source_references

Source References

Purpose: Consolidated, deduplicated inventory of every primary and secondary source consulted during the Endfield_FineWine research and implementation phases. This page is the authoritative reference for verifying claims, tracing patch provenance, and locating original evidence.

How to use: Each entry includes the source type, access status, and confidence level. Sources marked ⚠️ require special handling (browser access, API calls, or archived mirrors). Cross-reference with the [confidence: high/medium/low] tags in the subsystem docs.

---

Access Quick Reference

Status	Meaning	Workaround
✅ Accessible	Direct fetch works	None needed
⚠️ Anubis-walled	Proof-of-work wall on HTTP	Use GitHub mirror or browser
⚠️ 403/Blocked	Automated fetches rejected	Browser or API required
🔴 Dead/Removed	Content no longer available	Check archived mirrors

---

1. ACE Anti-Cheat & Endfield Specific

Primary Evidence

• GE-Proton issue #433 — The fix identification thread. Contains the actual failure log and the dw-proton commit reference.

  • URL: https://github.com/GloriousEggroll/proton-ge-custom/issues/433
  • Status: ✅ Accessible
  • Confidence: High — directly quotes maintainer identification of the fix commit

• dw-proton fix commit b816be489 — The actual patch commit that makes Endfield launch on Linux.

  • URL: https://dawn.wine/dawn-winery/dwproton/commit/b816be489049a10453b470c6a12dcf552ea41773.patch
  • Status: ⚠️ Anubis-walled (use GitHub mirror)
  • Mirror: https://github.com/dawn-winery/dwproton-mirror
  • Confidence: High — verified verbatim against current tree

• PCGamingWiki: Anti-Cheat Expert — Documentation of ACE architecture and Wine compatibility.

  • URL: https://www.pcgamingwiki.com/wiki/Anti-Cheat_Expert
  • Status: ✅ Accessible
  • Confidence: High — factual reference

• PCGamingWiki: Arknights: Endfield — Game-specific compatibility notes.

  • URL: https://www.pcgamingwiki.com/wiki/Arknights:_Endfield
  • Status: ✅ Accessible

• CVE-2024-22830 — ACE-BASE.sys kernel driver vulnerability (establishes driver model).

  • URL: https://nvd.nist.gov/vuln/detail/CVE-2024-22830
  • Status: ✅ Accessible
  • Confidence: High — confirmed NVD entry

Community Reports

• AreWeAntiCheatYet #1905 — Endfield status on Proton.

  • URL: https://github.com/AreWeAntiCheatYet/AreWeAntiCheatYet/issues/1905
  • Status: ✅ Accessible
  • Note: Only confirms "launches with latest Proton-DW," not an allowlist claim

• rhea.dev: Endfield on Linux — Author's migration from GE-Proton to dw-proton.

  • URL: https://rhea.dev/articles/2026-01/windows-games-on-linux-endfield
  • Status: ✅ Accessible
  • Confidence: Medium — single user report, but detailed

WineHQ Bugs

• Bug 59411 — "Endfield crashes on unimplemented function ntoskrnl.exe"
  • URL: https://bugs.winehq.org/show_bug.cgi?id=59411
  • Status: ⚠️ Anubis-walled (title/summary only recovered)
  • Date: 2026-02-26
  • Note: Body behind anti-bot wall; title confirms ntoskrnl is involved on Linux

---

2. dw-proton / GE-Proton / Wine ntoskrnl Patches

Repository Sources

• dw-proton main repo — Dawn Winery's gacha games Proton fork.

  • URL: https://dawn.wine/dawn-winery/dwproton
  • Status: ⚠️ Anubis-walled
  • Mirror: https://github.com/dawn-winery/dwproton-mirror

• Wine fork (current patch location) — Patches now live in a submodule fork, not patches/wine/.

  • URL: https://dawn.wine/dawn-winery/wine-dwproton
  • Branch: base
  • Status: ⚠️ Anubis-walled
  • Proxy mirror: https://github.com/NelloKudo/wine-dwproton

• Historical patches/wine/ tree — Last snapshot with folder-based layout (10.0-26).

  • URL: https://github.com/TomerGamerTV/dwproton
  • Status: ✅ Accessible (archival)

• Etaash-mathamsetty/wine-ntoskrnl — Related project implementing additional kernel functions.

  • URL: https://github.com/Etaash-mathamsetty/wine-ntoskrnl
  • Status: ✅ Accessible
  • Note: Project marked dead/being upstreamed; implements barrier functions and INT emulation

wine-staging

• ntdll-Hide_Wine_Exports — The patch that filters Wine exports from LdrGetProcedureAddress.

  • URL: https://github.com/wine-staging/wine-staging/blob/master/patches/ntdll-Hide_Wine_Exports/0001-ntdll-Add-support-for-hiding-wine-version-informatio.patch
  • Status: ✅ Accessible
  • Confidence: High — verified against source

• wine-compholio stubs — Alternative ntoskrnl stub implementations.

  • URL: https://github.com/wine-compholio/wine-staging/tree/master/patches/ntoskrnl-Stubs
  • Status: ✅ Accessible

Upstream Wine

• Wine 11.6 heuristic commit a31ec8da — Prefer native DLLs based on version resource (CompanyName ≠ Microsoft).

  • URL: https://github.com/wine-mirror/wine/commit/a31ec8da9572672e04ae46792a398da942649875
  • Status: ✅ Accessible via GitHub mirror
  • Confidence: High — patch text verified

• Wine dlls/ntdll/version.c — RtlGetVersion / RtlGetNtVersionNumbers implementation.

  • URL: https://github.com/wine-mirror/wine/blob/master/dlls/ntdll/version.c
  • Status: ✅ Accessible

---

3. CrossOver Wine Architecture & Building

Official Sources

• CrossOver source tarballs — Commercial source releases.

  • URL: https://www.codeweavers.com/crossover/source
  • Status: ⚠️ 403 to automated fetchers; use browser
  • Tarball pattern: https://media.codeweavers.com/pub/crossover/source/crossover-sources-<VERSION>.tar.gz
  • Current line: CrossOver 25.x (Wine 10.0) / CrossOver 26 (Wine 11.0 + NTSync)

• Git mirror — LGPL-2.1 compliant mirror.

  • URL: https://github.com/tbodt/crossover-wine
  • Active fork: Gcenx/winecx (branch crossover-wine)

Community Build Recipes

• sarimarton gist — Local compile instructions (last validated 2017 Intel MBP).

  • URL: https://gist.github.com/sarimarton/471e9ff8046cc746f6ecb8340f942647
  • Status: ⚠️ Unmaintained since Jan 2023

• GabLeRoux cloud builder — GitHub Actions builder for macOS.

  • URL: https://github.com/GabLeRoux/macos-crossover-wine-cloud-builder
  • Key files: build_local.sh, .github/actions/configure_wine/action.yml
  • Issue #51: cx-llvm no longer available from tap
  • Status: ⚠️ Stale for CrossOver 25+ (version matrix tops out at 22.0.1)

• Gcenx/wine-on-mac — Homebrew-based build approach.

  • URL: https://github.com/Gcenx/wine-on-mac

• MacPorts wine-crossover — Portfile-based build.

  • URL: https://ports.macports.org/port/wine-crossover/

Analysis & Deep Dives

• carette.xyz CrossOver deep-dive — Technical analysis of CrossOver internals.

  • URL: https://carette.xyz/posts/deep_dive_into_crossover/
  • Status: ✅ Accessible

• CodeWeavers ARM64 preview — Official blog on native arm64 direction.

  • URL: https://www.codeweavers.com/blog/mjohnson/2025/11/6/twist-our-arm64-heres-the-latest-crossover-preview
  • Status: ✅ Accessible

• CrossOver 25 / Wine 10 — Phoronix coverage.

  • URL: https://www.phoronix.com/news/CrossOver-25.0-Released

• CrossOver 27 "what's in/out" — Official changelog for 27.

  • URL: https://www.codeweavers.com/blog/mjohnson/2026/6/11/whats-in-and-whats-out-for-crossover-27

---

4. Swapping into CrossOver / Code-Signing / SIP

Tools

• CXPatcher — SwiftUI drag-and-drop app for upgrading CrossOver with graphics dependencies.

  • URL: https://github.com/italomandara/CXPatcher
  • Key files: Utils.swift, Config.swift
  • Constants verified: SUPPORTED_CROSSOVER_VERSION = "23.7", EXTERNAL_RESOURCES_ROOT = /lib64/apple_gpt
  • Discussion #239: Confirmed no supported path for injecting low-level components like ntsync

• Gcenx/CrossOver-fixes — Community patches for CrossOver.

  • URL: https://github.com/Gcenx/CrossOver-fixes

Code-Signing & SIP

• CodeWeavers: change bottle directory — Official support doc.

  • URL: https://support.codeweavers.com/change-the-bottle-directory-in-crossover-mac

• CodeWeavers: advanced config — Environment variables and configuration.

  • URL: https://support.codeweavers.com/advanced-crossover-mac-configuration

• Wikipedia: System Integrity Protection — SIP overview.

  • URL: https://en.wikipedia.org/wiki/System_Integrity_Protection

• Apple: About SIP — Official documentation.

  • URL: https://support.apple.com/en-us/102149

• HackTricks: dangerous entitlements — macOS security and privilege escalation.

  • URL: https://book.hacktricks.wiki/en/macos-hardening/macos-security-and-privilege-escalation/macos-security-protections/macos-dangerous-entitlements.html

---

5. Graphics: GPTK / D3DMetal / DXMT / DXVK

Official

• Apple GPTK — Game Porting Toolkit homepage.

  • URL: https://developer.apple.com/games/game-porting-toolkit/

• AppleGamingWiki: Game Porting Toolkit — Community documentation.

  • URL: https://www.applegamingwiki.com/wiki/Game_Porting_Toolkit

• GPTK4 coverage — AppleInsider and Korben articles.

  • URLs: https://appleinsider.com/articles/26/06/17/apples-game-porting-toolkit-4-is-a-big-improvement-for-modern-game-coders, https://korben.info/en/game-porting-toolkit-4-windows-games-smooth-mac.html

• CrossOver 26 Advanced Settings — Official documentation.

  • URL: https://support.codeweavers.com/en_US/advanced-settings-in-crossover-mac-26

• CrossOver changelog — Version history.

  • URL: https://www.codeweavers.com/crossover/changelog

DXMT

• 3Shain/dxmt — Metal-based D3D11/10 translation layer.
  • URL: https://github.com/3Shain/dxmt
  • Releases: v0.50 (2025-04-26) through v0.80 (2026-04-23)
  • Timeline verified via GitHub API

Endfield-Specific

• Endfield: force DX11 — Community guide.

  • URL: https://nerdschalk.com/arknights-endfield-disable-vulcan-force-directx-11/

• CrossOver compatibility: Endfield — CodeWeavers compatibility page.

  • URL: https://www.codeweavers.com/compatibility/crossover/arknights-endfield

• Whisky — Alternative Wine wrapper.

  • URL: https://frankea.github.io/Whisky/

---

6. Rosetta 2 & Wine Detection

• Apple: Rosetta translation environment — Official documentation.

  • URL: https://developer.apple.com/documentation/apple-silicon/about-the-rosetta-translation-environment

• hexacorn: detecting Wine via internal and legacy APIs — Classic reference for Wine fingerprinting.

  • URL: https://www.hexacorn.com/blog/2016/03/27/detecting-wine-via-internal-and-legacy-apis/

• Rosetta AVX SIGILL — Medium article on AVX limitations.

  • URL: https://medium.com/macoclock/m1-rosetta-2-limitation-illegal-hardware-instruction-a3b48fae02e

• Rosetta internals (Linux VM context) — Technical deep dive.

  • URL: https://blog.inoki.cc/2026/02/28/Apple-Rosetta-Linux-VM-Secret-en/

• Kernel-level anti-cheat overview — Research article.

  • URL: https://research.meekolab.com/understanding-kernel-level-anticheats-in-online-games

---

7. Mod Injection Research (XXMI / EFMI)

Primary Repos

• SpectrumQT/XXMI-Launcher — The modding platform.