从逆向还原的角度探讨x86与x64的异常：32位3代异常处理还原（VS2019）

CxxThrowException(pExceptionObj, __ThrowInfo)

typedef const struct _s_ThrowInfo {
 unsigned int    
attributes;                         
(Bit field)
 PMFN            
pmfnUnwind;                         
when exception has been handled or aborted
 int (__cdecl * pForwardCompat)(...);                
frame handler
 CatchableTypeArray* pCatchableTypeArray;            
pointers to types
 #endif
 } ThrowInfo;

typedef const struct _s_CatchableTypeArray {
 int nCatchableTypes;
 CatchableType*  arrayOfCatchableTypes[];
 } CatchableTypeArray;

typedef const struct _s_CatchableType {
    unsigned intproperties;// Catchable Type properties (Bit field)
#if _EH_RELATIVE_TYPEINFO
    intpType;// Image relative offset of TypeDescriptor
#else
    TypeDescriptor *pType;// 这里记录类型
#endif
    PMD thisDisplacement;// Pointer to instance of catch type within thrown object.
    intsizeOrOffset;// Size of simple-type object or offset into
                                            //  buffer of 'this' pointer for catch object
    PMFNcopyFunction;// 这里会记录拷贝构造函数的地址
} CatchableType;

typedef struct TypeDescriptor
{
#if defined(_WIN64) || defined(_RTTI) || defined(BUILDING_C1XX_FORCEINCLUDE)
    const void * pVFTable;// Field overloaded by RTTI
#else
    unsigned longhash;// Hash value computed from type's decorated name
#endif
    void *spare;// reserved, possible for RTTI
    charname[];// 这里的name就是名称在IDA中会标注出来
    } TypeDescriptor;

typedef const struct _s_FuncInfo
{
    unsigned intmagicNumber:29;// Identifies version of compiler
    unsigned intbbtFlags:3;// flags that may be set by BBT processing
    __ehstate_tmaxState;// Highest state number plus one (thus
                                            // number of entries in unwind map)
    UnwindMapEntry*pUnwindMap;// Where the unwind map is
    unsigned intnTryBlocks;// Number of 'try' blocks in this function *****
    TryBlockMapEntry*pTryBlockMap;// Where the handler map is *****
    unsigned intnIPMapEntries;// # entries in the IP-to-state map. NYI (reserved)
    void*pIPtoStateMap;// An IP to state map.  NYI (reserved).
    ESTypeList*pESTypeList;// List of types for exception specifications
    intEHFlags;// Flags for some features.
} FuncInfo;

typedef const struct _s_TryBlockMapEntry {
    __ehstate_ttryLow;// Lowest state index of try
    __ehstate_ttryHigh;// Highest state index of try
    __ehstate_tcatchHigh;// Highest state index of any associated catch
    intnCatches;// Number of entries in array
    HandlerType* pHandlerArray;// List of handlers for this try
} TryBlockMapEntry;

typedef const struct _s_HandlerType {
    unsigned intadjectives;// Handler Type adjectives (bitfield)
    TypeDescriptor*pType;// RTTI
    ptrdiff_tdispCatchObj;// Displacement of catch object from base
    void *addressOfHandler;// Catch的代码位置
} HandlerType;

1
    0
    0
1
5
    2
    2
    4
        3
        3
    4
5