# seh

Published articles for seh.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Debugger data model, Javascript & x64 exception handling

DevFeed: [Debugger data model, Javascript & x64 exception handling](<https://devfeed.tech/articles/debugger-data-model-javascript-x64-exception-handling-39703.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2017/12/01/debugger-data-model/>)

Author: Axel "0vercl0k" Souchet

Published: 2017-12-01T14:59:00Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [debugging](<https://devfeed.tech/topics/debugging.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Exception handling](<https://devfeed.tech/topics/exception-handling.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [Reverse Engineering](<https://devfeed.tech/topics/reverse-engineering.md>)

Tags: [debugging](<https://devfeed.tech/tags/debugging.md>), [debugging-tools](<https://devfeed.tech/tags/debugging-tools.md>), [exception](<https://devfeed.tech/tags/exception.md>), [exception-handling](<https://devfeed.tech/tags/exception-handling.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [seh](<https://devfeed.tech/tags/seh.md>), [time-travel-debugging](<https://devfeed.tech/tags/time-travel-debugging.md>), [ttd](<https://devfeed.tech/tags/ttd.md>), [windbg](<https://devfeed.tech/tags/windbg.md>)

### AI overview

This tutorial explores the WinDbg Preview debugger data model, JavaScript extensions, and Microsoft's time travel debugging tools. It explains how these features can be used to enumerate x64 try/except handlers in JavaScript.

### Source excerpt

Introduction The main goal of today's post is to show a bit more of what is now possible with the latest Windbg (currently branded "WinDbg Preview" in the Microsoft store) and the time travel debugging tools that Microsoft released a few months ago. When these finally got released, a bit ...

## Having a look at the Windows' User/Kernel exceptions dispatcher

DevFeed: [Having a look at the Windows' User/Kernel exceptions dispatcher](<https://devfeed.tech/articles/having-a-look-at-the-windows-user-kernel-exceptions-dispatcher-39692.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2013/10/12/having-a-look-at-the-windows-userkernel-exceptions-dispatcher/>)

Author: Axel "0vercl0k" Souchet

Published: 2013-10-12T21:03:00Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Exception](<https://devfeed.tech/topics/exception.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Monitoring](<https://devfeed.tech/topics/monitoring.md>), [Processes](<https://devfeed.tech/topics/processes.md>), [x86](<https://devfeed.tech/topics/x86.md>), [Assembly](<https://devfeed.tech/topics/assembly.md>)

Tags: [coding](<https://devfeed.tech/tags/coding.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [exception](<https://devfeed.tech/tags/exception.md>), [exceptions](<https://devfeed.tech/tags/exceptions.md>), [hooking](<https://devfeed.tech/tags/hooking.md>), [interrupt](<https://devfeed.tech/tags/interrupt.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [process](<https://devfeed.tech/tags/process.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [seh](<https://devfeed.tech/tags/seh.md>), [windows](<https://devfeed.tech/tags/windows.md>), [windows-internals](<https://devfeed.tech/tags/windows-internals.md>)

### AI overview

This article explains how Windows user- and kernel-mode exception dispatch works on Windows 7 x86. It also describes creating a userland proof of concept that monitors process exceptions and generates reports, including hooking ntdll!KiUserExceptionDispatcher with Detours.

### Source excerpt

Introduction The purpose of this little post is to create a piece of code able to monitor exceptions raised in a process (a bit like gynvael's ExcpHook but in userland), and to generate a report with information related to the exception. The other purpose is to have a look ...