Hey ho

Thank you for your answers.

To me, sounds more like this new security option.
Can't anything else. any other compiled files run good with a SEH, on SP2.
Except those inside VC++.

while tracing the dispatcher, i went to some routines where i could see:

mov eax, canarystuff.

The canary is used to protect against buffer overflow.. and maybe there is
something related to that , in your exception protection you are detailing.

I will need to dig ..

I tried two other protectors, and they seem to work well, their SEH works.
Fuck me, they are the same code as me.. so it got to be a white list or something.

The same file runs good on XP SP1 btw..
so its really a combination of SP2 and VC++ 7

I don't know about the version of VC++ . is it 7.0 or 7.1 ? i have no clue.
Probably the latest though..

Is this protection documented anywhere ?
I will look thru the msdn..

Thanks