[Bug 35306] Multiple Visual Novel NSFW games fail with 'Authentication failed : unrecognized kernel32 module' (32-bit system32 modules path needs to be mapped as SysWOW64 under WoW64)(Kirikiri2, Oni Gokko, Osananajimi wa Daitouryou)
WineHQ Bugzilla
wine-bugs at winehq.org
Thu Feb 18 10:33:07 CST 2021
https://bugs.winehq.org/show_bug.cgi?id=35306
Anastasius Focht <focht at gmx.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |focht at gmx.net
Summary|Kirikiri2(Novel game |Multiple Visual Novel NSFW
|engine) Authentication |games fail with
|failed with 64bit wine |'Authentication failed :
| |unrecognized kernel32
| |module' (32-bit system32
| |modules path needs to be
| |mapped as SysWOW64 under
| |WoW64)(Kirikiri2, Oni
| |Gokko, Osananajimi wa
| |Daitouryou)
URL|http://www.alcot.biz/produc |https://web.archive.org/web
|t/oni_fd/ |/20140810095134/http://tria
| |l.getchu.com/dl2/660662/osa
| |na_tri.exe
Component|-unknown |ntdll
Keywords| |obfuscation
--- Comment #17 from Anastasius Focht <focht at gmx.net> ---
Hello folks,
confirming, still present.
Adding stable download link via Internet Archive.
https://web.archive.org/web/20140810095134/http://trial.getchu.com/dl2/660662/osana_tri.exe
Refining summary to collect all NSFW Visual Novels here.
@ Sagawa comment #11
Fortunately archive.org seems to have captured a few snapshots of the
demo/trial before authentication / referrer check was introduced.
Relevant part of trace log:
--- snip ---
$ pwd
/home/focht/.wine/drive_c/users/focht/test/—c‚È‚¶‚Ý‚Í‘å“
$ WINEDEBUG=+seh,+relay,+loaddll,+server,+ntdll,+module wine ./osana_trial.exe
>>log.txt 2>&1
...
0024:Call KERNEL32.GetModuleHandleA(1e01f370 "kernel32.dll") ret=1e0044b5
...
0024:Ret KERNEL32.GetModuleHandleA() retval=7b600000 ret=1e0044b5
0024:Call KERNEL32.VirtualQuery(7b6051f0,0032e75c,0000001c) ret=1e0044c5
0024:Call
ntdll.NtQueryVirtualMemory(ffffffff,7b6051f0,00000000,0032e75c,0000001c,0032e700)
ret=7b02967e
0024:Ret ntdll.NtQueryVirtualMemory() retval=00000000 ret=7b02967e
0024:Ret KERNEL32.VirtualQuery() retval=0000001c ret=1e0044c5
0024:Call KERNEL32.GetProcAddress(7b600000,1e01f354 "GetSystemWow64DirectoryA")
ret=1e0044d1
0024:Ret KERNEL32.GetProcAddress() retval=7b605e90 ret=1e0044d1
0024:Call KERNEL32.GetSystemWow64DirectoryA(0032e778,00000104) ret=1e0044f3
0024:Call ntdll.RtlInitUnicodeString(0032e6f4,7b0612aa
L"C:\\windows\\syswow64") ret=7b014cd5
0024:Ret ntdll.RtlInitUnicodeString() retval=00000028 ret=7b014cd5
...
0024:Ret KERNEL32.GetSystemWow64DirectoryA() retval=00000013 ret=1e0044f3
0024:Call KERNEL32.GetModuleFileNameA(7b600000,0032e880,00000104) ret=1e0045f1
...
0024:trace:module:GetModuleFileNameW L"C:\\windows\\system32\\kernel32.dll"
...
0024:Ret KERNEL32.GetModuleFileNameA() retval=00000020 ret=1e0045f1
0024:Call KERNEL32.lstrcmpiA(0032e778
"C:\\windows\\syswow64\\kernel32.dll",0032e880
"C:\\windows\\system32\\kernel32.dll") ret=1e004608
...
0024:Ret KERNEL32.lstrcmpiA() retval=00000001 ret=1e004608
...
0024:Call KERNEL32.GetLastError() ret=0043aa12
0024:Ret KERNEL32.GetLastError() retval=0000007a ret=0043aa12
...
0024:Call KERNEL32.MultiByteToWideChar(00000000,00000001,1e01f138 "void
::TVPThrowExceptionMessage(const tjs_char *)",00000031,018bfafc,00000031)
ret=0043aa52
0024:Ret KERNEL32.MultiByteToWideChar() retval=00000031 ret=0043aa52
0024:Call KERNEL32.RaiseException(0eefface,00000001,00000003,0032e644)
ret=00572719
...
0024:trace:seh:dispatch_exception code=eefface flags=1 addr=7B010198
ip=7b010198 tid=0024
0024:trace:seh:dispatch_exception info[0]=004020bc
0024:trace:seh:dispatch_exception info[1]=00666a07
0024:trace:seh:dispatch_exception info[2]=018bfb98
0024:err:seh:dispatch_exception Fatal unknown exception (code=eefface) raised
0024:trace:seh:dispatch_exception eax=0032e594 ebx=00000008 ecx=0032e644
edx=0000000c esi=00000003 edi=0032e600
0024:trace:seh:dispatch_exception ebp=0032e5e8 esp=0032e594 cs=7bc50023
ds=32002b es=7bc3002b fs=320063 gs=006b flags=00000212
0024:trace:seh:call_vectored_handlers calling handler at 7B00F5D0 code=eefface
flags=1
0024:trace:seh:call_vectored_handlers handler at 7B00F5D0 returned 0
0024:trace:seh:call_stack_handlers calling handler at 0056331B code=eefface
flags=1
0024:trace:seh:call_stack_handlers handler at 0056331B returned 1
0024:trace:seh:call_stack_handlers calling handler at 0056331B code=eefface
flags=1
0024:trace:seh:call_stack_handlers handler at 0056331B returned 1
0024:trace:seh:call_stack_handlers calling handler at 0056331B code=eefface
flags=1
0024:trace:seh:__regs_RtlUnwind code=eefface flags=3
0024:trace:seh:__regs_RtlUnwind eax=00000000 ebx=0032e594 ecx=006f6e1c
edx=0032e594 esi=00000064 edi=0032e594
0024:trace:seh:__regs_RtlUnwind ebp=0032dcfc esp=0032dc98 eip=0056415b cs=0023
ds=002b fs=0063 gs=006b flags=00000206
0024:trace:seh:__regs_RtlUnwind calling handler at 0056331B code=eefface
flags=3
0024:trace:seh:__regs_RtlUnwind handler at 0056331B returned 1
0024:trace:seh:__regs_RtlUnwind calling handler at 7BC47800 code=eefface
flags=3
...
0024:Call KERNEL32.FreeLibrary(1e000000) ret=00617f83
...
0024:Call PE DLL (proc=1E0135C8,module=1E000000
L"osana_trial.tpm",reason=PROCESS_DETACH,res=00000000)
...
0024:Call user32.MessageBoxA(0001007a,018a8054 "Authenticatoin failed :
unrecognized kernel32 module. / NM.",018ba0f4
"\x8bg\x97\xa2\x8bg\x97\xa2",00000010) ret=004b0057
--- snip ---
--- snip ---
0024:Call KERNEL32.lstrcmpiA(0032e778
"C:\\windows\\syswow64\\kernel32.dll",0032e880
"C:\\windows\\system32\\kernel32.dll") ret=1e004608
...
0024:Ret KERNEL32.lstrcmpiA() retval=00000001 ret=1e004608
--- snip ---
$ sha1sum osana_tri.exe
3794b3dbd9f399f07bc462d64864c5905e621ad4 osana_tri.exe
$ du -sh osana_tri.exe
272M osana_tri.exe
$ wine --version
wine-6.2-109-gc6a3072051f
Regards
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
More information about the wine-bugs
mailing list