[Bug 42493] Kritika Online MMO fails to start, reports XIGNCODE3 init error 'ZCWAVE_SysEnter fail : 34006201404'

wine-bugs at winehq.org wine-bugs at winehq.org
Mon Feb 20 16:38:36 CST 2017 

https://bugs.winehq.org/show_bug.cgi?id=42493

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
     Ever confirmed|0                           |1
                 CC|                            |focht at gmx.net
                URL|                            |http://download.playpark.co
                   |                            |m/my/detail/233
             Status|UNCONFIRMED                 |NEW
            Summary|Kritika Online startup      |Kritika Online MMO fails to
                   |fails (Xigncode problem?)   |start, reports XIGNCODE3
                   |                            |init error 'ZCWAVE_SysEnter
                   |                            |fail : 34006201404'
           Keywords|                            |download, obfuscation

--- Comment #2 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

confirming.

'winetricks -q vcrun2010' is a needed prerequisite:

--- snip ---
...
[0220/195948:ERROR:proxy_service_factory.cc(103)] Cannot use V8 Proxy resolver
in single process mode.
wine: Call from 0x7b445e53 to unimplemented function
msvcr100.dll.?_Schedule at _StructuredTaskCollection@details at Concurrency@@QAEXPAV_UnrealizedChore at 23@@Z,
aborting
...
--- snip ---

(concurrency namespace insufficiencies are also mentioned in bug 34676)

There was no need for 'ie7' in WINEPREFIX (downloaded full client).

Client log file:

--- snip ---
$ find .wine -iname log.apl
.wine/drive_c/Program Files/Playpark/Kritika/log.apl

...
DEBUGGING,[Info]      ,,,,,(2017-02-20 20:02:07.177),,[  
9],[Publisher][AsiaSoftCommonModule] Initialize succeeded
, at Publisher::Client::Common::AsiaSoftCommonModule::Initialize,
DEBUGGING,[Info]      ,,,,,(2017-02-20 20:02:07.177),,[  
9],[Publisher][AsiaSoftCommonModule] Initialize() function is already
called., at Publisher::Client::Common::AsiaSoftCommonModule::Initialize,
DEBUGGING,[Info]      ,,,,,(2017-02-20 20:02:46.721),,[   9],msg : 
ZCWAVE_SysEnter fail : 34006201404
, at XigncodeInit,
DEBUGGING,[Info]      ,,,,,(2017-02-20 20:02:46.722),,[   9],XigncodeInit FAILD
: ZCWAVE_SysEnter fail : 34006201404
, at Publisher::Client::AntiHacking::XignCodeAntiHackingModule::Initialize,
DEBUGGING,[Exception] ,,,,,(2017-02-20 20:02:46.722),,[  
9],AntiHackingException., at Publisher::Client::AntiHacking::IAntiHackingModule::ReportError,
DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.765),,[   9],Stopping thread :
BannerDownloader, at AllM::Runnable::StopThread,
DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.765),,[   9],Stopped thread :
BannerDownloader, at AllM::Runnable::StopThread,
DEBUGGING,[Info]      ,,,,,(2017-02-20 20:02:46.766),,[   9],[ClientLogic]
Destroyed.,@,
DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.766),,[   9],Stopping thread :
AsyncResourceLoader, at AllM::Runnable::StopThread,
DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.767),,[  49],stopped repeating
thread :AsyncResourceLoader, at AllM::Runnable::threadFunction,
DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.767),,[  49],thread
terminating. ThreadName = AsyncResourceLoader, ThreadId =
49, at AllM::Runnable::threadFunction::TearOff::~TearOff,
DEBUGGING,[Important] ,,,,,(2017-02-20 20:02:46.767),,[   9],Stopped thread :
AsyncResourceLoader, at AllM::Runnable::StopThread,
...
--- snip ---

ProtectionID scan:

--- snip ---
-=[ ProtectionID v0.6.6.7 DECEMBER]=-
(c) 2003-2015 CDKiLLER & TippeX
Build 24/12/14-22:48:13
Ready...
Scanning -> C:\Program Files\Playpark\Kritika\KRITIKA_Client.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 28272216 (01AF6658h)
Byte(s)
Compilation TimeStamp : 0x573AF835 -> Tue 17th May 2016 10:53:41 (GMT)
[DigSig] ** ERROR ** -> digital signature does not seem to be valid (0x0 / 0)
(GLE: 0x80092009 / 2148081673)
[TimeStamp] 0x573AF835 -> Tue 17th May 2016 10:53:41 (GMT) | PE Header | - |
Offset: 0x00000150 | VA: 0x00400150 | -
[TimeStamp] 0x573AF835 -> Tue 17th May 2016 10:53:41 (GMT) | DebugDirectory | -
| Offset: 0x013E79C4 | VA: 0x017E8FC4 | -
-> File Appears to be Digitally Signed @ Offset 01AF5400h, size : 01258h /
04696 byte(s)
[File Heuristics] -> Flag #1 : 00000100000001001100000000000100 (0x0404C004)
[Entrypoint Section Entropy] : 6.62 (section #0) ".text   " | Size : 0x13D559E
(20796830) byte(s)
[DllCharacteristics] -> Flag : (0x8100) -> DEP | TSA
[SectionCount] 5 (0x5) | ImageSize 0x1C6A000 (29794304) byte(s)
[VersionInfo] Company Name : AllM
[VersionInfo] Product Name : Kritika_Client
[VersionInfo] Product Version : 2.3.11.45322
[VersionInfo] File Description : Kritika_Client
[VersionInfo] File Version : 2.3.11.45322
[VersionInfo] Original FileName : >ProductName
[VersionInfo] Internal Name : Kritika_Client
[VersionInfo] Legal Copyrights : Copyright (C) 2011
[Debug Info] (record 1 of 1) (file offset 0x13E79C0)
Characteristics : 0x0 | TimeDateStamp : 0x573AF835 (Tue 17th May 2016 10:53:41
(GMT)) | MajorVer : 0 / MinorVer : 0 -> (0.0)
Type : 2 (0x2) -> CodeView | Size : 0x73 (115) 
AddressOfRawData : 0x1532CE4 | PointerToRawData : 0x15316E4
CvSig : 0x53445352 | SigGuid E0B80914-6C2E-490B-AC45D1F0B29948CF
Age : 0x1 | Pdb : D:\Working\asiasoft_2.3.11.0xx
source\Solutions\MainClient\Distribution\KRITIKA_Client.pdb
[CdKeySerial] found "Invalid code" @ VA: 0x014DC008 / Offset: 0x014DAA08
[CompilerDetect] -> Visual C++ 10.0 (Visual Studio 2010)
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 4.371 Second(s) [000001215h (4629) tick(s)] [499 of 573 scan(s)
done]

...

Scanning -> C:\Program Files\Playpark\Kritika\Xigncode\x3.xem
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 2048744 (01F42E8h)
Byte(s)
Compilation TimeStamp : 0x5474A6FF -> Tue 25th Nov 2014 15:57:51 (GMT)
[TimeStamp] 0x5474A6FF -> Tue 25th Nov 2014 15:57:51 (GMT) | PE Header | - |
Offset: 0x00000110 | VA: 0x10000110 | -
[TimeStamp] 0x5474A6EF -> Tue 25th Nov 2014 15:57:35 (GMT) | Export | - |
Offset: 0x001F20B8 | VA: 0x104AD4B8 | -
-> File Appears to be Digitally Signed @ Offset 01F2800h, size : 01AE8h / 06888
byte(s)
[File Heuristics] -> Flag #1 : 00000000000001001101010100110111 (0x0004D537)
[Entrypoint Section Entropy] : 4.34 (section #5) "vrudykql" | Size : 0x200
(512) byte(s)
[DllCharacteristics] -> Flag : (0x0040) -> ASLR
[SectionCount] 6 (0x6) | ImageSize 0x4AF000 (4911104) byte(s)
[Export] 100% of function(s) (1 of 1) are in file | 0 are forwarded | 1 code |
0 data | 0 uninit data | 0 unknown | 
[VersionInfo] Company Name : Wellbia.com Co.. Ltd.
[VersionInfo] Product Name : XIGNCODE3 SYSTEM
[VersionInfo] Product Version : 3. 5. 0. 60
[VersionInfo] File Description : XIGNCODE3 SYSTEM
[VersionInfo] File Version : 3. 5. 0. 60
[VersionInfo] Original FileName : x3.xem
[VersionInfo] Internal Name : x3.xem
[VersionInfo] Version Comments : XIGNCODE3 SYSTEM
[VersionInfo] Legal Copyrights : Copyright (C) 2006-2013 Wellbia.com Co.. Ltd.
[!] Themida v2.0.1.0 - v2.1.8.0 (or newer) detected !
[i] Hide PE Scanner Option used
- Scan Took : 0.455 Second(s) [0000001C7h (455) tick(s)] [244 of 573 scan(s)
done]
--- snip ---

You are using Wine-Staging which has NtQueryVirtualMemory with
'MemorySectionName' information class partially implemented (bug 23999).

$ du -sh KritikaInstaller.zip
4.4G    KritikaInstaller.zip

$ wine --version
wine-2.2

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.

More information about the wine-bugs mailing list