http://bugs.winehq.org/show_bug.cgi?id=4666
------- Additional Comments From focht@gmx.net 2007-16-05 11:16 ------- Hello,
the game is protected by HackShield (by Ahnlab, http://www.hackshields.com/)
Technically it consists of user mode and kernel mode parts. The kernel mode part (EagleNt.sys) hooks up several system services (like a root kit) to detect API and memory modifications. Several anti-debugging, anti-injection, memory protection techniques are employed.
To make this work, kernel mode infrastructure has to be added to wine.
--- snip --- err:module:find_forwarded_export module not found for forward 'msvcrt.wcscpy' used by L"c:\windows\system32\ntoskrnl.exe" err:module:find_forwarded_export module not found for forward 'msvcrt.wcslen' used by L"c:\windows\system32\ntoskrnl.exe" err:module:find_forwarded_export module not found for forward 'msvcrt._stricmp' used by L"c:\windows\system32\ntoskrnl.exe" err:module:find_forwarded_export module not found for forward 'msvcrt.strrchr' used by L"c:\windows\system32\ntoskrnl.exe" err:module:find_forwarded_export module not found for forward 'msvcrt._except_handler3' used by L"c:\windows\system32\ntoskrnl.exe" err:module:find_forwarded_export module not found for forward 'msvcrt._wcsnicmp' used by L"c:\windows\system32\ntoskrnl.exe" err:module:find_forwarded_export module not found for forward 'msvcrt.wcsrchr' used by L"c:\windows\system32\ntoskrnl.exe" err:module:find_forwarded_export module not found for forward 'msvcrt._wcsicmp' used by L"c:\windows\system32\ntoskrnl.exe" wine: Call from 0x7b840d20 to unimplemented function ntoskrnl.exe.IoCreateDevice, aborting wine: Unimplemented function ntoskrnl.exe.IoCreateDevice called at address 0x7b840d20 (thread 000f), starting debugger... Unhandled exception: unimplemented function ntoskrnl.exe.IoCreateDevice called in 32-bit code (0x7b840d98). --- snip ---
The first ones can be fixed by adding missing import dependency "msvcrt" to ntoskrnl build file.
--- snip dlls/ntoskrnl.exe/Makefile.in --- IMPORTS = msvcrt kernel32 ntdll --- snip dlls/ntoskrnl.exe/Makefile.in ---
The unimplemented one can be be silenced by a stub but this wont lead to anything because the whole driver object infrastructure missing.
Regards