August 2019 - Wine-Bugs - list.winehq.org

[Bug 34052] New: The Witcher: Character models are sometimes invisible
by wine-bugs＠winehq.org Jan. 6, 2022

Jan. 6, 2022

http://bugs.winehq.org/show_bug.cgi?id=34052 Bug #: 34052 Summary: The Witcher: Character models are sometimes invisible Product: Wine Version: 1.6-rc5 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: jeff(a)deseret-tech.com Classification: Unclassified Created attachment 45258 --> http://bugs.winehq.org/attachment.cgi?id=45258 Missing character models As described in the thread on bug #12771, which was recently closed due to the correction of one of the major reported graphical glitches in The Witcher, save games will sometimes load with invisible character models. Only the face and teeth of humans are visible, along with any gear (but not clothing) that may be carried on the character's back. The occurrence of this issue seems hit and miss -- some people experience almost never, while others experience it almost always. Some registry tweaks involving video memory have been reported to resolve the issue for some. I've attached a fresh screenshot of the issue, as seen with Wine 1.6-rc5. Geralt's face is clearly visible floating in the foreground, and the four floating helmets and swords in the background are supposed to be full city guard characters. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 115

[Bug 19730] New: yahoo games <blood ties> crashes when entering windowed mode <wine 1.1.27>
by wine-bugs＠winehq.org Jan. 6, 2022

Jan. 6, 2022

http://bugs.winehq.org/show_bug.cgi?id=19730 Summary: yahoo games <blood ties> crashes when entering windowed mode <wine 1.1.27> Product: Wine Version: 1.1.27 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: mikescony1(a)ameritech.net Purchased game from yahoo games <Blood Ties> After installing and configuring wine 1.1.27, I installed and registered the application. The game starts with some bad fonts and graphics and the mouse is not visable when in full screen there is an animated mouse associated with the application but I found that when you entered into options and selected windowed mode that usually fixes that issue with the mouse. Now when you enter windowed mode the game crashes. Earlier versions of wine <1.1.XX - 1.1.26> would not allow you to register the game but with your improvements to the gecko engine I am able to register the game with no problems, but there seems to be a problem when the registration download. The download attempts to install new registry keys and wine is not accepting them <wine vers 1.1.27> Can you please help. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 18

[Bug 44586] New: Kamidori dungeon master crashes during animation after unspecified time
by wine-bugs＠winehq.org Jan. 6, 2022

Jan. 6, 2022

https://bugs.winehq.org/show_bug.cgi?id=44586 Bug ID: 44586 Summary: Kamidori dungeon master crashes during animation after unspecified time Product: Wine Version: 3.2 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: quartz Assignee: wine-bugs(a)winehq.org Reporter: zaplo00(a)mailfence.com Distribution: --- After some play time (anything from 1 minute to 3 hours) the game either freezes with music playing on background or shows runtime error popup and quits. Sometimes it simply crashes and shows wine internal stack trace (which has nothing useful). Problems always start after first "BaseMemAllocator_Commit fnAlloc failed" error message and happen during battle animations. This is example log just before crash: ----- 0097:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {5727a00f-50be-4519-8256-f7699871fecb} 0097:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {7e854ec7-cdc4-405a-b5b2-aaf7c9e7d40c} 0097:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {79a60dc6-5fc8-4952-a41c-1163aeec5eb8} 0097:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {2718d25b-5bf5-4479-8e88-babc64bdbfca} 0097:fixme:process:GetNumaHighestNodeNumber (0x1f51f880): semi-stub 0009:fixme:quartz:DSoundRender_QueryInterface No interface for {37d84f60-42cb-11ce-8135-00aa004bb851}! 0009:fixme:quartz:DSoundRender_QueryInterface No interface for {37d84f60-42cb-11ce-8135-00aa004bb851}! 0009:err:quartz:BaseMemAllocator_Commit fnAlloc failed with error 0x8007000e 0201:fixme:ntdll:EtwUnregisterTraceGuids deadbeef: stub 0009:fixme:quartz:DSoundRender_QueryInterface No interface for {37d84f60-42cb-11ce-8135-00aa004bb851}! 00a9:fixme:ntdll:EtwRegisterTraceGuidsW (0xb5a754a, (nil), {f7b697a3-4db5-4d3b-be71-c4d284e6592f}, 7, 0xb5f7020, (null), (null), 0xb5fc820): stub 00a9:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {72b14a7d-704c-423e-92f8-7e6d64bcb92a} 00a9:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {e2091f8a-1e0a-4731-84a2-0dd57c8a5261} 00a9:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {e8a3bf1f-a86b-4390-9c60-5390b969d22c} 00a9:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {5727a00f-50be-4519-8256-f7699871fecb} 00a9:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {7e854ec7-cdc4-405a-b5b2-aaf7c9e7d40c} 00a9:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {79a60dc6-5fc8-4952-a41c-1163aeec5eb8} 00a9:fixme:ntdll:EtwRegisterTraceGuidsW register trace class {2718d25b-5bf5-4479-8e88-babc64bdbfca} 00a9:fixme:process:GetNumaHighestNodeNumber (0x1f51f880): semi-stub 0009:fixme:quartz:DSoundRender_QueryInterface No interface for {37d84f60-42cb-11ce-8135-00aa004bb851}! 0009:fixme:quartz:DSoundRender_QueryInterface No interface for {37d84f60-42cb-11ce-8135-00aa004bb851}! 0009:err:quartz:BaseMemAllocator_Commit fnAlloc failed with error 0x8007000e 0009:fixme:quartz:DSoundRender_QueryInterface No interface for {37d84f60-42cb-11ce-8135-00aa004bb851}! 0009:err:quartz:BaseMemAllocator_Commit fnAlloc failed with error 0x8007000e 01cf:fixme:ntdll:EtwUnregisterTraceGuids deadbeef: stub ----- I have gstreamer good/bad/ugly/base plugins for 32 and 64 bit. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 12

[Bug 46938] New: VisualBoyAdvance-M doesn't work correctly and crashes
by wine-bugs＠winehq.org Jan. 6, 2022

Jan. 6, 2022

https://bugs.winehq.org/show_bug.cgi?id=46938 Bug ID: 46938 Summary: VisualBoyAdvance-M doesn't work correctly and crashes Product: Wine Version: 3.0.4 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: phoenixgearfried(a)hotmail.gr Distribution: --- Created attachment 64057 --> https://bugs.winehq.org/attachment.cgi?id=64057 Log I guess So I am trying to use this gba emulator. When opened from terminal i keep getting these "errors" ----------------------------------------------------------------------------- 0032:fixme:font:get_outline_text_metrics failed to read full_nameW for font L"Ani"! 0032:fixme:win:EnumDisplayDevicesW ((null),0,0x32f1d4,0x00000000), stub! 0032:fixme:win:EnumDisplayDevicesW ((null),0,0x32f454,0x00000000), stub! 0032:fixme:shell:BrsFolder_OnCreate flags BIF_NEWDIALOGSTYLE partially implemented 0032:fixme:shell:BrsFolder_OnCreate flags 10 not implemented 0032:fixme:shell:BrsFolder_OnCreate flags BIF_NEWDIALOGSTYLE partially implemented 0032:fixme:shell:BrsFolder_OnCreate flags 10 not implemented 0032:fixme:shell:BrsFolder_OnCreate flags BIF_NEWDIALOGSTYLE partially implemented 0032:fixme:shell:BrsFolder_OnCreate flags 10 not implemented 0032:fixme:ver:GetCurrentPackageId (0x32dfe0 (nil)): stub AL lib: (EE) ReleaseThreadCtx: Context 0x7c2a5170 current for thread being destroyed, possible leak! AL lib: (EE) ReleaseThreadCtx: Context 0x7c268f80 current for thread being destroyed, possible leak! AL lib: (EE) ReleaseThreadCtx: Context 0x7bb1f670 current for thread being destroyed, possible leak! ^C004a:fixme:console:CONSOLE_DefaultHandler Terminating process 31 on event 0 AL lib: (EE) ReleaseThreadCtx: Context 0x7bb1a8d0 current for thread being destroyed, possible leak! AL lib: (EE) ReleaseThreadCtx: Context 0x7bb1a8d0 current for thread being destroyed, possible leak! ----------------------------------------------------------------------------- -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 39001] New: x11 resets frequently in user32/tests/win.c
by wine-bugs＠winehq.org Jan. 5, 2022

Jan. 5, 2022

https://bugs.winehq.org/show_bug.cgi?id=39001 Bug ID: 39001 Summary: x11 resets frequently in user32/tests/win.c Product: Wine Version: 1.7.48 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: --- On a fresh Fedora 22 install, with nouveau drivers, X frequently resets itself; always in user32/tests/win.c: Running: user32:win (509 of 575) XIO: fatal IO error 104 (Connection reset by peer) on X server ":1.0" after 2841 requests (2821 known processed) with 0 events remaining. err:ole:CoReleaseMarshalData IMarshal::ReleaseMarshalData failed with error 0x8001011d which prevents winetest from submitting, about 40% of the time, so far. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 35009] New: Hoshizora no Memoria:"falid open" Dialog after exit
by wine-bugs＠winehq.org Jan. 5, 2022

Jan. 5, 2022

http://bugs.winehq.org/show_bug.cgi?id=35009 Bug #: 35009 Summary: Hoshizora no Memoria:"falid open" Dialog after exit Product: Wine Version: 1.7.6 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: hibi.sasahara(a)gmail.com Classification: Unclassified Created attachment 46664 --> http://bugs.winehq.org/attachment.cgi?id=46664 terminal output Hoshizora no Memoria(星空のメモリア) is Novel game. Start menu press "Game start" to start playing story. the scene change, upon dialog to file open error. 「grash_bs/CHR_夢_幼少のオープンに失敗しました」 (meaning: failure open to "grash_bs/CHR_夢_幼少") and exit window and this application. Free trial version to: http://www.favo-soft.jp/soft/trial/Hoshimemo_Trial.zip sha1sum: 647b9938bac7ad871b19d768f38a82a59a3d24a8 I confirmed that the same error appeared. note: AppDB is http://appdb.winehq.org/objectManager.php?sClass=application&iId=15676 This game used Retail novel game engine "FAVORITE VIEW POINT SYSTEM". (source(japanese) http://ja.wikipedia.org/wiki/%E3%82%A2%E3%83%88%E3%83%AA%E3%82%A8%E3%81%8B%…) Same game engine use game studio "FAVORITE" and "AtorieKaguya P-ch"(アトリエかぐや P-ch) FAVORITE use this game engine all product. I confirmed that the same error appeared to "Irotoridori no Sekai(いろとりどりのセカイ) WORLD'S END COMPLETE" is latest FAVORITE product. (Free frial version to: http://www.favo-soft.jp/soft/product/world/download/Iroseka_trial.zip sha1sum: c9d127fc96009e8490f45eb3adf7d577e0c56ac6 ) Default is text drawing and other motion very slow, not bug. Debug playing recommend Ctrl key press repeat, fast playing. When game engine is not top window to become drawing stops. is default, not bug. :) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 45

[Bug 40324] New: Installer for update KB2936068 never terminates
by wine-bugs＠winehq.org Jan. 4, 2022

Jan. 4, 2022

https://bugs.winehq.org/show_bug.cgi?id=40324 Bug ID: 40324 Summary: Installer for update KB2936068 never terminates Product: Wine Version: 1.9.5 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: asdfghrbljzmkd(a)outlook.com Distribution: Ubuntu When running the installer for update KB2936068, it never terminates, even though it installs successfully. Pressing CTL+C in the terminal used to launch it is a workaround, and does not seem to have any negative side effects unless it is ran from a script, in which case it terminates the whole script. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 47242] New: ReactOS installer can' t find file because NtQueryInformationProcess doesn' t handle ProcessImageFileName properly
by wine-bugs＠winehq.org Jan. 3, 2022

Jan. 3, 2022

https://bugs.winehq.org/show_bug.cgi?id=47242 Bug ID: 47242 Summary: ReactOS installer can't find file because NtQueryInformationProcess doesn't handle ProcessImageFileName properly Product: Wine Version: 4.8 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: dark.shadow4(a)web.de Distribution: --- Created attachment 64527 --> https://bugs.winehq.org/attachment.cgi?id=64527 Test program As in the title. Also attaching a small test program to reproduce the issue. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 47246] New: DbgPrint does not handle unicode format string '%wZ' ( ReactOS 0.4.11-dev-603+ installer )
by wine-bugs＠winehq.org Jan. 3, 2022

Jan. 3, 2022

https://bugs.winehq.org/show_bug.cgi?id=47246 Bug ID: 47246 Summary: DbgPrint does not handle unicode format string '%wZ' (ReactOS 0.4.11-dev-603+ installer ) Product: Wine Version: 4.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, mentioned in https://jira.reactos.org/browse/CORE-16043 which is about a different issue -> bug 47242 https://jira.reactos.org/browse/CORE-16043?focusedCommentId=114608&page=com… --- quote --- ... However, the fact that the debug log says "NtOpenSymbolicLinkObject(Z) failed with Status 0x006cf6a4" while the corresponding code line is: 457 /* 458 * We failed at opening the \SystemRoot link (usually due to wrong 459 * access rights). Do not consider this as a fatal error, but use 460 * instead the image file path as the installation source path. 461 */ 462 DPRINT1("NtOpenSymbolicLinkObject(%wZ) failed with Status 0x%08lx\n", 463 &SystemRootPath, Status); is scarier, because "0x006cf6a4" is NOT a valid status code, and SystemRootPath is up to this point still pointing to the constant string L" SystemRoot" in UNICODE_STRING format. Maybe also their debugging procedure does not understand what %wZ means ? (and so it displays garbage) --- quote --- Indeed. Trace log: --- snip --- $ WINEDEBUG=+seh,+relay,+ntdll,+server wine ./reactos.exe >>log.txt 2>&1 ... 0009:Call ntdll.NtQueryInformationProcess(ffffffff,0000001b,0034f91c,00000210,00000000) ret=00409074 0009: get_dll_info( handle=ffffffff, base_address=00000000 ) 0009: get_dll_info() = 0 { entry_point=00000000, filename_len=86, filename=L"Z:\\home\\focht\\Downloads\\reactos\\reactos.exe" } 0009:Ret ntdll.NtQueryInformationProcess() retval=00000000 ret=00409074 0009:Call msvcrt.wcsrchr(0034f924 L"Z:\\home\\focht\\Downloads\\reactos\\reactos.exe",0000005c) ret=004090a7 0009:Ret msvcrt.wcsrchr() retval=0034f962 ret=004090a7 0009:Call msvcrt.wcslen(0034f924 L"Z:\\home\\focht\\Downloads\\reactos") ret=004090c7 0009:Ret msvcrt.wcslen() retval=0000001f ret=004090c7 0009:Call ntdll.NtOpenSymbolicLinkObject(0034fd50,00000001,0034fd34) ret=0040910b 0009:trace:ntdll:NtOpenSymbolicLinkObject (0x34fd50,0x00000001,{name=L"\\SystemRoot", attr=0x00000040, hRoot=(nil), sd=(nil)} ) 0009: open_symlink( access=00000001, attributes=00000040, rootdir=0000, name=L"\\SystemRoot" ) 0009: open_symlink() = OBJECT_NAME_NOT_FOUND { handle=0000 } 0009:Ret ntdll.NtOpenSymbolicLinkObject() retval=c0000034 ret=0040910b 0009:trace:ntdll:pf_vsnprintf format is L"(%s:%d) NtOpenSymbolicLinkObject(%wZ) failed with Status 0x%08lx\n" DbgPrint says: (base\setup\lib\setuplib.c:454) NtOpenSymbolicLinkObject(Z) failed with Status 0x0034fd54 0009:Call ntdll.RtlCreateUnicodeString(00444edc,0034f924 L"Z:\\home\\focht\\Downloads\\reactos") ret=004091db 0009:Ret ntdll.RtlCreateUnicodeString() retval=00000001 ret=004091db 0009:Call msvcrt.wcsrchr(0034f924 L"Z:\\home\\focht\\Downloads\\reactos",0000005c) ret=004091e9 0009:Ret msvcrt.wcsrchr() retval=0034f952 ret=004091e9 0009:Call ntdll.RtlCreateUnicodeString(00444ed4,0034f952 L"\\reactos") ret=00409203 0009:Ret ntdll.RtlCreateUnicodeString() retval=00000001 ret=00409203 0009:Call ntdll.RtlCreateUnicodeString(00444ecc,0034f924 L"Z:\\home\\focht\\Downloads") ret=0040922d 0009:Ret ntdll.RtlCreateUnicodeString() retval=00000001 ret=0040922d 0009:trace:ntdll:pf_vsnprintf format is L"(%s:%d) SourcePath: '%wZ'\n" DbgPrint says: (base\setup\reactos\reactos.c:986) SourcePath: 'Z' 0009:trace:ntdll:pf_vsnprintf format is L"(%s:%d) SourceRootPath: '%wZ'\n" DbgPrint says: (base\setup\reactos\reactos.c:987) SourceRootPath: 'Z' 0009:trace:ntdll:pf_vsnprintf format is L"(%s:%d) SourceRootDir: '%wZ'\n" DbgPrint says: (base\setup\reactos\reactos.c:988) SourceRootDir: 'Z' ... --- snip --- Wine source: https://source.winehq.org/git/wine.git/blob/HEAD:/dlls/ntdll/printf.c#l418 Microsoft docs: https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/content/wdm/n… https://docs.microsoft.com/en-us/cpp/c-runtime-library/format-specification… $ sha1sum reactos-bootcd-0.4.11-dev-603-g4bf9f6f-x86-msvc-win-dbg.* bcb4c544c61ddf899ccd0266cdc8f40cc8dfa96d reactos-bootcd-0.4.11-dev-603-g4bf9f6f-x86-msvc-win-dbg.7z bc0293827c84f6402cbcb39c1628f38ff16ef651 reactos-bootcd-0.4.11-dev-603-g4bf9f6f-x86-msvc-win-dbg.iso $ du -sh reactos-bootcd-0.4.11-dev-603-g4bf9f6f-x86-msvc-win-dbg.* 55M reactos-bootcd-0.4.11-dev-603-g4bf9f6f-x86-msvc-win-dbg.7z 73M reactos-bootcd-0.4.11-dev-603-g4bf9f6f-x86-msvc-win-dbg.iso $ wine --version wine-4.8-296-g6a610a3258 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 47175] New: Star Wars - The Old Republic web-installer fails with ' ... require administrative permission acknowledgment' ( BitRaider filter driver SCM config 'ImagePath' must be prefixed with '\??\ ')
by wine-bugs＠winehq.org Jan. 3, 2022

Jan. 3, 2022

https://bugs.winehq.org/show_bug.cgi?id=47175 Bug ID: 47175 Summary: Star Wars - The Old Republic web-installer fails with '... require administrative permission acknowledgment' (BitRaider filter driver SCM config 'ImagePath' must be prefixed with '\??\') Product: Wine Version: 4.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, found this comment: https://old.reddit.com/r/wine_gaming/comments/bmpsaw/support_components_as_… which is related to the BitRaider service/component/technology (https://www.bitraider.com/) Further articles for reference: * https://www.reddit.com/r/swtor/comments/5wt85k/guide_how_to_run_swtor_on_os… * https://www.reddit.com/r/swtor/comments/bcqg0h/anyone_else_experience_this_… * https://www.reddit.com/r/swtor/comments/3ksypm/guide_to_permanently_removin… * https://www.codeweavers.com/compatibility/crossover/tips/star-wars-the-old-… There are actually multiple interesting bugs behind the BitRaider functionality (streaming downloader/content distribution system). The first issues have to with the way the Windows service configuration (SCM) is stored/handled in registry. The folks who wrote this piece of gar....^ have an interesting way of using Windows service control manager API and bypassing it completely when dealing with kernel/filter driver service configurations. I leave you out some hours of investigations with dead-ends and misleading log output. There is a helper (console) app which is used to install and configure BitRaider. At least three log file locations are of interest during boostrapping of the game installer/launcher which includes set up of BitRaider. --- snip --- .wine/drive_c/ProgramData/BitRaider/common/logs/BR_Debuglog.txt ... .wine/drive_c/Star Wars-The Old Republic/bitraider/logs/swtor_swtor.txt ... .wine/drive_c/Star Wars-The Old Republic/logs/launcher_20190511.log --- snip --- 'swtor_swtor.txt' --- snip --- ... 1.3.3.4098 2014/10/10 15:09 1.3.3_hotfix #22 Logfile updated 2019/05/11 08:55:16.927:[INFO]MachineId: LAV9AVgtU0VCMUctcjMVNSIAbgBuADMA PID: 8 2019/05/11 08:55:16.929:[INFO]Language ID: 1033 Kernel: C:\windows\system32\ntoskrnl.exe 2019/05/11 08:55:16.929:[INFO]Host OS: Windows 7 [6.1.7601.21863] - 64-Bit - Release Client. - Process Elevated - User Fully Elevated 2019/05/11 08:55:16.929:[INFO]Exepath: C:\Star Wars-The Old Republic\bitraider\bin\brwc.exe 2019/05/11 08:55:16.929:[INFO]Command Parms: "brdestpath=c:\star wars-the old republic" brlocalebank=0 id=swtor_swtor -brnolaunch -brnoui brcallingpid=8 2019/05/11 08:55:16.937:[INFO]Connecting to Service Core, command: 13 2019/05/11 08:55:16.942:[INFO]CBRWCApp: Loaded common path "c:\star wars-the old republic\Bitraider\bin\" for ID=swtor_swtor 2019/05/11 08:55:16.993:[INFO]STLEFE: Skipping extract to C:\Star Wars-The Old Republic\bitraider\bin\BRException.exe; identical to reource 2019/05/11 08:55:16.995:[INFO]STLEFE: Skipping extract to C:\ProgramData\BitRaider\common\BRException.exe; identical to reource 2019/05/11 08:55:16.998:[INFO]STLEFE: Skipping extract to C:\Star Wars-The Old Republic\bitraider\bin\BRExtPipe.dll; identical to reource 2019/05/11 08:55:16.999:[INFO]STLEFE: Skipping extract to C:\ProgramData\BitRaider\BRExtPipe.dll; identical to reource 2019/05/11 08:55:17.033:[CRIT](BRDriver64_1_3_3_E02B25FC): reading 'ImagePath' string under key System\CurrentControlSet\Services\BRDriver64_1_3_3_E02B25FC failed. error code 0 2019/05/11 08:55:17.042:[INFO]CSTL-StartStopSupportServiceStub: CurrentState: 3 2019/05/11 08:55:18.047:[INFO]CSTL-StartStopSupportServiceStub: CurrentState: 1 2019/05/11 08:55:18.062:[INFO]STLEFE: Skipping extract to C:\ProgramData\BitRaider\BRSptStub.exe; identical to reource 2019/05/11 08:55:18.081:[INFO]Attempting to install a new copy of the service helper. 2019/05/11 08:55:18.540:[INFO]Support Service Successfully installed 2019/05/11 08:55:18.541:[CRIT](BRDriver64_1_3_3_E02B25FC): reading 'Ima2019/05/11 08:59:45.826:[INFO] ... --- snip --- --- snip --- $ pwd /home/focht/.wine/drive_c/Star Wars-The Old Republic/bitraider/bin $ WINEDEBUG=+seh,+relay,+server,+reg,+service wine ./brwc.exe brdestpath="c:\star wars-the old republic" brlocalebank=0 id=swtor_swtor -brnolaunch -brnoui brcallingpid=8 >>log.txt 2>&1 ... 0082:Call KERNEL32.GetModuleHandleW(007683c8 L"kernel32.dll") ret=004aaaec 0082:Ret KERNEL32.GetModuleHandleW() retval=7b430000 ret=004aaaec 0082:Call KERNEL32.GetProcAddress(7b430000,00769538 "GetSystemWow64DirectoryW") ret=004aaafc 0082:Ret KERNEL32.GetProcAddress() retval=7b43675c ret=004aaafc 0082:Call KERNEL32.GetSystemWow64DirectoryW(0031c660,00000104) ret=004aab0e 0082:Ret KERNEL32.GetSystemWow64DirectoryW() retval=00000013 ret=004aab0e ... 0082:Call advapi32.RegOpenKeyExW(80000002,0031d0ec L"System\\CurrentControlSet\\Services\\BRDriver64_1_3_3_E02B25FC",00000000,00020019,0031c890) ret=00483205 0082:trace:reg:open_key (0x2c,L"System\\CurrentControlSet\\Services\\BRDriver64_1_3_3_E02B25FC",20019,0x31c890) 0082: open_key( parent=002c, access=00020019, attributes=00000000, name=L"System\\CurrentControlSet\\Services\\BRDriver64_1_3_3_E02B25FC" ) 0082: open_key() = 0 { hkey=01cc } 0082:trace:reg:open_key <- 0x1cc 0082:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=00483205 0082:Call advapi32.RegQueryValueExW(000001cc,00754df4 L"DisplayName",00000000,0031c88c,0031ceec,0031c894) ret=00483249 0082:trace:reg:RegQueryValueExW (0x1cc,L"DisplayName",(nil),0x31c88c,0x31ceec,0x31c894=512) 0082:trace:reg:NtQueryValueKey (0x1cc,L"DisplayName",2,0x31c6c4,256) 0082: get_key_value( hkey=01cc, name=L"DisplayName" ) 0082: get_key_value() = 0 { type=1, total=52, data={42,00,52,00,44,00,72,00,69,00,76,00,65,00,72,00,36,00,34,00,5f,00,31,00,5f,00,33,00,5f,00,33,00,5f,00,45,00,30,00,32,00,42,00,32,00,35,00,46,00,43,00,00,00} } 0082:Ret advapi32.RegQueryValueExW() retval=00000000 ret=00483249 0082:Call advapi32.RegQueryValueExW(000001cc,00754e0c L"ErrorControl",00000000,0031c88c,0031c888,0031c894) ret=004832b4 0082:trace:reg:RegQueryValueExW (0x1cc,L"ErrorControl",(nil),0x31c88c,0x31c888,0x31c894=4) 0082:trace:reg:NtQueryValueKey (0x1cc,L"ErrorControl",2,0x31c6c4,16) 0082: get_key_value( hkey=01cc, name=L"ErrorControl" ) 0082: get_key_value() = 0 { type=4, total=4, data={01,00,00,00} } 0082:Ret advapi32.RegQueryValueExW() retval=00000000 ret=004832b4 0082:Call advapi32.RegQueryValueExW(000001cc,00754e34 L"ImagePath",00000000,0031c88c,0031ceec,0031c894) ret=00483358 0082:trace:reg:RegQueryValueExW (0x1cc,L"ImagePath",(nil),0x31c88c,0x31ceec,0x31c894=512) 0082:trace:reg:NtQueryValueKey (0x1cc,L"ImagePath",2,0x31c6c4,256) 0082: get_key_value( hkey=01cc, name=L"ImagePath" ) 0082: get_key_value() = 0 { type=1, total=126, data={43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,44,00,61,00,74,00,61,00,5c,00,42,00,69,00,74,00,52,00,61,00,69,00,64,00,65,00,72,00,5c,00,73,00,75,00,70,00,70,00,6f,00,72,00,74,00,5c,00,31,00,2e,00,33,00,2e,00,33,00,5c,00,45,00,30,00,32,00,42,00,32,00,35,00,46,00,43,00,5c,00,42,00,52,00,44,00,72,00,69,00,76,00,65,00,72,00,36,00,34,00,2e,00,73,00,79,00,73,00,00,00} } 0082:Ret advapi32.RegQueryValueExW() retval=00000000 ret=00483358 0082:Call KERNEL32.GetLastError() ret=004836aa 0082:Ret KERNEL32.GetLastError() retval=00000000 ret=004836aa ... 0082:Call user32.MessageBoxW(00000000,00c26108 L"Installation of the driver and support components require administrative permission acknowledgment.\r\nTry invoking the client again.\r\nInstaller cannot continue. Exiting.",00c28250 L"Fatal error",00000000) ret=0041f794 ... --- snip --- The app writes kernel/filter driver service configuration directly into registry ('System\\CurrentControlSet\\Services\\...'), lets the helper service (userspace side) of the filter driver register the actual kernel service using SCM and then rewrites parts of the filter driver config again. Yay. Unfortunately the reason for the first problem can't be seen in trace log, one has to debug the garbage. Relevant piece of app code: --- snip --- 00482F60 | push ebp | 00482F61 | mov ebp,esp | 00482F63 | push FFFFFFFF | 00482F65 | push <brwc.sub_6489B2> | 00482F6A | mov eax,dword ptr fs:[0] | 00482F70 | push eax | 00482F71 | sub esp,A6C | ... 00483002 | push A | 00483004 | push brwc.753C2C | L"BRDriver64" 00483009 | call <brwc.sub_409E60> | ... 0048312F | push C | 00483131 | push brwc.753C78 | L"BRDriver.sys" 00483136 | lea esi,dword ptr ss:[ebp-A48] | 0048313C | call <brwc.sub_40B040> | 00483141 | mov eax,dword ptr ds:[7D19BC] | 00483146 | mov ecx,dword ptr ds:[7D19B8] | 0048314C | mov edx,dword ptr ds:[7D19B4] | 00483152 | push eax | 00483153 | mov eax,dword ptr ds:[7D19B0] | 00483158 | push ecx | 00483159 | push edx | 0048315A | push eax | 0048315B | push brwc.754D84 | L"_%u_%u_%u_%08X" 00483160 | lea esi,dword ptr ss:[ebp-A2C] | 00483166 | call <brwc.sub_408EB0> | ... 004831CA | mov eax,esi | 004831CC | push eax | ; L"System\\CurrentControlSet\\Services\\%s" 004831CD | push brwc.754DA8 | 004831D2 | lea edx,dword ptr ss:[ebp-210] | 004831D8 | push 100 | 004831DD | push edx | 004831DE | call <brwc.sub_60427D> | ... 004832C9 | push 1FE | 004832CE | lea edx,dword ptr ss:[ebp-A0E] | 004832D4 | xor ecx,ecx | 004832D6 | push edi | 004832D7 | push edx | 004832D8 | mov word ptr ss:[ebp-A10],cx | 004832DF | call <brwc.sub_60DD90> | 004832E4 | add esp,C | 004832E7 | push brwc.754E28 | L"\\??\\" 004832EC | lea eax,dword ptr ss:[ebp-A10] | 004832F2 | push 100 | 004832F7 | push eax | 004832F8 | call <brwc.sub_603BD1> | 004832FD | mov eax,dword ptr ss:[ebp-A48] | 00483303 | add esp,C | 00483306 | cmp dword ptr ss:[ebp-A34],8 | 0048330D | jae brwc.483315 | 0048330F | lea eax,dword ptr ss:[ebp-A48] | 00483315 | push eax | 00483316 | lea ecx,dword ptr ss:[ebp-A10] | 0048331C | push 100 | 00483321 | push ecx | 00483322 | call <brwc.sub_606E76> | 00483327 | add esp,C | 0048332A | lea edx,dword ptr ss:[ebp-A68] | 00483330 | push edx | 00483331 | mov edx,dword ptr ss:[ebp-A6C] | 00483337 | lea eax,dword ptr ss:[ebp-410] | 0048333D | push eax | 0048333E | lea ecx,dword ptr ss:[ebp-A70] | 00483344 | push ecx | 00483345 | push edi | 00483346 | push brwc.754E34 | L"ImagePath" 0048334B | push edx | 0048334C | mov dword ptr ss:[ebp-A68],200 | 00483356 | call ebx | 00483358 | test eax,eax | 0048335A | jne brwc.48368F | ... 0048368F | cmp dword ptr ss:[ebp-A18],8 | 00483696 | mov esi,dword ptr ss:[ebp-A2C] | 0048369C | jae brwc.4836A4 | 0048369E | lea esi,dword ptr ss:[ebp-A2C] | 004836A4 | call dword ptr ds:[69438C] | 004836AA | push eax | 004836AB | lea ecx,dword ptr ss:[ebp-210] | 004836B1 | push ecx | 004836B2 | push esi | ; L"(%s): reading 'ImagePath' string under key %s failed. error code %x\n" 004836B3 | push brwc.755180 | 004836B8 | jmp brwc.48370E | --- snip --- To cut it short: It seems 'ImagePath' entries for SERVICE_KERNEL_DRIVER or SERVICE_FILE_SYSTEM_DRIVER driver services are to be prefixed with native NT-path '\??\' syntax when created via advapi32.CreateServiceA/W(). Manual creation of service config keys by app prior: --- snip --- ... 003c:Call advapi32.RegCreateKeyExW(80000002,0032f5d4 L"System\\CurrentControlSet\\Services\\BRDriver64_1_3_3_E02B25FC",00000000,0042ab4c,00000000,0000000e,00000000,0032efd0,0032efc8) ret=0040b176 003c:trace:reg:NtCreateKey (0x24,L"System\\CurrentControlSet\\Services\\BRDriver64_1_3_3_E02B25FC",L"",0,e,0x32ee14) 003c: create_key( access=0000000e, options=00000000, objattr={rootdir=0024,attributes=00000000,sd={},name=L"System\\CurrentControlSet\\Services\\BRDriver64_1_3_3_E02B25FC"}, class=L"" ) 003c: create_key() = 0 { hkey=0054, created=0 } 003c:trace:reg:NtCreateKey <- 0x54 003c:Ret advapi32.RegCreateKeyExW() retval=00000000 ret=0040b176 003c:Call advapi32.RegSetValueExW(00000054,0042d644 L"DisplayName",00000000,00000001,005f2aa0,00000032) ret=0040b1b6 003c:trace:reg:NtSetValueKey (0x54,L"DisplayName",1,0x5f2aa0,52) 003c: set_key_value( hkey=0054, type=1, namelen=22, name=L"DisplayName", data={42,00,52,00,44,00,72,00,69,00,76,00,65,00,72,00,36,00,34,00,5f,00,31,00,5f,00,33,00,5f,00,33,00,5f,00,45,00,30,00,32,00,42,00,32,00,35,00,46,00,43,00,00,00} ) 003c: set_key_value() = 0 003c:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040b1b6 003c:Call advapi32.RegSetValueExW(00000054,0042d65c L"ErrorControl",00000000,00000004,0032efbc,00000004) ret=0040b1e2 003c:trace:reg:NtSetValueKey (0x54,L"ErrorControl",4,0x32efbc,4) 003c: set_key_value( hkey=0054, type=4, namelen=24, name=L"ErrorControl", data={01,00,00,00} ) 003c: set_key_value() = 0 003c:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040b1e2 003c:Call advapi32.RegSetValueExW(00000054,0042d684 L"ImagePath",00000000,00000001,0032efd4,00000084) ret=0040b26c 003c:trace:reg:NtSetValueKey (0x54,L"ImagePath",1,0x32efd4,134) 003c: set_key_value( hkey=0054, type=1, namelen=18, name=L"ImagePath", data={5c,00,3f,00,3f,00,5c,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,44,00,61,00,74,00,61,00,5c,00,42,00,69,00,74,00,52,00,61,00,69,00,64,00,65,00,72,00,5c,00,73,00,75,00,70,00,70,00,6f,00,72,00,74,00,5c,00,31,00,2e,00,33,00,2e,00,33,00,5c,00,45,00,30,00,32,00,42,00,32,00,35,00,46,00,43,00,5c,00,42,00,52,00,44,00,72,00,69,00,76,00,65,00,72,00,36,00,34,00,2e,00,73,00,79,00,73,00,00,00} ) 003c: set_key_value() = 0 003c:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040b26c 003c:Call advapi32.RegSetValueExW(00000054,0042d698 L"Start",00000000,00000004,0032efb8,00000004) ret=0040b298 003c:trace:reg:NtSetValueKey (0x54,L"Start",4,0x32efb8,4) 003c: set_key_value( hkey=0054, type=4, namelen=10, name=L"Start", data={03,00,00,00} ) 003c: set_key_value() = 0 003c:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040b298 003c:Call advapi32.RegSetValueExW(00000054,0042d6a4 L"Type",00000000,00000004,0032efc0,00000004) ret=0040b2c6 003c:trace:reg:NtSetValueKey (0x54,L"Type",4,0x32efc0,4) 003c: set_key_value( hkey=0054, type=4, namelen=8, name=L"Type", data={02,00,00,00} ) 003c: set_key_value() = 0 003c:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040b2c6 003c:Call advapi32.RegSetValueExW(00000054,0042d6b0 L"Tag",00000000,00000004,0032efcc,00000004) ret=0040b2ee 003c:trace:reg:NtSetValueKey (0x54,L"Tag",4,0x32efcc,4) 003c: set_key_value( hkey=0054, type=4, namelen=6, name=L"Tag", data={02,00,00,00} ) 003c: set_key_value() = 0 003c:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040b2ee 003c:Call advapi32.RegSetValueExW(00000054,0042d6c8 L"DependOnService",00000000,00000007,0032f1d4,0000000c) ret=0040b361 003c:trace:reg:NtSetValueKey (0x54,L"DependOnService",7,0x32f1d4,14) 003c: set_key_value( hkey=0054, type=7, namelen=30, name=L"DependOnService", data={46,00,6c,00,74,00,4d,00,67,00,72,00,00,00} ) 003c: set_key_value() = 0 003c:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040b361 003c:Call advapi32.RegSetValueExW(00000054,0042d71c L"Group",00000000,00000007,0032f3d4,00000032) ret=0040b3db 003c:trace:reg:NtSetValueKey (0x54,L"Group",7,0x32f3d4,52) 003c: set_key_value( hkey=0054, type=7, namelen=10, name=L"Group", data={46,00,73,00,46,00,69,00,6c,00,74,00,65,00,72,00,20,00,41,00,63,00,74,00,69,00,76,00,69,00,74,00,79,00,20,00,4d,00,6f,00,6e,00,69,00,74,00,6f,00,72,00,00,00} ) 003c: set_key_value() = 0 003c:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040b3db 003c:Call advapi32.RegCloseKey(00000054) ret=0040b4be 003c: close_handle( handle=0054 ) 003c: close_handle() = 0 003c:Ret advapi32.RegCloseKey() retval=00000000 ret=0040b4be 003c:Call advapi32.RegCreateKeyExW(80000002,0032f5d4 L"System\\CurrentControlSet\\Services\\BRDriver64_1_3_3_E02B25FC\\Instances",00000000,0042ab4c,00000000,0000000e,00000000,0032efd0,0032efc8) ret=0040b504 003c:trace:reg:NtCreateKey (0x24,L"System\\CurrentControlSet\\Services\\BRDriver64_1_3_3_E02B25FC\\Instances",L"",0,e,0x32ee14) 003c: create_key( access=0000000e, options=00000000, objattr={rootdir=0024,attributes=00000000,sd={},name=L"System\\CurrentControlSet\\Services\\BRDriver64_1_3_3_E02B25FC\\Instances"}, class=L"" ) 003c: create_key() = 0 { hkey=0054, created=0 } 003c:trace:reg:NtCreateKey <- 0x54 003c:Ret advapi32.RegCreateKeyExW() retval=00000000 ret=0040b504 ... --- snip --- Call to SCM to create service entry. The app passes 'C:\\ProgramData\\BitRaider\\support\\1.3.3\\E02B25FC\\BRDriver64.sys' as fully qualified path to the service binary file (kernel driver): --- snip --- ... 003c:Call advapi32.CreateServiceW(0014f2a0,005f2aa0 L"BRDriver64_1_3_3_E02B25FC",005f2aa0 L"BRDriver64_1_3_3_E02B25FC",000f01ff,00000002,00000003,00000001,005f2bd8 L"C:\\ProgramData\\BitRaider\\support\\1.3.3\\E02B25FC\\BRDriver64.sys",00000000,00000000,00000000,00000000,00000000) ret=0040b048 003c:trace:service:CreateServiceW 0x14f2a0 L"BRDriver64_1_3_3_E02B25FC" L"BRDriver64_1_3_3_E02B25FC" ... --- snip --- 'services.exe' side: --- snip --- ... 0014:trace:service:svcctl_CreateServiceWOW64W Call msvcrt._vsnprintf(00bbeff0,00000400,0041b0aa "(%s, %s, 0x%x, %s)\n",00bbf430) ret=00401def 0014:Ret msvcrt._vsnprintf() retval=0000008f ret=00401def (L"BRDriver64_1_3_3_E02B25FC", L"BRDriver64_1_3_3_E02B25FC", 0xf01ff, L"C:\\ProgramData\\BitRaider\\support\\1.3.3\\E02B25FC\\BRDriver64.sys") ... 0014:trace:service:create_serviceW Call msvcrt._vsnprintf(00bbf020,00000400,0041b0aa "(%s, %s, 0x%x, %s)\n",00bbf460) ret=00401def ... 0014:Call advapi32.RegCreateKeyW(00000024,00033d30 L"BRDriver64_1_3_3_E02B25FC",00bbf3c8) ret=004066d8 0014:trace:reg:NtCreateKey (0x24,L"BRDriver64_1_3_3_E02B25FC",(null),0,2000000,0xbbf128) 0014: create_key( access=02000000, options=00000000, objattr={rootdir=0024,attributes=00000000,sd={},name=L"BRDriver64_1_3_3_E02B25FC"}, class=L"" ) 0014: create_key() = 0 { hkey=01a0, created=0 } 0014:trace:reg:NtCreateKey <- 0x1a0 0014:Ret advapi32.RegCreateKeyW() retval=00000000 ret=004066d8 0014:Call advapi32.RegSetValueExW(000001a0,0041c670 L"DisplayName",00000000,00000001,00033e20,00000034) ret=0040655e 0014:trace:reg:NtSetValueKey (0x1a0,L"DisplayName",1,0x33e20,52) 0014: set_key_value( hkey=01a0, type=1, namelen=22, name=L"DisplayName", data={42,00,52,00,44,00,72,00,69,00,76,00,65,00,72,00,36,00,34,00,5f,00,31,00,5f,00,33,00,5f,00,33,00,5f,00,45,00,30,00,32,00,42,00,32,00,35,00,46,00,43,00,00,00} ) 0014: set_key_value() = 0 0014:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040655e 0014:Call advapi32.RegSetValueExW(000001a0,0041c610 L"ImagePath",00000000,00000001,00033d80,00000086) ret=0040655e 0014:trace:reg:NtSetValueKey (0x1a0,L"ImagePath",1,0x33d80,134) 0014: set_key_value( hkey=01a0, type=1, namelen=18, name=L"ImagePath", data={5c,00,3f,00,3f,00,5c,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,44,00,61,00,74,00,61,00,5c,00,42,00,69,00,74,00,52,00,61,00,69,00,64,00,65,00,72,00,5c,00,73,00,75,00,70,00,70,00,6f,00,72,00,74,00,5c,00,31,00,2e,00,33,00,2e,00,33,00,5c,00,45,00,30,00,32,00,42,00,32,00,35,00,46,00,43,00,5c,00,42,00,52,00,44,00,72,00,69,00,76,00,65,00,72,00,36,00,34,00,2e,00,73,00,79,00,73,00,00,00} ) 0014: set_key_value() = 0 0014:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040655e 0014:Call advapi32.RegDeleteValueW(000001a0,0041c600 L"Group") ret=00406568 0014:trace:reg:NtDeleteValueKey (0x1a0,L"Group") 0014: delete_key_value( hkey=01a0, name=L"Group" ) 0014: delete_key_value() = 0 0014:Ret advapi32.RegDeleteValueW() retval=00000000 ret=00406568 0014:Call advapi32.RegSetValueExW(000001a0,0041c590 L"ObjectName",00000000,00000001,00034770,00000018) ret=0040655e 0014:trace:reg:NtSetValueKey (0x1a0,L"ObjectName",1,0x34770,24) 0014: set_key_value( hkey=01a0, type=1, namelen=20, name=L"ObjectName", data={4c,00,6f,00,63,00,61,00,6c,00,53,00,79,00,73,00,74,00,65,00,6d,00,00,00} ) 0014: set_key_value() = 0 0014:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040655e 0014:Call advapi32.RegDeleteValueW(000001a0,0041c570 L"Description") ret=00406568 0014:trace:reg:NtDeleteValueKey (0x1a0,L"Description") 0014: delete_key_value( hkey=01a0, name=L"Description" ) 0014: delete_key_value() = OBJECT_NAME_NOT_FOUND 0014:Ret advapi32.RegDeleteValueW() retval=00000002 ret=00406568 0014:Call advapi32.RegDeleteValueW(000001a0,0041c5e0 L"DependOnService") ret=0040622f 0014:trace:reg:NtDeleteValueKey (0x1a0,L"DependOnService") 0014: delete_key_value( hkey=01a0, name=L"DependOnService" ) 0014: delete_key_value() = 0 0014:Ret advapi32.RegDeleteValueW() retval=00000000 ret=0040622f 0014:Call advapi32.RegDeleteValueW(000001a0,0041c5b0 L"DependOnGroup") ret=0040622f 0014:trace:reg:NtDeleteValueKey (0x1a0,L"DependOnGroup") 0014: delete_key_value( hkey=01a0, name=L"DependOnGroup" ) 0014: delete_key_value() = OBJECT_NAME_NOT_FOUND 0014:Ret advapi32.RegDeleteValueW() retval=00000002 ret=0040622f 0014:Call advapi32.RegSetValueExW(000001a0,0041c650 L"Start",00000000,00000004,00033c94,00000004) ret=004067f9 0014:trace:reg:NtSetValueKey (0x1a0,L"Start",4,0x33c94,4) 0014: set_key_value( hkey=01a0, type=4, namelen=10, name=L"Start", data={03,00,00,00} ) 0014: set_key_value() = 0 0014:Ret advapi32.RegSetValueExW() retval=00000000 ret=004067f9 0014:Call advapi32.RegSetValueExW(000001a0,0041c630 L"ErrorControl",00000000,00000004,00033c98,00000004) ret=0040682e 0014:trace:reg:NtSetValueKey (0x1a0,L"ErrorControl",4,0x33c98,4) 0014: set_key_value( hkey=01a0, type=4, namelen=24, name=L"ErrorControl", data={01,00,00,00} ) 0014: set_key_value() = 0 0014:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040682e 0014:Call advapi32.RegSetValueExW(000001a0,0041c660 L"Type",00000000,00000004,00033c90,00000004) ret=00406863 0014:trace:reg:NtSetValueKey (0x1a0,L"Type",4,0x33c90,4) 0014: set_key_value( hkey=01a0, type=4, namelen=8, name=L"Type", data={02,00,00,00} ) 0014: set_key_value() = 0 0014:Ret advapi32.RegSetValueExW() retval=00000000 ret=00406863 0014:Call advapi32.RegSetValueExW(000001a0,0041c540 L"PreshutdownTimeout",00000000,00000004,00033cd0,00000004) ret=0040689b 0014:trace:reg:NtSetValueKey (0x1a0,L"PreshutdownTimeout",4,0x33cd0,4) 0014: set_key_value( hkey=01a0, type=4, namelen=36, name=L"PreshutdownTimeout", data={20,bf,02,00} ) 0014: set_key_value() = 0 0014:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040689b 0014:Call advapi32.RegSetValueExW(000001a0,0041c540 L"PreshutdownTimeout",00000000,00000004,00033cd0,00000004) ret=004068cc 0014:trace:reg:NtSetValueKey (0x1a0,L"PreshutdownTimeout",4,0x33cd0,4) 0014: set_key_value( hkey=01a0, type=4, namelen=36, name=L"PreshutdownTimeout", data={20,bf,02,00} ) 0014: set_key_value() = 0 0014:Ret advapi32.RegSetValueExW() retval=00000000 ret=004068cc 0014:Call advapi32.RegSetValueExW(000001a0,0041c518 L"WOW64",00000000,00000004,00bbf3c4,00000004) ret=0040694c 0014:trace:reg:NtSetValueKey (0x1a0,L"WOW64",4,0xbbf3c4,4) 0014: set_key_value( hkey=01a0, type=4, namelen=10, name=L"WOW64", data={01,00,00,00} ) 0014: set_key_value() = 0 0014:Ret advapi32.RegSetValueExW() retval=00000000 ret=0040694c 0014:Call advapi32.RegDeleteValueW(000001a0,0041c588 L"Tag") ret=00406969 0014:trace:reg:NtDeleteValueKey (0x1a0,L"Tag") 0014: delete_key_value( hkey=01a0, name=L"Tag" ) 0014: delete_key_value() = 0 0014:Ret advapi32.RegDeleteValueW() retval=00000000 ret=00406969 0014:Call advapi32.RegCloseKey(000001a0) ret=004066e8 0014: close_handle( handle=01a0 ) 0014: close_handle() = 0 0014:Ret advapi32.RegCloseKey() retval=00000000 ret=004066e8 ... --- snip --- Microsoft documentation doesn't tell about this special case: https://docs.microsoft.com/en-us/windows/desktop/api/winsvc/nf-winsvc-creat… --- quote --- lpBinaryPathName The fully qualified path to the service binary file. If the path contains a space, it must be quoted so that it is correctly interpreted. For example, "d:\my share\myservice.exe" should be specified as ""d:\my share\myservice.exe"". The path can also include arguments for an auto-start service. For example, "d:\myshare\myservice.exe arg1 arg2". These arguments are passed to the service entry point (typically the main function). If you specify a path on another computer, the share must be accessible by the computer account of the local computer because this is the security context used in the remote call. However, this requirement allows any potential vulnerabilities in the remote computer to affect the local computer. Therefore, it is best to use a local file. --- quote --- After fixing SCM, the app validation goes further - only to run into next issue. $ sha1sum SWTOR_setup.exe c538935eff4ec90ce2e48dc7e515a8dec2f15f58 SWTOR_setup.exe $ du -sh SWTOR_setup.exe 32M SWTOR_setup.exe $ wine --version wine-4.8 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 7