c - Reversing/Debugging - Finding out when an exception handler was installed -
while reversing program (needless say: educational purpose only), debugger (ollydbg) cought program's exception (access violation).
i threw exception program , program continued execution, starting address.
what i'm trying find out when exception handler installed (aka __try{}__except{} blocks in assembly) can not find cross-references address program continued execution from.
i managed find address while runtime debugging finding correct exception_registration structure on stack want find method identify address statically , not @ runtime.
help appreciated.
--edit--: let me clarify, trying find the
__try { do_error(); } __except(exception_execute_handler) { do_stuff(); return...; }
block in assembly
Comments
Post a Comment