https://bugs.winehq.org/show_bug.cgi?id=42493
Bug ID: 42493 Summary: Kritika Online startup fails (Xigncode problem?) Product: Wine Version: 2.1 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs@winehq.org Reporter: wyrex@openmailbox.org Distribution: ---
Created attachment 57360 --> https://bugs.winehq.org/attachment.cgi?id=57360 game launch from patcher
Kritika Online MMO freezes at startup. Game patces succesfully in 32-bit prefix with ie7 installed. When I click "Game Start" empty game window opens and after 10 seconds Xigncode flashes in bottom corner. Then only this message spams continously until I forcekill it.
fixme:virtual:get_section_name (0x348,0x340000,0x33ba48,528,0x33ba44): semi-stub
https://bugs.winehq.org/show_bug.cgi?id=42493
--- Comment #1 from Wyrex wyrex@openmailbox.org --- get_section_name spam ends after xigncode window flashes and nothing prints until after it. Sorry, forgot to paste it after cutting ~1.3M lines.
fixme:dbghelp:elf_search_auxv can't find symbol in module fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub fixme:nls:GetThreadPreferredUILanguages 00000034, 0x33f73c, 0x33f7ac 0x33f744 fixme:nls:get_dummy_preferred_ui_language (0x34 0x33f73c 0x33f7ac 0x33f744) returning a dummy value (current locale) fixme:process:RegisterApplicationRestart (L"-u http://ers.kritika.playpark.com:10119/Report.ashx -f log.apl -f Xigncode\xigncode.log -f Xigncode\xigncode.log -d Error.dmp -e 86400 -t log.apl 10000 10000 /RestartByRestartManager:47CF4B72-FB2C-4026-BDD5-7CCFADA570E6",0)
https://bugs.winehq.org/show_bug.cgi?id=42493
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 CC| |focht@gmx.net URL| |http://download.playpark.co | |m/my/detail/233 Status|UNCONFIRMED |NEW Summary|Kritika Online startup |Kritika Online MMO fails to |fails (Xigncode problem?) |start, reports XIGNCODE3 | |init error 'ZCWAVE_SysEnter | |fail : 34006201404' Keywords| |download, obfuscation
--- Comment #2 from Anastasius Focht focht@gmx.net --- Hello folks,
confirming.
'winetricks -q vcrun2010' is a needed prerequisite:
--- snip --- ... [0220/195948:ERROR:proxy_service_factory.cc(103)] Cannot use V8 Proxy resolver in single process mode. wine: Call from 0x7b445e53 to unimplemented function msvcr100.dll.?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z, aborting ... --- snip ---
(concurrency namespace insufficiencies are also mentioned in bug 34676)
There was no need for 'ie7' in WINEPREFIX (downloaded full client).
Client log file:
--- snip --- $ find .wine -iname log.apl .wine/drive_c/Program Files/Playpark/Kritika/log.apl
... DEBUGGING,[Info] ,,,,,(2017-02-20 20:02:07.177),,[ 9],[Publisher][AsiaSoftCommonModule] Initialize succeeded ,@Publisher::Client::Common::AsiaSoftCommonModule::Initialize, DEBUGGING,[Info] ,,,,,(2017-02-20 20:02:07.177),,[ 9],[Publisher][AsiaSoftCommonModule] Initialize() function is already called.,@Publisher::Client::Common::AsiaSoftCommonModule::Initialize, DEBUGGING,[Info] ,,,,,(2017-02-20 20:02:46.721),,[ 9],msg : ZCWAVE_SysEnter fail : 34006201404 ,@XigncodeInit, DEBUGGING,[Info] ,,,,,(2017-02-20 20:02:46.722),,[ 9],XigncodeInit FAILD : ZCWAVE_SysEnter fail : 34006201404 ,@Publisher::Client::AntiHacking::XignCodeAntiHackingModule::Initialize, DEBUGGING,[Exception] ,,,,,(2017-02-20 20:02:46.722),,[ 9],AntiHackingException.,@Publisher::Client::AntiHacking::IAntiHackingModule::ReportError, DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.765),,[ 9],Stopping thread : BannerDownloader,@AllM::Runnable::StopThread, DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.765),,[ 9],Stopped thread : BannerDownloader,@AllM::Runnable::StopThread, DEBUGGING,[Info] ,,,,,(2017-02-20 20:02:46.766),,[ 9],[ClientLogic] Destroyed.,@, DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.766),,[ 9],Stopping thread : AsyncResourceLoader,@AllM::Runnable::StopThread, DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.767),,[ 49],stopped repeating thread :AsyncResourceLoader,@AllM::Runnable::threadFunction, DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.767),,[ 49],thread terminating. ThreadName = AsyncResourceLoader, ThreadId = 49,@AllM::Runnable::threadFunction::TearOff::~TearOff, DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.767),,[ 9],Stopped thread : AsyncResourceLoader,@AllM::Runnable::StopThread, ... --- snip ---
ProtectionID scan:
--- snip --- -=[ ProtectionID v0.6.6.7 DECEMBER]=- (c) 2003-2015 CDKiLLER & TippeX Build 24/12/14-22:48:13 Ready... Scanning -> C:\Program Files\Playpark\Kritika\KRITIKA_Client.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 28272216 (01AF6658h) Byte(s) Compilation TimeStamp : 0x573AF835 -> Tue 17th May 2016 10:53:41 (GMT) [DigSig] ** ERROR ** -> digital signature does not seem to be valid (0x0 / 0) (GLE: 0x80092009 / 2148081673) [TimeStamp] 0x573AF835 -> Tue 17th May 2016 10:53:41 (GMT) | PE Header | - | Offset: 0x00000150 | VA: 0x00400150 | - [TimeStamp] 0x573AF835 -> Tue 17th May 2016 10:53:41 (GMT) | DebugDirectory | - | Offset: 0x013E79C4 | VA: 0x017E8FC4 | - -> File Appears to be Digitally Signed @ Offset 01AF5400h, size : 01258h / 04696 byte(s) [File Heuristics] -> Flag #1 : 00000100000001001100000000000100 (0x0404C004) [Entrypoint Section Entropy] : 6.62 (section #0) ".text " | Size : 0x13D559E (20796830) byte(s) [DllCharacteristics] -> Flag : (0x8100) -> DEP | TSA [SectionCount] 5 (0x5) | ImageSize 0x1C6A000 (29794304) byte(s) [VersionInfo] Company Name : AllM [VersionInfo] Product Name : Kritika_Client [VersionInfo] Product Version : 2.3.11.45322 [VersionInfo] File Description : Kritika_Client [VersionInfo] File Version : 2.3.11.45322 [VersionInfo] Original FileName : >ProductName [VersionInfo] Internal Name : Kritika_Client [VersionInfo] Legal Copyrights : Copyright (C) 2011 [Debug Info] (record 1 of 1) (file offset 0x13E79C0) Characteristics : 0x0 | TimeDateStamp : 0x573AF835 (Tue 17th May 2016 10:53:41 (GMT)) | MajorVer : 0 / MinorVer : 0 -> (0.0) Type : 2 (0x2) -> CodeView | Size : 0x73 (115) AddressOfRawData : 0x1532CE4 | PointerToRawData : 0x15316E4 CvSig : 0x53445352 | SigGuid E0B80914-6C2E-490B-AC45D1F0B29948CF Age : 0x1 | Pdb : D:\Working\asiasoft_2.3.11.0xx source\Solutions\MainClient\Distribution\KRITIKA_Client.pdb [CdKeySerial] found "Invalid code" @ VA: 0x014DC008 / Offset: 0x014DAA08 [CompilerDetect] -> Visual C++ 10.0 (Visual Studio 2010) [!] File appears to have no protection or is using an unknown protection - Scan Took : 4.371 Second(s) [000001215h (4629) tick(s)] [499 of 573 scan(s) done]
...
Scanning -> C:\Program Files\Playpark\Kritika\Xigncode\x3.xem File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 2048744 (01F42E8h) Byte(s) Compilation TimeStamp : 0x5474A6FF -> Tue 25th Nov 2014 15:57:51 (GMT) [TimeStamp] 0x5474A6FF -> Tue 25th Nov 2014 15:57:51 (GMT) | PE Header | - | Offset: 0x00000110 | VA: 0x10000110 | - [TimeStamp] 0x5474A6EF -> Tue 25th Nov 2014 15:57:35 (GMT) | Export | - | Offset: 0x001F20B8 | VA: 0x104AD4B8 | - -> File Appears to be Digitally Signed @ Offset 01F2800h, size : 01AE8h / 06888 byte(s) [File Heuristics] -> Flag #1 : 00000000000001001101010100110111 (0x0004D537) [Entrypoint Section Entropy] : 4.34 (section #5) "vrudykql" | Size : 0x200 (512) byte(s) [DllCharacteristics] -> Flag : (0x0040) -> ASLR [SectionCount] 6 (0x6) | ImageSize 0x4AF000 (4911104) byte(s) [Export] 100% of function(s) (1 of 1) are in file | 0 are forwarded | 1 code | 0 data | 0 uninit data | 0 unknown | [VersionInfo] Company Name : Wellbia.com Co.. Ltd. [VersionInfo] Product Name : XIGNCODE3 SYSTEM [VersionInfo] Product Version : 3. 5. 0. 60 [VersionInfo] File Description : XIGNCODE3 SYSTEM [VersionInfo] File Version : 3. 5. 0. 60 [VersionInfo] Original FileName : x3.xem [VersionInfo] Internal Name : x3.xem [VersionInfo] Version Comments : XIGNCODE3 SYSTEM [VersionInfo] Legal Copyrights : Copyright (C) 2006-2013 Wellbia.com Co.. Ltd. [!] Themida v2.0.1.0 - v2.1.8.0 (or newer) detected ! [i] Hide PE Scanner Option used - Scan Took : 0.455 Second(s) [0000001C7h (455) tick(s)] [244 of 573 scan(s) done] --- snip ---
You are using Wine-Staging which has NtQueryVirtualMemory with 'MemorySectionName' information class partially implemented (bug 23999).
$ du -sh KritikaInstaller.zip 4.4G KritikaInstaller.zip
$ wine --version wine-2.2
Regards
https://bugs.winehq.org/show_bug.cgi?id=42493
Thomas Kowaliczek linuxdonald@posteo.de changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |linuxdonald@posteo.de
https://bugs.winehq.org/show_bug.cgi?id=42493
Michael Müller michael@fds-team.de changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |michael@fds-team.de
--- Comment #3 from Michael Müller michael@fds-team.de --- Created attachment 58298 --> https://bugs.winehq.org/attachment.cgi?id=58298 Hack to speedup xign loadtime
Wine Staging 2.9 contains patches to make the user mode part of XIGNCODE3 happy (at least in a 32-bit prefix, I have not tested if 64-bit makes a difference), which includes:
* Loading Nt functions based on the VA offset calculated from the builtin dll using ReadFile and executing it * Opening Files through NT device paths * Comparing the content of some functions between the builtin and fake ntdll * Manually loading kernel32 and calling functions like VirtualAlloc
Afterwards the anticheat engine will load a kernel driver xhunter1.sys which crashes due to:
wine: Call from 0x7b43c559 to unimplemented function ntoskrnl.exe.IoCreateNotificationEvent, aborting wine: Unimplemented function ntoskrnl.exe.IoCreateNotificationEvent called at address 0x7b43c559 (thread 008a), starting debugger...
When working around this bug, the driver will crash, because the Mutex related functions just return error codes, causing the driver to unload itself, which wine does not handle properly. So there is still some work left.
If anyone is interested in working on this, I suggest to apply the attached patch on Wine Staging 2.9. The anticheat engine calls many Nt functions twice, one time with the pseudo handle and one time with a real process handle for the current process. The later case requires a huge amount of wineserver calls and APCs leading to an extreme slowdown. The hack reduces the loading time to something more reasonable.
https://bugs.winehq.org/show_bug.cgi?id=42493
temp82@luukku.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |temp82@luukku.com
--- Comment #4 from temp82@luukku.com --- the download is dead.
-
wine-bugs＠winehq.org -
WineHQ Bugzilla