wine-bugs October 2020

wine-bugs@winehq.org

1 participants
6819 discussions

[Bug 45449] New: Add diagnostic 'mscoree.dll.CorGetSvc' stub (NGEN client) to hint at broken Microsoft .NET Frameworks installation ( Wine-Mono not uninstalled and 'mscoree.dll' placeholders not removed prior install)
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=45449 Bug ID: 45449 Summary: Add diagnostic 'mscoree.dll.CorGetSvc' stub (NGEN client) to hint at broken Microsoft .NET Frameworks installation (Wine-Mono not uninstalled and 'mscoree.dll' placeholders not removed prior install) Product: Wine Version: 3.12 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: mscoree Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 45333 (diagnostics for the NGEN server side). The client side 'ngen.exe' calls unimplemented 'mscoree.dll.CorGetSvc'. NOTE: MSI (CA) server is currently broken/regressed for 64-bit WINEPREFIXes, so a broken .NET installation can't be tested there. Prepare a broken 32-bit WINEPREFIX: --- snip --- $ wineserver -k $ rm -rf .wine $ export WINEARCH=win32 $ wineboot $ wine uninstaller --list {BB9BDB97-C247-4F20-B710-8B6765F67105}|||Wine Gecko (32-bit) {E45D8920-A758-4088-B6C6-31DBB276992E}|||Wine Mono $ wine uninstaller --remove {E45D8920-A758-4088-B6C6-31DBB276992E} # to be really sure 'mscoree.dll' won't get updated -> keeps Wine's placeholder $ winetricks win7 # run .NET 4.0 installer without 'winetricks' $ wine ./dotNetFx40_Full_x86_x64.exe ... # really check if placeholder is still there $ winedump .wine/drive_c/windows/system32/mscoree.dll Contents of .wine/drive_c/windows/system32/mscoree.dll: 5236 bytes *** This is a Wine fake DLL *** File Header Machine: 014C (i386) Number of Sections: 3 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) offset 104 PointerToSymbolTable: 00000000 NumberOfSymbols: 00000000 SizeOfOptionalHeader: 00E0 Characteristics: 2022 EXECUTABLE_IMAGE LARGE_ADDRESS_AWARE DLL ... --- snip --- Test by trigger .NET GAC update: --- snip --- $ wine "c:\\windows\\Microsoft.NET\\Framework\\v4.0.30319\\ngen.exe" update 0012:fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub 0012:fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub 0016:fixme:service:svcctl_ChangeServiceConfig2W SERVICE_CONFIG_FAILURE_ACTIONS not implemented: period 86400 msg (null) cmd (null) 0019:fixme:process:SetProcessShutdownParameters (00000380, 00000000): partial stub. 0019:err:winediag:CorIsLatestSvc If this function is called, it is likely the result of a broken .NET installation 0019:fixme:advapi:RegisterEventSourceW ((null),L".NET Runtime Optimization Service"): stub 0019:fixme:advapi:ReportEventW (0xcafe4242,0x0001,0x0000,0x0000044f,(nil),0x0001,0x00000000,0x76f9d0,(nil)): stub 0019:err:eventlog:ReportEventW L".NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown\n" 0019:fixme:advapi:DeregisterEventSource (0xcafe4242) stub 0009:fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub 0009:fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub wine: Call from 0x7b447132 to unimplemented function mscoree.dll.CorGetSvc, aborting Unknown exception --- snip --- That one is actually documented: https://github.com/dotnet/coreclr/blob/master/src/inc/mscorsvc.idl#L21 --- snip --- #pragma midl_echo("STDAPI CorGetSvc(IUnknown **pIUnknown);") --- snip --- With a stub added, returning default 'CLR_E_SHIM_RUNTIMEEXPORT': --- snip --- 0009:Call mscoree.CorGetSvc(0033f9f8) ret=1000df20 0009:fixme:mscoree:CorGetSvc stub(0x33f9f8)! 0009:Ret mscoree.CorGetSvc() retval=80131701 ret=1000df20 0009:Call KERNEL32.GetLastError() ret=1000f4c7 0009:Ret KERNEL32.GetLastError() retval=000000b7 ret=1000f4c7 ... 0009:Call KERNEL32.GetLastError() ret=1000f417 0009:Ret KERNEL32.GetLastError() retval=000000b7 ret=1000f417 ... 0009:Call KERNEL32.RaiseException(e06d7363,00000001,00000003,0033f9a4) ret=79084c0f 0009:trace:seh:raise_exception code=e06d7363 flags=1 addr=0x7b446fe6 ip=7b446fe6 tid=0009 0009:trace:seh:raise_exception info[0]=19930520 0009:trace:seh:raise_exception info[1]=0033f9e4 0009:trace:seh:raise_exception info[2]=1001a760 0009:trace:seh:raise_exception eax=7b4356b1 ebx=00000000 ecx=00000000 edx=0033f990 esi=0033f990 edi=0033f950 0009:trace:seh:raise_exception ebp=0033f928 esp=0033f8c4 cs=330023 ds=33002b es=f7bc002b fs=f7bc0063 gs=f7bc006b flags=00000212 0009:trace:seh:call_stack_handlers calling handler at 0x10018276 code=e06d7363 flags=1 ... Failed to find a required export in the runtime. (Exception from HRESULT: 0x80131701) ... --- snip --- $ wine --version wine-3.12-110-g414fe80aeb Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 7

[Bug 30075] New: Microsoft .NET Framework 4.5 Developer Preview CLR needs kernel32.dll WerRegisterRuntimeExceptionModule (returning S_OK) to run .NET apps
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=30075 Bug #: 30075 Summary: Microsoft .NET Framework 4.5 Developer Preview CLR needs kernel32.dll WerRegisterRuntimeExceptionModule (returning S_OK) to run .NET apps Product: Wine Version: 1.4-rc6 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, after upgrading an existing .NET Framework 4.0 WINEPREFIX with .NET Framework 4.5 (dev preview) some simple apps that previously worked failed to run. I created a simple C# based .NET "hello world" console app using the provided C# compiler (csc.exe) in .NET 4.0 prefix and it fails to execute after .NET 4.5 CLR upgrade: --- snip --- 002b:Starting process L"C:\\windows\\Microsoft.NET\\Framework\\v4.0.30319\\hello.exe" (entryproc=0x40233e) ... 002b:Call KERNEL32.GetModuleHandleW(007f8424 L"kernel32.dll") ret=008378ea 002b:Ret KERNEL32.GetModuleHandleW() retval=7b810000 ret=008378ea 002b:Call KERNEL32.GetProcAddress(7b810000,00837968 "WerRegisterRuntimeExceptionModule") ret=008378fe 002b:Ret KERNEL32.GetProcAddress() retval=00000000 ret=008378fe ... 002b:Call KERNEL32.LoadLibraryExW(0032f944 L"C:\\windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll",00000000,00000002) ret=008e1f58 002b:Ret KERNEL32.LoadLibraryExW() retval=00f00001 ret=008e1f58 ... 002b:Call user32.MessageBoxW(00000000,0032fa20 L"CLR error: 80004005.\n The program will now terminate.",0032f3f0 L"hello.exe - Fatal error",00002010) ret=00ace3f9 ... --- snip --- It seems there is an improved integration of error reporting with WER. MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/dd408167%28v=vs.85%… Adding a stub returning E_NOTIMPL doesn't make the CLR happy: --- snip --- 002b:Call KERNEL32.GetModuleHandleW(007f8424 L"kernel32.dll") ret=008378ea 002b:Ret KERNEL32.GetModuleHandleW() retval=7b810000 ret=008378ea 002b:Call KERNEL32.GetProcAddress(7b810000,00837968 "WerRegisterRuntimeExceptionModule") ret=008378fe 002b:Ret KERNEL32.GetProcAddress() retval=7b825418 ret=008378fe 002b:Call KERNEL32.WerRegisterRuntimeExceptionModule(0032f88c L"C:\\windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscordacwks.dll",00740000) ret=00837915 002b:fixme:wer:WerRegisterRuntimeExceptionModule (L"C:\\windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscordacwks.dll", 0x740000) stub! 002b:Ret KERNEL32.WerRegisterRuntimeExceptionModule() retval=80004001 ret=00837915 ... 002b:Call user32.MessageBoxW(00000000,0032fa20 L"CLR error: 80004005.\n The program will now terminate.",0032f3f0 L"hello.exe - Fatal error",00002010) ret=00ace3f9 --- snip --- You have to return S_OK to please the CLR. With that change "hello world" runs again. Yay! Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 15437] New: Company of Heroes Opposing Fronts: Installer fails
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=15437 Summary: Company of Heroes Opposing Fronts: Installer fails Product: Wine Version: 1.1.5 Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: xvachon(a)gmail.com Created an attachment (id=16303) --> (http://bugs.winehq.org/attachment.cgi?id=16303) log Installation of the game is not possible. Exception EAccessViolation error in module GameInst.exe happens. According to test data the game had to be installed from a Windows installation in order to be played. A log is attached. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 66

[Bug 30072] New: Microsoft .NET Framework 4.5 Developer Preview installer needs some wevtapi.dll stubs (EvtOpenChannelConfig, ...)
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=30072 Bug #: 30072 Summary: Microsoft .NET Framework 4.5 Developer Preview installer needs some wevtapi.dll stubs (EvtOpenChannelConfig, ...) Product: Wine Version: 1.4-rc6 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, continuation of bug 29742 After a stub "wevtapi" dll is provided the installer still crashes. A stub is needed for the following event API functions: EvtOpenChannelConfig EvtGetChannelConfigProperty EvtSetChannelConfigProperty EvtSubscribe With these stubs in place the installer doesn't crash and continues. winecfg -> "Windows 7" --- snip --- $ WINEDEBUG=+tid,+loaddll,+wevtapi wine dotNetFx45_Full_x86_x64.exe /q ... 0015:trace:loaddll:load_builtin_dll Loaded L"C:\\windows\\system32\\wuapi.dll" at 0xf7180000: builtin 000f:trace:loaddll:load_builtin_dll Loaded L"C:\\windows\\system32\\rstrtmgr.dll" at 0xf75f0000: builtin 001d:trace:loaddll:load_builtin_dll Loaded L"C:\\windows\\system32\\wevtapi.dll" at 0xf7340000: builtin 001d:trace:wevtapi:DllMain (0x0xf7340000, 1, (nil)) 001d:fixme:wevtapi:EvtOpenChannelConfig stub((nil), L"Microsoft-Windows-CAPI2/Operational", 0) 001d:fixme:wevtapi:EvtGetChannelConfigProperty stub((nil), 0, 0, 16, 0x61c254, 0x61c270) 001d:fixme:wevtapi:EvtSetChannelConfigProperty stub((nil), 0, 0, 0x61c24c) 001d:fixme:wevtapi:EvtSubscribe stub((nil), 0x80, L"Microsoft-Windows-CAPI2/Operational", (null), (nil), (nil), (nil), 1) ... --- snip --- $ sha1sum dotNetFx45_Full_x86_x64.exe e3ffcb31565ebee65cc95c93db7d11eee2055d68 dotNetFx45_Full_x86_x64.exe $ wine --version wine-1.4-rc6-1-ge11565b Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 12

[Bug 30074] New: Microsoft .NET Framework 4.5 Developer Preview installer needs stub wusa.exe
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=30074 Bug #: 30074 Summary: Microsoft .NET Framework 4.5 Developer Preview installer needs stub wusa.exe Product: Wine Version: 1.4-rc6 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, continuation of bug 30072 The installer now aborts due to missing "wusa.exe" executable. I didn't find any installer on MS downloads that contains this standalone component (only updates). With a stub executable provided the installer is happy: --- snip --- $ WINEDEBUG=+tid,+wusa wine ./dotNetFx45_Full_x86_x64.exe -q ... fixme:wusa:wmain stub: L"wusa.exe" L"C:\\711ec06a13d5ed1f9b3e\\Windows6.1-KB958488-v6001-x86.msu" L"/quiet" L"/norestart" ... --- snip --- At least the .NET Framework 4.5 installation finishes without further critical error in basic ui or silent mode. Although .NET Framework 4.5 is an update of .NET Framework 4.0, no previous install of .NET Framework 4.0 is required (winetricks -q dotnet40). One problem will turn up later: mscoree.dll is still builtin (Mono placeholder/fake) which will prevent from loading CLR. Actually this component gets updated through "Windows6.1-KB958488-v6001-x86.msu" (Microsoft .NET Framework 4.0 Shared -> KB958488) Windows6.1-KB958488-x86.cab. Due to wusa.exe stub this update is skipped. Maybe a winetricks recipe will take care of that in future (manually extracting/unpacking the missing dlls from msu). Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 39402] New: Lost Planet 2 Benchmark crashes at launch due to missing audio format conversion (IXAudio2Impl_CreateSourceVoice)
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=39402 Bug ID: 39402 Summary: Lost Planet 2 Benchmark crashes at launch due to missing audio format conversion (IXAudio2Impl_CreateSourceVoice) Product: Wine Version: 1.7.52 Hardware: x86-64 URL: http://www.geforce.com/games-applications/pc-games/los t-planet-2 OS: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: xaudio2 Assignee: wine-bugs(a)winehq.org Reporter: andrey.goosev(a)gmail.com CC: aeikum(a)codeweavers.com Distribution: --- Created attachment 52514 --> https://bugs.winehq.org/attachment.cgi?id=52514 log warn:xaudio2:IXAudio2Impl_CreateSourceVoice OpenAL can't convert this format! wine-1.7.52-134-g20ff335 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 90

[Bug 47895] New: wine: Bad EXE format for Then_and_Before__1920x1080.exe
by WineHQ Bugzilla 19 Mar '21

19 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=47895 Bug ID: 47895 Summary: wine: Bad EXE format for Then_and_Before__1920x1080.exe Product: Wine Version: 4.17 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wineserver Assignee: wine-bugs(a)winehq.org Reporter: aros(a)gmx.com Distribution: --- Created attachment 65385 --> https://bugs.winehq.org/attachment.cgi?id=65385 Demo According to VirusTotal this is a valid Win32 binary yet Wine refuses to run it: https://www.virustotal.com/gui/file/0222621c6a26420c381e71346fa14e1cf783462… File type Win32 EXE Magic MS-DOS executable, MZ for MS-DOS Target Machine Intel 386 or later processors and compatible processors -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 7

[Bug 38176] New: Optical Circuit 4K demo crashes on startup
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=38176 Bug ID: 38176 Summary: Optical Circuit 4K demo crashes on startup Product: Wine Version: 1.7.37 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: t.artem(a)mailcity.com Distribution: --- Created attachment 50930 --> https://bugs.winehq.org/attachment.cgi?id=50930 demo itself Backtrace: =>0 0x004000aa in optical_circuit.1280x720.150221 (+0xaa) (0x00000000) 0x004000aa: xorb 0x0(%edi),%al Modules: Module Address Debug info Name (17 modules) PE 400000- 683b6eb Export optical_circuit.1280x720.150221 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 42125] New: 8k demos often fail with Bad EXE Format
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=42125 Bug ID: 42125 Summary: 8k demos often fail with Bad EXE Format Product: Wine Version: unspecified Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: aaronbpaden(a)gmail.com Distribution: --- Several 8k demos fail to load because of a Bad EXE format error. I'm assuming they're hacking off unnecessary bits from the executable format to get within their size constraints, and wine is getting confused. This is the error I get in the logs: wine: Bad EXE format for Z:\home\aaron\eos_-_blue_morpho_1280x720.exe. This particular demo can be found at http://www.pouet.net/prod.php?which=68352 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 23

[Bug 44860] New: 4k/ 8k demos crash due to Crinkler executable file compressor expecting PEB address in %EBX on process entry
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=44860 Bug ID: 44860 Summary: 4k/8k demos crash due to Crinkler executable file compressor expecting PEB address in %EBX on process entry Product: Wine Version: 3.4 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, split out from bug 42125 which is about OS loader compatibility/PE image header fields/mappings. Most of the PE tools struggle or even crash when trying to get something useful out of this due to the "optimized" usage (truncation) of DOS, PE headers (basically providing the bare minimum info to not have the OS loader crash). Example: http://www.pouet.net/prod.php?which=66502 ("Psyltcipher by Loonies") ProtectionID scan: --- snip --- -=[ ProtectionID v0.6.9.0 DECEMBER]=- (c) 2003-2017 CDKiLLER & TippeX Build 24/12/17-21:05:42 Ready... Scanning -> Z:\home\focht\Downloads\lns-lpt-psyltcipher_720.exe [!] Warning : File has NO sections (suspicious) [!] Warning : File has NO imports (suspicious) File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 7242 (01C4Ah) Byte(s) | Machine: 0x14C (I386) [!] Warning - Entrypoint is INVALID (file may be damaged) Compilation TimeStamp : 0x7F61DB01 -> Mon 21st Sep 2037 04:18:09 (GMT) [TimeStamp] 0x7F61DB01 -> Mon 21st Sep 2037 04:18:09 (GMT) | PE Header | - | Offset: 0x0000000C | VA: 0x0040000C | - [LoadConfig] CodeIntegrity -> Flags 0xA3F0 | Catalog 0x46 (70) | Catalog Offset 0x2000001 | Reserved 0x46A4A0 [LoadConfig] GuardAddressTakenIatEntryTable 0x8000011 | Count 0x46A558 (4629848) [LoadConfig] GuardLongJumpTargetTable 0x8000001 | Count 0x46A5F8 (4630008) [LoadConfig] HybridMetadataPointer 0x8000011 | DynamicValueRelocTable 0x46A66C [LoadConfig] FailFastIndirectProc 0x8000011 | FailFastPointer 0x46C360 [LoadConfig] UnknownZero1 0x8000011 [File Heuristics] -> Flag #1 : 00010001000001111110000011001000 (0x1107E0C8) [DllCharacteristics] -> Flag : (0x0000) -> NONE [SectionCount] 0 (0x0) | ImageSize 0x2263B6EB (576960235) byte(s) [!} Warning - image has NO Data Directories... [!] Warning : Import Table is bad !!! -> Suspicious MZ Header.. [!] File appears to have no protection or is using an unknown protection - Scan Took : 0.211 Second(s) [0000000D3h (211) tick(s)] [506 of 580 scan(s) done] --- snip --- LordPE dump (helper tool crashes during analysis but main app still shows info): --- snip --- ->DOS Header e_magic: 0x5A4D e_cblp: 0x3032 e_cp: 0x4550 e_crlc: 0x0000 e_cparhdr: 0x014C e_minalloc: 0x0000 e_maxalloc: 0xDB01 e_ss: 0x7F61 e_sp: 0xD010 e_csum: 0x7317 e_ip: 0x4775 e_cs: 0xF9EB e_lfarlc: 0x0008 e_ovno: 0x0002 e_res: 0x010BC911854579C0 e_oemid: 0x011F e_oeminfo: 0x50D3 e_res2: 0xE2F73D90005C0000F3F7C139DB1948EB00000040 e_lfanew: 0x00000004 ->File Header Machine: 0x014C (I386) NumberOfSections: 0x0000 TimeDateStamp: 0x7F61DB01 (GMT: Mon Sep 21 04:18:09 2037) PointerToSymbolTable: 0x7317D010 NumberOfSymbols: 0xF9EB4775 SizeOfOptionalHeader: 0x0008 Characteristics: 0x0002 (EXECUTABLE_IMAGE) ->Optional Header Magic: 0x010B (HDR32_MAGIC) MajorLinkerVersion: 0x11 MinorLinkerVersion: 0xC9 -> 17.201 SizeOfCode: 0x79C08545 SizeOfInitializedData: 0x50D3011F SizeOfUninitializedData: 0x3D90E2F7 AddressOfEntryPoint: 0x0000005C BaseOfCode: 0xC139F3F7 BaseOfData: 0x48EBDB19 ImageBase: 0x00400000 SectionAlignment: 0x00000004 FileAlignment: 0x00000004 MajorOperatingSystemVersion: 0xA30F MinorOperatingSystemVersion: 0x7D2D -> 41743.32045 MajorImageVersion: 0x4001 MinorImageVersion: 0x8D00 -> 16385.36096 MajorSubsystemVersion: 0x0004 MinorSubsystemVersion: 0xCEEB -> 4.52971 Win32VersionValue: 0x00000000 SizeOfImage: 0x2263B6EB ; <------- important! SizeOfHeaders: 0x00000040 CheckSum: 0xBBED3153 Subsystem: 0x0002 (WINDOWS_GUI) DllCharacteristics: 0x0000 SizeOfStackReserve: 0x0154BE90 SizeOfStackCommit: 0x016A0040 SizeOfHeapReserve: 0x0000BF58 SizeOfHeapCommit: 0x00B10042 LoaderFlags: 0x12EB5757 NumberOfRvaAndSizes: 0x00000000 --- snip --- The PE compressor used for most of these 4K/8K demos is named 'Crinkler': http://www.crinkler.net/ --- quote --- Crinkler is an executable file compressor (or rather, a compressing linker) for Windows specifically targeted towards executables with a size of just a few kilobytes. As of 2018, it is the most widely used tool for compressing 4k intros. Crinkler is being developed by Rune L. H. Stubbe (Mentor/TBC) and Aske Simon Christensen (Blueberry/Loonies). --- quote --- The compression itself and some parts of imports resolver are nicely covered here: http://code4k.blogspot.de/2010/12/crinkler-secrets-4k-intro-executable.html The decompression area for code, data etc. starts usually at fixed 0x420000 address range. One can easily bypass all the decompression stuff from entry and set a hardware breakpoint on execution to 0x420000. NOTE: Not all 8K demos from http://www.pouet.net can be fixed in Wine nor run in modern Windows (bug 42125). Crinkler uses the PE optional header 'SizeOfImage' field to have the loader allocate a huge chunk of memory used for decompression. Memory map: --- snip --- Address Size Owner Section Contains 00110000 00010000 00220000 00001000 Process Parameters 00230000 00003000 Environment 00400000 2263C000 lns-lpt-psyltcipher_720 PE header (+SizeOfImage) 22A40000 00001000 22A41000 00001000 22A42000 016AE000 Stack of main thread 7B420000 00001000 KERNEL32 PE header 7B421000 00221000 KERNEL32 .text Code 7B642000 001B1000 KERNEL32 .data Data,imports,exports, .. 7BC30000 00001000 ntdll PE header 7BC31000 000BF000 ntdll .text Code 7BCF0000 0001D000 ntdll .data Data,exports,resources 7FFD8000 00004000 Data block of main thread 7FFDF000 00001000 Process Environment Block 7FFE0000 00010000 ... --- snip --- https://github.com/wine-staging/wine-staging/blob/master/patches/kernel32-P… Relevant part of Crinkler code: --- snip --- ; PE entry 0040005C 53 PUSH EBX ; PEB, see later 0040005D 31ED XOR EBP,EBP 0040005F BB 02000000 MOV EBX,2 00400064 90 NOP 00400065 BE 54014000 MOV ESI,OFFSET 00400154 0040006A 6A 01 PUSH 1 0040006C 58 POP EAX 0040006D BF 00004200 MOV EDI,OFFSET 00420000 00400072 B1 00 MOV CL,0 00400074 57 PUSH EDI 00400075 57 PUSH EDI 00400076 EB 12 JMP SHORT 0040008A ... ; OEP after decompression 00420000 5F POP EDI 00420001 B9 1D000000 MOV ECX,1D 00420006 B0 E8 MOV AL,0E8 00420008 AE SCAS BYTE PTR ES:[EDI] 00420009 75 FB JNE SHORT 00420006 0042000B 8B07 MOV EAX,DWORD PTR DS:[EDI] 0042000D 98 CWDE 0042000E 3B07 CMP EAX,DWORD PTR DS:[EDI] 00420010 75 F4 JNE SHORT 00420006 00420012 29F8 SUB EAX,EDI 00420014 98 CWDE 00420015 AB STOS DWORD PTR ES:[EDI] 00420016 E2 EE LOOP SHORT 00420006 00420018 BB 08014000 MOV EBX,OFFSET 00400108 0042001D BE D3124200 MOV ESI,OFFSET 004212D3 00420022 BF 00004300 MOV EDI,OFFSET 00430000 00420027 58 POP EAX ; was EBX -> PEB 00420028 8B40 0C MOV EAX,DWORD PTR DS:[EAX+0C] ; PEB_LDR_DATA ; InLoadOrderModuleList->LDR_DATA_TABLE_ENTRY 0042002B 8B40 0C MOV EAX,DWORD PTR DS:[EAX+0C] ; LDR_DATA_TABLE_ENTRY->InLoadOrderLinks 0042002E 8B00 MOV EAX,DWORD PTR DS:[EAX] 00420030 8B00 MOV EAX,DWORD PTR DS:[EAX] ; Flink ; _LDR_DATA_TABLE_ENTRY.DllBase (kernel32) 00420032 8B68 18 MOV EBP,DWORD PTR DS:[EAX+18] 00420035 31C0 XOR EAX,EAX 00420037 AC LODS BYTE PTR DS:[ESI] ; "user32" 00420038 85ED TEST EBP,EBP 0042003A 75 12 JNE SHORT 0042004E 0042003C 85C0 TEST EAX,EAX 0042003E 74 5B JE SHORT 0042009B 00420040 6A 00 PUSH 0 00420042 6A 00 PUSH 0 00420044 52 PUSH EDX ; "d3d11" 00420045 6A 00 PUSH 0 00420047 FF15 180043. CALL DWORD PTR DS:[430018] ; user32.MessageBoxA 0042004D C3 RETN ... --- snip --- $ sha1sum lns-* 482e8d0fe4b5e6f7ffa6f2125143da5aadab34ad lns-lpt-psyltcipher_1080.exe 1da4738309c2738f5f89c4713c689a93b94cd898 lns-lpt-psyltcipher_1080_vsync.exe 7bab7cb1c8f528878b1547147d2c97dfa1032eab lns-lpt-psyltcipher_720.exe 85d1624523110af6c00cc53027e3b504ef3d5362 lns-lpt-psyltcipher.zip $ du -sh lns-* 8.0K lns-lpt-psyltcipher_1080.exe 8.0K lns-lpt-psyltcipher_1080_vsync.exe 8.0K lns-lpt-psyltcipher_720.exe 24K lns-lpt-psyltcipher.zip $ wine --version wine-3.4-256-g725ad420e1 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 19

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

wine-bugs October 2020