-
Notifications
You must be signed in to change notification settings - Fork 5.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Decompile Windows' Structured Exception Handling (SEH) #2477
Comments
Good suggestiion. We've had supporting try/catch block scope on the books for a while. Our plan is to handle sub-function such as exceptions in an upcoming release. |
Just piggy-backing this request to have SEH structures included. This is helpful when reversing exploits setting a malicious handler in the TIB. |
bump |
1 similar comment
bump |
@emteere is this still work-in-progress? |
Another reference is https://www.openrce.org/articles/full_view/21. |
It would be nice if the decompiler could correctly decompile functions that use structured exception handling.
This would involve recognizing exception registration setup code, the scope table, and properly hooking up the control flow.
https://web.archive.org/web/20150318041037/https://www.microsoft.com/msj/0197/exception/exception.aspx has a good overview of how it works.
The text was updated successfully, but these errors were encountered: