1.    13 Sep 2016 #1
    Join Date : Sep 2016
    Posts : 11
    windows 10 home

    Want to diagnose cause of system error 193.

    Is there a tool that can tell me exactly why a particular .exe gets system error 193?

    In my case, I have written a program that modifies an existing .exe and writes the modified file back out.

    Right now, my program does nothing more than add 1000x to every section RVA and then adjust items in the header -- start of code, and entry point -- and clear the checksum. The tool also adjusts most items in the data directories; however, my input .exe has no data directories.

    I have attached output from 'objdump -x' on the input and output files, in case you can spot something I failed to adjust.

    Does Windows 10 validate the checksum on all executables now? Microsoft's PE format doc says
    The following are checked for validation at load time: all drivers, any DLL loaded at boot time, and any DLL that is loaded into a critical Windows process.

    Want to diagnose cause of system error 193. Attached Files
      My System SpecsSystem Spec

  2.    13 Sep 2016 #2
    Join Date : Sep 2016
    Posts : 11
    windows 10 home

    It's not the checksum, because I made another output file which is identical to the input file except for clearing the checksum, and it still runs OK.
      My System SpecsSystem Spec

  3.    14 Sep 2016 #3
    Join Date : Sep 2016
    Posts : 11
    windows 10 home

    Found cause, but still would like to know if it's documented anywhere!

    There are two requirements on the pages occupied by the sections in the EXE file.
    1. The sets of pages have to be consecutive and adjacent. This is explained in Microsoft's PE format spec.
    2. The first section must begin at RVA = 1000x. This is *NOT* explained in that document.

    If you know of a complete list of what is required for an EXE to load, please post it here. Also I posted a similar thread in the General Support forum, and you can post your answer there too.
      My System SpecsSystem Spec

  4.    14 Sep 2016 #4
    Join Date : Sep 2016
    Posts : 11
    windows 10 home

    I found an article on Stack Overflow: assembly - VA (Virtual Adress) RVA (Relative Virtual Address) - Stack Overflow that touches on this question. It indicates that the loader reserves the first image page for the PE header to be loaded in, treating this as a hidden one-page section. I don't know if this is "official" or not.
      My System SpecsSystem Spec


Similar Threads
Thread Forum
How diagnose and/or fix internittant hang
I asked this question months ago, but I have new information so I'm going to treat it as a new problem and ask again. Every day or 2 (but never more than once a day) I experience an odd hang on my desktop where currently running programs continue...
General Support
Cant Diagnose Crashes
Hey guys, I'm having trouble with my new computer. It's custom built all new parts (i7-6700K, 4x8GB 2400mhz , GTX 980 Ti Hybrid , Asus Sabertooth z170) asides from the PSU (Corsair HX850W). Windows 10 is installed ( upgraded from Win 7...
BSOD Crashes and Debugging
Help me diagnose why DWM.exe crashes at least once per day!
This is the message from Control Panel\System and Security\Security and Maintenance\Problem Details Source Desktop Window Manager Summary Stopped working Date ‎Wed ‎09/‎12/‎2015 1:30 PM
General Support
Any tools to diagnose PC
Hello Is there any tool available to diagnose Win 10 and PC behavior. System is erratic and sometime very slow. Last boot, I had access to Chrome, but the desktop , task bar and start button where unavailable for at least 5 minutes. And even...
Performance & Maintenance
Hypertransport sync flood error - how to diagnose?
Hi, I'm thinking it may be the end of the road for my Biostar A880G+ motherboard which is a shame as it has done me well until this point. The problems started appearing after I shifted to a new case so that I had room to upgrade the GPU. I...
Drivers and Hardware
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 17:42.
Find Us
Twitter Facebook Google+

Windows 10 Forums