Windows 10: Want to diagnose cause of system error 193.

  1.    13 Sep 2016 #1

    Want to diagnose cause of system error 193.

    Is there a tool that can tell me exactly why a particular .exe gets system error 193?

    In my case, I have written a program that modifies an existing .exe and writes the modified file back out.

    Right now, my program does nothing more than add 1000x to every section RVA and then adjust items in the header -- start of code, and entry point -- and clear the checksum. The tool also adjusts most items in the data directories; however, my input .exe has no data directories.

    I have attached output from 'objdump -x' on the input and output files, in case you can spot something I failed to adjust.

    Does Windows 10 validate the checksum on all executables now? Microsoft's PE format doc says
    The following are checked for validation at load time: all drivers, any DLL loaded at boot time, and any DLL that is loaded into a critical Windows process.

    Want to diagnose cause of system error 193. Attached Files
      My ComputerSystem Spec

  2.    13 Sep 2016 #2

    It's not the checksum, because I made another output file which is identical to the input file except for clearing the checksum, and it still runs OK.
      My ComputerSystem Spec

  3.    14 Sep 2016 #3

    Found cause, but still would like to know if it's documented anywhere!

    There are two requirements on the pages occupied by the sections in the EXE file.
    1. The sets of pages have to be consecutive and adjacent. This is explained in Microsoft's PE format spec.
    2. The first section must begin at RVA = 1000x. This is *NOT* explained in that document.

    If you know of a complete list of what is required for an EXE to load, please post it here. Also I posted a similar thread in the General Support forum, and you can post your answer there too.
      My ComputerSystem Spec

  4.    14 Sep 2016 #4

    I found an article on Stack Overflow: assembly - VA (Virtual Adress) RVA (Relative Virtual Address) - Stack Overflow that touches on this question. It indicates that the loader reserves the first image page for the PE header to be loaded in, treating this as a hidden one-page section. I don't know if this is "official" or not.
      My ComputerSystem Spec


Related Threads
I asked this question months ago, but I have new information so I'm going to treat it as a new problem and ask again. Every day or 2 (but never more than once a day) I experience an odd hang on my desktop where currently running programs continue...
Cant Diagnose Crashes in BSOD Crashes and Debugging
Hey guys, I'm having trouble with my new computer. It's custom built all new parts (i7-6700K, 4x8GB 2400mhz , GTX 980 Ti Hybrid , Asus Sabertooth z170) asides from the PSU (Corsair HX850W). Windows 10 is installed ( upgraded from Win 7...
This is the message from Control Panel\System and Security\Security and Maintenance\Problem Details Source Desktop Window Manager Summary Stopped working Date ‎Wed ‎09/‎12/‎2015 1:30 PM
Any tools to diagnose PC in Performance & Maintenance
Hello Is there any tool available to diagnose Win 10 and PC behavior. System is erratic and sometime very slow. Last boot, I had access to Chrome, but the desktop , task bar and start button where unavailable for at least 5 minutes. And even...
Hi, I'm thinking it may be the end of the road for my Biostar A880G+ motherboard which is a shame as it has done me well until this point. The problems started appearing after I shifted to a new case so that I had room to upgrade the GPU. I...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 16:28.
Find Us