[Bug 49087] New: Blindwrite 7.0 'ezplay.sys' needs ntoskrnl.exe.RtlCopyMemoryNonTemporal

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=49087

Bug ID: 49087
           Summary: Blindwrite 7.0 'ezplay.sys' needs
                    ntoskrnl.exe.RtlCopyMemoryNonTemporal
           Product: Wine
           Version: 5.7
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ntoskrnl
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

Hello folks,

to track this patch from Zeb:

https://www.winehq.org/pipermail/wine-devel/2020-May/165679.html

Download:

https://web.archive.org/web/20131210151026/http://download2.vso-software.fr/...

--- snip ---
$ WINEDEBUG=+seh,+relay,+ntoskrnl,+module,+virtual wineboot >> log.txt 2>&1
...
00b8:trace:ntoskrnl:load_driver loading driver
L"C:\windows\System32\Drivers\ezplay.sys"
00b8:Call KERNEL32.LoadLibraryW(007fe230
L"C:\windows\System32\Drivers\ezplay.sys") ret=00236878 
...
00b8:warn:module:import_dll No implementation for
NTOSKRNL.exe.RtlCopyMemoryNonTemporal imported from
L"C:\windows\System32\Drivers\ezplay.sys", setting to 0xe30000
...
00b8:Ret  KERNEL32.LoadLibraryW() retval=00e10000 ret=00236878
...
--- snip ---

--- snip ---
$ winedump -j import .wine/drive_c/windows/system32/drivers/ezplay.sys 
Contents of .wine/drive_c/windows/system32/drivers/ezplay.sys: 118400 bytes

Import Table size: 0000003c
  offset 0001c1ec NTOSKRNL.exe
  Hint/Name Table: 0001C240
  TimeDateStamp:   00000000 (Thu Jan  1 01:00:00 1970)
  ForwarderChain:  00000000
  First thunk RVA: 00009B98
   Thunk    Ordn  Name
  00009b98   250  PoSetPowerState
  00009ba0   323  ZwClose
  00009ba8   344  ZwSetValueKey
  00009bb0   291  RtlInitUnicodeString
  00009bb8   115  IoOpenDeviceRegistryKey
  00009bc0   117  IoRegisterDeviceInterface
  00009bc8   270  RtlCopyMemoryNonTemporal
  00009bd0    86  IoDeleteDevice
  00009bd8    88  IoDetachDevice
  00009be0    68  IoAttachDeviceToDeviceStack
  00009be8   108  IoInitializeRemoveLockEx
  00009bf0    76  IoCreateDevice
  00009bf8   156  IofCompleteRequest
  00009c00   198  KeSetEvent
  00009c08   128  IoSetDeviceInterfaceState
  00009c10   155  IofCallDriver
  00009c18   271  RtlCopyUnicodeString
  00009c20   204  KeWaitForSingleObject
  00009c28   286  RtlFreeUnicodeString
  00009c30   136  IoUnregisterPlugPlayNotification
  00009c38   243  ObfDereferenceObject
  00009c40   268  RtlCompareUnicodeString
  00009c48    72  IoBuildSynchronousFsdRequest
  00009c50    70  IoBuildDeviceIoControlRequest
  00009c58   100  IoGetDeviceObjectPointer
  00009c60   118  IoRegisterPlugPlayNotification
  00009c68   122  IoReleaseRemoveLockEx
  00009c70    95  IoFreeWorkItem
  00009c78   116  IoQueueWorkItem
  00009c80    66  IoAllocateWorkItem
  00009c88    60  IoAcquireRemoveLockEx
  00009c90   121  IoReleaseRemoveLockAndWaitEx
  00009c98   245  PoCallDriver
  00009ca0   252  PoStartNextPowerIrp
  00009ca8   248  PoRequestPowerIrp
  00009cb0   135  IoStopTimer
  00009cb8   267  RtlCompareMemory
  00009cc0    22  ExFreePool
  00009cc8   171  KeInitializeEvent
  00009cd0   165  KeDelayExecutionThread
  00009cd8   220  MmMapLockedPagesSpecifyCache
  00009ce0   347  __C_specific_handler
  00009ce8   134  IoStartTimer
  00009cf0   109  IoInitializeTimer
  00009cf8   162  KeBugCheckEx
  00009d00    14  ExAllocatePoolWithTag

offset 0001c200 HAL.DLL
  Hint/Name Table: 0001C228
  TimeDateStamp:   00000000 (Thu Jan  1 01:00:00 1970)
  ForwarderChain:  00000000
  First thunk RVA: 00009B80
   Thunk    Ordn  Name
  00009b80     2  KeStallExecutionProcessor
  00009b88     1  KeQueryPerformanceCounter

Done dumping .wine/drive_c/windows/system32/drivers/ezplay.sys
--- snip ---

$ sha1sum Blindwrite7_setup.exe 
8b357a5613b5f348e0105d9dbb84ef42550016ee  Blindwrite7_setup.exe

$ du -sh Blindwrite7_setup.exe 
14M    Blindwrite7_setup.exe

$ wine --version
wine-5.7-177-gad1fad8a94

Regards

[Bug 49087] Blindwrite 7.0 'ezplay.sys' needs ntoskrnl.exe.RtlCopyMemoryNonTemporal

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=49087

Anastasius Focht  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |https://web.archive.org/web
                   |                            |/20131210151026/http://down
                   |                            |load2.vso-software.fr/Blind
                   |                            |write7_setup.exe
           Keywords|                            |download

[Bug 49087] Blindwrite 7.0 'ezplay.sys' needs ntoskrnl.exe.RtlCopyMemoryNonTemporal

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=49087

Anastasius Focht  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|ntoskrnl                    |ntdll
      Fixed by SHA1|                            |74f820fccca59b553b802c67731
                   |                            |763fa7cb56e08
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #1 from Anastasius Focht  ---
Hello folks,

this is fixed by commit
https://source.winehq.org/git/wine.git/commitdiff/74f820fccca59b553b802c6773...
("ntdll: Export RtlCopyMemoryNonTemporal.")

Thanks Zebediah

--- snip ---
$ WINEDEBUG=+seh,+relay,+ntoskrnl,+module,+virtual wineboot >> log.txt 2>&1
...
00ac:trace:ntoskrnl:ObReferenceObjectByName mostly-stub:L"\Driver\ezplay" 64
0000000000000000 0 0000000000000000 0 0000000000000000 0000000000CEF278
...
00ac:trace:ntoskrnl:ObReferenceObject (00000000007FE220) ref=2
00ac:Call
ntoskrnl.exe.IoCreateDevice(007fe220,002038b8,00000000,00000022,00000100,00000000,00cef1e0)
ret=00e28f1c
00ac:trace:ntoskrnl:IoCreateDevice (00000000007FE220, 2111672, <null>, 34, 100,
0, 0000000000CEF1E0)
...
00ac:Ret  ntoskrnl.exe.IoCreateDevice() retval=00000000 ret=00e28f1c
00ac:Call
ntoskrnl.exe.IoInitializeRemoveLockEx(00fa01a8,00000000,00000000,00000000,00000020)
ret=00e28f62
00ac:trace:ntoskrnl:IoInitializeRemoveLockEx lock 0000000000FA01A8, tag 0,
max_minutes 0, max_count 0, size 32.
00ac:trace:ntoskrnl:KeInitializeEvent event 0000000000FA01B0, type 0, state 0.
00ac:Ret  ntoskrnl.exe.IoInitializeRemoveLockEx() retval=00000029 ret=00e28f62
00ac:Call ntoskrnl.exe.IoAttachDeviceToDeviceStack(00fa0040,000fd110)
ret=00e28f77
00ac:trace:ntoskrnl:IoAttachDeviceToDeviceStack 0000000000FA0040,
00000000000FD110
00ac:trace:ntoskrnl:IoGetAttachedDevice (00000000000FD110)
00ac:Ret  ntoskrnl.exe.IoAttachDeviceToDeviceStack() retval=000fd110
ret=00e28f77
00ac:Call ntoskrnl.exe.RtlCopyMemoryNonTemporal(00cef210,00cef1f0,00000008)
ret=00e2903c
00ac:Call ntdll.RtlCopyMemory(00cef210,00cef1f0,00000008) ret=7bca1bbf
00ac:Ret  ntdll.RtlCopyMemory() retval=00cef210 ret=7bca1bbf
00ac:Ret  ntoskrnl.exe.RtlCopyMemoryNonTemporal() retval=00cef210 ret=00e2903c
00ac:Call
ntoskrnl.exe.IoRegisterDeviceInterface(000fd110,00cef208,00000000,00fa01c8)
ret=00e29051
00ac:trace:ntoskrnl:IoGetAttachedDevice (00000000000FD110)
00ac:trace:ntoskrnl:IoBuildSynchronousFsdRequest (27 0000000000FA0040
0000000000000000 0 0000000000000000 0000000000CEEE58)
00ac:trace:ntoskrnl:IoBuildAsynchronousFsdRequest (27 0000000000FA0040
0000000000000000 0 0000000000000000 0000000000CEEE58)
00ac:trace:ntoskrnl:IoAllocateIrp 2, 0
...
00ac:trace:ntoskrnl:ExAllocatePoolWithTag 784 pool 0 -> 00000000009503C0
00ac:trace:ntoskrnl:IoInitializeIrp 00000000009503C0, 784, 2
...
00ac:Call
ntdll.NtQueryObject(fffffffffffffffe,00000002,00ceeac0,00000100,00ceebc0)
ret=0022e2db
00ac:Ret  ntdll.NtQueryObject() retval=00000000 ret=0022e2db
...
00ac:trace:ntoskrnl:IoGetAttachedDevice (0000000000FA0040)
00ac:trace:ntoskrnl:ObReferenceObject (0000000000FA0040) ref=2
...
00ac:Call driver dispatch 0000000000E2A4E0
(device=0000000000FA0040,irp=00000000009503C0)
00ac:Call ntoskrnl.exe.IoAcquireRemoveLockEx(00fa01a8,009503c0,00e2c0f0
"c:\workplace\autoplay\plugplay.cpp",0000001d,00000020) ret=00e2a51f
00ac:trace:ntoskrnl:IoAcquireRemoveLockEx lock 0000000000FA01A8, tag
00000000009503C0, file "c:\workplace\autoplay\plugplay.cpp", line 29, size
32.
00ac:Ret  ntoskrnl.exe.IoAcquireRemoveLockEx() retval=00000000 ret=00e2a51f
00ac:Call ntoskrnl.exe.IofCallDriver(000fd110,009503c0) ret=00e2a59d
00ac:trace:ntoskrnl:IofCallDriver 00000000000FD110 00000000009503C0
00ac:Call driver dispatch 0000000000239640
(device=00000000000FD110,irp=00000000009503C0)
00ac:Call msvcrt.wcsrchr(000fd260 L"ROOT\EZPLAY\0000",0023005c) ret=00239726
00ac:Ret  msvcrt.wcsrchr() retval=000fd276 ret=00239726
...
00ac:trace:ntoskrnl:ExAllocatePoolWithTag 24 pool 0 -> 00000000009506E0
00ac:Call msvcrt.memcpy(009506e0,000fd260,00000016) ret=00239751
00ac:Ret  msvcrt.memcpy() retval=009506e0 ret=00239751
00ac:trace:ntoskrnl:IoCompleteRequest 00000000009503C0 0
00ac:trace:ntoskrnl:IoCompleteRequest calling 0000000000239370(
00000000000FD110, 00000000009503C0, 0000000000000044 )
00ac:Call KERNEL32.SetEvent(00000044) ret=0023937c
00ac:Call ntdll.NtSetEvent(00000044,00000000) ret=7b04b4ed
00ac:Ret  ntdll.NtSetEvent() retval=00000000 ret=7b04b4ed
00ac:Ret  KERNEL32.SetEvent() retval=00000001 ret=0023937c
00ac:trace:ntoskrnl:IoCompleteRequest CompletionRoutine returned c0000016
00ac:Ret  driver dispatch 0000000000239640
(device=00000000000FD110,irp=00000000009503C0) retval=00000000
00ac:Ret  ntoskrnl.exe.IofCallDriver() retval=00000000 ret=00e2a59d
00ac:Call ntoskrnl.exe.IoReleaseRemoveLockEx(00fa01a8,009503c0,00000020)
ret=00e2a5b6
00ac:trace:ntoskrnl:IoReleaseRemoveLockEx lock 0000000000FA01A8, tag
00000000009503C0, size 32.
00ac:Ret  ntoskrnl.exe.IoReleaseRemoveLockEx() retval=00000000 ret=00e2a5b6
00ac:Ret  driver dispatch 0000000000E2A4E0
(device=0000000000FA0040,irp=00000000009503C0) retval=00000000
00ac:trace:ntoskrnl:IoCompleteRequest 00000000009503C0 0
00ac:trace:ntoskrnl:IoFreeIrp 00000000009503C0
...
00ac:trace:ntoskrnl:ObDereferenceObject (0000000000FA0040) ref=1 
--- snip ---

$ wine --version
wine-5.7-209-g4e2ad334b5

Regards

[Bug 49087] Blindwrite 7.0 'ezplay.sys' needs ntoskrnl.exe.RtlCopyMemoryNonTemporal

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=49087

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #2 from Alexandre Julliard  ---
Closing bugs fixed in 5.8.