[Bug 37487] Multiple applications need ntdll.NtOpenFile to support opening files through NT device paths '\\SystemRoot\\' (Quicken 2014, Tencent QQProtect Application 'QQProtect.sys', SmartGaga)

WineHQ Bugzilla wine-bugs at winehq.org
Wed Apr 15 02:59:24 CDT 2020


https://bugs.winehq.org/show_bug.cgi?id=37487

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|Multiple applications need  |Multiple applications need
                   |ntdll.NtOpenFile to support |ntdll.NtOpenFile to support
                   |opening files through NT    |opening files through NT
                   |device paths                |device paths
                   |'\\SystemRoot\\' (Quicken   |'\\SystemRoot\\' (Quicken
                   |2014, Tencent QQProtect     |2014, Tencent QQProtect
                   |Application                 |Application
                   |'QQProtect.sys')            |'QQProtect.sys', SmartGaga)

--- Comment #4 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

revisiting, still not mainlined.

Found another app: SmartGaga (Android Emulator) v1.1.x from bug 48933

https://docs.google.com/uc?export=download&id=1CbktLjrw6IAo_lU9Sh0sGghEHtO5HeKu

'androidkernelx64.sys' driver

--- snip ---
$ WINEDEBUG=+seh,+relay,+ntoskrnl,+server wine wineboot >>log.txt 2>&1
...
003e:Call ntoskrnl.exe.RtlInitUnicodeString(00c3f2a0,00e32f50
L"\\SystemRoot\\System32\\ntdll.dll") ret=00e0403b
003e:Call ntdll.RtlInitUnicodeString(00c3f2a0,00e32f50
L"\\SystemRoot\\System32\\ntdll.dll") ret=7bca110f
003e:Ret  ntdll.RtlInitUnicodeString() retval=0000003e ret=7bca110f
003e:Ret  ntoskrnl.exe.RtlInitUnicodeString() retval=0000003e ret=00e0403b
003e:Call
ntoskrnl.exe.ZwCreateFile(00c3f280,00120089,00c3f2c0,00c3f2b0,00000000,00000080,00000001,00000001,00000060,00000000,00000000)
ret=00e040a3
003e:Call
ntdll.NtCreateFile(00c3f280,00120089,00c3f2c0,00c3f2b0,00000000,00000080,00000001,00000001,00000060,00000000,00000000)
ret=7bca110f
003e: open_file_object( access=00120089, attributes=00000240, rootdir=0000,
sharing=00000001, options=00000060,
filename=L"\\SystemRoot\\System32\\ntdll.dll" )
003e: open_file_object() = OBJECT_PATH_NOT_FOUND { handle=0000 }
003e:Ret  ntdll.NtCreateFile() retval=c000003a ret=7bca110f
003e:Ret  ntoskrnl.exe.ZwCreateFile() retval=c000003a ret=00e040a3
...
003e:err:ntoskrnl:ZwLoadDriver failed to create driver
L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\AndroidKernel":
c0000001 
--- snip ---

$ sha1sum Setup_AndroidFs442_1.1.646.1.exe 
8cec18338e1e931433ac37f63d26a701dfcbd0dd  Setup_AndroidFs442_1.1.646.1.exe

$ du -sh Setup_AndroidFs442_1.1.646.1.exe 
203M    Setup_AndroidFs442_1.1.646.1.exe

$ wine --version
wine-5.6

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.


More information about the wine-bugs mailing list