https://bugs.winehq.org/show_bug.cgi?id=45820
Bug ID: 45820 Summary: Symantec Eraser Control Driver 'eeCtrl64.sys' (Norton 360) crashes on unimplemented function ntoskrnl.exe.ExpInterlocked{Push,Pop}EntrySList Product: Wine Version: 3.15 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs@winehq.org Reporter: focht@gmx.net Distribution: ---
Hello folks,
continuation of bug 45819
--- snip --- $ WINEDEBUG=+seh,+relay,+ntoskrnl wineboot >>log.txt 2>&1 ... 0016:Call ntoskrnl.exe.RtlInitUnicodeString(0033f460,0002e730 L"C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT") ret=0047a48a 0016:Call ntdll.RtlInitUnicodeString(0033f460,0002e730 L"C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT") ret=7bcfe083 0016:Ret ntdll.RtlInitUnicodeString() retval=0033f460 ret=7bcfe083 0016:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0033f460 ret=0047a48a 0016:Call ntoskrnl.exe.ZwOpenKey(0033f440,00020019,0033f3a0) ret=0047ca8d 0016:Call ntdll.NtOpenKey(0033f440,00020019,0033f3a0) ret=7bcfe083 0016:Ret ntdll.NtOpenKey() retval=00000000 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwOpenKey() retval=00000000 ret=0047ca8d 0016:Call ntoskrnl.exe.RtlInitUnicodeString(0033f390,004665b8 L"Started") ret=0047c9ee 0016:Call ntdll.RtlInitUnicodeString(0033f390,004665b8 L"Started") ret=7bcfe083 0016:Ret ntdll.RtlInitUnicodeString() retval=0033f390 ret=7bcfe083 0016:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0033f390 ret=0047c9ee 0016:Call ntoskrnl.exe.ZwOpenKey(0033f418,000f003f,0033f3a0) ret=0047ca8d 0016:Call ntdll.NtOpenKey(0033f418,000f003f,0033f3a0) ret=7bcfe083 0016:Ret ntdll.NtOpenKey() retval=c0000034 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwOpenKey() retval=c0000034 ret=0047ca8d 0016:Call ntoskrnl.exe.RtlInitUnicodeString(0033f490,004665b8 L"Started") ret=00474bfe 0016:Call ntdll.RtlInitUnicodeString(0033f490,004665b8 L"Started") ret=7bcfe083 0016:Ret ntdll.RtlInitUnicodeString() retval=0033f490 ret=7bcfe083 0016:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0033f490 ret=00474bfe 0016:Call ntoskrnl.exe.ZwCreateKey(0033f418,000f003f,0033f460,00000000,00000000,00000001,00000000) ret=0047cb6c 0016:Call ntdll.NtCreateKey(0033f418,000f003f,0033f460,00000000,00000000,00000001,00000000) ret=7bcfe083 0016:Ret ntdll.NtCreateKey() retval=00000000 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwCreateKey() retval=00000000 ret=0047cb6c 0016:Call ntoskrnl.exe.ZwClose(00000040) ret=0047c926 0016:Call ntdll.NtClose(00000040) ret=7bcfe083 0016:Ret ntdll.NtClose() retval=00000000 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwClose() retval=00000000 ret=0047c926 0016:Call ntoskrnl.exe.ZwClose(0000003c) ret=0047c926 0016:Call ntdll.NtClose(0000003c) ret=7bcfe083 0016:Ret ntdll.NtClose() retval=00000000 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwClose() retval=00000000 ret=0047c926 0016:trace:seh:NtRaiseException code=80000100 flags=1 addr=0x7bcd00e7 ip=7bcd00e7 tid=0016 0016:trace:seh:NtRaiseException info[0]=00000000004c6878 0016:trace:seh:NtRaiseException info[1]=00000000004c67ac wine: Call from 0x7bcd00e7 to unimplemented function ntoskrnl.exe.ExpInterlockedPopEntrySList, aborting --- snip ---
'ntoskrnl.exe.ExpInterlockedPushEntrySList' is imported too, so it makes sense to add both stubs here.
$ sha1sum N360-TW-21.1.0-EN.exe aa05ccf9668e166ef28923d451f1c2ecad6f75f1 N360-TW-21.1.0-EN.exe
$ du -sh N360-TW-21.1.0-EN.exe 202M N360-TW-21.1.0-EN.exe
$ wine --version wine-3.15-150-gb29cdbd5f2
Regards