https://bugs.winehq.org/show_bug.cgi?id=48985
Bug ID: 48985 Summary: Riot Vanguard (Riot Games) 'vgk.sys' crashes on unimplemented function ntoskrnl.exe.ZwFlushBuffersFile Product: Wine Version: 5.6 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs@winehq.org Reporter: focht@gmx.net Distribution: ---
Hello folks,
as it says. It lacks forward to 'ntdll.NtFlushBuffersFile'.
--- snip --- ... The vgk service is starting. 005c:trace:loaddll:load_native_dll Loaded L"C:\windows\system32\kernelbase.dll" at 0x7b000000: PE builtin 005c:trace:loaddll:load_so_dll Loaded L"C:\windows\system32\kernel32.dll" at 0x7b410000: builtin 005c:trace:loaddll:load_native_dll Loaded L"C:\windows\system32\winedevice.exe" at 0x140000000: PE builtin 005c:trace:loaddll:load_so_dll Loaded L"C:\windows\system32\advapi32.dll" at 0x7f7915e60000: builtin 005c:trace:loaddll:load_so_dll Loaded L"C:\windows\system32\msvcrt.dll" at 0x7f7915c80000: builtin 005c:trace:loaddll:load_native_dll Loaded L"C:\windows\system32\ntoskrnl.exe" at 0x180000000: PE builtin 005c:trace:loaddll:load_so_dll Loaded L"C:\windows\system32\ucrtbase.dll" at 0x7f7915b50000: builtin 005c:trace:loaddll:load_native_dll Loaded L"C:\windows\system32\rpcrt4.dll" at 0x9b0000: PE builtin 005e:trace:loaddll:load_native_dll Loaded L"C:\windows\system32\cng.sys" at 0x1070000: native 005e:trace:loaddll:load_native_dll Loaded L"C:\Program Files\Riot Vanguard\vgk.sys" at 0xd60000: native wine: Call from 0x7bc6dd4c to unimplemented function ntoskrnl.exe.ZwFlushBuffersFile, aborting wine: Unimplemented function ntoskrnl.exe.ZwFlushBuffersFile called at address 000000007BC6DD4C (thread 005e), starting debugger... --- snip ---
--- snip --- $ winedump -j import vgk.sys Contents of vgk.sys: 3196560 bytes
Import Table size: 00000050 offset 0001e090 cng.sys Hint/Name Table: 00022108 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 0001B028 Thunk Ordn Name 0001b028 8 BCryptDestroyHash 0001b030 1 BCryptCloseAlgorithmProvider
offset 0001e0a4 ntoskrnl.exe Hint/Name Table: 00022120 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 0001B040 Thunk Ordn Name 0001b040 1081 KeIpiGenericCall 0001b048 2777 __C_specific_handler 0001b050 196 ExFreePoolWithTag 0001b058 2801 _stricmp 0001b060 2897 wcscat_s 0001b068 2901 wcscpy_s 0001b070 2060 RtlInitUnicodeString 0001b078 2571 ZwCreateFile 0001b080 2705 ZwReadFile 0001b088 2775 ZwWriteFile 0001b090 2560 ZwClose 0001b098 2604 ZwFlushBuffersFile 0001b0a0 2697 ZwQuerySystemInformation 0001b0a8 2259 RtlTimeToTimeFields 0001b0b0 986 KeAreAllApcsDisabled 0001b0b8 302 ExSystemTimeToLocalTime 0001b0c0 2885 swprintf_s 0001b0c8 2895 vswprintf_s 0001b0d0 2818 _vsnwprintf 0001b0d8 1049 KeInitializeApc 0001b0e0 1074 KeInsertQueueApc 0001b0e8 157 ExAllocatePoolWithTag 0001b0f0 990 KeBugCheckEx
Done dumping vgk.sys --- snip ---
Wine source:
https://source.winehq.org/git/wine.git/blob/f31a29b8d1ea478af28f14cdaf3db151...
$ sha1sum setup.exe 08deca4c0b46a3481e706926c0217d1c944d22a3 setup.exe
$ du -sh setup.exe 15M setup.exe
$ wine --version wine-5.6-258-gf31a29b8d1
Regards