
wine: Unhandled page fault on read access to 0x00000000 at address 00C82155
(thread 0009), starting debugger...

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.



More information about the wine-bugs mailing list