http://bugs.winehq.org/show_bug.cgi?id=19525
Summary: Poison Ivy does not work correctly because RtlGetCompressionWorkSpaceSize and friends are only stubs Product: Wine Version: 1.1.26 Platform: PC URL: http://www.poisonivy-rat.com/index.php?link=download OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntdll AssignedTo: wine-bugs@winehq.org ReportedBy: ricardo_barbano@hotmail.com
To run Poison Ivy correctly and be able to use remote control RtlGetCompressionWorkSpaceSize and friends have to be implemented, they are now only stubs.
this can be a pain because we need to encode/Decode LZNT1 which is a MS proprietary format... i tried to do some of it but without any source it's not easy.