BOOL APIENTRY DllMain(HMODULE, DWORD reason, LPVOID) { if (reason == DLL_PROCESS_ATTACH) CrashAt00580d29(); return TRUE; }
program SimulateError217; {$APPTYPE CONSOLE}
// Windows SEH-based forced exception at 0x00580d29 #include <windows.h> void __declspec(naked) CrashAt00580d29() { __asm { mov eax, 0x00580d29 call eax // jump to invalid code -> exception } } autodata runtime error 217 at 00580d29
Compile with cl /LD /GS- crash.cpp — load DLL in target process → triggers error 217 at that address. Many AutoData versions store config in %APPDATA%\AutoData or C:\ProgramData\AutoData . Delete or corrupt these files, then launch:
Compile in and run on Windows → triggers 217. 2. Inject exact address 00580d29 crash If you need to reproduce the exact address, create a DLL or executable with a procedure at that relative offset: BOOL APIENTRY DllMain(HMODULE, DWORD reason, LPVOID) { if
procedure TFakeObject.CrashMe; begin Writeln('This will not be reached'); end;
// Call virtual method -> corrupt VMT -> runtime error 217 obj.CrashMe; end. begin Writeln('This will not be reached')
type PFakeObject = ^TFakeObject; TFakeObject = class procedure CrashMe; virtual; end;
@echo off del /f /q "%APPDATA%\AutoData\*.dat" 2>nul del /f /q "%PROGRAMDATA%\AutoData\*.cfg" 2>nul reg delete "HKCU\Software\AutoData" /f 2>nul start autodata.exe Force DEP on for the executable (even if not DEP-aware):
var obj: TFakeObject; p: Pointer; begin // Allocate memory but not as a valid object GetMem(p, SizeOf(TFakeObject)); FillChar(p^, SizeOf(TFakeObject), 0); obj := TFakeObject(p);
bcdedit.exe /set {current} nx AlwaysOn REM Then run autodata.exe If so, I can write a standalone .exe that prints that error message and terminates with the same error code for testing or documentation.