May 2020 - Wine-Bugs - list.winehq.org

[Bug 49224] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.{KeGenericCallDpc,KeSignalCallDpcSynchronize,KeSignalCallDpcDone}
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49224 Bug ID: 49224 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.{KeGenericCallDpc,KeSignalCallDpcSynchron ize,KeSignalCallDpcDone} Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49222 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078EE10,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Call ntoskrnl.exe.KeRevertToUserAffinityThreadEx(000000ff) ret=00c84cf7 00d0:fixme:ntoskrnl:KeRevertToUserAffinityThreadEx Affinity 0xff stub. 00d0:Call ntdll.NtSetInformationThread(fffffffffffffffe,0000001e,00b5f170,00000010) ret=00232c8d 00d0:Ret ntdll.NtSetInformationThread() retval=00000000 ret=00232c8d 00d0:Ret ntoskrnl.exe.KeRevertToUserAffinityThreadEx() retval=00000000 ret=00c84cf7 00d0:Call ntoskrnl.exe.NtQuerySystemInformation(00000000,00b5f220,00000040,00b5f210) ret=00c85cc2 00d0:Call ntdll.NtQuerySystemInformation(00000000,00b5f220,00000040,00b5f210) ret=7bca040f 00d0:trace:ntdll:NtQuerySystemInformation (0x00000000,0xb5f220,0x00000040,0xb5f210) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7bca040f 00d0:Ret ntoskrnl.exe.NtQuerySystemInformation() retval=00000000 ret=00c85cc2 00d0:Call ntoskrnl.exe.NtQuerySystemInformation(000000b6,00b5f228,00000038,00b5f220) ret=00c85a01 00d0:Call ntdll.NtQuerySystemInformation(000000b6,00b5f228,00000038,00b5f220) ret=7bca040f 00d0:trace:ntdll:NtQuerySystemInformation (0x000000b6,0xb5f228,0x00000038,0xb5f220) 00d0:fixme:ntdll:NtQuerySystemInformation (0x000000b6,0xb5f228,0x00000038,0xb5f220) stub 00d0:Ret ntdll.NtQuerySystemInformation() retval=c0000003 ret=7bca040f 00d0:Ret ntoskrnl.exe.NtQuerySystemInformation() retval=c0000003 ret=00c85a01 00d0:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc6cb0c ip=7bc6cb0c tid=00d0 00d0:trace:seh:raise_exception info[0]=0000000000e00266 00d0:trace:seh:raise_exception info[1]=0000000000dffc02 00d0:trace:seh:call_vectored_handlers calling handler at 0x22cfc0 code=80000100 flags=1 ... wine: Call from 0x7bc6cb0c to unimplemented function ntoskrnl.exe.KeGenericCallDpc, aborting --- snip --- Relevant disassembly snippet of driver: ---- snip --- 0000000140005ADF | mov rax,qword ptr ds:[rdi] | 0000000140005AE2 | call qword ptr ds:[rax+98] | schedule DPC 0000000140005AE8 | movaps xmm0,xmmword ptr ss:[rsp+40] | 0000000140005AED | lea r8,qword ptr ss:[rbp-30] | 0000000140005AF1 | movaps xmm1,xmmword ptr ss:[rsp+50] | 0000000140005AF6 | test al,al | 0000000140005AF8 | movups xmmword ptr ss:[rbp-28],xmm0 | 0000000140005AFC | mov dword ptr ss:[rbp-30],6E | 0000000140005B03 | movaps xmm0,xmmword ptr ss:[rsp+60] | 0000000140005B08 | setne byte ptr ss:[rbp-38] | ... 0000000140005770 | sub rsp,28 | 0000000140005774 | lea rdx,qword ptr ss:[rsp+38] | 0000000140005779 | mov qword ptr ss:[rsp+38],1 | 0000000140005782 | lea rcx,qword ptr ds:[1400057A0] | 1400057A0 = DPC 0000000140005789 | call qword ptr ds:[140077130] | KeGenericCallDpc 000000014000578F | cmp qword ptr ss:[rsp+38],1 | 0000000140005795 | sete al | 0000000140005798 | add rsp,28 | 000000014000579C | ret | ... --- snip --- KeGenericCallDpc, KeSignalCallDpcSynchronize, KeSignalCallDpcDone API are used to implement a kernel-level barrier. I grouped them in this ticket because the functionality is intrinsically linked together. The DPC itself (checks for IA32_EFER.NXE): --- snip --- 00000001400057A0 | mov qword ptr ss:[rsp+8],rbx | 00000001400057A5 | mov qword ptr ss:[rsp+10],rsi | 00000001400057AA | push rdi | 00000001400057AB | sub rsp,20 | 00000001400057AF | mov rsi,r8 | 00000001400057B2 | mov rdi,rdx | 00000001400057B5 | mov ecx,C0000080 | IA32_EFER 00000001400057BA | rdmsr | 00000001400057BC | shl rdx,20 | 00000001400057C0 | mov rcx,r9 | 00000001400057C3 | or rax,rdx | rax |= (rdx << 32) 00000001400057C6 | mov rbx,rax | 00000001400057C9 | call qword ptr ds:[140077140] | KeSignalCallDpcSynchronize 00000001400057CF | shr rbx,B | IA32_EFER.NXE 00000001400057D3 | test bl,1 | 00000001400057D6 | jne denuvo-anti-cheat.1400057DF | 00000001400057D8 | mov qword ptr ds:[rdi],0 | 00000001400057DF | mov rcx,rsi | 00000001400057E2 | mov rbx,qword ptr ss:[rsp+30] | 00000001400057E7 | mov rsi,qword ptr ss:[rsp+38] | 00000001400057EC | add rsp,20 | 00000001400057F0 | pop rdi | 00000001400057F1 | jmp qword ptr ds:[140077138] | KeSignalCallDpcDone --- snip --- MSR 0xC0000080 --- quote --- Extended Feature Enable Register (EFER) is a model-specific register added in the AMD K6 processor, to allow enabling the SYSCALL/SYSRET instruction, and later for entering and exiting long mode. This register becomes architectural in AMD64 and has been adopted by Intel as IA32_EFER. Its MSR number is 0xC0000080. --- quote --- https://software.intel.com/sites/default/files/managed/7c/f1/253668-sdm-vol… Bit 11 = IA32_EFER.NXE = NXE/XD (No-Execute Enable/Execute Disable) $ wine --version wine-5.8-324-g2c571df40b Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 49217] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeQueryActiveProcessorCountEx
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49217 Bug ID: 49217 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeQueryActiveProcessorCountEx Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49216 (split out from bug 49198). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078EFF0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:trace:ntoskrnl:MmGetSystemRoutineAddress L"NtQuerySystemInformation" -> 0000000000227C58 00d0:Ret ntoskrnl.exe.MmGetSystemRoutineAddress() retval=00227c58 ret=00c891bf 00d0:Call ntoskrnl.exe.RtlGetVersion(008ec1f0) ret=00c84b6c 00d0:Call ntdll.RtlGetVersion(008ec1f0) ret=7bca040f 00d0:Ret ntdll.RtlGetVersion() retval=00000000 ret=7bca040f 00d0:Ret ntoskrnl.exe.RtlGetVersion() retval=00000000 ret=00c84b6c 00d0:Call ntoskrnl.exe.KdRefreshDebuggerNotPresent() ret=00c84e5a 00d0:trace:ntoskrnl:KdRefreshDebuggerNotPresent . 00d0:Ret ntoskrnl.exe.KdRefreshDebuggerNotPresent() retval=00000001 ret=00c84e5a 00d0:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc6cb0c ip=7bc6cb0c tid=00d0 00d0:trace:seh:raise_exception info[0]=0000000000e00266 00d0:trace:seh:raise_exception info[1]=0000000000dffc92 00d0:trace:seh:call_vectored_handlers calling handler at 0x22cf60 code=80000100 flags=1 ... wine: Call from 0x7bc6cb0c to unimplemented function ntoskrnl.exe.KeQueryActiveProcessorCountEx, aborting --- snip --- Microsoft docs: https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/ntddk/nf-ntdd… $ wine --version wine-5.8-320-g71647c8657 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 6

[Bug 49216] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KdRefreshDebuggerNotPresent
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49216 Bug ID: 49216 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KdRefreshDebuggerNotPresent Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation/split out from bug 49198 --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078E3E0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Call KERNEL32.GetProcAddress(00220000,000fc210 "NtQuerySystemInformation") ret=002339af 00d0:Ret KERNEL32.GetProcAddress() retval=00227c40 ret=002339af ... 00d0:trace:ntoskrnl:MmGetSystemRoutineAddress L"NtQuerySystemInformation" -> 0000000000227C40 00d0:Ret ntoskrnl.exe.MmGetSystemRoutineAddress() retval=00227c40 ret=00c891bf 00d0:Call ntoskrnl.exe.RtlGetVersion(008ec1f0) ret=00c84b6c 00d0:Call ntdll.RtlGetVersion(008ec1f0) ret=7bca040f 00d0:Ret ntdll.RtlGetVersion() retval=00000000 ret=7bca040f 00d0:Ret ntoskrnl.exe.RtlGetVersion() retval=00000000 ret=00c84b6c 00d0:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc6cb0c ip=7bc6cb0c tid=00d0 00d0:trace:seh:raise_exception info[0]=0000000000e00266 00d0:trace:seh:raise_exception info[1]=0000000000dffb6e 00d0:trace:seh:call_vectored_handlers calling handler at 0x22cf50 code=80000100 flags=1 00d0:trace:seh:call_vectored_handlers handler at 0x22cf50 returned 0 ... wine: Call from 0x7bc6cb0c to unimplemented function ntoskrnl.exe.KdRefreshDebuggerNotPresent, aborting --- snip --- $ wine --version wine-5.8-319-g68923042fa Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 38587] New: RF:G is Incredibly Laggy, Then Crashes
by wine-bugs＠winehq.org June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=38587 Bug ID: 38587 Summary: RF:G is Incredibly Laggy, Then Crashes Product: Wine Version: 1.6 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: superrobowizard(a)gmail.com Distribution: --- When trying to run Red Faction: Guerrilla on Wine, the introduction credits audio constantly loops the most recent second over the current audio, making it sound really glitchy. When it gets to the loading screen everything is fine again, and it loads the main menu. The menu works fine at full speed for less than half a second, then my framerate tanks to about 1-2 FPS. After a few seconds of this (the game works fine, it's just incredibly laggy) the window locks up entirely. I can't do anything after that except mash ctrl+alt+delete until I log off. I have used apt-get purge as well as apt-get uninstall and then re-installing multiple times, and it doesn't help. (I launch it using "wine /directory/Steam.exe -no-dwrite") -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 17

[Bug 49230] New: Multiple kernel drivers crash on unimplemented function ntoskrnl.exe.KeSetTimer (Denuvo Anti-Cheat 'denuvo-anti-cheat.sys')
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49230 Bug ID: 49230 Summary: Multiple kernel drivers crash on unimplemented function ntoskrnl.exe.KeSetTimer (Denuvo Anti-Cheat 'denuvo-anti-cheat.sys') Product: Wine Version: 5.9 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49224 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll,+reg wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078DFE0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Call ntoskrnl.exe.PsCreateSystemThread(00b5f458,00000000,00000000,00000000,00000000,00c84340,00e41e78) ret=00c845d6 00d0:Call ntdll.RtlCreateUserThread(ffffffffffffffff,00000000,00000000,00000000,00000000,00000000,00c84340,00e41e78,00b5f458,00000000) ret=00233a0b 00d0:Ret ntdll.RtlCreateUserThread() retval=00000000 ret=00233a0b 00d0:Ret ntoskrnl.exe.PsCreateSystemThread() retval=00000000 ret=00c845d6 00d0:Call ntoskrnl.exe.ObReferenceObjectByHandle(00000050,001fffff,00000000,00000000,00e41e88,00000000) ret=00c8460a 00d0:trace:ntoskrnl:ObReferenceObjectByHandle 0000000000000050 1fffff 0000000000000000 0 0000000000E41E88 0000000000000000 00d0:Call ntdll.NtQueryObject(00000050,00000002,00b5f120,00000100,00b5f220) ret=0022e6cb 00d0:trace:ntdll:NtQueryObject (0x50,0x00000002,0xb5f120,0x00000100,0xb5f220) 00d0:Ret ntdll.NtQueryObject() retval=00000000 ret=0022e6cb ... 00d8:Starting thread proc 0xc84340 (arg=0xe41e78) ... 00d8:Call ntoskrnl.exe.KeInitializeTimer(04b600c4) ret=00caeab7 00d8:trace:ntoskrnl:KeInitializeTimerEx timer 0000000004B600C4, type 0. 00d8:Ret ntoskrnl.exe.KeInitializeTimer() retval=00000020 ret=00caeab7 00d8:Call ntoskrnl.exe.KeInitializeDpc(04b60104,00caecf0,04b6009c) ret=00caeacb 00d8:fixme:ntoskrnl:KeInitializeDpc stub 00d8:Ret ntoskrnl.exe.KeInitializeDpc() retval=00000005 ret=00caeacb 00d8:Call KERNEL32.RaiseException(80000100,00000001,00000002,067efbc0) ret=0023ea28 00d8:Call ntdll.memcpy(067efaa8,067efbc0,00000010) ret=7b0104f6 00d8:Ret ntdll.memcpy() retval=067efaa8 ret=7b0104f6 00d8:trace:seh:raise_exception code=80000100 flags=1 addr=0x7b010505 ip=7b010505 tid=00d8 00d8:trace:seh:raise_exception info[0]=000000000025c000 00d8:trace:seh:raise_exception info[1]=000000000025e7ac 00d8:trace:seh:call_vectored_handlers calling handler at 0x22d030 code=80000100 flags=1 00d8:trace:seh:call_vectored_handlers handler at 0x22d030 returned 0 00d8:trace:seh:RtlVirtualUnwind type 1 rip 7b010505 rsp 67efa60 ... wine: Call from 0x7b010505 to unimplemented function ntoskrnl.exe.KeSetTimer, aborting --- snip --- Wine source: https://source.winehq.org/git/wine.git/blob/056c9df854817670dc4fb9c095cba29… --- snip --- 637 @ stub KeSetTimer 638 @ stdcall KeSetTimerEx(ptr int64 long ptr) --- snip --- Should be implemented on top of KeSetTimerEx(). $ wine --version wine-5.9-13-g3df701e6b9 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 49160] New: Unity: SystemInfo.deviceUniqueIdentifier always the same under Wine
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49160 Bug ID: 49160 Summary: Unity: SystemInfo.deviceUniqueIdentifier always the same under Wine Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wmi&wbemprox Assignee: wine-bugs(a)winehq.org Reporter: jamiesonc2(a)gmail.com Distribution: Ubuntu Unity's SystemInfo.deviceUniqueIdentifier always returns the same value under Wine, because the underlying data used to populate the property are hardcoded in Wine. Applications that depend on SystemInfo.deviceUniqueIdentifier being unique between different systems may behave unexpectedly, including identity collisions in cloud services clients. This behavior was observed in the Syrinscape Online (beta) application, which relies on SystemInfo.deviceUniqueIdentifier to link desktop apps with online accounts. Wine users are getting linked with other Wine users' online accounts because all of the Syrinscape Online clients appear to be running on the same device. https://www.syrinscape.com/online/ See this Syrinscape support forum thread where the issue was discussed: https://forum.syrinscape.com/t/who-is-stuart-kehoe/8850 Details about Unity's SystemInfo.deviceUniqueIdentifier: https://docs.unity3d.com/ScriptReference/SystemInfo-deviceUniqueIdentifier.… The following data is retrieved from wbemprox to generate a UID: Win32_BaseBoard::SerialNumber Win32_BIOS::SerialNumber Win32_Processor::UniqueId Win32_DiskDrive::SerialNumber Win32_OperatingSystem::SerialNumber As of Wine 5.8, these values are hardcoded. From the latest wbemprox/builtin.c at the time of this writing: https://source.winehq.org/git/wine.git/blob/93758fc3ef16eed6cf1639aa6c31f6a… Line 1103: Baseboard serial number = L"None" Line 1295: BIOS serial number = L"0" Line 2117: DiskDrive serial number = L"WINEHDISK" Line 3216: Processor unique ID = NULL Line 3417: OS serial number = L"12345-OEM-1234567-12345" As a consequence of the above, the value of Unity's SystemInfo.deviceUniqueIdentifier is always: 12a9126b14ff9b78b28d00f78e2bff20a224611b PROPOSED: If it is impractical to obtain actual serial numbers/IDs for the aforementioned components, consider populating the values in a way that facilitates more convenient user customization to workaround application issues. 1. Consider sourcing the values from specially designated registry keys, populated during new WINE_PREFIX setup. 2. Consider populating said registry keys with random values rather than fixed values. This will obviate the need for users to do any manual workarounds. (Not sure if it would break other things, but philosophically, it's not unreasonable to treat every WINE_PREFIX as though it's a whole new system build.) -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 49117] New: Virtual memory allocation gets slower when large number of views are allocated (We Happy Few)
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49117 Bug ID: 49117 Summary: Virtual memory allocation gets slower when large number of views are allocated (We Happy Few) Product: Wine Version: 5.7 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: rbernon(a)codeweavers.com Distribution: --- Created attachment 67101 --> https://bugs.winehq.org/attachment.cgi?id=67101 Patch for upcoming Wine 5.8 We Happy Few allocates an unusually large number of individual virtual memory views (17k views allocated once the menu is reached), which then makes the virtual memory allocation slower because of the large rbtree traversal. Using a dedicated structure to track free memory ranges instead of the view rbtree traversal leads to a huge FPS increase (tested at +20% when CPU bound) once in game. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 49211] New: BandLab Cakewalk 2020.04 crashes in I_ScUnregisterDeviceNotification
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49211 Bug ID: 49211 Summary: BandLab Cakewalk 2020.04 crashes in I_ScUnregisterDeviceNotification Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: rpisl(a)seznam.cz Distribution: --- Created attachment 67218 --> https://bugs.winehq.org/attachment.cgi?id=67218 backtrace BandLab Cakewalk 2020.04 crashes in I_ScUnregisterDeviceNotification on null pointer dereference on exit. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 49267] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs support for CustomTimerDpc via ntoskrnl.exe.KeSetTimer{Ex}
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49267 Bug ID: 49267 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs support for CustomTimerDpc via ntoskrnl.exe.KeSetTimer{Ex} Product: Wine Version: 5.9 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49230 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll,+reg wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00f8:Call ntoskrnl.exe.KeInitializeTimer(04b600c4) ret=00caeab7 00f8:trace:ntoskrnl:KeInitializeTimerEx timer 0000000004B600C4, type 0. 00f8:Ret ntoskrnl.exe.KeInitializeTimer() retval=00000020 ret=00caeab7 00f8:Call ntoskrnl.exe.KeInitializeDpc(04b60104,00caecf0,04b6009c) ret=00caeacb 00f8:fixme:ntoskrnl:KeInitializeDpc Dpc 0000000004B60104, DeferredRoutine 0000000000CAECF0, DeferredContext 0000000004B6009C, Dpc->DeferredRoutine 0000000000000000 stub 00f8:Ret ntoskrnl.exe.KeInitializeDpc() retval=00000085 ret=00caeacb 00f8:Call ntoskrnl.exe.KeSetTimer(04b600c4,ffffffffff676980,04b60104) ret=00caeae9 00f8:trace:ntoskrnl:KeSetTimer Timer 0000000004B600C4, DueTime ffffffffff676980, Dpc 0000000004B60104. 00f8:trace:ntoskrnl:KeSetTimerEx timer 0000000004B600C4, duetime ffffffffff676980, period 0, dpc 0000000004B60104. 00f8:fixme:ntoskrnl:KeSetTimerEx Unhandled DPC 0000000004B60104. 00f8:Ret ntoskrnl.exe.KeSetTimer() retval=00000000 ret=00caeae9 ... --- snip --- Wine source: https://source.winehq.org/git/wine.git/blob/e48fabff525061c8eea9558084a9730… --- snip --- 414 /*********************************************************************** 415 * KeSetTimerEx (NTOSKRNL.EXE.@) 416 */ 417 BOOLEAN WINAPI KeSetTimerEx( KTIMER *timer, LARGE_INTEGER duetime, LONG period, KDPC *dpc ) 418 { 419 BOOL ret; 420 421 TRACE("timer %p, duetime %s, period %d, dpc %p.\n", 422 timer, wine_dbgstr_longlong(duetime.QuadPart), period, dpc); 423 424 if (dpc) 425 { 426 FIXME("Unhandled DPC %p.\n", dpc); 427 return FALSE; 428 } 429 ... --- snip --- Microsoft docs (how this is supposed to work): https://docs.microsoft.com/en-us/windows-hardware/drivers/kernel/registerin… It includes a nice diagram that illustrates the usage of timer and DPC objects for a CustomTimerDpc routine. Created snapshot of the page via Internet Archive in case it gets "lost". $ wine --version wine-5.9-107-g3104715700 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 49219] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThreadEx
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49219 Bug ID: 49219 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThreadEx Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49217 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078EE10,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Call ntoskrnl.exe.KdRefreshDebuggerNotPresent() ret=00c84e5a 00d0:trace:ntoskrnl:KdRefreshDebuggerNotPresent . 00d0:Ret ntoskrnl.exe.KdRefreshDebuggerNotPresent() retval=00000001 ret=00c84e5a 00d0:Call ntoskrnl.exe.KeQueryActiveProcessorCountEx(0000ffff) ret=00c83d3a 00d0:fixme:ntoskrnl:KeQueryActiveProcessorCountEx GroupNumber 65535 semi-stub. 00d0:Call KERNEL32.GetSystemInfo(00b5f2f0) ret=00232906 00d0:Call ntdll.NtQuerySystemInformation(00000000,00b5f200,00000040,00000000) ret=7b02c721 00d0:trace:ntdll:NtQuerySystemInformation (0x00000000,0xb5f200,0x00000040,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c721 00d0:Call ntdll.NtQuerySystemInformation(00000001,00b5f1f0,0000000c,00000000) ret=7b02c751 00d0:trace:ntdll:NtQuerySystemInformation (0x00000001,0xb5f1f0,0x0000000c,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c751 00d0:Ret KERNEL32.GetSystemInfo() retval=00000006 ret=00232906 00d0:Ret ntoskrnl.exe.KeQueryActiveProcessorCountEx() retval=00000008 ret=00c83d3a 00d0:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc6cb0c ip=7bc6cb0c tid=00d0 00d0:trace:seh:raise_exception info[0]=0000000000e00266 00d0:trace:seh:raise_exception info[1]=0000000000dffd28 wine: Call from 0x7bc6cb0c to unimplemented function ntoskrnl.exe.KeSetSystemAffinityThreadEx, aborting --- snip --- Microsoft docs: https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-ke… This API is needed to ensure that certain code is executed on a specific cpu core (pinning). Relevant disassembly snippet of driver: --- snip --- ... 140003D37 | call qword ptr ds:[rax+40] | KeQueryActiveProcessorCountEx 140003D3A | mov byte ptr ds:[rsi+30],al | 140003D3D | movzx ebp,al | num cores 140003D40 | cmp al,20 | 140003D42 | jb denuvo-anti-cheat.140003D49 | 140003D44 | mov ebp,20 | limit to 32 cores max 140003D49 | or rcx,FFFFFFFFFFFFFFFF | 140003D4D | mov dword ptr ds:[rsi+34],ebp | 140003D50 | call qword ptr ds:[<&JMP.&KeSetSystemAffinityThreadEx>] 140003D56 | mov r15,rax | 140003D59 | test ebp,ebp | 140003D5B | je denuvo-anti-cheat.140003DA9 | 140003D5D | mov qword ptr ss:[rsp+80],r14 | 140003D65 | lea rdi,qword ptr ds:[rsi+38] | 140003D69 | lea r14,qword ptr ds:[rsi+1C38] | 140003D70 | mov esi,ebp | 140003D72 | mov rcx,rbx | 140003D75 | mov edx,1 | 140003D7A | shl rdx,cl | 140003D7D | mov rcx,rdx | current core mask 140003D80 | call qword ptr ds:[<&JMP.&KeSetSystemAffinityThreadEx>] 140003D86 | mov rdx,r14 | 140003D89 | mov rcx,rdi | 140003D8C | call denuvo-anti-cheat.1400086C0 | read cpuid + VMX MSRs 140003D91 | inc rbx | core++ 140003D94 | add rdi,E0 | 140003D9B | sub rsi,1 | 140003D9F | jne denuvo-anti-cheat.140003D72 | loop through all cores 140003DA1 | mov r14,qword ptr ss:[rsp+80] | 140003DA9 | mov rcx,r15 | 140003DAC | call qword ptr ds:[1400770F0] | KeRevertToUserAffinityThreadEx 140003DB2 | mov rcx,qword ptr ss:[rsp+30] | 140003DB7 | xor rcx,rsp | 140003DBA | call denuvo-anti-cheat.14006FB10 | 140003DBF | add rsp,40 | 140003DC3 | pop r15 | 140003DC5 | pop rdi | 140003DC6 | pop rsi | 140003DC7 | pop rbp | 140003DC8 | pop rbx | 140003DC9 | ret | --- snip --- The API is used by the driver to execute a subroutine on each cpu core (limited to 32) which: - queries information about the cpu core (vendor, revision, ...) - queries for virtualization extensions (VMX MSRs) $ wine --version wine-5.8-321-gf0a8061663 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4