[Bug 32515] Steam games protected with Valve's CEG (Custom Executable Generation) DRM scheme fail validation/crash on startup (Warhammer 40K: Space Marine, CoD:MW3 SP, LotR: War in the North, Total War: Shogun 2)

Thu Aug 14 00:50:47 CDT 2014

https://bugs.winehq.org/show_bug.cgi?id=32515

--- Comment #36 from Béla Gyebrószki <gyebro69 at gmail.com> ---
I checked the games in my Steam library with Protection Id and found some more
games with Valve's CEG. The main executable in these games (sometimes a .dll
with CEG) always fails file validation and re-downloaded. 
Interestingly, these games all start for me (some of them needs native d3dx9*,
xact*).
Some of the games listed here has demo on Steam with CEG if you want to test
it.

Age of Empires II: HD Edition (AoK HD.exe)
http://steamdb.info/app/221380/config/
Scanning -> C:\Program Files\Steam\SteamApps\common\Age2HD\AoK HD.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 4996888 (04C3F18h)
Byte(s)
-> File Appears to be Digitally Signed @ Offset 04C3200h, size : 0D18h / 03352
byte(s)
[File Heuristics] -> Flag : 00000000000001001101000000000100 (0x0004D004)
[Entrypoint Section Entropy] : 6.60
[!] Steam api usage detected
[i] additional feature ; Valve CEG - Custom Executable Generation
[.] CEG Version : 1, 1, 0, 2100
[.] CEG Build GUID : FD1C45EF-0376-4524-B3A4-BBF65E7A1F1D
[.] CEG Build Machine : neilk
[!] Possible CD/DVD-Key or Serial Check -> serial number
[CompilerDetect] -> Visual C/C++
---

Duke Nukem Forever (Engine.dll)
http://steamdb.info/app/57900/config/
Scanning -> C:\Program Files\Steam\steamapps\common\duke nukem
forever\System\Engine.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 7472128 (0720400h)
Byte(s)
[File Heuristics] -> Flag : 00000100000001001100000000000000 (0x0404C000)
[Entrypoint Section Entropy] : 6.59
[Debug Info]
Characteristics : 0x0 | TimeDateStamp : 0x4ED80CC2 | MajorVer : 0 / MinorVer :
0 -> (0.0)
Type : 2 -> CodeView | Size : 0x3F (63)
AddressOfRawData : 0x510520 | PointerToRawData : 0x50EB20
CvSig : 0x53445352 | SigGuid E9A67490-47DA-43B8-A591B395061E1C0E
Age : 0x1 | Pdb : r:\BUCKEYE-PCSTABLE\System\Enginef.pdb

[!] Steam api usage detected
[i] additional feature ; Valve CEG - Custom Executable Generation
[.] CEG Version : 1, 1, 0, 2100
[.] CEG Build GUID : 36A43932-B494-4eb3-A521-E4D2B0872EA9
[.] CEG Build Machine : neilk2
[CompilerDetect] -> Visual C++ 9.0 (Visual Studio 2008)
---

Sid Meier's Civilization V
(civilizationv_tablet.exe;civilizationv_dx11.exe;civilizationv.exe)
http://steamdb.info/app/8930/config/
---

F.E.A.R 3 (F.E.A.R. 3.exe)
http://steamdb.info/app/21100/config/
Scanning -> C:\Program Files\Steam\SteamApps\common\F.E.A.R. 3\F.E.A.R. 3.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 22415512 (01560898h)
Byte(s)
-> File Appears to be Digitally Signed @ Offset 0155FA00h, size : 0E98h / 03736
byte(s)
[File Heuristics] -> Flag : 00000100000001001100000000000100 (0x0404C004)
[Entrypoint Section Entropy] : 6.63
[Debug Info]
Characteristics : 0x0 | TimeDateStamp : 0x4E0D0B76 | MajorVer : 0 / MinorVer :
0 -> (0.0)
Type : 2 -> CodeView | Size : 0x3C (60)
AddressOfRawData : 0x110B5D0 | PointerToRawData : 0x110ABD0
CvSig : 0x53445352 | SigGuid A6E5002F-31A7-49E8-B0DD34C5A851220D
Age : 0x6 | Pdb : e:\FEAR2Code\output\bin\Game_wf.pdb

[!] Steam api usage detected
[i] additional feature ; Valve CEG - Custom Executable Generation
[.] CEG Version : 1, 1, 0, 2100
[.] CEG Build GUID : 36A43932-B494-4eb3-A521-E4D2B0872EA9
[.] CEG Build Machine : neilk2
[CompilerDetect] -> Visual C++ 9.0 (Visual Studio 2008)
---

Left 4 Dead 2 (client.dll)
http://steamdb.info/app/550/config/
Scanning -> C:\Program Files\Steam\SteamApps\common\Left 4 Dead
2\left4dead2\bin\client.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 8818328 (0868E98h)
Byte(s)
-> File Appears to be Digitally Signed @ Offset 0868000h, size : 0E98h / 03736
byte(s)
[File Heuristics] -> Flag : 00000100000001001101000000000100 (0x0404D004)
[Entrypoint Section Entropy] : 6.71
[Debug Info]
Characteristics : 0x0 | TimeDateStamp : 0x53598874 | MajorVer : 0 / MinorVer :
0 -> (0.0)
Type : 2 -> CodeView | Size : 0x69 (105)
AddressOfRawData : 0x704FE8 | PointerToRawData : 0x7035E8
CvSig : 0x53445352 | SigGuid 515B8436-1C59-4B75-B831A0805AB5B995
Age : 0x1 | Pdb :
c:\buildslave\l4d2_rel_win32\build\src\game\client\Release_left4dead2\client.pdb

[!] Steam api usage detected
[i] additional feature ; Valve CEG - Custom Executable Generation
[.] CEG Version : 1, 1, 0, 2038
[.] CEG Build GUID : A4ABE88C-9326-44d8-9CB7-B010AA12644F
[.] CEG Build Machine : neilk2
[CompilerDetect] -> Visual C++ 10.0 (Visual Studio 2010)
---

Lara Croft: Guardian of Light (lcgol.exe)
http://steamdb.info/app/35130/config/
Has demo: http://store.steampowered.com/app/35130
Scanning -> C:\Program Files\Steam\SteamApps\common\Lara Croft and the Guardian
of Light\lcgol.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 7827096 (0776E98h)
Byte(s)
-> File Appears to be Digitally Signed @ Offset 0776000h, size : 0E98h / 03736
byte(s)
[File Heuristics] -> Flag : 00000100000000001000000000000100 (0x04008004)
[Entrypoint Section Entropy] : 6.61
[Debug Info]
Characteristics : 0x0 | TimeDateStamp : 0x4CFD752C | MajorVer : 0 / MinorVer :
0 -> (0.0)
Type : 2 -> CodeView | Size : 0x4D (77)
AddressOfRawData : 0x6151D8 | PointerToRawData : 0x6151D8
CvSig : 0x53445352 | SigGuid 66721B60-8137-474B-8605D1B2D1A75A76
Age : 0x1 | Pdb : d:\trd\output\win32_gmceg\game\lcgol_win32_gmceg.pdb

[!] Steam api usage detected
[i] additional feature ; Valve CEG - Custom Executable Generation
[.] CEG Version : 1, 1, 0, 2038
[.] CEG Build GUID : 4994E1F5-5255-4bee-A6EE-696CB9BF35A9
[.] CEG Build Machine : neilk2
[CompilerDetect] -> Visual C++ 8.0 (Visual Studio 2005)
---

Spec Ops: The Line (SpecOpsTheLine.exe)
http://steamdb.info/app/50300/config/
Has demo: http://store.steampowered.com/app/50300
Scanning -> C:\Program
Files\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 18700952 (011D5A98h)
Byte(s)
-> File Appears to be Digitally Signed @ Offset 011D4C00h, size : 0E98h / 03736
byte(s)
[File Heuristics] -> Flag : 00000100000001001100000000000100 (0x0404C004)
[Entrypoint Section Entropy] : 6.59
[Debug Info]
Characteristics : 0x0 | TimeDateStamp : 0x50041F0C | MajorVer : 0 / MinorVer :
0 -> (0.0)
Type : 2 -> CodeView | Size : 0x54 (84)
AddressOfRawData : 0xFAF0F0 | PointerToRawData : 0xFAE0F0
CvSig : 0x53445352 | SigGuid 29A0C37A-778B-48D0-B048E991FA4ECAFF
Age : 0x1 | Pdb : c:\depot\PC\UnrealEngine3\Binaries\Win32\SpecOpsTheLine.pdb

[!] Steam api usage detected
[i] additional feature ; Valve CEG - Custom Executable Generation
[.] CEG Version : 1, 1, 0, 2100
[.] CEG Build GUID : D38EFE72-7B28-49ec-98E5-D93E7729EECA
[.] CEG Build Machine : neilk2
[CompilerDetect] -> Visual C++ 9.0 (Visual Studio 2008)
---

Mafia 2 (Mafia2.exe)
http://steamdb.info/app/50130/config/
Has demo: http://store.steampowered.com/app/50130
Scanning -> C:\Program Files\Steam\SteamApps\common\Mafia II\pc\mafia2.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 24343192 (01737298h)
Byte(s)
-> File Appears to be Digitally Signed @ Offset 01736400h, size : 0E98h / 03736
byte(s)
[File Heuristics] -> Flag : 00000100000001001100000000000100 (0x0404C004)
[Entrypoint Section Entropy] : 6.47
[Debug Info]
Characteristics : 0x0 | TimeDateStamp : 0x4D2745BA | MajorVer : 0 / MinorVer :
0 -> (0.0)
Type : 2 -> CodeView | Size : 0x39 (57)
AddressOfRawData : 0x167455C | PointerToRawData : 0x167255C
CvSig : 0x53445352 | SigGuid D40076C1-440E-4B1D-9684EA3052D307D2
Age : 0x2 | Pdb : D:\IS_GAMES\MAFIA2\pc\Mafia2.pdb

[!] Steam api usage detected
[i] additional feature ; Valve CEG - Custom Executable Generation
[.] CEG Version : 1, 1, 0, 2041
[.] CEG Build GUID : CC580516-8153-4477-95D2-F2357FF170F0
[.] CEG Build Machine : neilk2
[CompilerDetect] -> Visual C++ 9.0 (Visual Studio 2008)
---

XCOM: Enemy Unknown (XComGame.exe)
http://steamdb.info/app/200510/config/
Has demo: http://store.steampowered.com/app/200510
Scanning -> C:\Program
Files\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 28428568 (01B1C918h)
Byte(s)
-> File Appears to be Digitally Signed @ Offset 01B1BC00h, size : 0D18h / 03352
byte(s)
[File Heuristics] -> Flag : 00000100000001001001000000000100 (0x04049004)
[Entrypoint Section Entropy] : 6.65
[Debug Info]
Characteristics : 0x0 | TimeDateStamp : 0x5293C800 | MajorVer : 0 / MinorVer :
0 -> (0.0)
Type : 2 -> CodeView | Size : 0x73 (115)
AddressOfRawData : 0x183ED88 | PointerToRawData : 0x183E188
CvSig : 0x53445352 | SigGuid 62A66F26-5707-4526-861DDF87C24FE1B1
Age : 0x1 | Pdb :
C:\BuildAgent\work\f8dad38555ce5470\branches\UE3_XComPC\Binaries\Win32\XComGame-RETAIL.pdb

[!] Steam api usage detected
[i] additional feature ; Valve CEG - Custom Executable Generation
[.] CEG Version : 1, 1, 0, 2100
[.] CEG Build GUID : 57FFEFBE-3993-4f28-BCAC-C55C7297F8E3
[.] CEG Build Machine : neilk
[CompilerDetect] -> Visual C++ 10.0 (Visual Studio 2010)
---

Games with Valve's CEG I haven't tested yet due to lack of time:
The Bureau: XCOM Declassified
http://steamdb.info/app/65930/config/

Red Faction: Armageddon
http://steamdb.info/app/55110/config/

Deus Ex: Human Revolution
http://steamdb.info/app/28050/config/
---

Tested with wine-1.7.24-14-gd1749b5

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.