windbg 遍历 seh 链表

最新推荐文章于 2023-07-09 14:01:29 发布

gushiaoke

最新推荐文章于 2023-07-09 14:01:29 发布

阅读量2.6k

点赞数

分类专栏： windbg 文章标签： exception c

本文链接：https://blog.csdn.net/gushiaoke/article/details/7618514

版权

windbg 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

1. 手动遍历

0:000> !teb
TEB at 7ffdf000
ExceptionList: 001bf100
StackBase: 001c0000
StackLimit: 001bb000
SubSystemTib: 00000000
FiberData: 00001e00
ArbitraryUserPointer: 00000000
Self: 7ffdf000
EnvironmentPointer: 00000000
ClientId: 000012cc . 000012d0
RpcHandle: 00000000
Tls Storage: 7ffdf02c
PEB Address: 7ffd4000
LastErrorValue: 0
LastStatusValue: c0000034
Count Owned Locks: 0
HardErrorMode: 0
0:000> dps 001bf100 l2
001bf100 001bf7c8
001bf104 752b1425 KERNELBASE!_except_handler4
0:000> dps 001bf7c8 l2
001bf7c8 001bf890
001bf7cc 008b80d0 MineSweeper!iswspace+0x1118
0:000> dps 001bf890 l2
001bf890 001bf8dc
001bf894 0086e562 MineSweeper!_except_handler4
0:000> dps 001bf8dc l2
001bf8dc ffffffff
001bf8e0 7700e115 ntdll!_except_handler4

2. 自动遍历用dt,摘自 <<软件调试>>

0:000> dt ntdll!_EXCEPTION_REGISTRATION_RECORD -l next poi(7ffdf000)
next at 0x1bf100
---------------------------------------------
+0x000 Next : 0x001bf7c8 _EXCEPTION_REGISTRATION_RECORD
+0x004 Handler : 0x752b1425 _EXCEPTION_DISPOSITION KERNELBASE!_except_handler4+0

next at 0x1bf7c8
---------------------------------------------
+0x000 Next : 0x001bf890 _EXCEPTION_REGISTRATION_RECORD
+0x004 Handler : 0x008b80d0 _EXCEPTION_DISPOSITION MineSweeper!iswspace+0

next at 0x1bf890
---------------------------------------------
+0x000 Next : 0x001bf8dc _EXCEPTION_REGISTRATION_RECORD
+0x004 Handler : 0x0086e562 _EXCEPTION_DISPOSITION MineSweeper!_except_handler4+0

next at 0x1bf8dc
---------------------------------------------
+0x000 Next : 0xffffffff _EXCEPTION_REGISTRATION_RECORD
+0x004 Handler : 0x7700e115 _EXCEPTION_DISPOSITION ntdll!_except_handler4+0

next at 0xffffffff
---------------------------------------------
+0x000 Next : ????
+0x004 Handler : ????