http://bugs.winehq.org/show_bug.cgi?id=15999
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |focht@gmx.net
--- Comment #1 from Anastasius Focht focht@gmx.net 2008-11-10 17:13:46 --- Hello,
Anycount 5.0 is wrapped with an old Themida version 1.2.0.1. Early Themida versions are known to produce compatibility issues with API wrappers under wine.
--- snip --- ... 0009:Call KERNEL32.VirtualProtect(00400000,00001000,00000002,ff40496d) ret=00c98b26 0009:trace:virtual:NtProtectVirtualMemory 0xffffffff 0x400000 00001000 00000002 0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7bc84445 0009:trace:seh:raise_exception info[0]=00000001 0009:trace:seh:raise_exception info[1]=ff40496d 0009:trace:seh:raise_exception eax=ff40496d ebx=7bc995b8 ecx=7bc995b8 edx=00000004 esi=0032fe9c edi=0032fe10 0009:trace:seh:raise_exception ebp=0032fda8 esp=0032fc90 cs=0073 ds=007b es=007b fs=0033 gs=003b flags=00010246 0009:trace:seh:call_stack_handlers calling handler at 0xc481e4 code=c0000005 flags=0 0009:trace:seh:call_stack_handlers handler at 0xc481e4 returned 0 0009:Call KERNEL32.GetEnvironmentVariableA(00b7937a "WLNumDLLsProt",00b7938a,00000005) ret=00b79b29 0009:Ret KERNEL32.GetEnvironmentVariableA() retval=00000001 ret=00b79b29 0009:Call user32.MessageBoxExA(00000000,00b75e23 "An internal exception occured (Address: 0x7bc84445)\n\rPlease, contact support. Thank you!",00b7528a "AIT Protection System",00000010,00000000) ret=00c362f5 .. --- snip ---
NtProtectVirtualMemory's old_prot ptr arg is invalid, hence it crashes when dereferencing:
if (old_prot) *old_prot = VIRTUAL_GetWin32Prot( vprot );
If you ask me - not fixable, the problem is in code virtualizer/themida virtual machine instruction sequence for the API wrapper.
Either persuade the vendor to repackage their stuff with newer - wine compatible - versions of themida brain damage or just don't buy/use that stuff.
Regards