Results 1 to 3 of 3

Thread: okay, all is fine now, BUT...kernel32!unhandledexceptionfilter

  1. #1
    pasha
    Guest

    okay, all is fine now, BUT...kernel32!unhandledexceptionfilter

    greetz

    okay, i finally figured out what the problem was. i patched driver studio 2.7 as per instructions by splaj and when i patched the "kernel32!unhandledexceptionfilter" i was able to defeat peshield successfully.

    now comes the wierd part. i wrote a small program for myself using SEH and that program simply exits midway somewhere in the SEH chain. same thing happens to SD2 exes too.

    anyone out there have any ideas on this ?

    best regards
    pasha
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Administrator dELTA's Avatar
    Join Date
    Oct 2000
    Location
    Ring -1
    Posts
    4,204
    Blog Entries
    5
    You have to return the correct parameters from each exception handler, or otherwise the chain will always break. Did you do this in all your exception handlers? In protection schemes like SD, I'm sure that they can return "the wrong values" on purpose, to break the chain intentionally for some reason.

    dELTA

  3. #3
    pasha
    Guest
    greetz

    well i checked my SEH handler and its absolutely fine. but if what you say is true that protection systems like sd2 can return wrong values and break the chain, then how is it working without softice loaded ?

    best regards
    pasha
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Replies: 1
    Last Post: April 30th, 2014, 23:58
  2. help on finding kernel32.dll
    By dacid in forum Advanced Reversing and Programming
    Replies: 3
    Last Post: August 15th, 2008, 10:40
  3. Exports and kernel32.dll under w9x
    By ancev in forum Advanced Reversing and Programming
    Replies: 14
    Last Post: February 28th, 2006, 17:49
  4. flexlm 8.0d using 8.0c sdk... works fine
    By stevematulis in forum Off Topic
    Replies: 0
    Last Post: April 23rd, 2004, 18:48
  5. kernel32 description?
    By Snej in forum OllyDbg Support Forums
    Replies: 3
    Last Post: April 16th, 2004, 04:12

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •