simply use r3 debugger and everything will be fine. You may safely trace that code with olly or sice but not with nointrusive tracer, If you want full control from your loader, then yes, driver is good choice or oraculums.
And yes windows deceides in int handlers if exception is delivered to debugger or if there is no debugger then kiuserexception is called.
__________________
http://accessroot.com
|