Hello,
I have been tracing into pstores.exe the protected storage sevice provider in windows (win98). This service may be necessary to get the cryptographic API to function using native dlls (no wine providers currently exist).
I noticed that the service was being started using the following calls: 1) The program calls CryptAcquireContext. 2) CryptAcquireContext calls CPAcquireContext of the apropriate service provider 3) Any MS provider I tested would call PStoreCreateInstance in pstorec.dll 4) pstore.exe would be started by a call to CreateProcessA
Immediately after the call to CreateProcessA, a call to interrupt 3 seems to be made but doesn't appear to return. Anyone know what this interupt does or sopposed to do? Is there any support for it in wine?
A few other notes: -pstores appears to execute fine when started directly under wine. -when started from above it seems to crash (randomly?) depending on the provider? usually tries to execute the instruction at 0x00000000. -some other calls in the API appear to rely on this service I *think* through psbase.dll (but maybe pstores.exe somehow). I haven't verified this yet though.
Anyone have some suggestions?
- Travis
_________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
On Wed, 9 Jan 2002, Travis Michielsen wrote: [...]
Immediately after the call to CreateProcessA, a call to interrupt 3 seems to be made but doesn't appear to return. Anyone know what this interupt does or sopposed to do? Is there any support for it in wine?
'int 3' is a software breakpoint. I know that I used to insert such software breakpoints in my code on Windows. It made it possible to implement pretty intelligent breakpoints and was sometimes pretty useful. But here I suspect it is there to prevent debugging of pstores...
-- Francois Gouget fgouget@free.fr http://fgouget.free.fr/ The nice thing about meditation is that it makes doing nothing quite respectable -- Paul Dean
-
Francois Gouget -
Travis Michielsen