July 2020 - Wine-Bugs - list.winehq.org

[Bug 44925] New: StarForce v3 kernel driver service 'sfhlp02' fails in driver entry point due to 'ntoskrnl.exe.ExCreateCallback' stub ( needs STATUS_SUCCESS)
by wine-bugs＠winehq.org Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=44925 Bug ID: 44925 Summary: StarForce v3 kernel driver service 'sfhlp02' fails in driver entry point due to 'ntoskrnl.exe.ExCreateCallback' stub (needs STATUS_SUCCESS) Product: Wine Version: 3.5 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 44924 --- snip --- ... 0035:Call driver init 0x785300 (obj=0x11caf0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\sfhlp02") ... 035:Call ntoskrnl.exe.IoCreateSynchronizationEvent(0065fc80,0065fc8c) ret=00785414 0035:fixme:ntoskrnl:IoCreateSynchronizationEvent (0x65fc80 0x65fc8c) stub 0035:Ret ntoskrnl.exe.IoCreateSynchronizationEvent() retval=cafebabe ret=00785414 0035:Call ntoskrnl.exe.KeEnterCriticalRegion() ret=0078542c 0035:fixme:ntoskrnl:KeEnterCriticalRegion : stub 0035:Ret ntoskrnl.exe.KeEnterCriticalRegion() retval=00000031 ret=0078542c 0035:Call ntoskrnl.exe.KeWaitForSingleObject(cafebabe,00000000,00000000,00000000,00000000) ret=00785437 0035:fixme:ntoskrnl:KeWaitForSingleObject stub: 0xcafebabe, 0, 0, 0, (nil) 0035:Ret ntoskrnl.exe.KeWaitForSingleObject() retval=c0000002 ret=00785437 0035:Call ntoskrnl.exe.RtlInitUnicodeString(0065fc78,007853ac L"\\Callback\\StarForceCreateThread") ret=00785442 0035:Call ntdll.RtlInitUnicodeString(0065fc78,007853ac L"\\Callback\\StarForceCreateThread") ret=7bc7f41b 0035:Ret ntdll.RtlInitUnicodeString() retval=0065fc78 ret=7bc7f41b 0035:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0065fc78 ret=00785442 0035:Call ntoskrnl.exe.ExCreateCallback(0065fc88,0065fc60,00000000,00000001) ret=00785472 0035:fixme:ntoskrnl:ExCreateCallback (0x65fc88, 0x65fc60, 0, 1): stub 0035:Ret ntoskrnl.exe.ExCreateCallback() retval=c0000002 ret=00785472 0035:Call ntoskrnl.exe.ZwClose(00783014) ret=007854ee 0035:Call ntdll.NtClose(00783014) ret=7bc7f41b 0035:Ret ntdll.NtClose() retval=c0000008 ret=7bc7f41b 0035:Ret ntoskrnl.exe.ZwClose() retval=c0000008 ret=007854ee 0035:Call ntoskrnl.exe.KeLeaveCriticalRegion() ret=007854f4 0035:fixme:ntoskrnl:KeLeaveCriticalRegion : stub 0035:Ret ntoskrnl.exe.KeLeaveCriticalRegion() retval=00000031 ret=007854f4 0035:Call ntoskrnl.exe.IoAllocateErrorLogEntry(0011caf0,00000030) ret=0078103a 0035:fixme:ntoskrnl:IoAllocateErrorLogEntry stub: 0x11caf0, 48 0035:Ret ntoskrnl.exe.IoAllocateErrorLogEntry() retval=00000000 ret=0078103a ... 0035:Ret driver init 0x785300 (obj=0x11caf0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\sfhlp02") retval=c0000002 ... 0035:Ret ntoskrnl.exe.IoCreateDriver() retval=c0000002 ret=7effb786 0035:err:winedevice:async_create_driver failed to create driver L"sfhlp02": c0000002 --- snip --- With a patch applied, the driver entry point is successfully executed: --- snip --- ... 0036:Call driver init 0x785300 (obj=0x11cbb0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\sfhlp02") ... 0036:Call ntoskrnl.exe.RtlInitUnicodeString(0065fc78,007853ac L"\\Callback\\StarForceCreateThread") ret=00785442 0036:Call ntdll.RtlInitUnicodeString(0065fc78,007853ac L"\\Callback\\StarForceCreateThread") ret=7bc7f41b 0036:Ret ntdll.RtlInitUnicodeString() retval=0065fc78 ret=7bc7f41b 0036:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0065fc78 ret=00785442 0036:Call ntoskrnl.exe.ExCreateCallback(0065fc88,0065fc60,00000000,00000001) ret=00785472 0036:fixme:ntoskrnl:ExCreateCallback (0x65fc88, 0x65fc60, 0, 1): stub 0036:Ret ntoskrnl.exe.ExCreateCallback() retval=00000000 ret=00785472 ... 0036:Call ntoskrnl.exe.KeLeaveCriticalRegion() ret=0078551a 0036:fixme:ntoskrnl:KeLeaveCriticalRegion : stub 0036:Ret ntoskrnl.exe.KeLeaveCriticalRegion() retval=00000031 ret=0078551a 0036:Ret driver init 0x785300 (obj=0x11cbb0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\sfhlp02") retval=00000000 0036:Ret ntoskrnl.exe.IoCreateDriver() retval=00000000 ret=7effb786 0036:Call ntoskrnl.exe.ObReferenceObjectByName(0065fdc0,00000040,00000000,00000000,00000000,00000000,00000000,0065fdc8) ret=7effb810 0036:trace:ntoskrnl:ObReferenceObjectByName mostly-stub:L"\\Driver\\sfhlp02" 64 (nil) 0 (nil) 0 (nil) 0x65fdc8 0036:Call ntdll.RtlCompareUnicodeString(0065fdc0,0011cbcc,00000000) ret=7ec13108 0036:Ret ntdll.RtlCompareUnicodeString() retval=00000000 ret=7ec13108 0036:Ret ntoskrnl.exe.ObReferenceObjectByName() retval=00000000 ret=7effb810 ... 0036:Call KERNEL32.SetEvent(0000003c) ret=7effb88e 0036:Ret KERNEL32.SetEvent() retval=00000001 ret=7effb88e 0036:Call advapi32.SetServiceStatus(0011b7e0,0065fd84) ret=7effb3d9 --- snip --- $ sha1sum tmsunrisedemo_setup.exe 2d44577a71718464c595d9da91a017fb0914afc4 tmsunrisedemo_setup.exe $ du -sh tmsunrisedemo_setup.exe 210M tmsunrisedemo_setup.exe $ wine --version wine-3.5-91-g3263d51a1f Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 11

[Bug 44127] New: Metal Gear Solid V: Ground Zeroes doesn't launch
by wine-bugs＠winehq.org Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=44127 Bug ID: 44127 Summary: Metal Gear Solid V: Ground Zeroes doesn't launch Product: Wine Version: 2.22 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: andrey.goosev(a)gmail.com Distribution: --- Created attachment 59865 --> https://bugs.winehq.org/attachment.cgi?id=59865 +seh Game crashes at launch. 00e2:err:seh:NtRaiseException Unhandled exception code 80000003 flags 0 addr 0x7bc8e34d wine-2.22-158-g47e9e911ac -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 49620] New: Tableau Desktop fails to install
by WineHQ Bugzilla Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=49620 Bug ID: 49620 Summary: Tableau Desktop fails to install Product: Wine Version: 5.13 Hardware: x86-64 URL: https://downloads.tableau.com/tssoftware/TableauDeskto p-64bit-2020-2-2.exe OS: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: programs Assignee: wine-bugs(a)winehq.org Reporter: xerox.xerox2000x(a)gmail.com Distribution: --- Created attachment 67805 --> https://bugs.winehq.org/attachment.cgi?id=67805 fake success sha1sum TableauDesktop-64bit-2020-2-2.exe 33445211ab66cb07990e11468521ca848a23ed7a TableauDesktop-64bit-2020-2-2.exe The installer says "Setup failed" in the end The installation dir is mostly empty (only a directory called Drivers is present) >From console: 02f4:fixme:sc:wmain command not supported 0190:err:msi:execute_script Execution of script 0 halted; action L"[\"sc.exe\" sdset \"flexnet licensing service 64\" D:(D;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;NU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPLOCRRC;;;IU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWRPLOCRRC;;;WD)<=>S-1-5-21-0-0-0-1000<=>{76106BC3-8B70-441F-98CE-D448FCEAFD18}]UpdateFlexNetS"... returned 1603 Faking success in sc.exe makes the installation succeed. See attached patch hereafter. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 49372] New: winedump crashes for sltg typelib files
by WineHQ Bugzilla Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=49372 Bug ID: 49372 Summary: winedump crashes for sltg typelib files Product: Wine Version: 5.10 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: infyquest(a)gmail.com Distribution: --- Created attachment 67425 --> https://bugs.winehq.org/attachment.cgi?id=67425 tlb file When calling trying to dump the sltg typelib files, winedump crashes with assert error and it show incorrect pad9 output. The command line output is below: $ winedump hello.tlb Contents of hello.tlb: 2519 bytes Header { magic = 47544c53h # file blocks = 5 res06 = 000ch size of index = 002bh first block = 1 guid = {000204ff-0000-0000-c000-000000000046} res1c = 00000034h res20 = ffff0000h } Block entry 0 { len = 0000012bh index string = 21h "6b09b0648" next = 0002h } Block entry 1 { len = 00000103h index string = 17h "7b09b0648" next = 0003h } Block entry 2 { len = 0000012fh index string = dh "8b09b0648" next = 0004h } Block entry 3 { len = 000005cbh index string = 9h "dir" next = 0000h } index: "\1CompObj" "dir" "8b09b0648" "7b09b0648" "6b09b0648" pad9: 0000006f: 00 00 00 00 18 88 50 34-54 .....�P4T winedump: ../../../wine/tools/winedump/tlb.c:1984: sltg_dump: Assertion `hlpstr_len == len + 6' failed. Aborted (core dumped) Attaching the affected sltg typelib file. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 19

[Bug 49221] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs instruction emulation for querying VMX capabilities via MSR 0x480..0x490
by WineHQ Bugzilla Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=49221 Bug ID: 49221 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' needs instruction emulation for querying VMX capabilities via MSR 0x480..0x490 Product: Wine Version: 5.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 49219 (split out from bug 49194). --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=000000000078EE10,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Call ntoskrnl.exe.KeQueryActiveProcessorCountEx(0000ffff) ret=00c83d3a 00d0:fixme:ntoskrnl:KeQueryActiveProcessorCountEx GroupNumber 65535 semi-stub. 00d0:Call KERNEL32.GetSystemInfo(00b5f2f0) ret=00232926 00d0:Call ntdll.NtQuerySystemInformation(00000000,00b5f200,00000040,00000000) ret=7b02c721 00d0:trace:ntdll:NtQuerySystemInformation (0x00000000,0xb5f200,0x00000040,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c721 00d0:Call ntdll.NtQuerySystemInformation(00000001,00b5f1f0,0000000c,00000000) ret=7b02c751 00d0:trace:ntdll:NtQuerySystemInformation (0x00000001,0xb5f1f0,0x0000000c,(nil)) 00d0:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7b02c751 00d0:Ret KERNEL32.GetSystemInfo() retval=00000006 ret=00232926 00d0:Ret ntoskrnl.exe.KeQueryActiveProcessorCountEx() retval=00000008 ret=00c83d3a 00d0:Call ntoskrnl.exe.KeSetSystemAffinityThreadEx(ffffffffffffffff) ret=00c83d56 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx (0xffffffff) semi-stub 00d0:Call ntdll.NtQueryInformationThread(fffffffffffffffe,0000001e,00b5f300,00000010,00000000) ret=00232aa8 00d0:Ret ntdll.NtQueryInformationThread() retval=00000000 ret=00232aa8 00d0:Call ntdll.NtSetInformationThread(fffffffffffffffe,0000001e,00b5f310,00000010) ret=00232b00 00d0:Ret ntdll.NtSetInformationThread() retval=c000000d ret=00232b00 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx Set affinity, status 0xc000000d. 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx old.Group 0, old.Mask 0xff. 00d0:Ret ntoskrnl.exe.KeSetSystemAffinityThreadEx() retval=000000ff ret=00c83d56 00d0:Call ntoskrnl.exe.KeSetSystemAffinityThreadEx(00000001) ret=00c83d86 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx (0x1) semi-stub 00d0:Call ntdll.NtQueryInformationThread(fffffffffffffffe,0000001e,00b5f300,00000010,00000000) ret=00232aa8 00d0:Ret ntdll.NtQueryInformationThread() retval=00000000 ret=00232aa8 00d0:Call ntdll.NtSetInformationThread(fffffffffffffffe,0000001e,00b5f310,00000010) ret=00232b00 00d0:Ret ntdll.NtSetInformationThread() retval=00000000 ret=00232b00 00d0:fixme:ntoskrnl:KeSetSystemAffinityThreadEx old.Group 0, old.Mask 0xff. 00d0:Ret ntoskrnl.exe.KeSetSystemAffinityThreadEx() retval=000000ff ret=00c83d86 00d0:trace:seh:raise_exception code=c0000096 flags=0 addr=0xc88ac3 ip=c88ac3 tid=00d0 00d0:trace:seh:raise_exception rax=0000000000000000 rbx=0000000000000000 rcx=00000000008e0370 rdx=000000009c000400 00d0:trace:seh:raise_exception rsi=00000000008e1f70 rdi=00000000008e0370 rbp=0000000000b5f370 rsp=0000000000b5f2f8 00d0:trace:seh:raise_exception r8=000000000027efb1 r9=00000000008e0370 r10=0000000000000000 r11=0000000000000000 00d0:trace:seh:raise_exception r12=0000000000000000 r13=00007fffffea4000 r14=0000000000000000 r15=0000000080000008 00d0:trace:seh:call_vectored_handlers calling handler at 0x22cfa0 code=c0000096 flags=0 00d0:trace:int:emulate_instruction mov cr4,rax at c88ac3 00d0:trace:int:vectored_handler next instruction rip=c88ac6 00d0:trace:int:vectored_handler rax=0000000000000000 rbx=0000000000000000 rcx=00000000008e0370 rdx=000000009c000400 00d0:trace:int:vectored_handler rsi=00000000008e1f70 rdi=00000000008e0370 rbp=0000000000b5f370 rsp=0000000000b5f2f8 00d0:trace:int:vectored_handler r8=000000000027efb1 r9=00000000008e0370 r10=0000000000000000 r11=0000000000000000 00d0:trace:int:vectored_handler r12=0000000000000000 r13=00000000ffea4000 r14=0000000000000000 r15=0000000080000008 00d0:trace:seh:call_vectored_handlers handler at 0x22cfa0 returned ffffffff 00d0:trace:seh:raise_exception code=c0000005 flags=0 addr=0xc88ad4 ip=c88ad4 tid=00d0 00d0:trace:seh:raise_exception info[0]=0000000000000000 00d0:trace:seh:raise_exception info[1]=ffffffffffffffff 00d0:trace:seh:raise_exception rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000480 rdx=000000009c000400 00d0:trace:seh:raise_exception rsi=00000000008e1f70 rdi=00000000008e0370 rbp=0000000000b5f370 rsp=0000000000b5f2f8 00d0:trace:seh:raise_exception r8=000000000027efb1 r9=00000000008e0370 r10=0000000000000000 r11=0000000000000000 00d0:trace:seh:raise_exception r12=0000000000000000 r13=00007fffffea4000 r14=0000000000000000 r15=0000000080000008 00d0:trace:seh:call_vectored_handlers calling handler at 0x22cfa0 code=c0000005 flags=0 00d0:trace:int:emulate_instruction rdmsr CR 0x00000480 00d0:trace:seh:call_vectored_handlers handler at 0x22cfa0 returned 0 00d0:warn:seh:virtual_unwind exception data not found in L"denuvo-anti-cheat.sys" --- snip --- Relevant disassembly snippet of driver: --- snip --- 0000000140008AC0 | 4C:8BC9 | mov r9,rcx | 0000000140008AC3 | 0F20E0 | mov rax,cr4 | 0000000140008AC6 | 48:C1E8 0D | shr rax,D | 0000000140008ACA | 24 01 | and al,1 | 0000000140008ACC | 8841 51 | mov byte ptr ds:[rcx+51],al | --- snip --- CR4 -> bit 13 set -> VMXE --- snip --- 0000000140008ACF | B9 80040000 | mov ecx,480 | 0000000140008AD4 | 0F32 | rdmsr | 0000000140008AD6 | 48:C1E2 20 | shl rdx,20 | 0000000140008ADA | B9 81040000 | mov ecx,481 | 0000000140008ADF | 48:0BC2 | or rax,rdx | 0000000140008AE2 | 49:8941 58 | mov qword ptr ds:[r9+58],rax | 0000000140008AE6 | 0F32 | rdmsr | 0000000140008AE8 | 48:C1E2 20 | shl rdx,20 | 0000000140008AEC | B9 82040000 | mov ecx,482 | 0000000140008AF1 | 48:0BC2 | or rax,rdx | 0000000140008AF4 | 49:8941 60 | mov qword ptr ds:[r9+60],rax | 0000000140008AF8 | 0F32 | rdmsr | 0000000140008AFA | 48:C1E2 20 | shl rdx,20 | 0000000140008AFE | B9 83040000 | mov ecx,483 | 0000000140008B03 | 48:0BC2 | or rax,rdx | 0000000140008B06 | 4C:8BC0 | mov r8,rax | 0000000140008B09 | 49:8941 68 | mov qword ptr ds:[r9+68],rax | 0000000140008B0D | 0F32 | rdmsr | 0000000140008B0F | 48:C1E2 20 | shl rdx,20 | 0000000140008B13 | B9 84040000 | mov ecx,484 | 0000000140008B18 | 48:0BC2 | or rax,rdx | 0000000140008B1B | 49:8941 70 | mov qword ptr ds:[r9+70],rax | 0000000140008B1F | 0F32 | rdmsr | 0000000140008B21 | 48:C1E2 20 | shl rdx,20 | 0000000140008B25 | B9 85040000 | mov ecx,485 | 0000000140008B2A | 48:0BC2 | or rax,rdx | 0000000140008B2D | 49:8941 78 | mov qword ptr ds:[r9+78],rax | 0000000140008B31 | 0F32 | rdmsr | 0000000140008B33 | 48:C1E2 20 | shl rdx,20 | 0000000140008B37 | B9 86040000 | mov ecx,486 | 0000000140008B3C | 48:0BC2 | or rax,rdx | 0000000140008B3F | 49:8981 80000000 | mov qword ptr ds:[r9+80],rax | 0000000140008B46 | 0F32 | rdmsr | 0000000140008B48 | 48:C1E2 20 | shl rdx,20 | 0000000140008B4C | B9 87040000 | mov ecx,487 | 0000000140008B51 | 48:0BC2 | or rax,rdx | 0000000140008B54 | 49:8981 88000000 | mov qword ptr ds:[r9+88],rax | 0000000140008B5B | 0F32 | rdmsr | 0000000140008B5D | 48:C1E2 20 | shl rdx,20 | 0000000140008B61 | B9 88040000 | mov ecx,488 | 0000000140008B66 | 48:0BC2 | or rax,rdx | 0000000140008B69 | 49:8981 90000000 | mov qword ptr ds:[r9+90],rax | 0000000140008B70 | 0F32 | rdmsr | 0000000140008B72 | 48:C1E2 20 | shl rdx,20 | 0000000140008B76 | B9 89040000 | mov ecx,489 | 0000000140008B7B | 48:0BC2 | or rax,rdx | 0000000140008B7E | 49:8981 98000000 | mov qword ptr ds:[r9+98],rax | 0000000140008B85 | 0F32 | rdmsr | 0000000140008B87 | 48:C1E2 20 | shl rdx,20 | 0000000140008B8B | B9 8A040000 | mov ecx,48A | 0000000140008B90 | 48:0BC2 | or rax,rdx | 0000000140008B93 | 49:8981 A0000000 | mov qword ptr ds:[r9+A0],rax | 0000000140008B9A | 0F32 | rdmsr | 0000000140008B9C | 48:C1E2 20 | shl rdx,20 | 0000000140008BA0 | 45:33D2 | xor r10d,r10d | 0000000140008BA3 | 48:0BC2 | or rax,rdx | 0000000140008BA6 | 49:8981 A8000000 | mov qword ptr ds:[r9+A8],rax | 0000000140008BAD | 4D:85C0 | test r8,r8 | 0000000140008BB0 | 79 3B | jns denuvo-anti-cheat.140008BED | 0000000140008BB2 | B9 8B040000 | mov ecx,48B | 0000000140008BB7 | 0F32 | rdmsr | 0000000140008BB9 | 48:C1E2 20 | shl rdx,20 | 0000000140008BBD | 48:B9 0000000022000000 | mov rcx,2200000000 | 0000000140008BC7 | 48:0BC2 | or rax,rdx | 0000000140008BCA | 49:8981 B0000000 | mov qword ptr ds:[r9+B0],rax | 0000000140008BD1 | 48:85C1 | test rcx,rax | 0000000140008BD4 | 74 1E | je denuvo-anti-cheat.140008BF4 | 0000000140008BD6 | B9 8C040000 | mov ecx,48C | 0000000140008BDB | 0F32 | rdmsr | 0000000140008BDD | 48:C1E2 20 | shl rdx,20 | 0000000140008BE1 | 48:0BC2 | or rax,rdx | 0000000140008BE4 | 49:8981 B8000000 | mov qword ptr ds:[r9+B8],rax | 0000000140008BEB | EB 0E | jmp denuvo-anti-cheat.140008BFB | 0000000140008BED | 4D:8991 B0000000 | mov qword ptr ds:[r9+B0],r10 | 0000000140008BF4 | 4D:8991 B8000000 | mov qword ptr ds:[r9+B8],r10 | 0000000140008BFB | 48:B9 0000000000008000 | mov rcx,80000000000000 | 0000000140008C05 | 49:8549 58 | test qword ptr ds:[r9+58],rcx | 0000000140008C09 | 74 5D | je denuvo-anti-cheat.140008C68 | 0000000140008C0B | B9 8D040000 | mov ecx,48D | 0000000140008C10 | 0F32 | rdmsr | 0000000140008C12 | 48:C1E2 20 | shl rdx,20 | 0000000140008C16 | B9 8E040000 | mov ecx,48E | 0000000140008C1B | 48:0BC2 | or rax,rdx | 0000000140008C1E | 49:8981 C0000000 | mov qword ptr ds:[r9+C0],rax | 0000000140008C25 | 0F32 | rdmsr | 0000000140008C27 | 48:C1E2 20 | shl rdx,20 | 0000000140008C2B | B9 8F040000 | mov ecx,48F | 0000000140008C30 | 48:0BC2 | or rax,rdx | 0000000140008C33 | 49:8981 C8000000 | mov qword ptr ds:[r9+C8],rax | 0000000140008C3A | 0F32 | rdmsr | 0000000140008C3C | 48:C1E2 20 | shl rdx,20 | 0000000140008C40 | B9 90040000 | mov ecx,490 | 0000000140008C45 | 48:0BC2 | or rax,rdx | 0000000140008C48 | 49:8981 D0000000 | mov qword ptr ds:[r9+D0],rax | 0000000140008C4F | 0F32 | rdmsr | 0000000140008C51 | 48:C1E2 20 | shl rdx,20 | 0000000140008C55 | 48:0BC2 | or rax,rdx | 0000000140008C58 | 49:8981 D8000000 | mov qword ptr ds:[r9+D8],rax | 0000000140008C5F | 41:C741 54 11000000 | mov dword ptr ds:[r9+54],11 | 0000000140008C67 | C3 | ret | 0000000140008C68 | 4D:8991 D8000000 | mov qword ptr ds:[r9+D8],r10 | 0000000140008C6F | 4D:8991 D0000000 | mov qword ptr ds:[r9+D0],r10 | 0000000140008C76 | 4D:8991 C8000000 | mov qword ptr ds:[r9+C8],r10 | 0000000140008C7D | 4D:8991 C0000000 | mov qword ptr ds:[r9+C0],r10 | 0000000140008C84 | 41:C741 54 11000000 | mov dword ptr ds:[r9+54],11 | 0000000140008C8C | C3 | ret | --- snip --- The patch (hack) from https://bugs.winehq.org/show_bug.cgi?id=49194#c1 returns zero rax and rdx for any MSR which isn't recognized in 'emulate_instruction()' Wine source: https://source.winehq.org/git/wine.git/blob/b65ca133052ed9053e48c571155a764… --- snip --- 769 case 0x32: /* rdmsr */ 770 { 771 ULONG reg = context->Rcx; 772 TRACE("rdmsr CR 0x%08x\n", reg); 773 switch (reg) 774 { 775 case MSR_LSTAR: 776 { 777 ULONG_PTR syscall_address = (ULONG_PTR)fake_syscall_function; 778 context->Rdx = (ULONG)(syscall_address >> 32); 779 context->Rax = (ULONG)syscall_address; 780 break; 781 } 782 default: return ExceptionContinueSearch; 783 } 784 context->Rip += prefixlen + 2; 785 return ExceptionContinueExecution; 786 } --- snip --- Since the VMX MSR range is well known there could be a default handler for these regs, returning fake (0) values. --- Tidbits: Python app to dump VMX capabilities from userspace: https://github.com/qemu/qemu/blob/master/scripts/kvm/vmxcap --- snip --- $ sudo ./vmxcap.py Basic VMX Information Hex: 0xda040000000012 Revision 18 VMCS size 1024 VMCS restricted to 32 bit addresses no Dual-monitor support yes VMCS memory type 6 INS/OUTS instruction information yes IA32_VMX_TRUE_*_CTLS support yes pin-based controls External interrupt exiting yes NMI exiting yes Virtual NMIs yes Activate VMX-preemption timer yes Process posted interrupts no primary processor-based controls Interrupt window exiting yes Use TSC offsetting yes HLT exiting yes INVLPG exiting yes MWAIT exiting yes RDPMC exiting yes RDTSC exiting yes CR3-load exiting default CR3-store exiting default CR8-load exiting yes CR8-store exiting yes Use TPR shadow yes NMI-window exiting yes MOV-DR exiting yes Unconditional I/O exiting yes Use I/O bitmaps yes Monitor trap flag yes Use MSR bitmaps yes MONITOR exiting yes PAUSE exiting yes Activate secondary control yes secondary processor-based controls Virtualize APIC accesses yes Enable EPT yes Descriptor-table exiting yes Enable RDTSCP yes Virtualize x2APIC mode yes Enable VPID yes WBINVD exiting yes Unrestricted guest yes APIC register emulation no Virtual interrupt delivery no PAUSE-loop exiting yes RDRAND exiting yes Enable INVPCID yes Enable VM functions yes VMCS shadowing no Enable ENCLS exiting no RDSEED exiting no Enable PML no EPT-violation #VE no Conceal non-root operation from PT no Enable XSAVES/XRSTORS no Mode-based execute control (XS/XU) no Sub-page write permissions no GPA translation for PT no TSC scaling no User wait and pause no ENCLV exiting no VM-Exit controls Save debug controls default Host address-space size yes Load IA32_PERF_GLOBAL_CTRL yes Acknowledge interrupt on exit yes Save IA32_PAT yes Load IA32_PAT yes Save IA32_EFER yes Load IA32_EFER yes Save VMX-preemption timer value yes Clear IA32_BNDCFGS no Conceal VM exits from PT no Clear IA32_RTIT_CTL no VM-Entry controls Load debug controls default IA-32e mode guest yes Entry to SMM yes Deactivate dual-monitor treatment yes Load IA32_PERF_GLOBAL_CTRL yes Load IA32_PAT yes Load IA32_EFER yes Load IA32_BNDCFGS no Conceal VM entries from PT no Load IA32_RTIT_CTL no Miscellaneous data Hex: 0x300481e5 VMX-preemption timer scale (log2) 5 Store EFER.LMA into IA-32e mode guest control yes HLT activity state yes Shutdown activity state yes Wait-for-SIPI activity state yes PT in VMX operation no IA32_SMBASE support yes Number of CR3-target values 4 MSR-load/store count recommendation 0 IA32_SMM_MONITOR_CTL[2] can be set to 1 yes VMWRITE to VM-exit information fields yes Inject event with insn length=0 no MSEG revision identifier 0 VPID and EPT capabilities Hex: 0xf0106334141 Execute-only EPT translations yes Page-walk length 4 yes Paging-structure memory type UC yes Paging-structure memory type WB yes 2MB EPT pages yes 1GB EPT pages yes INVEPT supported yes EPT accessed and dirty flags yes Advanced VM-exit information for EPT violations no Single-context INVEPT yes All-context INVEPT yes INVVPID supported yes Individual-address INVVPID yes Single-context INVVPID yes All-context INVVPID yes Single-context-retaining-globals INVVPID yes VM Functions Hex: 0x1 EPTP Switching yes --- snip --- Poor man's version (msr-tools): --- snip --- $ for i in `seq 0x480 0x490` ; do sudo rdmsr -x $i ; done da040000000012 7f00000016 fff9fffe0401e172 7fffff00036dff ffff000011ff 300481e5 80000021 ffffffff 2000 1727ff 2a 3cff00000000 f0106334141 7f00000016 fff9fffe04006172 7fffff00036dfb ffff000011fb --- snip --- $ wine --version wine-5.8-321-gf0a8061663 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 48779] New: Secret Files 3 crashes at launch (needs d3dx9_skin_info_Clone)
by WineHQ Bugzilla Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=48779 Bug ID: 48779 Summary: Secret Files 3 crashes at launch (needs d3dx9_skin_info_Clone) Product: Wine Version: 5.4 Hardware: x86-64 OS: Linux Status: NEW Severity: minor Priority: P2 Component: directx-d3dx9 Assignee: wine-bugs(a)winehq.org Reporter: andrey.goosev(a)gmail.com Distribution: --- fixme:d3dx:d3dx9_skin_info_Clone iface 05278980, skin_info 0479BD48 stub! wine-5.4-128-gc43998cb51 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 44306] New: Visual Novel "A Clockwork Ley-Line: The Borderline of Dusk" doesn't work with d3d9
by wine-bugs＠winehq.org Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=44306 Bug ID: 44306 Summary: Visual Novel "A Clockwork Ley-Line: The Borderline of Dusk" doesn't work with d3d9 Product: Wine Version: 3.0-rc4 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: dark.shadow4(a)web.de Distribution: --- The game simply doesn't start when directx is used. The console log stops, and nothing happens anymore. Issue happens with wine-3.0-rc4 and wine-staging-2.21. Complete log: -------- 006f:fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub 006f:fixme:win:WINNLSEnableIME hwnd 0x70050 enable 0: stub! 006f:fixme:win:EnumDisplayDevicesW ((null),0,0x33f874,0x00000000), stub! 006f:fixme:d3d:wined3d_check_device_format_conversion wined3d 0x16ae38, adapter_idx 0, device_type WINED3D_DEVICE_TYPE_HAL, src_format WINED3DFMT_B8G8R8A8_UNORM, dst_format WINED3DFMT_B8G8R8X8_UNORM stub! -------- When setting d3d9 to disabled in winecfg, the game starts up fine. Note: I'm using the non-steam version of the game. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 9

[Bug 49379] New: d2d1.dll.D2D1CreateDevice is unimplemented
by WineHQ Bugzilla Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=49379 Bug ID: 49379 Summary: d2d1.dll.D2D1CreateDevice is unimplemented Product: Wine Version: 5.10 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: d2d Assignee: wine-bugs(a)winehq.org Reporter: me+wine(a)shane.sh Distribution: --- Created attachment 67439 --> https://bugs.winehq.org/attachment.cgi?id=67439 The crash report generated by Altium I'm trying to get Altium Designer 20 running in wine. I'm using wine-staging 5.10 with the msxml6 and dotnet461 winetricks. These are necessary to get the application to start (and wine-staging because it includes a fix for https://bugs.winehq.org/show_bug.cgi?id=46568) However, the problem is that when I try to actually open a file, it crashes with the following being printed to STDERR: wine: Call from 0x7b0317a8 to unimplemented function d2d1.dll.D2D1CreateDevice, aborting Altium's own crash report seems to confirm that this is the problem (attached). I don't really know anything about DirectX, or Windows programming at all, but I don't think it should be too hard to implement this stub. Wine's dlls/d2d1/device.c does have a function called d2d_device_init, and my guess would be that D2D1CreateDevice would mostly just be a wrapper around that. But my naive attempt to implement that didn't work so it's quite likely I'm missing something important. Any help would be appreciated. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 11

[Bug 49291] New: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.ExUnregisterCallback when unloading
by WineHQ Bugzilla Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=49291 Bug ID: 49291 Summary: Denuvo Anti-Cheat 'denuvo-anti-cheat.sys' crashes on unimplemented function ntoskrnl.exe.ExUnregisterCallback when unloading Product: Wine Version: 5.9 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. Continuation of bug 49289 --- snip --- $ WINEDEBUG=+seh,+relay,+int,+ntoskrnl,+ntdll,+reg wine net start "Denuvo Anti-Cheat" >>log.txt 2>&1 ... 00d0:Call driver init 0000000000C81184 (obj=00000000000FC7F0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") ... 00d0:Ret driver init 0000000000C81184 (obj=00000000000FC7F0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Denuvo Anti-Cheat") retval=00000000 ... 00d0:trace:ntoskrnl:init_driver init done for L"Denuvo Anti-Cheat" obj 00000000000FC7F0 ... 00d0:trace:ntoskrnl:init_driver - DriverUnload = 0000000000CBAF00 ... 00d4:trace:ntoskrnl:unload_driver L"\\Driver\\Denuvo Anti-Cheat" ... 00d4:Call driver unload 0000000000CBAF00 (obj=00000000000FC7F0) ... 00d4:Call KERNEL32.RaiseException(80000100,00000001,00000002,00c6f8c0) ret=0023f3d8 00d4:Call ntdll.memcpy(00c6f7a8,00c6f8c0,00000010) ret=7b010516 00d4:Ret ntdll.memcpy() retval=00c6f7a8 ret=7b010516 00d4:trace:seh:raise_exception code=80000100 flags=1 addr=0x7b010525 ip=7b010525 tid=00d4 00d4:trace:seh:raise_exception info[0]=000000000025d000 00d4:trace:seh:raise_exception info[1]=000000000025da3e 00d4:trace:seh:call_vectored_handlers calling handler at 0x22d0a0 code=80000100 flags=1 ... wine: Call from 0x7b010525 to unimplemented function ntoskrnl.exe.ExUnregisterCallback, aborting --- snip --- $ wine --version wine-5.9-166-g2b3490370a Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 49322] New: cmudpro334 pops up errorwindow "OLE error 80004001"
by WineHQ Bugzilla Nov. 10, 2020

Nov. 10, 2020

https://bugs.winehq.org/show_bug.cgi?id=49322 Bug ID: 49322 Summary: cmudpro334 pops up errorwindow "OLE error 80004001" Product: Wine Version: 5.9 Hardware: x86-64 URL: https://web.archive.org/web/20190527111622if_/http://w ww.zuggsoft.com/files/cmudpro334_setup.exe OS: Linux Status: NEW Keywords: download Severity: minor Priority: P2 Component: explorerframe Assignee: wine-bugs(a)winehq.org Reporter: xerox.xerox2000x(a)gmail.com Distribution: Debian Created attachment 67347 --> https://bugs.winehq.org/attachment.cgi?id=67347 Screenshot of error Happens when version set to (default) win7 In console: 04b8:fixme:win:LockWindowUpdate ((nil)), partial stub! 04b8:fixme:explorerframe:taskbar_list_SetOverlayIcon iface 06741228, hwnd 0003024C, hIcon 00000000, pszDescription (null) stub! Returning S_OK for taskbar_list_SetOverlayIcon fixes the bug. As this function only takes "in"-parameters I think it`s safe to just return S_OK here. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 6