June 2020 - Wine-bugs - list.winehq.org

[Bug 49219] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThreadEx
by WineHQ Bugzilla 05 Jun '20

05 Jun '20

https://bugs.winehq.org/show_bug.cgi?id=49219 Bug ID: 49219 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThreadEx Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49217 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078EE10,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Call ntoskrnl.exe.KdRefreshDebuggerNotPresent() ret=00c84e5a 00d0:trace:ntoskrnl:KdRefreshDebuggerNotPresent . 00d0:Ret ntoskrnl.exe.KdRefreshDebuggerNotPresent() retval=00000001 ret=00c84e5a 00d0:Call ntoskrnl.exe.KeQueryActiveProcessorCountEx(0000ffff) ret=00c83d3a 00d0:fixme:ntoskrnl:KeQueryActiveProcessorCountEx GroupNumber 65535 semi-stub. 00d0:Call KERNEL32.GetSystemInfo(00b5f2f0) ret=00232906 00d0:Call ntdll.NtQuerySystemInformation(00000000,00b5f200,00000040,00000000) ret=7b02c721 00d0:trace:ntdll:NtQuerySystemInformation (0x00000000,0xb5f200,0x00000040,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c721 00d0:Call ntdll.NtQuerySystemInformation(00000001,00b5f1f0,0000000c,00000000) ret=7b02c751 00d0:trace:ntdll:NtQuerySystemInformation (0x00000001,0xb5f1f0,0x0000000c,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c751 00d0:Ret KERNEL32.GetSystemInfo() retval=00000006 ret=00232906 00d0:Ret ntoskrnl.exe.KeQueryActiveProcessorCountEx() retval=00000008 ret=00c83d3a 00d0:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc6cb0c ip=7bc6cb0c tid=00d0 00d0:trace:seh:raise_exception info[0]=0000000000e00266 00d0:trace:seh:raise_exception info[1]=0000000000dffd28 wine: Call from 0x7bc6cb0c to unimplemented function ntoskrnl.exe.KeSetSystemAffinityThreadEx, aborting --- snip --- Microsoft docs: https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-ke… This API is needed to ensure that certain code is executed on a specific cpu core (pinning). Relevant disassembly snippet of driver: --- snip --- ... 140003D37 | call qword ptr ds:[rax+40] | KeQueryActiveProcessorCountEx 140003D3A | mov byte ptr ds:[rsi+30],al | 140003D3D | movzx ebp,al | num cores 140003D40 | cmp al,20 | 140003D42 | jb denuvo-anti-cheat.140003D49 | 140003D44 | mov ebp,20 | limit to 32 cores max 140003D49 | or rcx,FFFFFFFFFFFFFFFF | 140003D4D | mov dword ptr ds:[rsi+34],ebp | 140003D50 | call qword ptr ds:[<&JMP.&KeSetSystemAffinityThreadEx>] 140003D56 | mov r15,rax | 140003D59 | test ebp,ebp | 140003D5B | je denuvo-anti-cheat.140003DA9 | 140003D5D | mov qword ptr ss:[rsp+80],r14 | 140003D65 | lea rdi,qword ptr ds:[rsi+38] | 140003D69 | lea r14,qword ptr ds:[rsi+1C38] | 140003D70 | mov esi,ebp | 140003D72 | mov rcx,rbx | 140003D75 | mov edx,1 | 140003D7A | shl rdx,cl | 140003D7D | mov rcx,rdx | current core mask 140003D80 | call qword ptr ds:[<&JMP.&KeSetSystemAffinityThreadEx>] 140003D86 | mov rdx,r14 | 140003D89 | mov rcx,rdi | 140003D8C | call denuvo-anti-cheat.1400086C0 | read cpuid + VMX MSRs 140003D91 | inc rbx | core++ 140003D94 | add rdi,E0 | 140003D9B | sub rsi,1 | 140003D9F | jne denuvo-anti-cheat.140003D72 | loop through all cores 140003DA1 | mov r14,qword ptr ss:[rsp+80] | 140003DA9 | mov rcx,r15 | 140003DAC | call qword ptr ds:[1400770F0] | KeRevertToUserAffinityThreadEx 140003DB2 | mov rcx,qword ptr ss:[rsp+30] | 140003DB7 | xor rcx,rsp | 140003DBA | call denuvo-anti-cheat.14006FB10 | 140003DBF | add rsp,40 | 140003DC3 | pop r15 | 140003DC5 | pop rdi | 140003DC6 | pop rsi | 140003DC7 | pop rbp | 140003DC8 | pop rbx | 140003DC9 | ret | --- snip --- The API is used by the driver to execute a subroutine on each cpu core (limited to 32) which: - queries information about the cpu core (vendor, revision, ...) - queries for virtualization extensions (VMX MSRs) $ wine --version wine-5.8-321-gf0a8061663 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 44115] New: vcrun2012's vcredist_arm.exe crashes in riched20:: isurlneutral()
by wine-bugs＠winehq.org 05 Jun '20

05 Jun '20

https://bugs.winehq.org/show_bug.cgi?id=44115 Bug ID: 44115 Summary: vcrun2012's vcredist_arm.exe crashes in riched20::isurlneutral() Product: Wine Version: 2.21 Hardware: arm OS: Linux Status: NEW Keywords: download, Installer Severity: normal Priority: P2 Component: richedit Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: Debian Crashes on start, in riched20: Backtrace: =>0 0xad0b7c40 isurlneutral+0x14() in riched20 (0x00000000) 1 0xad0b7c38 isurlneutral+0xb() in riched20 (0x00000000) 2 0xad0baec4 ME_UpdateLinkAttribute+0x12b(editor=(nil), start=<is not available>, nChars=0xad0fa000) [/home/austin/wine-git/dlls/riched20/editor.c:5296] in riched20 (0x00000000) 3 0x00000002 (0x00000000) 0xad0b7c40 isurlneutral+0x14 in riched20: ldrh ip, [r2, r3] -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 49251] New: Mouse cursor leaves a trail when anti-aliasing enabled (Secret Files 1-2, Fahrenheit, Ufo:Extraterrestrials)
by WineHQ Bugzilla 05 Jun '20

05 Jun '20

https://bugs.winehq.org/show_bug.cgi?id=49251 Bug ID: 49251 Summary: Mouse cursor leaves a trail when anti-aliasing enabled (Secret Files 1-2, Fahrenheit, Ufo:Extraterrestrials) Product: Wine Version: 5.4 Hardware: x86 URL: https://www.moddb.com/games/fahrenheit/downloads/faren heit-demo OS: Linux Status: NEW Keywords: download, regression Severity: normal Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: gyebro69(a)gmail.com CC: gofmanp(a)gmail.com Regression SHA1: 7ec7d812f1d5eabef12ac97d46fbb41bc2a91e98 Distribution: --- I'm having this problem in a couple of older games (Secret Files 1-2, Ufo: Extraterrestrials, Fahrenheit). When in-game anti-aliasing is enabled in those games, the mouse pointer leaves a trail across the screen and the screen stops refreshing, making the games unusable. According to my testing this was introduced by https://source.winehq.org/git/wine.git/commit/7ec7d812f1d5eabef12ac97d46fbb… Reverting the commit on current HEAD fixes the problem. Plain terminal output doesn't show anything related. To reproduce the problem in Fahrenheit demo: Start the game, create a new profile, select <Options>, <Visual>, set <Graphic Level> to custom. Click <Advanced Graphic Options> and enable anti-aliasing. Click on <Back> button to apply the changes. As you move the mouse and the cursor hits the border of the screen, the problem appears. wine-5.9-23-gba920246e5 OpenGL vendor string: NVIDIA Corporation OpenGL renderer string: GeForce GT 730/PCIe/SSE2 OpenGL core profile version string: 4.6.0 NVIDIA 440.66.14 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 34842] New: Garmin BaseCamp 4.1.2 sometimes fails to run when late-bound riched20.dll preferred load base address is already occupied and PE mapped into >2 GiB address range
by wine-bugs＠winehq.org 05 Jun '20

05 Jun '20

http://bugs.winehq.org/show_bug.cgi?id=34842 Bug #: 34842 Summary: Garmin BaseCamp 4.1.2 sometimes fails to run when late-bound riched20.dll preferred load base address is already occupied and PE mapped into >2 GiB address range Product: Wine Version: 1.7.5 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, Garmin BaseCamp 4.1.2 runs pretty good with MS .NET Framework 3.5 installed. There are (albeit rare) cases of startup failures when Wine loader fails to map builtin RichEd20.dll to its preferred load base address because it is already taken by another module. RichEd20 needs a load address in lower 2 GiB virtual address space. See bug 22551 "Multiple .NET apps fail to load riched20.dll into memory (.NET Framework/Windows Forms wants riched20.dll loaded into lower 2GiB address space range)" for info. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Garmin/BaseCamp ... $ wine ./BaseCamp.exe ... err:eventlog:ReportEventW L"clr20r3" err:eventlog:ReportEventW L"basecamp.exe" err:eventlog:ReportEventW L"4.1.2.0" err:eventlog:ReportEventW L"5134f30b" err:eventlog:ReportEventW L"system.windows.forms" err:eventlog:ReportEventW L"2.0.0.0" err:eventlog:ReportEventW L"471ebf68" err:eventlog:ReportEventW L"4ecd" err:eventlog:ReportEventW L"5b" err:eventlog:ReportEventW L"system.componentmodel.win32" err:eventlog:ReportEventW L"NIL" fixme:advapi:DeregisterEventSource (0xcafe4242) stub err:ole:CoInitializeEx Attempt to change threading model of this apartment from multi-threaded to apartment threaded err:ole:CoInitializeEx Attempt to change threading model of this apartment from multi-threaded to apartment threaded fixme:richedit:ME_HandleMessage EM_SETMARGINS: stub fixme:richedit:ME_HandleMessage EM_SETMARGINS: stub err:ole:CoUninitialize Mismatched CoUninitialize err:ole:CoUninitialize Mismatched CoUninitialize Unhandled Exception: System.ComponentModel.Win32Exception: Cannot load the "RichEd20.DLL" DLL into memory. at System.Windows.Forms.RichTextBox.get_CreateParams() at System.Windows.Forms.Control..ctor(Boolean autoInstallSyncContext) at System.Windows.Forms.TextBoxBase..ctor() at System.Windows.Forms.RichTextBox..ctor() at bc.FatalErrorDialog_t.InitializeComponent() at bc.FatalErrorDialog_t..ctor(basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >* aAppName) at bc.FatalError_t.Display(SByte* aFilename, UInt16 aLineNumber, basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >* aWhat, basic_string<char\,std::char_traits<char>\,std::allocator<char> >* aSubId, Optional_t<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > >* aOpenGLVersion, vector<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > >\,std::allocator<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > > > >* aFileList) at bc.FatalError_t..ctor(Exception aException, Optional_t<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > >* aOpenGLVersion, vector<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > >\,std::allocator<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > > > >* aFileList) at main(String[] aArgs) at mainCRTStartupStrArray(String[] arguments) wine: Unhandled exception 0xe0434f4d in thread 33 at address 0x7b83a8bf (thread 0033), starting debugger... --- snip --- RichEd20.dll has a preferred load address: --- snip --- EXTRADLLFLAGS = -Wl,--image-base,0x7ac00000 --- snip --- Address space layout in case of collision: --- snip --- Module Address Debug info Name (139 modules) PE 340000- 362000 Deferred zlibwapi PE 400000- 25a7000 Deferred basecamp PE 25b0000- 278d000 Deferred xerceslib PE 2790000- 2bc6000 Deferred ogckml PE 2df0000- 337f000 Export mscorwks PE e610000- e6ae000 Deferred system.drawing PE e9c0000- ecb2000 Deferred system PE f270000- f73a000 Deferred system.windows.forms PE 10000000-100e5000 Deferred exiv2 PE 5e3a0000-5e42d000 Deferred diasymreader PE 60000000-60008000 Deferred accessibility PE 637a0000-6399c000 Deferred system.xml PE 64020000-64033000 Deferred mscorsec PE 64890000-648fc000 Deferred system.configuration PE 67510000-6756e000 Deferred system.management PE 6a310000-6a31a000 Deferred wminet_utils PE 74e60000-74e79000 Deferred wmiutils PE 78130000-781cb000 Deferred msvcr80 PE 783f0000-78433000 Deferred msvcm90 PE 79000000-79046000 Export mscoree PE 79060000-790b6000 Deferred mscorjit PE 790c0000-79500000 Deferred mscorlib ELF 79afa000-7b800000 Deferred libnvidia-glcore.so.304.108 ELF 7b800000-7ba60000 Dwarf kernel32<elf> \-PE 7b810000-7ba60000 \ kernel32 ... ELF f6a22000-f6a89000 Deferred riched20<elf> \-PE f6a30000-f6a89000 \ riched20 --- snip --- "libnvidia-glcore.so.304.108" took the place earlier and "riched20.dll" was mapped into > 2 GiB address space which .NET runtime doesn't like. Maybe Wine loader could try to map dlls which have requirements of preferred load address always in < 2 GiB address range for Windows compatiblity. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 9

[Bug 49194] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs 'netio.sys' (Winsock Kernel Sockets API / WSK)
by WineHQ Bugzilla 05 Jun '20

05 Jun '20

https://bugs.winehq.org/show_bug.cgi?id=49194 Bug ID: 49194 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs 'netio.sys' (Winsock Kernel Sockets API / WSK) Product: Wine Version: 5.8 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. Continuation of bug 49192 Disclaimer for the general populace, to avoid these stupid comments on Reddit/your-favourite-gossip-site: This is not an attempt to make anything work. --- snip --- $ WINEDEBUG=+seh,+relay,+ntoskrnl wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:trace:ntoskrnl:load_driver loading driver L"C:\\Program Files\\Denuvo Anti-Cheat\\denuvo-anti-cheat.sys" 00d0:Call KERNEL32.LoadLibraryW(0078eff0 L"C:\\Program Files\\Denuvo Anti-Cheat\\denuvo-anti-cheat.sys") ret=00236828 ... 00d0:err:module:import_dll Library netio.sys (which is needed by L"C:\\Program Files\\Denuvo Anti-Cheat\\denuvo-anti-cheat.sys") not found ... 00d0:err:module:import_dll Library wdfldr.sys (which is needed by L"C:\\Program Files\\Denuvo Anti-Cheat\\denuvo-anti-cheat.sys") not found 00d0:Ret ntdll.LdrLoadDll() retval=c0000135 ret=7b01d770 ... 00d0:Ret KERNEL32.LoadLibraryW() retval=00000000 ret=00236828 ... 00d0:trace:ntoskrnl:IoDeleteDriver (00000000000FB930) ... 00d0:err:ntoskrnl:ZwLoadDriver failed to create driver L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat": c0000142 --- snip --- --- snip --- $ winedump -j import drive_c/Program\ Files/Denuvo\ Anti-Cheat/denuvo-anti-cheat.sys Contents of drive_c/Program Files/Denuvo Anti-Cheat/denuvo-anti-cheat.sys: 1553128 bytes Import Table size: 00000050 offset 0017381c netio.sys Hint/Name Table: 0017F670 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 0017F000 Thunk Ordn Name 0017f000 1 WskDeregister 0017f008 2 WskRegister 0017f010 3 WskReleaseProviderNPI 0017f018 0 WskCaptureProviderNPI offset 00173830 ntoskrnl.exe Hint/Name Table: 0017F698 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 0017F028 Thunk Ordn Name 0017f028 0 ExAcquireFastMutex 0017f030 1 ExAllocatePoolWithQuotaTag 0017f038 2 ExAllocatePoolWithTag 0017f040 3 ExCreateCallback 0017f048 4 ExFreePoolWithTag 0017f050 5 ExRegisterCallback 0017f058 6 ExReleaseFastMutex 0017f060 7 ExUnregisterCallback 0017f068 8 IoAllocateIrp 0017f070 9 IoAllocateMdl 0017f078 10 IoFreeIrp 0017f080 11 IoFreeMdl 0017f088 12 IoGetCurrentProcess 0017f090 13 IoGetInitialStack 0017f098 14 IoReuseIrp 0017f0a0 15 KdDebuggerEnabled 0017f0a8 16 KdRefreshDebuggerNotPresent 0017f0b0 17 KeAcquireSpinLockAtDpcLevel 0017f0b8 18 KeAcquireSpinLockRaiseToDpc 0017f0c0 19 KeBugCheckEx 0017f0c8 20 KeCancelTimer 0017f0d0 21 KeDelayExecutionThread 0017f0d8 22 KeGenericCallDpc 0017f0e0 23 KeGetCurrentProcessorNumberEx 0017f0e8 24 KeInitializeDpc 0017f0f0 25 KeInitializeEvent 0017f0f8 26 KeInitializeMutex 0017f100 27 KeInitializeTimer 0017f108 28 KeLowerIrql 0017f110 29 KeQueryActiveProcessorCountEx 0017f118 30 KeReleaseMutex 0017f120 31 KeReleaseSpinLock 0017f128 32 KeReleaseSpinLockFromDpcLevel 0017f130 33 KeRevertToUserAffinityThreadEx 0017f138 34 KeSetEvent 0017f140 35 KeSetSystemAffinityThreadEx 0017f148 36 KeSetTimer 0017f150 37 KeSignalCallDpcDone 0017f158 38 KeSignalCallDpcSynchronize 0017f160 39 KeStackAttachProcess 0017f168 40 KeUnstackDetachProcess 0017f170 41 KeWaitForSingleObject 0017f178 42 KfRaiseIrql 0017f180 43 MmBuildMdlForNonPagedPool 0017f188 44 MmGetPhysicalAddress 0017f190 45 MmGetSystemRoutineAddress 0017f198 46 MmGetVirtualForPhysical 0017f1a0 47 MmIsAddressValid 0017f1a8 48 MmMapIoSpace 0017f1b0 49 MmUnmapIoSpace 0017f1b8 50 ObOpenObjectByPointer 0017f1c0 51 ObReferenceObjectByHandle 0017f1c8 52 ObRegisterCallbacks 0017f1d0 53 ObUnRegisterCallbacks 0017f1d8 54 ObfDereferenceObject 0017f1e0 55 ObfReferenceObject 0017f1e8 56 PsCreateSystemThread 0017f1f0 57 PsGetCurrentProcessId 0017f1f8 58 PsGetCurrentThreadTeb 0017f200 59 PsGetProcessId 0017f208 60 PsGetThreadProcessId 0017f210 61 PsGetVersion 0017f218 62 PsLookupProcessByProcessId 0017f220 63 PsProcessType 0017f228 64 PsRemoveLoadImageNotifyRoutine 0017f230 65 PsSetLoadImageNotifyRoutine 0017f238 66 PsTerminateSystemThread 0017f240 67 PsThreadType 0017f248 68 RtlAnsiCharToUnicodeChar 0017f250 69 RtlAnsiStringToUnicodeString 0017f258 70 RtlCheckRegistryKey 0017f260 71 RtlCopyUnicodeString 0017f268 72 RtlFreeUnicodeString 0017f270 73 RtlGetVersion 0017f278 74 RtlInitAnsiString 0017f280 75 RtlInitUnicodeString 0017f288 76 RtlQueryRegistryValues 0017f290 77 RtlRandomEx 0017f298 78 RtlUnicodeToMultiByteN 0017f2a0 79 ZwClose 0017f2a8 80 ZwCreateFile 0017f2b0 81 ZwCreateKey 0017f2b8 82 ZwDeleteFile 0017f2c0 83 ZwDeleteKey 0017f2c8 84 ZwDeleteValueKey 0017f2d0 85 ZwDuplicateObject 0017f2d8 86 ZwLoadDriver 0017f2e0 87 ZwOpenFile 0017f2e8 88 ZwOpenProcess 0017f2f0 89 ZwQuerySystemInformation 0017f2f8 90 ZwQueryVirtualMemory 0017f300 91 ZwReadFile 0017f308 92 ZwSetValueKey 0017f310 93 ZwUnloadDriver 0017f318 94 ZwWriteFile 0017f320 95 __C_specific_handler 0017f328 96 __chkstk 0017f330 97 _purecall offset 00173844 wdfldr.sys Hint/Name Table: 0017F9B0 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 0017F340 Thunk Ordn Name 0017f340 1 WdfVersionBindClass 0017f348 2 WdfVersionUnbind 0017f350 3 WdfVersionUnbindClass 0017f358 0 WdfVersionBind Done dumping drive_c/Program Files/Denuvo Anti-Cheat/denuvo-anti-cheat.sys --- snip --- Looks like the driver registers itself as Winsock Kernel (WSK) client. This is the "new" way as the TDI API is considered legacy on modern Windows versions. --- quote --- The TDI feature is deprecated and will be removed in future versions of Microsoft Windows. Depending on how you use TDI, use either the Winsock Kernel (WSK) or Windows Filtering Platform (WFP). --- quote --- Just mentioning here since Wine has this component as well, albeit different design: 'http.sys' is a WSK client on Windows. https://docs.microsoft.com/en-us/windows-hardware/drivers/network/registeri… $ wine --version wine-5.8-173-g9e26bc8116 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 10

[Bug 49235] New: Microsoft Visual Studio 2010 Express crashes with stack overflow in IDWriteTextAnalyzer::GetGdiCompatibleGlyphPlacements
by WineHQ Bugzilla 05 Jun '20

05 Jun '20

https://bugs.winehq.org/show_bug.cgi?id=49235 Bug ID: 49235 Summary: Microsoft Visual Studio 2010 Express crashes with stack overflow in IDWriteTextAnalyzer::GetGdiCompatibleGlyphPlacements Product: Wine Version: 5.9 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: dwrite Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, encountered while checking some old bug reports. Regression introduced by commit https://source.winehq.org/git/wine.git/commitdiff/c8f409ed9311c6b84b2383ac5… ("dwrite: Keep user features values."). Wine 5.8 works. Download: https://web.archive.org/web/20111016110147/http://download.microsoft.com/do… --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files (x86)/Microsoft Visual Studio 10.0/Common7/IDE $ WINEDEBUG=+seh,+relay,+dwrite wine ./VCExpress.exe >>log.txt 2>&1 ... 0024:trace:dwrite:dwritefactory_CreateTextAnalyzer 0x1257da0, 0x31a65c. ... 0024:trace:dwrite:dwritetextanalyzer_GetGlyphs (L"File":4 0x6ad5298 0 0 "Latn" L"en-US" (nil) 0x1db23b8 0x2665314 2 48 0x31b7a4 0x31b984 0x6ad6218 0x6ad6158 0x31a5e4) 0024:trace:dwrite:analyzer_dump_user_features feature range [0,1) 0024:trace:dwrite:analyzer_dump_user_features feature "calt", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "clig", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "kern", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "liga", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature range [1,4) 0024:trace:dwrite:analyzer_dump_user_features feature "calt", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "clig", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "kern", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "liga", parameter 1 0024:Call ntdll.RtlAllocateHeap(00110000,00000008,00000058) ret=f723159c 0024:Ret ntdll.RtlAllocateHeap() retval=06ae6488 ret=f723159c 0024:trace:dwrite:dwritefontface_TryGetFontTable 0x6ad5298, "GSUB", 0x6ae6494, 0x6ae649c, 0x6ae6498, 0x31a27c. 0024:trace:dwrite:dwritefontface_TryGetFontTable 0x6ad5298, "GPOS", 0x6ae64b0, 0x6ae64b8, 0x6ae64b4, 0x31a27c. 0024:trace:dwrite:dwritefontface_TryGetFontTable 0x6ad5298, "GDEF", 0x6ae64cc, 0x6ae64d4, 0x6ae64d0, 0x31a27c. ... 0024:warn:dwrite:opentype_layout_apply_gsub_lookup Unimplemented lookup 4. 0024:warn:dwrite:opentype_layout_apply_gsub_lookup Unimplemented lookup 4. 0024:warn:dwrite:opentype_layout_apply_gsub_lookup Unimplemented lookup 4. 0024:warn:dwrite:opentype_layout_apply_gsub_lookup Unimplemented lookup 4. ... 0024:trace:dwrite:dwritetextanalyzer_GetGdiCompatibleGlyphPlacements (L"File" 0x31b7a4 0x31b984 4 0x6ad6218 0x6ad6158 4 0x6ad5298 11.00 1.00 0x31a698 0 0 0 "Latn" L"en-US" 0x1db2428 0x2665650 2 0x1db23b8 0x1db2400) 0024:trace:dwrite:analyzer_dump_user_features feature range [0,1) 0024:trace:dwrite:analyzer_dump_user_features feature "calt", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "clig", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "kern", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "liga", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature range [1,4) 0024:trace:dwrite:analyzer_dump_user_features feature "calt", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "clig", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "kern", parameter 1 0024:trace:dwrite:analyzer_dump_user_features feature "liga", parameter 1 ... 0024:trace:dwrite:shape_get_positions script "latn", language deflangsys. 0024:Call KERNEL32.HeapFree(00110000,00000000,00000000) ret=f722fb57 0024:Ret KERNEL32.HeapFree() retval=00000001 ret=f722fb57 0024:Call KERNEL32.HeapFree(00110000,00000000,06ae6518) ret=f7231777 0024:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7bc6ea54 ip=7bc6ea54 tid=0024 0024:trace:seh:raise_exception info[0]=00000001 0024:trace:seh:raise_exception info[1]=00000005 0024:trace:seh:raise_exception eax=00000001 ebx=06ae6510 ecx=06ae6718 edx=00000001 esi=06a00000 edi=00000208 0024:trace:seh:raise_exception ebp=0031a088 esp=00319f90 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010202 0024:trace:seh:call_vectored_handlers calling handler at 0x791f5a7c code=c0000005 flags=0 ... 0024:trace:seh:call_stack_handlers handler at 0x7968f358 returned 1 0024:trace:seh:call_stack_handlers calling handler at 0x791ccc44 code=c0000005 flags=0 0024:Call KERNEL32.GetLastError() ret=7919c63c 0024:Ret KERNEL32.GetLastError() retval=00000000 ret=7919c63c 0024:Call ntdll.RtlAllocateHeap(00110000,00000000,0000004c) ret=7919bf7e 0024:err:seh:setup_exception_record stack overflow 816 bytes in thread 0024 eip f7be36c5 esp 00221000 stack 0x220000-0x221000-0x320000 --- snip --- Unrelated: It would be helpful if 'dwrite' could be turned into a PE with PDB symbols. Winedbg is really useless as of now. $ sha1sum VS2010Express1.iso adef5e361a1f64374f520b9a2d03c54ee43721c6 VS2010Express1.iso $ du -sh VS2010Express1.iso 694M VS2010Express1.iso $ wine --version wine-5.9 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 10

[Bug 49222] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeRevertToUserAffinityThreadEx
by WineHQ Bugzilla 05 Jun '20

05 Jun '20

https://bugs.winehq.org/show_bug.cgi?id=49222 Bug ID: 49222 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeRevertToUserAffinityThreadEx Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49220 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078EE10,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Call ntoskrnl.exe.KeQueryActiveProcessorCountEx(0000ffff) ret=00c83d3a 00d0:fixme:ntoskrnl:KeQueryActiveProcessorCountEx GroupNumber 65535 semi-stub. 00d0:Call KERNEL32.GetSystemInfo(00b5f2f0) ret=00232996 00d0:Call ntdll.NtQuerySystemInformation(00000000,00b5f200,00000040,00000000) ret=7b02c721 00d0:trace:ntdll:NtQuerySystemInformation (0x00000000,0xb5f200,0x00000040,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c721 00d0:Call ntdll.NtQuerySystemInformation(00000001,00b5f1f0,0000000c,00000000) ret=7b02c751 00d0:trace:ntdll:NtQuerySystemInformation (0x00000001,0xb5f1f0,0x0000000c,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c751 00d0:Ret KERNEL32.GetSystemInfo() retval=00000006 ret=00232996 00d0:Ret ntoskrnl.exe.KeQueryActiveProcessorCountEx() retval=00000008 ret=00c83d3a 00d0:Call ntoskrnl.exe.KeSetSystemAffinityThreadEx(ffffffffffffffff) ret=00c83d56 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx (0xffffffff) semi-stub 00d0:Call ntdll.NtQueryInformationThread(fffffffffffffffe,0000001e,00b5f300,00000010,00000000) ret=00232b18 00d0:Ret ntdll.NtQueryInformationThread() retval=00000000 ret=00232b18 00d0:Call ntdll.NtSetInformationThread(fffffffffffffffe,0000001e,00b5f310,00000010) ret=00232b70 00d0:Ret ntdll.NtSetInformationThread() retval=c000000d ret=00232b70 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx Set affinity, status 0xc000000d. 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx old.Group 0, old.Mask 0xff. 00d0:Ret ntoskrnl.exe.KeSetSystemAffinityThreadEx() retval=000000ff ret=00c83d56 00d0:Call ntoskrnl.exe.KeSetSystemAffinityThreadEx(00000001) ret=00c83d86 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx (0x1) semi-stub 00d0:Call ntdll.NtQueryInformationThread(fffffffffffffffe,0000001e,00b5f300,00000010,00000000) ret=00232b18 00d0:Ret ntdll.NtQueryInformationThread() retval=00000000 ret=00232b18 00d0:Call ntdll.NtSetInformationThread(fffffffffffffffe,0000001e,00b5f310,00000010) ret=00232b70 00d0:Ret ntdll.NtSetInformationThread() retval=00000000 ret=00232b70 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx old.Group 0, old.Mask 0xff. 00d0:Ret ntoskrnl.exe.KeSetSystemAffinityThreadEx() retval=000000ff ret=00c83d86 ... 00d0:fixme:int:emulate_instruction reg 0xfe returning 0. 00d0:trace:int:vectored_handler next instruction rip=c88cf5 00d0:trace:int:vectored_handler rax=0000000000000000 rbx=0000000000b5d280 rcx=00000000000000fe rdx=0000000000000000 00d0:trace:int:vectored_handler rsi=00000000008e1f70 rdi=0000000000000000 rbp=0000000000b5f370 rsp=0000000000b5d220 00d0:trace:int:vectored_handler r8=0000000000000000 r9=0000000000000000 r10=0000000000000000 r11=0000000000000000 00d0:trace:int:vectored_handler r12=0000000000000000 r13=00000000ffea4000 r14=0000000000000000 r15=0000000080000008 00d0:trace:seh:call_vectored_handlers handler at 0x22cfa0 returned ffffffff 00d0:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc6cb0c ip=7bc6cb0c tid=00d0 00d0:trace:seh:raise_exception info[0]=0000000000e00266 00d0:trace:seh:raise_exception info[1]=0000000000dffcf8 wine: Call from 0x7bc6cb0c to unimplemented function ntoskrnl.exe.KeRevertToUserAffinityThreadEx, aborting --- snip --- Microsoft docs: https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-ke… It's the "tail" (epilogue) of bug 49219 to restore the previous affinity of the driver's main thread. Relevant disassembly snippet of driver: --- snip --- ... 140003D37 | call qword ptr ds:[rax+40] | KeQueryActiveProcessorCountEx 140003D3A | mov byte ptr ds:[rsi+30],al | 140003D3D | movzx ebp,al | num cores 140003D40 | cmp al,20 | 140003D42 | jb denuvo-anti-cheat.140003D49 | 140003D44 | mov ebp,20 | limit to 32 cores max 140003D49 | or rcx,FFFFFFFFFFFFFFFF | 140003D4D | mov dword ptr ds:[rsi+34],ebp | 140003D50 | call qword ptr ds:[<&JMP.&KeSetSystemAffinityThreadEx>] 140003D56 | mov r15,rax | 140003D59 | test ebp,ebp | 140003D5B | je denuvo-anti-cheat.140003DA9 | 140003D5D | mov qword ptr ss:[rsp+80],r14 | 140003D65 | lea rdi,qword ptr ds:[rsi+38] | 140003D69 | lea r14,qword ptr ds:[rsi+1C38] | 140003D70 | mov esi,ebp | 140003D72 | mov rcx,rbx | 140003D75 | mov edx,1 | 140003D7A | shl rdx,cl | 140003D7D | mov rcx,rdx | current core mask 140003D80 | call qword ptr ds:[<&JMP.&KeSetSystemAffinityThreadEx>] 140003D86 | mov rdx,r14 | 140003D89 | mov rcx,rdi | 140003D8C | call denuvo-anti-cheat.1400086C0 | read cpuid + VMX MSRs 140003D91 | inc rbx | core++ 140003D94 | add rdi,E0 | 140003D9B | sub rsi,1 | 140003D9F | jne denuvo-anti-cheat.140003D72 | loop through all cores 140003DA1 | mov r14,qword ptr ss:[rsp+80] | 140003DA9 | mov rcx,r15 | 140003DAC | call qword ptr ds:[1400770F0] | KeRevertToUserAffinityThreadEx 140003DB2 | mov rcx,qword ptr ss:[rsp+30] | 140003DB7 | xor rcx,rsp | 140003DBA | call denuvo-anti-cheat.14006FB10 | 140003DBF | add rsp,40 | 140003DC3 | pop r15 | 140003DC5 | pop rdi | 140003DC6 | pop rsi | 140003DC7 | pop rbp | 140003DC8 | pop rbx | 140003DC9 | ret | --- snip --- $ wine --version wine-5.8-323-g563de17f53 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 32483] New: Windows Sysinternals "PsInfo" tool fails to retrieve "Video driver" info due to missing registry device hw class {4D36E968-E325-11CE-BFC1-08002BE10318}
by wine-bugs＠winehq.org 05 Jun '20

05 Jun '20

http://bugs.winehq.org/show_bug.cgi?id=32483 Bug #: 32483 Summary: Windows Sysinternals "PsInfo" tool fails to retrieve "Video driver" info due to missing registry device hw class {4D36E968-E325-11CE-BFC1-08002BE10318} Product: Wine Version: 1.5.19 Platform: x86 OS/Version: Linux Status: NEW Severity: enhancement Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, Windows Sysinternals "PsInfo" tool fails to query for some system properties... Making this bug about "Video driver". Output: --- snip --- $ wine ./PsInfo.exe PsInfo v1.77 - Local and remote system information viewer Copyright (C) 2001-2009 Mark Russinovich Sysinternals - www.sysinternals.com Querying information for nexus4...fixme:ole:CoInitializeSecurity ((nil),-1,(nil),(nil),0,3,(nil),0,(nil)) - stub! System information for \\nexus4: Uptime: Error reading uptime Kernel version: Microsoft Windows XP, Uniprocessor Free Product type: Professional Product version: 5.1 Service pack: 3 Kernel build number: 2600 Registered organization: Registered owner: IE version: 6.0000 System root: C:\windows Processors: 4 Processor speed: 2.6 GHz Processor type: Intel(R) Pentium(R) 4 CPU Physical memory: 0 MB Video driver: --- snip --- Trace log for failing registry queries (0-9): --- snip --- ... 0024:Call advapi32.RegOpenKeyExW(80000002,0032f98c L"SYSTEM\\CurrentControlSet\\Control\\Class\\{4D36E968-E325-11CE-BFC1-08002BE10318}\\0000",00000000,00020019,0032f96c) ret=00404611 0024:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=00404611 0024:Call KERNEL32.GetLastError() ret=0040d8f2 0024:Ret KERNEL32.GetLastError() retval=00000000 ret=0040d8f2 ... 0024:Call advapi32.RegOpenKeyExW(80000002,0032f98c L"SYSTEM\\CurrentControlSet\\Control\\Class\\{4D36E968-E325-11CE-BFC1-08002BE10318}\\0009",00000000,00020019,0032f96c) ret=00404611 0024:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=00404611 --- snip --- 4D36E968-E325-11CE-BFC1-08002BE10318 -> Display class GUID There are already a couple of hardware device class GUIDs in Wine registry: --- snip --- [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class] [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e967-e325-11ce-bfc1-08002be10318}] @="Disk drives" "Class"="DiskDrive" [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e978-e325-11ce-bfc1-08002be10318}] @="Ports (COM & LPT)" "Class"="Ports" [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{6bdd1fc6-810f-11d0-bec7-08002be2092f}] @="Imaging devices" "Class"="Image" --- snip --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 5

[Bug 49283] New: Some win10 run into : err:module:import_dll Library api-ms-win-core-libraryloader-l2-1-0.dll not found
by WineHQ Bugzilla 05 Jun '20

05 Jun '20

https://bugs.winehq.org/show_bug.cgi?id=49283 Bug ID: 49283 Summary: Some win10 run into : err:module:import_dll Library api-ms-win-core-libraryloader-l2-1-0.dll not found Product: Wine Version: 5.9 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: xerox.xerox2000x(a)gmail.com Distribution: --- Hi, another one from forum: https://forum.winehq.org/viewtopic.php?f=8&t=33129#p125196 0009:err:module:import_dll Library api-ms-win-core-libraryloader-l2-1-0.dll (which is needed by L"Z:\\home\\ringhloth\\.steam\\steam\\steamapps\\common\\Six Ages Ride Like the Wind\\Ride Like the Wind_Data\\Plugins\\WOCStdLib.dll") not found 0009:err:module:import_dll Library WOCStdLib.dll (which is needed by L"Z:\\home\\ringhloth\\.steam\\steam\\steamapps\\common\\Six Ages Ride Like the Wind\\Ride Like the Wind_Data\\Plugins\\StormAgePlugin.dll") not found As far as i get it, api-ms-win-core-libraryloader-l2-1-0.dll is not a real dll (right). I`ll attach patch that adds (a "real" one)it anyway hereafter; is that for the moment the right way to go? Anyone advise on this?? Unfortunately I do not have this game, however i was able to reproduce similar problem, albeit in a strange way Google said djay Pro (trial) also uses this, but that has appx extension..... However, if you unzip the appx (7z x) it extracts an exe, djayPro.exe. I guess this is not the way this app should be run, but you get same problem: 002c:fixme:winediag:__wine_start_process Wine Staging 5.9 is a testing version containing experimental patches. 002c:fixme:winediag:__wine_start_process Please mention your exact version when filing bug reports on winehq.org. 0034:err:module:__wine_process_init L"C:\\windows\\system32\\winemenubuilder.exe" not found 002c:err:wineboot:process_run_key Error running cmd L"C:\\windows\\system32\\winemenubuilder.exe -a -r" (126). 0024:err:module:import_dll Library api-ms-win-core-libraryloader-l2-1-0.dll (which is needed by L"Z:\\tmp\\WOCStdLib.dll") not found 0024:err:module:import_dll Library WOCStdLib.dll (which is needed by L"Z:\\tmp\\Starboard.dll") not found 0024:err:module:import_dll Library Starboard.dll (which is needed by L"Z:\\tmp\\Foundation.dll") not found 0024:err:module:import_dll Library api-ms-win-core-libraryloader-l2-1-0.dll (which is needed by L"Z:\\tmp\\WOCStdLib.dll") not found 0024:err:module:import_dll Library WOCStdLib.dll (which is needed by L"Z:\\tmp\\Starboard.dll") not found 0024:err:module:import_dll Library Starboard.dll (which is needed by L"Z:\\tmp\\CoreFoundation.dll") not found 0024:err:module:import_dll Library api-ms-win-core-memory-l1-1-4.dll (which is needed by L"Z:\\tmp\\CoreFoundation.dll") not found 0024:err:module:import_dll Library api-ms-win-core-localization-l1-2-2.dll (which is needed by L"Z:\\tmp\\icuuc57.dll") not found Download: http://download.algoriddim.com/djay/202005140724/djayPro_demo_1.0.27684.0_x… -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 44346] New: Worms Armageddon Cannot Click the menu button in Frotnend
by wine-bugs＠winehq.org 05 Jun '20

05 Jun '20

https://bugs.winehq.org/show_bug.cgi?id=44346 Bug ID: 44346 Summary: Worms Armageddon Cannot Click the menu button in Frotnend Product: Wine Version: 3.0-rc5 Hardware: x86 OS: Mac OS X Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: colinjinwk00(a)gmail.com I installed Worms Armageddon from GOG.com, and ran the wine using both Crossover and Wine macOS official pkg by WineHQ. Menu launches successfully, and intros were successful for skipping by clicking left click. However, after 4 menu buttons appear, I cannot click anything, even Quit button (although I can quit the game by escape). -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 7