Re: privileged instruction in 32-bit code

[Tyler Nielsen]

Raphael wrote:
> On Thursday 10 November 2005 03:25, Tyler Nielsen wrote:
> > Hello,
> >
> > I'm looking for a little help to find the next step in getting a program
> > (Everquest 2) working under wine.  It currently runs the patcher, and
> > will go through the load screen, and when the game comes up I get:
> >
> > WineDbg starting on pid 0x8
> > Unhandled exception: privileged instruction in 32-bit code (0x00872230).
> > In 32 bit mode.
> > fixme:dbghelp:sffip_cb NIY on
> > 'D:\test\eq2\output\User_Optimized\Client\EverQuest2.pdb'
> > Register dump:
> > CS:0073 SS:007b DS:007b ES:007b FS:003b GS:0033
> > EIP:00872230 ESP:7fbfee40 EBP:7fbfef64 EFLAGS:00210202(   - 00      -
> > -RI1) EAX:75065bec EBX:00f77bc0 ECX:00f78080 EDX:00f78080
> > ESI:60890008 EDI:75003280
> > Stack dump:
> > 0x7fbfee40:  fffffffe 7449f020 7cb55a30 60890008
> > 0x7fbfee50:  00000008 00f78090 60888370 00000a5c
> > 0x7fbfee60:  75468130 00000000 60897ca0 75065bb0
> > 0x7fbfee70:  00f78740 60a917f0 00f78090 00f780a0
> > 0x7fbfee80:  7449f020 00000a5f 75468100 00000297
> > 0x7fbfee90:  beb29113 3fa5ebd8 be2674d8 00aba38f
> > Backtrace:
> > =>1 0x00872230 in everquest2 (+0x472230) (0x7fbfef64)
> >  2 0x00876a6e in everquest2 (+0x476a6e) (0x7449ed70)
> >  3 0x00000010 (0x00d1eb84)
> >  4 0x00874f28 in everquest2 (+0x474f28) (0x008755a4)
> > 0x00872230:
> > Modules:
>
> Hi,
>
> seems another "Copy Protected" Game.
> can you try "Ivan Leo Puoti" patches (related to ntoskrnl/safedisc) ?
>
> Raphael

Thanks for the reply.  I'll track down that patch and try it tonight.  I 
don't think this program uses safedisc though (I don't have to have the 
cd in to play).  On another note, I found 'INSTR_EmulateInstruction' and 
added some debug.  It looks like the disassembly I posted earlier was 
wrong.  I dumped the data, and put it into gdb, and here is the result.

(gdb) disassemble bar
Dump of assembler code for function bar:
0x080495a0 <bar+0>:     movaps %xmm0,(%ecx)
0x080495a3 <bar+3>:     shufps $0xa,%xmm3,%xmm2
0x080495a7 <bar+7>:     add    $0x90,%eax
0x080495ac <bar+12>:    decl   0x4c(%esp)
0x080495b0 <bar+16>:    movaps %xmm1,0x10(%ecx)
0x080495b4 <bar+20>:    shufps $0x9d,%xmm3,%xmm2
0x080495b8 <bar+24>:    mov    %edi,0x88(%esp)
0x080495bf <bar+31>:    mov    0x64(%esp),%edi
0x080495c3 <bar+35>:    movaps %xmm2,0x20(%ecx)
0x080495c7 <bar+39>:    jne    0x80491b6

I'm now fairly sure it's failing on the first movaps command.  Unless 
someone can direct me differently, I'm going to start looking at why 
that command is showing up as 'privileged'.

Thanks,
Tyler