https://bugs.winehq.org/show_bug.cgi?id=37753
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- URL|http://www.partex.dk/downlo |https://web.archive.org/web |ad/722-atcinst.exe |/20200327193116/http://www. | |partex.dk/download/722-atci | |nst.exe Resolution|--- |ABANDONED Status|NEEDINFO |RESOLVED
--- Comment #7 from Anastasius Focht focht@gmx.net --- Hello folks,
unfortunately there doesn't seem to be a matching installer available.
https://web.archive.org/web/20200327193116/http://www.partex.dk/download/722...
From: http://processchecker.com/file/acuthin.exe.html
--- snip --- 1 C:\TCE\acu\070202\acuthin.exe ACUCOBOL-GT Thin Client Acucorp, Inc. 7.2.2 TSPatchset9(20 42188 49BB273D668BB526C9F15150F4F99F81 --- snip ---
-> version = "7.2.2 TSPatchset9(20xx)" -> md5 = 49BB273D668BB526C9F15150F4F99F81
--- snip --- $ pwd /home/focht/.wine/drive_c
$ tree --charset=ANSI Acucorp/ Acucorp/ `-- Acucbl722 `-- AcuGT `-- bin |-- aclnt.dll |-- acme.dll |-- acuthin.dll |-- acuthin.exe |-- ajpg32.dll |-- atermmgr.dll |-- mfc71.dll |-- msvcp71.dll |-- msvcr71.dll `-- zlib.dll
3 directories, 10 files --- snip ---
--- snip --- $ pwd /home/focht/.wine/drive_c/Acucorp/Acucbl722/AcuGT/bin
$ md5sum *
8bf439cc8068dc436b0908991fd22bbc aclnt.dll 3765d114191d3be5d589d468a0e08d2b acme.dll 4f62cde5444fa211710a4274c44f4562 acuthin.dll 0cc65d1093314d6d4795064fd6c748ef acuthin.exe 2a8d3f2de2288f1b2a8ef0b1aeaac8ea ajpg32.dll 7682f1bb2f0a89bcbef63748d3c51550 atermmgr.dll f35a584e947a5b401feb0fe01db4a0d7 mfc71.dll 561fa2abb31dfa8fab762145f81667c2 msvcp71.dll 86f1895ae8c5e8b17d99ece768a70732 msvcr71.dll 2273df15d8c2c1567bad469a3a5ba9df zlib.dll --- snip ---
Different hashes. I've also checked 'atermmgr.dll' by using address information from OP's backtrace (crash site + function addresses on the stack). Disassembly doesn't match, there are also no call sites preceding the return addresses.
The client requires command line parameters to fetch payload. OP's backtrace obviously doesn't reveal such information.
Resolving 'abandoned'.
$ sha1sum 722-atcinst.exe 62060eb1400381590332aaee003a11a4d6887c1e 722-atcinst.exe
$ du -sh 722-atcinst.exe 1.6M 722-atcinst.exe
$ wine --version wine-5.4-412-g8baf4a2a55
Regards