[Bug 46969] Multiple 64-bit WDM kernel drivers want Windows 8+ 'ntdll.RtlQueryRegistryValuesEx' (WIBUKEY, Denuvo Anti-Cheat)

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=46969

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
      Fixed by SHA1|                            |ba5465c71feec8dd95c1c912530
                   |                            |af55ac5673ffc
             Status|STAGED                      |RESOLVED

--- Comment #4 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

this is now fixed by commit
https://source.winehq.org/git/wine.git/commitdiff/ba5465c71feec8dd95c1c912530af55ac5673ffc
("ntdll: Export RtlQueryRegistryValuesEx().")

Thanks Zeb.

--- snip ---
$ WINEDEBUG=+seh,+relay,+ntoskrnl,+reg wine net start WIBUKEY >>log.txt 2>&1
...
0108:Call ntoskrnl.exe.RtlInitUnicodeString(00c4f490,10013210
L"RtlQueryRegistryValuesEx") ret=1000615f
...
0108:Ret  ntoskrnl.exe.RtlInitUnicodeString() retval=00000032 ret=1000615f
0108:Call ntoskrnl.exe.MmGetSystemRoutineAddress(00c4f490) ret=1000616a
...
0108:Call KERNEL32.GetProcAddress(00320000,00053f00 "RtlQueryRegistryValuesEx")
ret=00334bab
0108:Ret  KERNEL32.GetProcAddress() retval=0032a17c ret=00334bab
...
0108:trace:ntoskrnl:MmGetSystemRoutineAddress L"RtlQueryRegistryValuesEx" ->
000000000032A17C
0108:Ret  ntoskrnl.exe.MmGetSystemRoutineAddress() retval=0032a17c ret=1000616a
0108:Call
ntoskrnl.exe.RtlQueryRegistryValuesEx(00000000,10013a80,009e0620,00000000,00000000)
ret=10006187
0108:Call
ntdll.RtlQueryRegistryValues(00000000,10013a80,009e0620,00000000,00000000)
ret=7bc437cf
0108:trace:reg:RtlQueryRegistryValues (0,
L"\\Registry\\Machine\\Hardware\\Description\\System", 00000000009E0620,
0000000000000000, 0000000000000000)
0108:trace:reg:NtOpenKeyEx
((nil),L"\\Registry\\Machine\\Hardware\\Description\\System",f003f,0xc4f2b0)
0108:trace:reg:NtOpenKeyEx <- 0x48
0108:trace:reg:NtQueryValueKey (0x48,L"IDENTIFIER",1,(nil),0)
0108:trace:reg:NtQueryValueKey (0x48,L"IDENTIFIER",1,0x53f00,68)
0108:Ret  ntdll.RtlQueryRegistryValues() retval=00000000 ret=7bc437cf
0108:Ret  ntoskrnl.exe.RtlQueryRegistryValuesEx() retval=00000000 ret=10006187 
...
--- snip ---

$ wine --version
wine-6.3-250-g9107f591d3d

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.