May 2020 - Wine-Bugs - list.winehq.org

[Bug 49230] New: Multiple kernel drivers crash on unimplemented function ntoskrnl.exe.KeSetTimer (Denuvo Anti-Cheat 'denuvo-anti-cheat.sys')
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49230 Bug ID: 49230 Summary: Multiple kernel drivers crash on unimplemented function ntoskrnl.exe.KeSetTimer (Denuvo Anti-Cheat 'denuvo-anti-cheat.sys') Product: Wine Version: 5.9 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49224 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll,+reg wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078DFE0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Call ntoskrnl.exe.PsCreateSystemThread(00b5f458,00000000,00000000,00000000,00000000,00c84340,00e41e78) ret=00c845d6 00d0:Call ntdll.RtlCreateUserThread(ffffffffffffffff,00000000,00000000,00000000,00000000,00000000,00c84340,00e41e78,00b5f458,00000000) ret=00233a0b 00d0:Ret ntdll.RtlCreateUserThread() retval=00000000 ret=00233a0b 00d0:Ret ntoskrnl.exe.PsCreateSystemThread() retval=00000000 ret=00c845d6 00d0:Call ntoskrnl.exe.ObReferenceObjectByHandle(00000050,001fffff,00000000,00000000,00e41e88,00000000) ret=00c8460a 00d0:trace:ntoskrnl:ObReferenceObjectByHandle 0000000000000050 1fffff 0000000000000000 0 0000000000E41E88 0000000000000000 00d0:Call ntdll.NtQueryObject(00000050,00000002,00b5f120,00000100,00b5f220) ret=0022e6cb 00d0:trace:ntdll:NtQueryObject (0x50,0x00000002,0xb5f120,0x00000100,0xb5f220) 00d0:Ret ntdll.NtQueryObject() retval=00000000 ret=0022e6cb ... 00d8:Starting thread proc 0xc84340 (arg=0xe41e78) ... 00d8:Call ntoskrnl.exe.KeInitializeTimer(04b600c4) ret=00caeab7 00d8:trace:ntoskrnl:KeInitializeTimerEx timer 0000000004B600C4, type 0. 00d8:Ret ntoskrnl.exe.KeInitializeTimer() retval=00000020 ret=00caeab7 00d8:Call ntoskrnl.exe.KeInitializeDpc(04b60104,00caecf0,04b6009c) ret=00caeacb 00d8:fixme:ntoskrnl:KeInitializeDpc stub 00d8:Ret ntoskrnl.exe.KeInitializeDpc() retval=00000005 ret=00caeacb 00d8:Call KERNEL32.RaiseException(80000100,00000001,00000002,067efbc0) ret=0023ea28 00d8:Call ntdll.memcpy(067efaa8,067efbc0,00000010) ret=7b0104f6 00d8:Ret ntdll.memcpy() retval=067efaa8 ret=7b0104f6 00d8:trace:seh:raise_exception code=80000100 flags=1 addr=0x7b010505 ip=7b010505 tid=00d8 00d8:trace:seh:raise_exception info[0]=000000000025c000 00d8:trace:seh:raise_exception info[1]=000000000025e7ac 00d8:trace:seh:call_vectored_handlers calling handler at 0x22d030 code=80000100 flags=1 00d8:trace:seh:call_vectored_handlers handler at 0x22d030 returned 0 00d8:trace:seh:RtlVirtualUnwind type 1 rip 7b010505 rsp 67efa60 ... wine: Call from 0x7b010505 to unimplemented function ntoskrnl.exe.KeSetTimer, aborting --- snip --- Wine source: https://source.winehq.org/git/wine.git/blob/056c9df854817670dc4fb9c095cba29… --- snip --- 637 @ stub KeSetTimer 638 @ stdcall KeSetTimerEx(ptr int64 long ptr) --- snip --- Should be implemented on top of KeSetTimerEx(). $ wine --version wine-5.9-13-g3df701e6b9 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 49160] New: Unity: SystemInfo.deviceUniqueIdentifier always the same under Wine
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49160 Bug ID: 49160 Summary: Unity: SystemInfo.deviceUniqueIdentifier always the same under Wine Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wmi&wbemprox Assignee: wine-bugs(a)winehq.org Reporter: jamiesonc2(a)gmail.com Distribution: Ubuntu Unity's SystemInfo.deviceUniqueIdentifier always returns the same value under Wine, because the underlying data used to populate the property are hardcoded in Wine. Applications that depend on SystemInfo.deviceUniqueIdentifier being unique between different systems may behave unexpectedly, including identity collisions in cloud services clients. This behavior was observed in the Syrinscape Online (beta) application, which relies on SystemInfo.deviceUniqueIdentifier to link desktop apps with online accounts. Wine users are getting linked with other Wine users' online accounts because all of the Syrinscape Online clients appear to be running on the same device. https://www.syrinscape.com/online/ See this Syrinscape support forum thread where the issue was discussed: https://forum.syrinscape.com/t/who-is-stuart-kehoe/8850 Details about Unity's SystemInfo.deviceUniqueIdentifier: https://docs.unity3d.com/ScriptReference/SystemInfo-deviceUniqueIdentifier.… The following data is retrieved from wbemprox to generate a UID: Win32_BaseBoard::SerialNumber Win32_BIOS::SerialNumber Win32_Processor::UniqueId Win32_DiskDrive::SerialNumber Win32_OperatingSystem::SerialNumber As of Wine 5.8, these values are hardcoded. From the latest wbemprox/builtin.c at the time of this writing: https://source.winehq.org/git/wine.git/blob/93758fc3ef16eed6cf1639aa6c31f6a… Line 1103: Baseboard serial number = L"None" Line 1295: BIOS serial number = L"0" Line 2117: DiskDrive serial number = L"WINEHDISK" Line 3216: Processor unique ID = NULL Line 3417: OS serial number = L"12345-OEM-1234567-12345" As a consequence of the above, the value of Unity's SystemInfo.deviceUniqueIdentifier is always: 12a9126b14ff9b78b28d00f78e2bff20a224611b PROPOSED: If it is impractical to obtain actual serial numbers/IDs for the aforementioned components, consider populating the values in a way that facilitates more convenient user customization to workaround application issues. 1. Consider sourcing the values from specially designated registry keys, populated during new WINE_PREFIX setup. 2. Consider populating said registry keys with random values rather than fixed values. This will obviate the need for users to do any manual workarounds. (Not sure if it would break other things, but philosophically, it's not unreasonable to treat every WINE_PREFIX as though it's a whole new system build.) -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 49117] New: Virtual memory allocation gets slower when large number of views are allocated (We Happy Few)
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49117 Bug ID: 49117 Summary: Virtual memory allocation gets slower when large number of views are allocated (We Happy Few) Product: Wine Version: 5.7 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: rbernon(a)codeweavers.com Distribution: --- Created attachment 67101 --> https://bugs.winehq.org/attachment.cgi?id=67101 Patch for upcoming Wine 5.8 We Happy Few allocates an unusually large number of individual virtual memory views (17k views allocated once the menu is reached), which then makes the virtual memory allocation slower because of the large rbtree traversal. Using a dedicated structure to track free memory ranges instead of the view rbtree traversal leads to a huge FPS increase (tested at +20% when CPU bound) once in game. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 49211] New: BandLab Cakewalk 2020.04 crashes in I_ScUnregisterDeviceNotification
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49211 Bug ID: 49211 Summary: BandLab Cakewalk 2020.04 crashes in I_ScUnregisterDeviceNotification Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: rpisl(a)seznam.cz Distribution: --- Created attachment 67218 --> https://bugs.winehq.org/attachment.cgi?id=67218 backtrace BandLab Cakewalk 2020.04 crashes in I_ScUnregisterDeviceNotification on null pointer dereference on exit. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 49267] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs support for CustomTimerDpc via ntoskrnl.exe.KeSetTimer{Ex}
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49267 Bug ID: 49267 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs support for CustomTimerDpc via ntoskrnl.exe.KeSetTimer{Ex} Product: Wine Version: 5.9 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49230 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll,+reg wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00f8:Call ntoskrnl.exe.KeInitializeTimer(04b600c4) ret=00caeab7 00f8:trace:ntoskrnl:KeInitializeTimerEx timer 0000000004B600C4, type 0. 00f8:Ret ntoskrnl.exe.KeInitializeTimer() retval=00000020 ret=00caeab7 00f8:Call ntoskrnl.exe.KeInitializeDpc(04b60104,00caecf0,04b6009c) ret=00caeacb 00f8:fixme:ntoskrnl:KeInitializeDpc Dpc 0000000004B60104, DeferredRoutine 0000000000CAECF0, DeferredContext 0000000004B6009C, Dpc->DeferredRoutine 0000000000000000 stub 00f8:Ret ntoskrnl.exe.KeInitializeDpc() retval=00000085 ret=00caeacb 00f8:Call ntoskrnl.exe.KeSetTimer(04b600c4,ffffffffff676980,04b60104) ret=00caeae9 00f8:trace:ntoskrnl:KeSetTimer Timer 0000000004B600C4, DueTime ffffffffff676980, Dpc 0000000004B60104. 00f8:trace:ntoskrnl:KeSetTimerEx timer 0000000004B600C4, duetime ffffffffff676980, period 0, dpc 0000000004B60104. 00f8:fixme:ntoskrnl:KeSetTimerEx Unhandled DPC 0000000004B60104. 00f8:Ret ntoskrnl.exe.KeSetTimer() retval=00000000 ret=00caeae9 ... --- snip --- Wine source: https://source.winehq.org/git/wine.git/blob/e48fabff525061c8eea9558084a9730… --- snip --- 414 /*********************************************************************** 415 * KeSetTimerEx (NTOSKRNL.EXE.@) 416 */ 417 BOOLEAN WINAPI KeSetTimerEx( KTIMER *timer, LARGE_INTEGER duetime, LONG period, KDPC *dpc ) 418 { 419 BOOL ret; 420 421 TRACE("timer %p, duetime %s, period %d, dpc %p.\n", 422 timer, wine_dbgstr_longlong(duetime.QuadPart), period, dpc); 423 424 if (dpc) 425 { 426 FIXME("Unhandled DPC %p.\n", dpc); 427 return FALSE; 428 } 429 ... --- snip --- Microsoft docs (how this is supposed to work): https://docs.microsoft.com/en-us/windows-hardware/drivers/kernel/registerin… It includes a nice diagram that illustrates the usage of timer and DPC objects for a CustomTimerDpc routine. Created snapshot of the page via Internet Archive in case it gets "lost". $ wine --version wine-5.9-107-g3104715700 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 49219] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThreadEx
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49219 Bug ID: 49219 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThreadEx Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49217 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078EE10,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Call ntoskrnl.exe.KdRefreshDebuggerNotPresent() ret=00c84e5a 00d0:trace:ntoskrnl:KdRefreshDebuggerNotPresent . 00d0:Ret ntoskrnl.exe.KdRefreshDebuggerNotPresent() retval=00000001 ret=00c84e5a 00d0:Call ntoskrnl.exe.KeQueryActiveProcessorCountEx(0000ffff) ret=00c83d3a 00d0:fixme:ntoskrnl:KeQueryActiveProcessorCountEx GroupNumber 65535 semi-stub. 00d0:Call KERNEL32.GetSystemInfo(00b5f2f0) ret=00232906 00d0:Call ntdll.NtQuerySystemInformation(00000000,00b5f200,00000040,00000000) ret=7b02c721 00d0:trace:ntdll:NtQuerySystemInformation (0x00000000,0xb5f200,0x00000040,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c721 00d0:Call ntdll.NtQuerySystemInformation(00000001,00b5f1f0,0000000c,00000000) ret=7b02c751 00d0:trace:ntdll:NtQuerySystemInformation (0x00000001,0xb5f1f0,0x0000000c,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c751 00d0:Ret KERNEL32.GetSystemInfo() retval=00000006 ret=00232906 00d0:Ret ntoskrnl.exe.KeQueryActiveProcessorCountEx() retval=00000008 ret=00c83d3a 00d0:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc6cb0c ip=7bc6cb0c tid=00d0 00d0:trace:seh:raise_exception info[0]=0000000000e00266 00d0:trace:seh:raise_exception info[1]=0000000000dffd28 wine: Call from 0x7bc6cb0c to unimplemented function ntoskrnl.exe.KeSetSystemAffinityThreadEx, aborting --- snip --- Microsoft docs: https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-ke… This API is needed to ensure that certain code is executed on a specific cpu core (pinning). Relevant disassembly snippet of driver: --- snip --- ... 140003D37 | call qword ptr ds:[rax+40] | KeQueryActiveProcessorCountEx 140003D3A | mov byte ptr ds:[rsi+30],al | 140003D3D | movzx ebp,al | num cores 140003D40 | cmp al,20 | 140003D42 | jb denuvo-anti-cheat.140003D49 | 140003D44 | mov ebp,20 | limit to 32 cores max 140003D49 | or rcx,FFFFFFFFFFFFFFFF | 140003D4D | mov dword ptr ds:[rsi+34],ebp | 140003D50 | call qword ptr ds:[<&JMP.&KeSetSystemAffinityThreadEx>] 140003D56 | mov r15,rax | 140003D59 | test ebp,ebp | 140003D5B | je denuvo-anti-cheat.140003DA9 | 140003D5D | mov qword ptr ss:[rsp+80],r14 | 140003D65 | lea rdi,qword ptr ds:[rsi+38] | 140003D69 | lea r14,qword ptr ds:[rsi+1C38] | 140003D70 | mov esi,ebp | 140003D72 | mov rcx,rbx | 140003D75 | mov edx,1 | 140003D7A | shl rdx,cl | 140003D7D | mov rcx,rdx | current core mask 140003D80 | call qword ptr ds:[<&JMP.&KeSetSystemAffinityThreadEx>] 140003D86 | mov rdx,r14 | 140003D89 | mov rcx,rdi | 140003D8C | call denuvo-anti-cheat.1400086C0 | read cpuid + VMX MSRs 140003D91 | inc rbx | core++ 140003D94 | add rdi,E0 | 140003D9B | sub rsi,1 | 140003D9F | jne denuvo-anti-cheat.140003D72 | loop through all cores 140003DA1 | mov r14,qword ptr ss:[rsp+80] | 140003DA9 | mov rcx,r15 | 140003DAC | call qword ptr ds:[1400770F0] | KeRevertToUserAffinityThreadEx 140003DB2 | mov rcx,qword ptr ss:[rsp+30] | 140003DB7 | xor rcx,rsp | 140003DBA | call denuvo-anti-cheat.14006FB10 | 140003DBF | add rsp,40 | 140003DC3 | pop r15 | 140003DC5 | pop rdi | 140003DC6 | pop rsi | 140003DC7 | pop rbp | 140003DC8 | pop rbx | 140003DC9 | ret | --- snip --- The API is used by the driver to execute a subroutine on each cpu core (limited to 32) which: - queries information about the cpu core (vendor, revision, ...) - queries for virtualization extensions (VMX MSRs) $ wine --version wine-5.8-321-gf0a8061663 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 44115] New: vcrun2012's vcredist_arm.exe crashes in riched20:: isurlneutral()
by wine-bugs＠winehq.org June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=44115 Bug ID: 44115 Summary: vcrun2012's vcredist_arm.exe crashes in riched20::isurlneutral() Product: Wine Version: 2.21 Hardware: arm OS: Linux Status: NEW Keywords: download, Installer Severity: normal Priority: P2 Component: richedit Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: Debian Crashes on start, in riched20: Backtrace: =>0 0xad0b7c40 isurlneutral+0x14() in riched20 (0x00000000) 1 0xad0b7c38 isurlneutral+0xb() in riched20 (0x00000000) 2 0xad0baec4 ME_UpdateLinkAttribute+0x12b(editor=(nil), start=<is not available>, nChars=0xad0fa000) [/home/austin/wine-git/dlls/riched20/editor.c:5296] in riched20 (0x00000000) 3 0x00000002 (0x00000000) 0xad0b7c40 isurlneutral+0x14 in riched20: ldrh ip, [r2, r3] -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 49251] New: Mouse cursor leaves a trail when anti-aliasing enabled (Secret Files 1-2, Fahrenheit, Ufo:Extraterrestrials)
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49251 Bug ID: 49251 Summary: Mouse cursor leaves a trail when anti-aliasing enabled (Secret Files 1-2, Fahrenheit, Ufo:Extraterrestrials) Product: Wine Version: 5.4 Hardware: x86 URL: https://www.moddb.com/games/fahrenheit/downloads/faren heit-demo OS: Linux Status: NEW Keywords: download, regression Severity: normal Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: gyebro69(a)gmail.com CC: gofmanp(a)gmail.com Regression SHA1: 7ec7d812f1d5eabef12ac97d46fbb41bc2a91e98 Distribution: --- I'm having this problem in a couple of older games (Secret Files 1-2, Ufo: Extraterrestrials, Fahrenheit). When in-game anti-aliasing is enabled in those games, the mouse pointer leaves a trail across the screen and the screen stops refreshing, making the games unusable. According to my testing this was introduced by https://source.winehq.org/git/wine.git/commit/7ec7d812f1d5eabef12ac97d46fbb… Reverting the commit on current HEAD fixes the problem. Plain terminal output doesn't show anything related. To reproduce the problem in Fahrenheit demo: Start the game, create a new profile, select <Options>, <Visual>, set <Graphic Level> to custom. Click <Advanced Graphic Options> and enable anti-aliasing. Click on <Back> button to apply the changes. As you move the mouse and the cursor hits the border of the screen, the problem appears. wine-5.9-23-gba920246e5 OpenGL vendor string: NVIDIA Corporation OpenGL renderer string: GeForce GT 730/PCIe/SSE2 OpenGL core profile version string: 4.6.0 NVIDIA 440.66.14 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 34842] New: Garmin BaseCamp 4.1.2 sometimes fails to run when late-bound riched20.dll preferred load base address is already occupied and PE mapped into >2 GiB address range
by wine-bugs＠winehq.org June 5, 2020

June 5, 2020

http://bugs.winehq.org/show_bug.cgi?id=34842 Bug #: 34842 Summary: Garmin BaseCamp 4.1.2 sometimes fails to run when late-bound riched20.dll preferred load base address is already occupied and PE mapped into >2 GiB address range Product: Wine Version: 1.7.5 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, Garmin BaseCamp 4.1.2 runs pretty good with MS .NET Framework 3.5 installed. There are (albeit rare) cases of startup failures when Wine loader fails to map builtin RichEd20.dll to its preferred load base address because it is already taken by another module. RichEd20 needs a load address in lower 2 GiB virtual address space. See bug 22551 "Multiple .NET apps fail to load riched20.dll into memory (.NET Framework/Windows Forms wants riched20.dll loaded into lower 2GiB address space range)" for info. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Garmin/BaseCamp ... $ wine ./BaseCamp.exe ... err:eventlog:ReportEventW L"clr20r3" err:eventlog:ReportEventW L"basecamp.exe" err:eventlog:ReportEventW L"4.1.2.0" err:eventlog:ReportEventW L"5134f30b" err:eventlog:ReportEventW L"system.windows.forms" err:eventlog:ReportEventW L"2.0.0.0" err:eventlog:ReportEventW L"471ebf68" err:eventlog:ReportEventW L"4ecd" err:eventlog:ReportEventW L"5b" err:eventlog:ReportEventW L"system.componentmodel.win32" err:eventlog:ReportEventW L"NIL" fixme:advapi:DeregisterEventSource (0xcafe4242) stub err:ole:CoInitializeEx Attempt to change threading model of this apartment from multi-threaded to apartment threaded err:ole:CoInitializeEx Attempt to change threading model of this apartment from multi-threaded to apartment threaded fixme:richedit:ME_HandleMessage EM_SETMARGINS: stub fixme:richedit:ME_HandleMessage EM_SETMARGINS: stub err:ole:CoUninitialize Mismatched CoUninitialize err:ole:CoUninitialize Mismatched CoUninitialize Unhandled Exception: System.ComponentModel.Win32Exception: Cannot load the "RichEd20.DLL" DLL into memory. at System.Windows.Forms.RichTextBox.get_CreateParams() at System.Windows.Forms.Control..ctor(Boolean autoInstallSyncContext) at System.Windows.Forms.TextBoxBase..ctor() at System.Windows.Forms.RichTextBox..ctor() at bc.FatalErrorDialog_t.InitializeComponent() at bc.FatalErrorDialog_t..ctor(basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >* aAppName) at bc.FatalError_t.Display(SByte* aFilename, UInt16 aLineNumber, basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >* aWhat, basic_string<char\,std::char_traits<char>\,std::allocator<char> >* aSubId, Optional_t<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > >* aOpenGLVersion, vector<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > >\,std::allocator<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > > > >* aFileList) at bc.FatalError_t..ctor(Exception aException, Optional_t<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > >* aOpenGLVersion, vector<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > >\,std::allocator<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > > > >* aFileList) at main(String[] aArgs) at mainCRTStartupStrArray(String[] arguments) wine: Unhandled exception 0xe0434f4d in thread 33 at address 0x7b83a8bf (thread 0033), starting debugger... --- snip --- RichEd20.dll has a preferred load address: --- snip --- EXTRADLLFLAGS = -Wl,--image-base,0x7ac00000 --- snip --- Address space layout in case of collision: --- snip --- Module Address Debug info Name (139 modules) PE 340000- 362000 Deferred zlibwapi PE 400000- 25a7000 Deferred basecamp PE 25b0000- 278d000 Deferred xerceslib PE 2790000- 2bc6000 Deferred ogckml PE 2df0000- 337f000 Export mscorwks PE e610000- e6ae000 Deferred system.drawing PE e9c0000- ecb2000 Deferred system PE f270000- f73a000 Deferred system.windows.forms PE 10000000-100e5000 Deferred exiv2 PE 5e3a0000-5e42d000 Deferred diasymreader PE 60000000-60008000 Deferred accessibility PE 637a0000-6399c000 Deferred system.xml PE 64020000-64033000 Deferred mscorsec PE 64890000-648fc000 Deferred system.configuration PE 67510000-6756e000 Deferred system.management PE 6a310000-6a31a000 Deferred wminet_utils PE 74e60000-74e79000 Deferred wmiutils PE 78130000-781cb000 Deferred msvcr80 PE 783f0000-78433000 Deferred msvcm90 PE 79000000-79046000 Export mscoree PE 79060000-790b6000 Deferred mscorjit PE 790c0000-79500000 Deferred mscorlib ELF 79afa000-7b800000 Deferred libnvidia-glcore.so.304.108 ELF 7b800000-7ba60000 Dwarf kernel32<elf> \-PE 7b810000-7ba60000 \ kernel32 ... ELF f6a22000-f6a89000 Deferred riched20<elf> \-PE f6a30000-f6a89000 \ riched20 --- snip --- "libnvidia-glcore.so.304.108" took the place earlier and "riched20.dll" was mapped into > 2 GiB address space which .NET runtime doesn't like. Maybe Wine loader could try to map dlls which have requirements of preferred load address always in < 2 GiB address range for Windows compatiblity. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 9

[Bug 49194] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs 'netio.sys' (Winsock Kernel Sockets API / WSK)
by WineHQ Bugzilla June 5, 2020

June 5, 2020

https://bugs.winehq.org/show_bug.cgi?id=49194 Bug ID: 49194 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs 'netio.sys' (Winsock Kernel Sockets API / WSK) Product: Wine Version: 5.8 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. Continuation of bug 49192 Disclaimer for the general populace, to avoid these stupid comments on Reddit/your-favourite-gossip-site: This is not an attempt to make anything work. --- snip --- $ WINEDEBUG=+seh,+relay,+ntoskrnl wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:trace:ntoskrnl:load_driver loading driver L"C:\\Program Files\\Denuvo Anti-Cheat\\denuvo-anti-cheat.sys" 00d0:Call KERNEL32.LoadLibraryW(0078eff0 L"C:\\Program Files\\Denuvo Anti-Cheat\\denuvo-anti-cheat.sys") ret=00236828 ... 00d0:err:module:import_dll Library netio.sys (which is needed by L"C:\\Program Files\\Denuvo Anti-Cheat\\denuvo-anti-cheat.sys") not found ... 00d0:err:module:import_dll Library wdfldr.sys (which is needed by L"C:\\Program Files\\Denuvo Anti-Cheat\\denuvo-anti-cheat.sys") not found 00d0:Ret ntdll.LdrLoadDll() retval=c0000135 ret=7b01d770 ... 00d0:Ret KERNEL32.LoadLibraryW() retval=00000000 ret=00236828 ... 00d0:trace:ntoskrnl:IoDeleteDriver (00000000000FB930) ... 00d0:err:ntoskrnl:ZwLoadDriver failed to create driver L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat": c0000142 --- snip --- --- snip --- $ winedump -j import drive_c/Program\ Files/Denuvo\ Anti-Cheat/denuvo-anti-cheat.sys Contents of drive_c/Program Files/Denuvo Anti-Cheat/denuvo-anti-cheat.sys: 1553128 bytes Import Table size: 00000050 offset 0017381c netio.sys Hint/Name Table: 0017F670 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 0017F000 Thunk Ordn Name 0017f000 1 WskDeregister 0017f008 2 WskRegister 0017f010 3 WskReleaseProviderNPI 0017f018 0 WskCaptureProviderNPI offset 00173830 ntoskrnl.exe Hint/Name Table: 0017F698 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 0017F028 Thunk Ordn Name 0017f028 0 ExAcquireFastMutex 0017f030 1 ExAllocatePoolWithQuotaTag 0017f038 2 ExAllocatePoolWithTag 0017f040 3 ExCreateCallback 0017f048 4 ExFreePoolWithTag 0017f050 5 ExRegisterCallback 0017f058 6 ExReleaseFastMutex 0017f060 7 ExUnregisterCallback 0017f068 8 IoAllocateIrp 0017f070 9 IoAllocateMdl 0017f078 10 IoFreeIrp 0017f080 11 IoFreeMdl 0017f088 12 IoGetCurrentProcess 0017f090 13 IoGetInitialStack 0017f098 14 IoReuseIrp 0017f0a0 15 KdDebuggerEnabled 0017f0a8 16 KdRefreshDebuggerNotPresent 0017f0b0 17 KeAcquireSpinLockAtDpcLevel 0017f0b8 18 KeAcquireSpinLockRaiseToDpc 0017f0c0 19 KeBugCheckEx 0017f0c8 20 KeCancelTimer 0017f0d0 21 KeDelayExecutionThread 0017f0d8 22 KeGenericCallDpc 0017f0e0 23 KeGetCurrentProcessorNumberEx 0017f0e8 24 KeInitializeDpc 0017f0f0 25 KeInitializeEvent 0017f0f8 26 KeInitializeMutex 0017f100 27 KeInitializeTimer 0017f108 28 KeLowerIrql 0017f110 29 KeQueryActiveProcessorCountEx 0017f118 30 KeReleaseMutex 0017f120 31 KeReleaseSpinLock 0017f128 32 KeReleaseSpinLockFromDpcLevel 0017f130 33 KeRevertToUserAffinityThreadEx 0017f138 34 KeSetEvent 0017f140 35 KeSetSystemAffinityThreadEx 0017f148 36 KeSetTimer 0017f150 37 KeSignalCallDpcDone 0017f158 38 KeSignalCallDpcSynchronize 0017f160 39 KeStackAttachProcess 0017f168 40 KeUnstackDetachProcess 0017f170 41 KeWaitForSingleObject 0017f178 42 KfRaiseIrql 0017f180 43 MmBuildMdlForNonPagedPool 0017f188 44 MmGetPhysicalAddress 0017f190 45 MmGetSystemRoutineAddress 0017f198 46 MmGetVirtualForPhysical 0017f1a0 47 MmIsAddressValid 0017f1a8 48 MmMapIoSpace 0017f1b0 49 MmUnmapIoSpace 0017f1b8 50 ObOpenObjectByPointer 0017f1c0 51 ObReferenceObjectByHandle 0017f1c8 52 ObRegisterCallbacks 0017f1d0 53 ObUnRegisterCallbacks 0017f1d8 54 ObfDereferenceObject 0017f1e0 55 ObfReferenceObject 0017f1e8 56 PsCreateSystemThread 0017f1f0 57 PsGetCurrentProcessId 0017f1f8 58 PsGetCurrentThreadTeb 0017f200 59 PsGetProcessId 0017f208 60 PsGetThreadProcessId 0017f210 61 PsGetVersion 0017f218 62 PsLookupProcessByProcessId 0017f220 63 PsProcessType 0017f228 64 PsRemoveLoadImageNotifyRoutine 0017f230 65 PsSetLoadImageNotifyRoutine 0017f238 66 PsTerminateSystemThread 0017f240 67 PsThreadType 0017f248 68 RtlAnsiCharToUnicodeChar 0017f250 69 RtlAnsiStringToUnicodeString 0017f258 70 RtlCheckRegistryKey 0017f260 71 RtlCopyUnicodeString 0017f268 72 RtlFreeUnicodeString 0017f270 73 RtlGetVersion 0017f278 74 RtlInitAnsiString 0017f280 75 RtlInitUnicodeString 0017f288 76 RtlQueryRegistryValues 0017f290 77 RtlRandomEx 0017f298 78 RtlUnicodeToMultiByteN 0017f2a0 79 ZwClose 0017f2a8 80 ZwCreateFile 0017f2b0 81 ZwCreateKey 0017f2b8 82 ZwDeleteFile 0017f2c0 83 ZwDeleteKey 0017f2c8 84 ZwDeleteValueKey 0017f2d0 85 ZwDuplicateObject 0017f2d8 86 ZwLoadDriver 0017f2e0 87 ZwOpenFile 0017f2e8 88 ZwOpenProcess 0017f2f0 89 ZwQuerySystemInformation 0017f2f8 90 ZwQueryVirtualMemory 0017f300 91 ZwReadFile 0017f308 92 ZwSetValueKey 0017f310 93 ZwUnloadDriver 0017f318 94 ZwWriteFile 0017f320 95 __C_specific_handler 0017f328 96 __chkstk 0017f330 97 _purecall offset 00173844 wdfldr.sys Hint/Name Table: 0017F9B0 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 0017F340 Thunk Ordn Name 0017f340 1 WdfVersionBindClass 0017f348 2 WdfVersionUnbind 0017f350 3 WdfVersionUnbindClass 0017f358 0 WdfVersionBind Done dumping drive_c/Program Files/Denuvo Anti-Cheat/denuvo-anti-cheat.sys --- snip --- Looks like the driver registers itself as Winsock Kernel (WSK) client. This is the "new" way as the TDI API is considered legacy on modern Windows versions. --- quote --- The TDI feature is deprecated and will be removed in future versions of Microsoft Windows. Depending on how you use TDI, use either the Winsock Kernel (WSK) or Windows Filtering Platform (WFP). --- quote --- Just mentioning here since Wine has this component as well, albeit different design: 'http.sys' is a WSK client on Windows. https://docs.microsoft.com/en-us/windows-hardware/drivers/network/registeri… $ wine --version wine-5.8-173-g9e26bc8116 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 10