[qvm86-devel] Support for Win9x/WinME guests? (Badly needed)

[Sundial Services]

I badly need to be able to run a Windows-ME guest.  When I try to do so with
QVM86 enabled (using the very latest patches found here, against the CVS
version of QEMU), I get the following crash (BSOD):

        Error:  0E : 014F : 00002B23

There are no such errors when QVM86 is not running.

This is a (Gentoo) Linux 2.6 box.

I've already been futzing-around with this and I made QEMU generate some
logs whenever an exception-return is made from the emulator.  Here are the
last three:

kqemu: exception, index=0e errcode=0014:
EAX=817932cc EBX=00023a68 ECX=0000ffff EDX=bff84480
ESI=00000177 EDI=1e760137 EBP=00023a48 ESP=00023a48
EIP=bff84480 EFL=00000202 [-------] CPL=3 II=0 A20=1 HLT=0
ES =0177 00000000 0000ffff 0040f700
CS =016f 00000000 ffffffff 00cffb00
SS =0177 00000000 0000ffff 0040f700
DS =0177 00000000 0000ffff 0040f700
FS =01c7 817932d4 00000037 8100f379
GS =0000 00000000 00000000 00000000
LDT=00b8 80003000 00001fff 80008200
TR =0018 c0001384 00002069 c0008900
GDT=     c0074c0f 000001ff
IDT=     800aa000 000002ff
CR0=e0000019 CR2=bff84480 CR3=0068d000 CR4=00000250

kqemu: exception, index=0e errcode=0016:
EAX=80279880 EBX=00000158 ECX=00001098 EDX=0000015f
ESI=80276e1c EDI=0000425c EBP=00001e42 ESP=00001de6
EIP=00002b23 EFL=00000202 [-------] CPL=3 II=0 A20=1 HLT=0
ES =0117 80279880 01000fff 8080f327
CS =014f 00011e60 0000d21f 0000fb01
SS =00cf 00021bf0 00001fff 0000f302
DS =0177 00000000 0000ffff 0040f700
FS =0167 0001f080 00004b9f 0000f301
GS =008f 80003000 00001fff 8000f300
LDT=00b8 80003000 00001fff 80008200
TR =0018 c0001384 00002069 c0008900
GDT=     c0074c0f 000001ff
IDT=     800aa000 000002ff
CR0=e0000013 CR2=8027dadc CR3=0068d000 CR4=00000250

kqemu: exception, index=0e errcode=0016:
EAX=80279880 EBX=00000158 ECX=00000f4f EDX=0000015f
ESI=80277340 EDI=00004780 EBP=00001e42 ESP=00001de6
EIP=00002b23 EFL=00000202 [-------] CPL=3 II=0 A20=1 HLT=0
ES =0117 80279880 01000fff 8080f327
CS =014f 00011e60 0000d21f 0000fb01
SS =00cf 00021bf0 00001fff 0000f302
DS =0177 00000000 0000ffff 0040f700
FS =0167 0001f080 00004b9f 0000f301
GS =008f 80003000 00001fff 8000f300
LDT=00b8 80003000 00001fff 80008200
TR =0018 c0001384 00002069 c0008900
GDT=     c0074c0f 000001ff
IDT=     800aa000 000002ff
CR0=e0000013 CR2=8027e000 CR3=0068d000 CR4=00000250

Notice that the last two entries use the address "00002b23."  I surmise from
my dim knowledge of return-codes that code 0016 is "protection fault on
write."

I would happily implement the "modified ram pages" stuff (that no one has
gotten around to but that "dim recollections" link to Win9x support...) if
this would help matters.