最近解决了一个困扰项目多年的问题:程序弹出崩溃窗口(CRT窗口,或者是调用了不可靠的第三方动态库弹出的窗口)。百度上搜索SetUnhandledExceptionFilter,都是这样的代码
----------------------------------------------------------------------------------------------------------------------------
HMODULE hKernel32 = LoadLibrary(_T("kernel32.dll"));
if (hKernel32 == NULL)
return FALSE;
void *pOrgEntry = GetProcAddress(hKernel32, "SetUnhandledExceptionFilter");
if(pOrgEntry == NULL)
return FALSE;
unsigned char newJump[ 100 ];
DWORD dwOrgEntryAddr = (DWORD) pOrgEntry;
dwOrgEntryAddr += 5; // add 5 for 5 op-codes for jmp far
void *pNewFunc = &MyDummySetUnhandledExceptionFilter;
DWORD dwNewEntryAddr = (DWORD) pNewFunc;
DWORD dwRelativeAddr = dwNewEntryAddr - dwOrgEntryAddr;
newJump[ 0 ] = 0xE9; // JMP absolute
memcpy(&newJump[ 1 ], &dwRelativeAddr, sizeof(pNewFunc));
SIZE_T bytesWritten;
BOOL bRet = WriteProcessMemory(GetCurrentProcess(), pOrgEntry, newJump, sizeof(pNewFunc) + 1, &bytesWritten);
return bRet;
-------------------------------------------------------------------------------------------------------------------------------------
可是这些代码在我们的项目中完全不起作用,无论怎么用__try, __except都不行,最后写了个HOOK,钩住了3个函数:
MessageBoxA,MessageBoxW,SetUnhandledExceptionFilter
其中MessageBoxA,MessageBoxW针对CRT弹出错误窗口,SetUnhandledExceptionFilter针对werfault.exe之类的错误窗口,在进程winmain进入的时候,先调用SetUnhandledExceptionFilter,然后LoadLibrary这个HOOK动态库,程序终于消停了,再怎么崩溃也不弹窗口了
----------------------------------------------------------------------------------------------------------------------------
HMODULE hKernel32 = LoadLibrary(_T("kernel32.dll"));
if (hKernel32 == NULL)
return FALSE;
void *pOrgEntry = GetProcAddress(hKernel32, "SetUnhandledExceptionFilter");
if(pOrgEntry == NULL)
return FALSE;
unsigned char newJump[ 100 ];
DWORD dwOrgEntryAddr = (DWORD) pOrgEntry;
dwOrgEntryAddr += 5; // add 5 for 5 op-codes for jmp far
void *pNewFunc = &MyDummySetUnhandledExceptionFilter;
DWORD dwNewEntryAddr = (DWORD) pNewFunc;
DWORD dwRelativeAddr = dwNewEntryAddr - dwOrgEntryAddr;
newJump[ 0 ] = 0xE9; // JMP absolute
memcpy(&newJump[ 1 ], &dwRelativeAddr, sizeof(pNewFunc));
SIZE_T bytesWritten;
BOOL bRet = WriteProcessMemory(GetCurrentProcess(), pOrgEntry, newJump, sizeof(pNewFunc) + 1, &bytesWritten);
return bRet;
-------------------------------------------------------------------------------------------------------------------------------------
可是这些代码在我们的项目中完全不起作用,无论怎么用__try, __except都不行,最后写了个HOOK,钩住了3个函数:
MessageBoxA,MessageBoxW,SetUnhandledExceptionFilter
其中MessageBoxA,MessageBoxW针对CRT弹出错误窗口,SetUnhandledExceptionFilter针对werfault.exe之类的错误窗口,在进程winmain进入的时候,先调用SetUnhandledExceptionFilter,然后LoadLibrary这个HOOK动态库,程序终于消停了,再怎么崩溃也不弹窗口了