http://bugs.winehq.org/show_bug.cgi?id=23431
Summary: provide a stub for ntdll.NtSystemDebugControl() (Ollydbg 2.x) Product: Wine Version: 1.2-rc5 Platform: x86 URL: http://www.ollydbg.de/version2.html OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll AssignedTo: wine-bugs@winehq.org ReportedBy: focht@gmx.net
Hello,
a simple one... Ollydbg 2.x uses NtSystemDebugControl( DebugSysReadVirtual, ...) to read kernel memory (driver/OS address space) for informational purposes. Failure to do so doesn't cause harm.
Although this approach doesn’t require any additional kernel driver (only the SeDebugPrivilege privilege on the running process) it's only useful for Windows XP systems. It's disallowed since Windows Vista/Windows 7.
Not really useful in Wine but it obviously needs a stub.
--- snip --- wine: Call from 0x7bc3d2d0 to unimplemented function ntdll.dll.NtSystemDebugControl, aborting First chance exception: unimplemented function ntdll.dll.NtSystemDebugControl called in 32-bit code (0x7bc3d2d0). ... =>0 0x7bc3d2d0 __wine_spec_unimplemented_stub+0x50(module="ntdll.dll", function="NtSystemDebugControl") [/opt/wine/wine-build/dlls/ntdll/../../../wine-git/dlls/ntdll/exception.c:268] in ntdll (0x00334434) 1 0x7bc1f895 __wine_stub_NtSystemDebugControl+0x28() in ntdll (0x00334434) 2 0x004467ae in ollydbg (+0x467ad) (0x00334460) 3 0x0044698b in ollydbg (+0x4698a) (0x00334484) --- snip ---
Dump params and return STATUS_NOT_IMPLEMENTED to keep it running ;-)
Regards