Cheat Engine :: View topic - Getting an SEH chain from a CONTEXT structure

Cheat Engine
The Official Site of Cheat Engine

FAQ

Memberlist

Usergroups

Profile

Getting an SEH chain from a CONTEXT structure

Cheat Engine Forum Index -> General programming

View previous topic :: View next topic

Author

Message

hyphen
Advanced Cheater

Reputation: 0

Joined: 12 Sep 2008
Posts: 84
Location: Not Having Fun

Posted: Thu Aug 11, 2011 10:42 pm Post subject: Getting an SEH chain from a CONTEXT structure

Code:

struct CONTEXT
{
DWORD ContextFlags;

DWORD Dr0;
DWORD Dr1;
DWORD Dr2;
DWORD Dr3;
DWORD Dr6;
DWORD Dr7;

FLOATING_SAVE_AREA FloatSave;

DWORD SegGs;
DWORD SegFs;
DWORD SegEs;
DWORD SegDs;

DWORD Edi;
DWORD Esi;
DWORD Ebx;
DWORD Edx;
DWORD Ecx;
DWORD Eax;

DWORD Ebp;
DWORD Eip;
DWORD SegCs;
DWORD EFlags;
DWORD Esp;
DWORD SegSs;

BYTE ExtendedRegisters[MAXIMUM_SUPPORTED_EXTENSION];
};

Hiya I'm trying to get the pointer to the first SEH frame from a CONTEXT structure that is passed to a vectored exception handler. From what I've read online, the FS register points to the TIB which points to the first SEH frame. However, the SegFs value in context always holds small values like 0x53 for me, definitely not the address of anything. Anyone know how this works? >:

atom0s
Moderator

Reputation: 205

Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1

Posted: Fri Aug 12, 2011 4:06 am Post subject:

Check out these links: http://en.wikipedia.org/wiki/Win32_Thread_Information_Block http://msdn.microsoft.com/en-us/library/ms253960%28VS.80%29.aspx http://web17.webbpro.de/index.php?page=windows-exception-handling _________________ - Retired.

Display posts from previous:

	Cheat Engine Forum Index -> General programming	All times are GMT - 6 Hours
Page 1 of 1

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum