Re: privileged instruction in 32-bit code

[Raphael]

On Thursday 10 November 2005 03:25, Tyler Nielsen wrote:
> Hello,
>
> I'm looking for a little help to find the next step in getting a program
> (Everquest 2) working under wine.  It currently runs the patcher, and
> will go through the load screen, and when the game comes up I get:
>
> WineDbg starting on pid 0x8
> Unhandled exception: privileged instruction in 32-bit code (0x00872230).
> In 32 bit mode.
> fixme:dbghelp:sffip_cb NIY on
> 'D:\test\eq2\output\User_Optimized\Client\EverQuest2.pdb'
> Register dump:
>  CS:0073 SS:007b DS:007b ES:007b FS:003b GS:0033
>  EIP:00872230 ESP:7fbfee40 EBP:7fbfef64 EFLAGS:00210202(   - 00      -
> -RI1) EAX:75065bec EBX:00f77bc0 ECX:00f78080 EDX:00f78080
>  ESI:60890008 EDI:75003280
> Stack dump:
> 0x7fbfee40:  fffffffe 7449f020 7cb55a30 60890008
> 0x7fbfee50:  00000008 00f78090 60888370 00000a5c
> 0x7fbfee60:  75468130 00000000 60897ca0 75065bb0
> 0x7fbfee70:  00f78740 60a917f0 00f78090 00f780a0
> 0x7fbfee80:  7449f020 00000a5f 75468100 00000297
> 0x7fbfee90:  beb29113 3fa5ebd8 be2674d8 00aba38f
> Backtrace:
> =>1 0x00872230 in everquest2 (+0x472230) (0x7fbfef64)
>   2 0x00876a6e in everquest2 (+0x476a6e) (0x7449ed70)
>   3 0x00000010 (0x00d1eb84)
>   4 0x00874f28 in everquest2 (+0x474f28) (0x008755a4)
> 0x00872230:
> Modules:
>
> I then started up winedbg and got this:
>
> WineDbg starting on pid 0xa
> In 32 bit mode.
> start_process () at
> /home/tcnielsen/Programming/wine/dlls/kernel/../../include/winternl.h:1692
> 0x7fc7523c start_process+0xfc
> [/home/tcnielsen/Programming/wine/dlls/kernel/../../include/winternl.h:1692
> ] in kernel32: jmp     0x7fc7522b start_process+0xeb
> [/home/tcnielsen/Programming/wine/dlls/kernel/process.c:992] in kernel32
> 1692    static inline void WINAPI DbgBreakPoint(void) { __asm__
> __volatile__("int3"); }
> Wine-dbg>disas 0x00872230
> fixme:dbghelp:sffip_cb NIY on
> 'D:\test\eq2\output\User_Optimized\Client\EverQuest2.pdb'
> 0x00872230:
> 0x00872232: push        %es
> 0x00872233:
> 0x00872235: incl        %edi
> 0x00872236: loopne      0x00872247
> 0x00872238: subl        %ecx,0x10(%esi)
> 0x0087223b:
> 0x0087223d: decl        %edi
> 0x0087223e: lock
> 0x00872241: inl %dx,%eax
>
> I've tried googling and the closest thing I found was an old wine
> traffic from 2003.
> http://www.kerneltraffic.org/wine/wn20031017_192.html#4. So is there
> anything else I can look at or do to try and get past this?
>
> Thanks for the help,
> Tyler

Hi,

seems another "Copy Protected" Game.
can you try "Ivan Leo Puoti" patches (related to ntoskrnl/safedisc) ?

Raphael