Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

crashes instantly on Win2k - no output #40

Closed
jkljklhhjkjlhghjgjhghjg opened this issue Mar 17, 2015 · 1 comment
Closed

crashes instantly on Win2k - no output #40

jkljklhhjkjlhghjgjhghjg opened this issue Mar 17, 2015 · 1 comment

Comments

@jkljklhhjkjlhghjgjhghjg

Application exception occurred:
App: (pid=420)
When: 3/17/2015 @ 10:15:16.622
Exception number: c000001d (illegal instruction)

----> System Information <----
Computer Name: AT-T9H55IF51C7J
User Name: Administrator
Number of Processors: 1
Processor Type: x86 Family 5 Model 8 Stepping 12
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 4
Current Type: Uniprocessor Free
Registered Organization: At Home
Registered Owner: Jason Mangiafico

----> Task List <----
0 Idle.exe
8 System.exe
140 smss.exe
168 csrss.exe
188 winlogon.exe
216 services.exe
228 lsass.exe
384 svchost.exe
408 spoolsv.exe
436 AcrylicService..exe
456 svchost.exe
476 hidserv.exe
500 stisvc.exe
536 WinMgmt.exe
676 Explorer.exe
836 popcorn.exe
860 taskmgr.exe
812 NOTEPAD.exe
580 cmd.exe
420 innoextract.exe
808 drwtsn32.exe
0 _Total.exe

(00400000 - 005E9000)
(77F80000 - 77FFC000)
(7C570000 - 7C624000)
(78000000 - 78045000)
(7CF30000 - 7D176000)
(77F40000 - 77F7D000)
(77E10000 - 77E6F000)
(7C2D0000 - 7C335000)
(77D30000 - 77D9F000)
(70A70000 - 70AD6000)
(71710000 - 71794000)

State Dump for Thread Id 0x224

eax=00400000 ebx=0022fe30 ecx=000f76e0 edx=00000000 esi=004012d5 edi=00000000
eip=004e5358 esp=0022fdb8 ebp=00400178 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000202

function:
004e5335 83c404 add esp,0x4
004e5338 5b pop ebx
004e5339 c3 ret
004e533a 8db600000000 lea esi,[esi] ds:004012d5=000f6f03
004e5340 83ec04 sub esp,0x4
004e5343 c7042400004000 mov dword ptr [esp],0x400000 ss:0022fdb8=00400000
004e534a e811feffff call 004e5160
004e534f 31d2 xor edx,edx
004e5351 85c0 test eax,eax
004e5353 b800004000 mov eax,0x400000
FAULT ->004e5358 0f45 ???
004e535a d083c40489d0 rol byte ptr [ebx+0xd08904c4],1 ds:d0ac02f4=??
004e5360 c3 ret
004e5361 eb1d jmp 004ee380
004e5363 90 nop
004e5364 90 nop
004e5365 90 nop
004e5366 90 nop
004e5367 90 nop
004e5368 90 nop
004e5369 90 nop
004e536a 90 nop

----> Stack Back Trace <----

FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
00400178 00000074 000F66E0 00001000 000F6800 00000400 !

----> Raw Stack Dump <----
0022fdb8 00 00 40 00 56 48 4e 00 - d5 12 40 00 00 00 00 00 ..@.VHN...@.....
0022fdc8 23 00 00 00 00 00 00 00 - 00 00 00 00 00 f0 fd 7f #...............
0022fdd8 bc fe 22 00 04 00 00 00 - 00 15 40 00 20 24 3f 00 ..".......@. $?.
0022fde8 68 01 3f 00 00 00 00 00 - 09 00 00 00 0a 00 00 00 h.?.............
0022fdf8 00 00 40 00 00 00 10 00 - 68 24 3f 00 c0 27 3f 00 ..@.....h$?..'?.
0022fe08 18 05 3f 00 20 d8 5d 00 - 20 00 00 00 d5 12 00 00 ..?. .]. .......
0022fe18 f8 fe 22 00 99 4c 4e 00 - 03 00 00 00 64 fe 22 00 .."..LN.....d.".
0022fe28 64 7e fb 77 50 16 f8 77 - 00 00 00 00 74 fe 22 00 d~.wP..w....t.".
0022fe38 78 01 40 00 00 00 3f 00 - 00 00 00 00 40 00 00 00 x.@...?.....@...
0022fe48 58 2b 23 00 38 07 04 78 - 00 00 00 00 25 6d f9 77 X+#.8..x....%m.w
0022fe58 00 00 23 00 00 00 00 00 - c8 1f 23 00 e0 ff 22 00 ..#.......#...".
0022fe68 6a bd 00 78 50 22 03 78 - ff ff ff ff b8 fe 22 00 j..xP".x......".
0022fe78 cf 14 00 78 31 00 00 00 - 58 2b 23 00 70 00 00 00 ...x1...X+#.p...
0022fe88 00 00 00 00 56 4a 4e 00 - 3d 81 00 78 01 00 00 00 ....VJN.=..x....
0022fe98 30 24 3f 00 34 24 3f 00 - b4 fe 22 00 00 00 00 00 0$?.4$?...".....
0022fea8 40 07 4f 00 04 70 5e 00 - 25 00 00 00 03 00 00 00 @.O..p^.%.......
0022feb8 c0 fe 22 00 67 f4 0e 00 - c0 ff 22 00 5a 10 40 00 ..".g.....".Z.@.
0022fec8 04 e0 5d 00 08 e0 5d 00 - 0c e0 5d 00 00 00 00 00 ..]...]...].....
0022fed8 18 e0 5d 00 ef cb 44 80 - 00 f0 83 00 00 00 00 00 ..]...D.........
0022fee8 00 00 00 00 00 00 00 00 - fc b5 57 7c c1 a2 59 7c ..........W|..Y|

@dscharrer
Copy link
Owner

Wow, are you really still running Win2K on an AMD K6-2?

From the information you posted, the faulting instruction seems to be cmovne %eax,%edx (0f 45 d0), which has been available since the Pentium Pro. This matches the i686 target the provided binary has been compiled for. I'm sorry, but that binary just won't run on your CPU.

I also can only test the pre-compiled binary for Windows XP and newer as I don't have older versions available. Impressive that it was able to load at all on 2K.

I suggest you try compiling your own binaries if you need to run innoextract on such an old system. Let me know how you fare.


Reconstructed binary chunk from the information you posted (starting at memory address 004e5335):

83 C4 04 5B  C3 8D B6 00  00 00 00 83  EC 04 C7 04
24 00 00 40  00 E8 11 FE  FF FF 31 D2  85 C0 B8 00
00 40 00 0F  45 D0 83 C4  04 89 D0 C3  EB 1D 90 90
90 90 90 90  90 90

Disassembly using a tool that understands i686:

 0:   83 c4 04                add    $0x4,%esp
 3:   5b                      pop    %ebx
 4:   c3                      ret    
 5:   8d b6 00 00 00 00       lea    0x0(%esi),%esi
 b:   83 ec 04                sub    $0x4,%esp
 e:   c7 04 24 00 00 40 00    movl   $0x400000,(%esp)
15:   e8 11 fe ff ff          call   0xfffffe2b
1a:   31 d2                   xor    %edx,%edx
1c:   85 c0                   test   %eax,%eax
1e:   b8 00 00 40 00          mov    $0x400000,%eax
23:   0f 45 d0                cmovne %eax,%edx          ← Faulting instruction
26:   83 c4 04                add    $0x4,%esp
29:   89 d0                   mov    %edx,%eax
2b:   c3                      ret    
2c:   eb 1d                   jmp    0x4b
2e:   90                      nop
2f:   90                      nop
30:   90                      nop
31:   90                      nop
32:   90                      nop
33:   90                      nop
34:   90                      nop
35:   90                      nop

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants