https://bugs.winehq.org/show_bug.cgi?id=49111
Bug ID: 49111 Summary: ELWAVE Demo installer crashes on start Product: Wine Version: 5.2 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs@winehq.org Reporter: dark.shadow4@web.de Distribution: ---
Created attachment 67087 --> https://bugs.winehq.org/attachment.cgi?id=67087 Wine log
The installer crashes as soon as its run, see attached log - that's a full log, not only the backtrace.
https://bugs.winehq.org/show_bug.cgi?id=49111
Fabian Maurer dark.shadow4@web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- URL| |https://web.archive.org/web | |/20200506171923/http://www. | |elwave.com/elwave/demo/51q4 | |99qB4sqYs/ELWAVE92dDemoSetu | |p.exe Keywords| |download
--- Comment #1 from Fabian Maurer dark.shadow4@web.de --- Download of demo from http://elwave.com/elwave/demo/index.html Direct link: https://web.archive.org/web/20200506171923/http://www.elwave.com/elwave/demo...
https://bugs.winehq.org/show_bug.cgi?id=49111
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |focht@gmx.net Summary|ELWAVE Demo installer |ELWAVE 9.2 demo installer |crashes on start |(protected with Themida) | |crashes on start (CPU with | |User-Mode Instruction | |Prevention feature enabled) Keywords| |Installer, obfuscation
--- Comment #2 from Anastasius Focht focht@gmx.net --- Hello Fabian,
are you sure this isn't a dupe of bug 49112 or the other way around?
--- snip --- =>0 0x00663057 EntryPoint+0xffffffff() in elwave92ddemosetup (0xf4185014) 0x00663057 EntryPoint+0xffffffff in elwave92ddemosetup: sldt 0x0(%esp) --- snip ---
I have an old 4th gen Intel Core i7 (Haswell) so I can't reproduce this anyway ;-)
Protection ID scan:
--- snip --- -=[ ProtectionID v0.6.9.0 DECEMBER]=- (c) 2003-2017 CDKiLLER & TippeX Build 24/12/17-21:05:42 Ready... Scanning -> Z:\home\focht\Downloads\ELWAVE92dDemoSetup.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 51196120 (030D30D8h) Byte(s) | Machine: 0x14C (I386) Compilation TimeStamp : 0x4BA39957 -> Fri 19th Mar 2010 15:33:43 (GMT) [TimeStamp] 0x4BA39957 -> Fri 19th Mar 2010 15:33:43 (GMT) | PE Header | - | Offset: 0x000000F0 | VA: 0x004000F0 | - -> File Appears to be Digitally Signed @ Offset 030D1E08h, size : 012D0h / 04816 byte(s) -> File has 46928392 (02CC1208h) bytes of appended data starting at offset 0410C00h [LoadConfig] CodeIntegrity -> Flags 0xA3F0 | Catalog 0x46 (70) | Catalog Offset 0x2000001 | Reserved 0x46A4A0 [LoadConfig] GuardAddressTakenIatEntryTable 0x8000011 | Count 0x46A558 (4629848) [LoadConfig] GuardLongJumpTargetTable 0x8000001 | Count 0x46A5F8 (4630008) [LoadConfig] HybridMetadataPointer 0x8000011 | DynamicValueRelocTable 0x46A66C [LoadConfig] FailFastIndirectProc 0x8000011 | FailFastPointer 0x46C360 [LoadConfig] UnknownZero1 0x8000011 [File Heuristics] -> Flag #1 : 00000000000001001100000000110111 (0x0004C037) [Entrypoint Section Entropy] : 1.82 (section #5) "jzccmqax" | Size : 0x200 (512) byte(s) [DllCharacteristics] -> Flag : (0x8000) -> TSA [SectionCount] 6 (0x6) | ImageSize 0xB08000 (11567104) byte(s) [ModuleReport] [IAT] Modules -> kernel32.dll | comctl32.dll [!] Themida v2.0.1.0 - v2.1.8.0 (or newer) detected ! [i] Hide PE Scanner Option used - Scan Took : 1.940 Second(s) [000000424h (1060) tick(s)] [566 of 580 scan(s) done] --- snip ---
$ sha1sum ELWAVE92dDemoSetup.exe 58ecb98128567f3f10e25a25e0cb95450a867d49 ELWAVE92dDemoSetup.exe
$ du -sh ELWAVE92dDemoSetup.exe 49M ELWAVE92dDemoSetup.exe
$ wine --version wine-6.0-rc4
Regards
https://bugs.winehq.org/show_bug.cgi?id=49111
--- Comment #3 from Fabian Maurer dark.shadow4@web.de --- Hello Anastasius, I'm not entirely sure... I currently can't reproduce either issue.
Problem is, I'm running a "Ryzen 7 3800X 8" now, and I don't know if or how that supports UMIP. Not sure how I would check, any ideas?
https://bugs.winehq.org/show_bug.cgi?id=49111
Fabian Maurer dark.shadow4@web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |DUPLICATE Status|NEW |RESOLVED
--- Comment #4 from Fabian Maurer dark.shadow4@web.de --- Since it seems fixed by that Linux commit, marking dupe.
*** This bug has been marked as a duplicate of bug 49112 ***
https://bugs.winehq.org/show_bug.cgi?id=49111
Alistair Leslie-Hughes leslie_alistair@hotmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #5 from Alistair Leslie-Hughes leslie_alistair@hotmail.com --- Closing duplicate.