[Bug 44355] FACEIT Anti-cheat client crashes on startup

wine-bugs at winehq.org wine-bugs at winehq.org
Mon Oct 15 13:21:32 CDT 2018


https://bugs.winehq.org/show_bug.cgi?id=44355

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|FaceIt client :             |FACEIT Anti-cheat client
                   |www.faceit.com/client       |crashes on startup
                URL|https://cdn.faceit.com/elec |https://faceit-client.facei
                   |tron/release/FACEIT-setup-l |t.com/release/FACEIT-setup-
                   |atest.exe                   |latest.exe
         Resolution|---                         |FIXED
            Version|unspecified                 |2.4
             Status|NEEDINFO                    |RESOLVED
                 CC|                            |focht at gmx.net

--- Comment #8 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

I can't reproduce the crash, neither with reported Wine-Staging 2.12 nor Wine
3.18.

Multiple installer bugs: 

* bug 26768 ("oleaut32 needs stubless proxies implemented on x86-64")
* bug 40613 ("Multiple applications require UAC implementation to run
installer/app as a normal user instead of administrator (WhatsApp Desktop,
Smartflix, Squirrel Installers, OneDrive)")

The client suffers from a couple of other known issues though.

* bug 45749 ("Multiple Node.js based applications/ installers need
ntdll.NtQueryInformationFile to handle ' FileModeInformation' information class
(MS Visual Studio 2017 Installer, FACEIT Anti-cheat client)Bug 45749] Multiple
Node.js based applications/ installers need ntdll.NtQueryInformationFile to
handle ' FileModeInformation' information class (MS Visual Studio 2017
Installer, FACEIT Anti-cheat client)")

* bug 32342 ("Multiple applications and games using 'Webkit' or 'Blink' web
browser engine crash on startup ('Arial' and 'Times New Roman' font face name
validation)") -> 'winetricks -q corefonts'

FACEIT client -> Electron (https://github.com/electron/electron) -> statically
linked 'libchromiumcontent' -> blink engine

--- snip ---
0x000000014280d574: int    $3

Modules:
Module    Address                    Debug info    Name (180 modules)
PE              240000-          57b000    Deferred        ffmpeg
PE            53850000-        53886000    Deferred        uiautomationcore
ELF            7a800000-        7aa0f000    Deferred        opengl32<elf>
  \-PE            7a850000-        7aa0f000    \               opengl32
ELF            7b400000-        7b817000    Deferred        kernel32<elf>
  \-PE            7b420000-        7b817000    \               kernel32
ELF            7bc00000-        7bd25000    Deferred        ntdll<elf>
  \-PE            7bc20000-        7bd25000    \               ntdll
ELF            7c000000-        7c004000    Deferred        <wine-loader>
PE           140000000-       144483000    Export          faceit
PE           180000000-       1811ce000    Deferred        node
ELF        7f522d45f000-    7f522d67f000    Deferred        libgpg-error.so.0
...
ELF        7f5245605000-    7f52459aa000    Dwarf           libwine.so.1
ELF        7f52459ac000-    7f5245bd5000    Deferred       
ld-linux-x86-64.so.2
ELF        7ffcaab2e000-    7ffcaab2f000    Deferred        [vdso].so
Threads:
process  tid      prio (all id:s are in hex)
...
00000036 FACEIT.exe
    000000cc    0
...
00000099 (D) Z:\home\focht\Downloads\FACEITApp\app-1.20.0\FACEIT.exe
...
    0000009a    0 <==
System information:
    Wine build: wine-3.18
    Platform: x86_64
    Version: Windows 7
    Host system: Linux
    Host version: 4.18.12-200.fc28.x86_64 
--- snip ---

--- snip ---
$ tree --charset=ANSI -L 4
.
|-- app-1.20.0
|   |-- api-ms-win-core-console-l1-1-0.dll
...
|   |-- api-ms-win-crt-utility-l1-1-0.dll
|   |-- blink_image_resources_200_percent.pak
|   |-- content_resources_200_percent.pak
|   |-- content_shell.pak
|   |-- d3dcompiler_47.dll
|   |-- FACEIT.exe
|   |-- ffmpeg.dll
|   |-- icudtl.dat
|   |-- libEGL.dll
|   |-- libGLESv2.dll
|   |-- LICENSE
|   |-- locales
|   |   |-- am.pak
|   |   |-- ar.pak
|   |   |-- bg.pak
|   |   |-- bn.pak
...
|   |   |-- zh-CN.pak
|   |   `-- zh-TW.pak
|   |-- msvcp140.dll
|   |-- natives_blob.bin
|   |-- node.dll
|   |-- resources
|   |   |-- app
|   |   |   |-- assets
|   |   |   |-- components
|   |   |   |-- config
|   |   |   |-- languages
|   |   |   |-- main.js
|   |   |   |-- node_modules
|   |   |   |-- package.json
|   |   |   `-- preload.js
|   |   `-- electron.asar
|   |-- squirrel.exe
|   |-- SquirrelSetup.log
|   |-- ucrtbase.dll
|   |-- ui_resources_200_percent.pak
|   |-- v8_context_snapshot.bin
|   |-- vcruntime140.dll
|   `-- views_resources_200_percent.pak
|-- FACEIT.exe
|-- packages
|   |-- FACEITApp-1.20.0-full.nupkg
|   |-- RELEASES
|   `-- SquirrelTemp
|-- SquirrelSetup.log
`-- Update.exe

11 directories, 123 files
--- snip ---

ProtectionID scan of current client: v1.20.0

--- snip ---
-=[ ProtectionID v0.6.9.0 DECEMBER]=-
(c) 2003-2017 CDKiLLER & TippeX
Build 24/12/17-21:05:42
Ready...
Scanning -> Z:\home\focht\Downloads\FACEITApp\app-1.20.0\FACEIT.exe
File Type : 64-Bit Exe (Subsystem : Win GUI / 2), Size : 71354824 (0440C9C8h)
Byte(s) | Machine: 0x8664 (AMD64)
Compilation TimeStamp : 0x5BAD4758 -> Thu 27th Sep 2018 21:10:48 (GMT)
[TimeStamp] 0x5BAD4758 -> Thu 27th Sep 2018 21:10:48 (GMT) | PE Header | - |
Offset: 0x00000000:00000150 | VA: 0x00000001:40000150 | -
[TimeStamp] 0xFFFFFFFF -> Sun 07th Feb 2106 06:28:15 (GMT) | Export | - |
Offset: 0x00000000:03F7AE54 | VA: 0x00000001:43F7BC54 | -
[TimeStamp] 0x5BAD4758 -> Thu 27th Sep 2018 21:10:48 (GMT) | DebugDirectory | -
| Offset: 0x00000000:03DFF584 | VA: 0x00000001:43E00384 | -
[TimeStamp] 0x5BAD4758 -> Thu 27th Sep 2018 21:10:48 (GMT) | DebugDirectory | -
| Offset: 0x00000000:03DFF5A0 | VA: 0x00000001:43E003A0 | -
[TimeStamp] 0x5BAD4758 -> Thu 27th Sep 2018 21:10:48 (GMT) | DebugDirectory | -
| Offset: 0x00000000:03DFF5BC | VA: 0x00000001:43E003BC | -
-> File Appears to be Digitally Signed @ Offset 0440AE00h, size : 01BC8h /
07112 byte(s)
[!] Executable uses TLS callbacks (2 total... 0 invalid addresses)
[LoadConfig] Struct determined as v8 (Expected size 232 | Actual size 248)
[LoadConfig] CFG (/Guard) - Handler @ 0x1:4345A668
[LoadConfig] CFG Table @ 0x1:4345A950 | 0x030079 (0196729) entries
[LoadConfig] CFG Flags : 0x13500
[LoadConfig] CodeIntegrity -> Flags 0x0 | Catalog 0x0 (0) | Catalog Offset 0x0
| Reserved 0x0
[LoadConfig] GuardAddressTakenIatEntryTable 0x0:00000000 | Count 0x000000000
(00)
[LoadConfig] GuardLongJumpTargetTable 0x1:4351AB34 | Count 0x00000001E (030)
[LoadConfig] HybridMetadataPointer 0x1:4345A950 | DynamicValueRelocTable
0x0:00000000
[LoadConfig] FailFastIndirectProc 0x43415170:00000001 | FailFastPointer
0x4345A678:00000001
[LoadConfig] UnknownZero1 0x0       0
[File Heuristics] -> Flag #1 : 00000100000001001101000100000100 (0x0404D104)
[Entrypoint Section Entropy] : 6.48 (section #0) ".text   " | Size : 0x341EFDC
(54652892) byte(s)
[DllCharacteristics] -> Flag : (0xC160) -> HEVA | ASLR | DEP | CFG | TSA
[SectionCount] 9 (0x9) | ImageSize 0x4483000 (71839744) byte(s)
[Export] 100% of function(s) (2 of 2) are in file | 0 are forwarded | 2 code |
0 data | 0 uninit data | 0 unknown | 
[VersionInfo] Company Name : FACEIT Ltd.
[VersionInfo] Product Name : FACEIT
[VersionInfo] Product Version : 1.20.0
[VersionInfo] File Description : FACEIT
[VersionInfo] File Version : 1.20.0
[VersionInfo] Original FileName : FACEIT.exe
[VersionInfo] Internal Name : FACEIT
[VersionInfo] Legal Copyrights : Copyright (C) 2015 GitHub. Inc. All rights
reserved.
[ModuleReport] [IAT] Modules -> node.dll | COMCTL32.dll | COMDLG32.dll |
WININET.dll | UIAutomationCore.DLL | ffmpeg.dll | dxgi.dll | ADVAPI32.dll |
IPHLPAPI.DLL | PSAPI.DLL | SHELL32.dll | USER32.dll | USERENV.dll | WS2_32.dll
| dbghelp.dll | dwmapi.dll | GDI32.dll | HID.DLL | USP10.dll | VERSION.dll |
WINSPOOL.DRV | ncrypt.dll | DWrite.dll | MSVCP140.dll | KERNEL32.dll |
ole32.dll | OLEAUT32.dll | SHLWAPI.dll | MSIMG32.dll | UxTheme.dll |
VCRUNTIME140.dll | api-ms-win-crt-string-l1-1-0.dll |
api-ms-win-crt-environment-l1-1-0.dll | api-ms-win-crt-heap-l1-1-0.dll |
api-ms-win-crt-runtime-l1-1-0.dll | api-ms-win-crt-stdio-l1-1-0.dll |
api-ms-win-crt-convert-l1-1-0.dll | api-ms-win-crt-filesystem-l1-1-0.dll |
api-ms-win-crt-math-l1-1-0.dll | api-ms-win-crt-utility-l1-1-0.dll |
api-ms-win-crt-time-l1-1-0.dll | api-ms-win-crt-locale-l1-1-0.dll | IMM32.dll |
OLEACC.dll | WINMM.dll | PROPSYS.dll
[ModuleReport] [DelayImport] Modules -> CRYPT32.dll | d3d9.dll | d3d11.dll |
dxva2.dll | MF.dll | MFPlat.DLL | MFReadWrite.dll | WTSAPI32.dll | bthprops.cpl
| BluetoothApis.dll | CFGMGR32.dll | POWRPROF.dll | SETUPAPI.dll | Secur32.dll
| urlmon.dll | WINHTTP.dll | api-ms-win-core-winrt-string-l1-1-0.dll |
api-ms-win-core-winrt-l1-1-0.dll | dhcpcsvc.DLL
[Debug Info] (record 1 of 3) (file offset 0x3DFF580)
Characteristics : 0x0 | TimeDateStamp : 0x5BAD4758 (Thu 27th Sep 2018 21:10:48
(GMT)) | MajorVer : 0 / MinorVer : 0 -> (0.0)
Type : 2 (0x2) -> CodeView | Size : 0x44 (68) 
AddressOfRawData : 0x3E005F4 | PointerToRawData : 0x3DFF7F4
CvSig : 0x53445352 | SigGuid 0098DB6A-B095-4FA7-A4B75AE9C7B79C2A
Age : 0x1 (1) | Pdb : C:\projects\electron\out\R\electron.exe.pdb
[Debug Info] (record 2 of 3) (file offset 0x3DFF59C)
Characteristics : 0x0 | TimeDateStamp : 0x5BAD4758 (Thu 27th Sep 2018 21:10:48
(GMT)) | MajorVer : 0 / MinorVer : 0 -> (0.0)
Type : 12 (0xC) -> Undocumented | Size : 0x14 (20) 
AddressOfRawData : 0x3E00638 | PointerToRawData : 0x3DFF838
[Debug Info] (record 3 of 3) (file offset 0x3DFF5B8)
Characteristics : 0x0 | TimeDateStamp : 0x5BAD4758 (Thu 27th Sep 2018 21:10:48
(GMT)) | MajorVer : 0 / MinorVer : 0 -> (0.0)
Type : 13 (0xD) -> Undocumented | Size : 0x478 (1144) 
AddressOfRawData : 0x3E0064C | PointerToRawData : 0x3DFF84C
...
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 11.532 Second(s) [000002CCCh (11468) tick(s)] [180 of 580 scan(s)
done]
--- snip ---

$ sha1sum FACEIT-setup-latest.exe 
332b313b0e34a3a7398a8e9b1537399c128034f4  FACEIT-setup-latest.exe

$ du -sh FACEIT-setup-latest.exe 
58M    FACEIT-setup-latest.exe

$ wine --version
wine-3.18

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.



More information about the wine-bugs mailing list