http://bugs.winehq.org/show_bug.cgi?id=35027
Bug #: 35027 Summary: unimplemented function KERNEL32.dll.CreateProcessInternalW Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: kernel32 AssignedTo: wine-bugs@winehq.org ReportedBy: l12436@yahoo.com.tw Classification: Unclassified
Created attachment 46688 --> http://bugs.winehq.org/attachment.cgi?id=46688 log
the CreateProcessInternalW in kernel32.dll seems not implemented. cause a execution file crash.
http://bugs.winehq.org/show_bug.cgi?id=35027
Nikolay Sivov bunglehead@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Attachment #46688|application/octet-stream |text/plain mime type| |
http://bugs.winehq.org/show_bug.cgi?id=35027
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |focht@gmx.net Version|unspecified |1.7.7 Summary|unimplemented function |Euphoria needs |KERNEL32.dll.CreateProcessI |unimplemented function |nternalW |KERNEL32.dll.CreateProcessI | |nternalW
--- Comment #1 from Anastasius Focht focht@gmx.net 2013-12-01 10:16:17 CST --- Hello,
--- snip --- process tid prio (all id:s are in hex) 00000008 (D) D:.game\CLOCKUP\EUPHORIA\euphoria_sc.exe 00000009 0 <== --- snip ---
looks like "Euphoria" from "Clock Up" (http://entacom.org/clockup/) I spare you any further info ... definitely NSFW material - you don't want to know that.
Source: http://source.winehq.org/git/wine.git/blob/b6b9050d58d8baaea843c633f5968be90...
--- snip --- 256 # @ stub CreateProcessInternalA 257 # @ stub CreateProcessInternalW 258 # @ stub CreateProcessInternalWSecure --- snip ---
It seems this is an undocumented internal helper. Though the prototype is described in several blogs, similar to CreateProcessA/W() with additional "user token" in and out parameters:
--- snip --- BOOL WINAPI CreateProcessInternalW( HANDLE user_token, ... , PHANDLE new_token) --- snip ---
Regards
http://bugs.winehq.org/show_bug.cgi?id=35027
--- Comment #2 from TOM l12436@yahoo.com.tw 2013-12-01 19:38:52 CST --- no, actually that is a chinese patch for euphoria need that function.
so i need to compile kernel32 from source to enable that ?
http://bugs.winehq.org/show_bug.cgi?id=35027
--- Comment #3 from TOM l12436@yahoo.com.tw 2013-12-01 20:17:41 CST --- yep, but that code is using CreateProcessInternalW. it is not easy to change it go createprocessW by using the assemble.
http://bugs.winehq.org/show_bug.cgi?id=35027
--- Comment #4 from TOM l12436@yahoo.com.tw 2013-12-01 20:27:08 CST --- OK, i see, i will try to modify that code to use the createprocessw.
http://bugs.winehq.org/show_bug.cgi?id=35027
TOM l12436@yahoo.com.tw changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|Euphoria needs |Euphoria Could not be start |unimplemented function |with chinese patch. |KERNEL32.dll.CreateProcessI | |nternalW |
http://bugs.winehq.org/show_bug.cgi?id=35027
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |obfuscation
--- Comment #5 from Anastasius Focht focht@gmx.net 2013-12-02 04:40:58 CST --- Hello,
--- quote --- no, actually that is a chinese patch for euphoria need that function. --- quote ---
probably this thing here: http://vndb.org/r26314
The site needs registration so I can't really look at that patch/binary.
Anyway, why would a 'patch' need this internal API? The only reason I can think of is that this thing might be loader which does some hooking/hot patching business because the API lies in between CreateProcess() and native API NtCreateProcess() call chain. Hooking standard kernel32 or native process creation API as all the other gazillion protection or malware schemes do (which is proven to work and stable) seemed to be to easy for the authors?
Regards
http://bugs.winehq.org/show_bug.cgi?id=35027
--- Comment #6 from TOM l12436@yahoo.com.tw 2013-12-02 05:55:38 CST --- I think there can not be find the author. This is an patch for a long time. not i just know that it use dynamic load dll. and i stock at the memory searching, it seems there some other ntXXX api did not work.
https://bugs.winehq.org/show_bug.cgi?id=35027
--- Comment #7 from Austin English austinenglish@gmail.com --- This is your friendly reminder that there has been no bug activity for over a year. Is this still an issue in current (1.7.37 or newer) wine? If so, please attach the terminal output in 1.7.37 (see http://wiki.winehq.org/FAQ#get_log).
https://bugs.winehq.org/show_bug.cgi?id=35027
qsniyg qsniyg@mail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |qsniyg@mail.com
--- Comment #8 from qsniyg qsniyg@mail.com --- Newer versions of USVFS also need this function to be implemented (see https://github.com/ModOrganizer2/usvfs/blob/5df4a82ce6830d3468a320b8a2a42b66... )
https://bugs.winehq.org/show_bug.cgi?id=35027
--- Comment #9 from qsniyg qsniyg@mail.com --- Nevermind, Github's out-of-date indexing lead me to believe the function wasn't implemented. Looks like the USVFS issue lies somewhere else.
CreateProcessInternalW has been implemented in Wine 3.19 (https://www.winehq.org/announce/3.19).
https://bugs.winehq.org/show_bug.cgi?id=35027
Nikolay Sivov bunglehead@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|Euphoria Could not be start |Euphoria needs |with chinese patch. |CreateProcessInternalW | |function
https://bugs.winehq.org/show_bug.cgi?id=35027
Nikolay Sivov bunglehead@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Fixed by SHA1| |cdddf02d0cc180ba5eacee7b1f5 | |774bdebfae02b Status|UNCONFIRMED |RESOLVED
--- Comment #10 from Nikolay Sivov bunglehead@gmail.com --- Since we have this function now, I'm marking this fixed. See commit cdddf02d0cc180ba5eacee7b1f5774bdebfae02b. Please open another report if there are still problems.
https://bugs.winehq.org/show_bug.cgi?id=35027
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #11 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 7.11.