http://bugs.winehq.org/show_bug.cgi?id=22064
--- Comment #28 from Mikko Rasa tdb@tdb.fi 2010-08-18 14:56:43 --- Created an attachment (id=30214) --> (http://bugs.winehq.org/attachment.cgi?id=30214) Log without the crypto patch
Here's the log without the above patch. The game first calls CryptMessageVerifySignature with a NULL pcbDecoded to find out the decoded message size, then allocates a buffer for it and calls again. However, since pcbDecoded is cleared in the beginning, the rest of the function will think the buffer is zero bytes long and doesn't have enough space to copy the message in.