[Bug 27789] New: Process Monitor from sysinternals can't load its driver

http://bugs.winehq.org/show_bug.cgi?id=27789

Summary: Process Monitor from sysinternals can't load its
                    driver
           Product: Wine
           Version: 1.3.23
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: trivial
          Priority: P2
         Component: ntoskrnl
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

http://technet.microsoft.com/en-us/sysinternals/bb896645
fails to load its driver, so it can't do much.
Log:
fixme:process:SetProcessShutdownParameters (000001ff, 00000001): partial stub.
fixme:fltlib:FilterConnectCommunicationPort (L"\ProcessMonitorPort", 0,
0x32f2dc, 4, (nil), 0x4fe484) stub
fixme:module:NtLoadDriver (0x32f0c8), stub!
trace:file:DeleteFileW L"C:\windows\system32\Drivers\PROCMON20.SYS"

That driver imports 128 symbols from ntoskrnl.exe, 6 from HAL.dll, and 20 from
FLTMGR.SYS.
Not something wine's going to support any time soon, I bet.

[Bug 27789] Process Monitor from sysinternals can't load its driver

http://bugs.winehq.org/show_bug.cgi?id=27789

Ken Sharp  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download
                URL|                            |http://technet.microsoft.co
                   |                            |m/en-us/sysinternals/bb8966
                   |                            |45.aspx
                 CC|                            |[e-mail]

--- Comment #1 from Ken Sharp  2011-07-14 13:21:58 CDT ---
Not a kernel driver is it?

http://bugs.winehq.org/show_bug.cgi?id=13913

[Bug 27789] Process Monitor from sysinternals can't load its driver

http://bugs.winehq.org/show_bug.cgi?id=27789

Anastasius Focht  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |[e-mail]
         Resolution|                            |DUPLICATE

--- Comment #2 from Anastasius Focht  2011-12-21 14:12:21 CST ---
Hello Ken,

--- quote ---
Not a kernel driver is it?
--- quote ---

of course it is, "PROCMON20.SYS" is implemented as mini filter driver.
And yes, a dupe of bug 13913.
Please search bugzilla more carefully.

The driver uses many low level kernel hooks/infrastructure and peeks deeply
into kernel structures.
Besides that it would need full Filter Manager implementation to communicate
with "userland" part.

That is out of Wine's scope.

Regards

*** This bug has been marked as a duplicate of bug 13913 ***

[Bug 27789] Process Monitor from sysinternals can't load its driver

http://bugs.winehq.org/show_bug.cgi?id=27789

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Austin English  2012-01-23 19:46:09 CST ---
Closing DUPLICATE.