[Bug 49064] New: Riot Vanguard (Riot Games) v0.3.3 'vgk.sys' crashes on unimplemented function ntoskrnl.exe.RtlDuplicateUnicodeString

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=49064

Bug ID: 49064
           Summary: Riot Vanguard (Riot Games) v0.3.3 'vgk.sys' crashes on
                    unimplemented function
                    ntoskrnl.exe.RtlDuplicateUnicodeString
           Product: Wine
           Version: 5.7
          Hardware: x86
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ntoskrnl
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

Hello folks,

as it says. Import of 'RtlDuplicateUnicodeString' was added with upgrade to
0.3.3.x

https://riot-client.secure.dyn.riotcdn.net/channels/public/rccontent/vanguar...

https://web.archive.org/web/20200430230307/https://riot-client.secure.dyn.ri...

--- snip ---
$ WINEDEBUG=+seh,+loaddll,+process,+ntoskrnl wine net start vgk >>log.txt 2>&1
...
The vgk service is starting.
...
00bc:trace:ntoskrnl:ZwLoadDriver
(L"\Registry\Machine\System\CurrentControlSet\Services\vgk")
...
00bc:trace:ntoskrnl:open_driver opened service for driver
L"\Registry\Machine\System\CurrentControlSet\Services\vgk"
00bc:trace:ntoskrnl:IoCreateDriver (L"\Driver\vgk", 0000000000233430)
..
00bc:trace:ntoskrnl:load_driver loading driver L"C:\Program Files\Riot
Vanguard\vgk.sys"
00bc:trace:loaddll:load_native_dll Loaded L"C:\windows\system32\cng.sys" at
0x1130000: native
00bc:trace:loaddll:load_native_dll Loaded L"C:\Program Files\Riot
Vanguard\vgk.sys" at 0xe00000: native
00bc:trace:ntoskrnl:perform_relocations relocating from
0000000140000000-000000014032D000 to 0000000000E00000-000000000112D000
00bc:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc6df8c
ip=7bc6df8c tid=00bc
00bc:trace:seh:raise_exception  info[0]=0000000000e24458
00bc:trace:seh:raise_exception  info[1]=0000000000e242e6
wine: Call from 0x7bc6df8c to unimplemented function
ntoskrnl.exe.RtlDuplicateUnicodeString, aborting 
--- snip ---

--- snip ---
$ winedump -j import vgk.sys
Contents of vgk.sys: 3347944 bytes

Import Table size: 00000050
  offset 0001f290 cng.sys
  Hint/Name Table: 00024108
  TimeDateStamp:   00000000 (Thu Jan  1 01:00:00 1970)
  ForwarderChain:  00000000
  First thunk RVA: 0001C028
   Thunk    Ordn  Name
  0001c028     8  BCryptDestroyHash
  0001c030     1  BCryptCloseAlgorithmProvider

offset 0001f2a4 ntoskrnl.exe
  Hint/Name Table: 00024120
  TimeDateStamp:   00000000 (Thu Jan  1 01:00:00 1970)
  ForwarderChain:  00000000
  First thunk RVA: 0001C040
   Thunk    Ordn  Name
  0001c040  1081  KeIpiGenericCall
  0001c048  2777  __C_specific_handler
  0001c050   196  ExFreePoolWithTag
  0001c058  2801  _stricmp
  0001c060  1941  RtlDuplicateUnicodeString
  0001c068  2897  wcscat_s
  0001c070  2901  wcscpy_s
  0001c078  2060  RtlInitUnicodeString
  0001c080  2571  ZwCreateFile
  0001c088  2705  ZwReadFile
  0001c090  2775  ZwWriteFile
  0001c098  2560  ZwClose
  0001c0a0  2604  ZwFlushBuffersFile
  0001c0a8  2697  ZwQuerySystemInformation
  0001c0b0  2259  RtlTimeToTimeFields
  0001c0b8   986  KeAreAllApcsDisabled
  0001c0c0   302  ExSystemTimeToLocalTime
  0001c0c8  2885  swprintf_s
  0001c0d0  2895  vswprintf_s
  0001c0d8  2818  _vsnwprintf
  0001c0e0  1049  KeInitializeApc
  0001c0e8  1074  KeInsertQueueApc
  0001c0f0   157  ExAllocatePoolWithTag
  0001c0f8   990  KeBugCheckEx

Done dumping vgk.sys
--- snip ---

Wine source:

https://source.winehq.org/git/wine.git/blob/0c27d244f76ad90301c5db09d738b3a0...

$ sha1sum setup.exe 
ea17e2aaddcbb3712945fba2c84f248204a8f72c  setup.exe

$ du -sh setup.exe 
15M    setup.exe

Regards