mirror of https://github.com/tongzx/nt5src
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
701 lines
18 KiB
701 lines
18 KiB
/*++ BUILD Version: 0001 // Increment this if a change has global effects
|
|
|
|
Copyright (c) 1985-1999, Microsoft Corporation
|
|
|
|
Module Name:
|
|
|
|
vdmdbg.h
|
|
|
|
Abstract:
|
|
|
|
Prodecure declarations, constant definitions, type definition and macros
|
|
for the VDMDBG.DLL VDM Debugger interface.
|
|
|
|
--*/
|
|
|
|
#ifndef _VDMDBG_
|
|
#define _VDMDBG_
|
|
|
|
#if _MSC_VER > 1000
|
|
#pragma once
|
|
#endif
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
#include <pshpack4.h>
|
|
|
|
#define STATUS_VDM_EVENT STATUS_SEGMENT_NOTIFICATION
|
|
|
|
#ifndef DBG_SEGLOAD
|
|
#define DBG_SEGLOAD 0
|
|
#define DBG_SEGMOVE 1
|
|
#define DBG_SEGFREE 2
|
|
#define DBG_MODLOAD 3
|
|
#define DBG_MODFREE 4
|
|
#define DBG_SINGLESTEP 5
|
|
#define DBG_BREAK 6
|
|
#define DBG_GPFAULT 7
|
|
#define DBG_DIVOVERFLOW 8
|
|
#define DBG_INSTRFAULT 9
|
|
#define DBG_TASKSTART 10
|
|
#define DBG_TASKSTOP 11
|
|
#define DBG_DLLSTART 12
|
|
#define DBG_DLLSTOP 13
|
|
#define DBG_ATTACH 14
|
|
#define DBG_TOOLHELP 15
|
|
#define DBG_STACKFAULT 16
|
|
#define DBG_WOWINIT 17
|
|
#define DBG_TEMPBP 18
|
|
#define DBG_MODMOVE 19
|
|
#define DBG_INIT 20
|
|
#define DBG_GPFAULT2 21
|
|
#endif
|
|
|
|
//
|
|
// These flags are set in the same WORD as the DBG_ event id's (above).
|
|
//
|
|
#define VDMEVENT_NEEDS_INTERACTIVE 0x8000
|
|
#define VDMEVENT_VERBOSE 0x4000
|
|
#define VDMEVENT_PE 0x2000
|
|
#define VDMEVENT_ALLFLAGS 0xe000
|
|
//
|
|
// These flags are set in the second WORD of the exception event
|
|
// parameters.
|
|
//
|
|
#define VDMEVENT_V86 0x0001
|
|
#define VDMEVENT_PM16 0x0002
|
|
|
|
//
|
|
// The following flags control the contents of the CONTEXT structure.
|
|
//
|
|
|
|
#define VDMCONTEXT_i386 0x00010000 // this assumes that i386 and
|
|
#define VDMCONTEXT_i486 0x00010000 // i486 have identical context records
|
|
|
|
#define VDMCONTEXT_CONTROL (VDMCONTEXT_i386 | 0x00000001L) // SS:SP, CS:IP, FLAGS, BP
|
|
#define VDMCONTEXT_INTEGER (VDMCONTEXT_i386 | 0x00000002L) // AX, BX, CX, DX, SI, DI
|
|
#define VDMCONTEXT_SEGMENTS (VDMCONTEXT_i386 | 0x00000004L) // DS, ES, FS, GS
|
|
#define VDMCONTEXT_FLOATING_POINT (VDMCONTEXT_i386 | 0x00000008L) // 387 state
|
|
#define VDMCONTEXT_DEBUG_REGISTERS (VDMCONTEXT_i386 | 0x00000010L) // DB 0-3,6,7
|
|
#define VDMCONTEXT_EXTENDED_REGISTERS (VDMCONTEXT_i386 | 0x00000020L) // cpu specific extensions
|
|
|
|
#define VDMCONTEXT_FULL (VDMCONTEXT_CONTROL | VDMCONTEXT_INTEGER |\
|
|
VDMCONTEXT_SEGMENTS)
|
|
|
|
|
|
#ifdef _X86_
|
|
|
|
// On x86 machines, just copy the definition of the CONTEXT and LDT_ENTRY
|
|
// structures.
|
|
typedef struct _CONTEXT VDMCONTEXT;
|
|
typedef struct _LDT_ENTRY VDMLDT_ENTRY;
|
|
|
|
#else // _X86_
|
|
|
|
//
|
|
// Define the size of the 80387 save area, which is in the context frame.
|
|
//
|
|
|
|
#define SIZE_OF_80387_REGISTERS 80
|
|
|
|
typedef struct _FLOATING_SAVE_AREA {
|
|
ULONG ControlWord;
|
|
ULONG StatusWord;
|
|
ULONG TagWord;
|
|
ULONG ErrorOffset;
|
|
ULONG ErrorSelector;
|
|
ULONG DataOffset;
|
|
ULONG DataSelector;
|
|
UCHAR RegisterArea[SIZE_OF_80387_REGISTERS];
|
|
ULONG Cr0NpxState;
|
|
} FLOATING_SAVE_AREA;
|
|
|
|
//
|
|
// Simulated context structure for the 16-bit environment
|
|
//
|
|
|
|
typedef struct _VDMCONTEXT {
|
|
|
|
//
|
|
// The flags values within this flag control the contents of
|
|
// a CONTEXT record.
|
|
//
|
|
// If the context record is used as an input parameter, then
|
|
// for each portion of the context record controlled by a flag
|
|
// whose value is set, it is assumed that that portion of the
|
|
// context record contains valid context. If the context record
|
|
// is being used to modify a threads context, then only that
|
|
// portion of the threads context will be modified.
|
|
//
|
|
// If the context record is used as an IN OUT parameter to capture
|
|
// the context of a thread, then only those portions of the thread's
|
|
// context corresponding to set flags will be returned.
|
|
//
|
|
// The context record is never used as an OUT only parameter.
|
|
//
|
|
// CONTEXT_FULL on some systems (MIPS namely) does not contain the
|
|
// CONTEXT_SEGMENTS definition. VDMDBG assumes that CONTEXT_INTEGER also
|
|
// includes CONTEXT_SEGMENTS to account for this.
|
|
//
|
|
|
|
ULONG ContextFlags;
|
|
|
|
//
|
|
// This section is specified/returned if CONTEXT_DEBUG_REGISTERS is
|
|
// set in ContextFlags. Note that CONTEXT_DEBUG_REGISTERS is NOT
|
|
// included in CONTEXT_FULL.
|
|
//
|
|
|
|
ULONG Dr0;
|
|
ULONG Dr1;
|
|
ULONG Dr2;
|
|
ULONG Dr3;
|
|
ULONG Dr6;
|
|
ULONG Dr7;
|
|
|
|
//
|
|
// This section is specified/returned if the
|
|
// ContextFlags word contians the flag CONTEXT_FLOATING_POINT.
|
|
//
|
|
|
|
FLOATING_SAVE_AREA FloatSave;
|
|
|
|
//
|
|
// This section is specified/returned if the
|
|
// ContextFlags word contians the flag CONTEXT_SEGMENTS.
|
|
//
|
|
|
|
ULONG SegGs;
|
|
ULONG SegFs;
|
|
ULONG SegEs;
|
|
ULONG SegDs;
|
|
|
|
//
|
|
// This section is specified/returned if the
|
|
// ContextFlags word contians the flag CONTEXT_INTEGER.
|
|
//
|
|
|
|
ULONG Edi;
|
|
ULONG Esi;
|
|
ULONG Ebx;
|
|
ULONG Edx;
|
|
ULONG Ecx;
|
|
ULONG Eax;
|
|
|
|
//
|
|
// This section is specified/returned if the
|
|
// ContextFlags word contians the flag CONTEXT_CONTROL.
|
|
//
|
|
|
|
ULONG Ebp;
|
|
ULONG Eip;
|
|
ULONG SegCs; // MUST BE SANITIZED
|
|
ULONG EFlags; // MUST BE SANITIZED
|
|
ULONG Esp;
|
|
ULONG SegSs;
|
|
|
|
} VDMCONTEXT;
|
|
|
|
//
|
|
// LDT descriptor entry
|
|
//
|
|
|
|
typedef struct _VDMLDT_ENTRY {
|
|
USHORT LimitLow;
|
|
USHORT BaseLow;
|
|
union {
|
|
struct {
|
|
UCHAR BaseMid;
|
|
UCHAR Flags1; // Declare as bytes to avoid alignment
|
|
UCHAR Flags2; // Problems.
|
|
UCHAR BaseHi;
|
|
} Bytes;
|
|
struct {
|
|
ULONG BaseMid : 8;
|
|
ULONG Type : 5;
|
|
ULONG Dpl : 2;
|
|
ULONG Pres : 1;
|
|
ULONG LimitHi : 4;
|
|
ULONG Sys : 1;
|
|
ULONG Reserved_0 : 1;
|
|
ULONG Default_Big : 1;
|
|
ULONG Granularity : 1;
|
|
ULONG BaseHi : 8;
|
|
} Bits;
|
|
} HighWord;
|
|
} VDMLDT_ENTRY;
|
|
|
|
#endif // _X86_
|
|
|
|
typedef VDMCONTEXT *LPVDMCONTEXT;
|
|
typedef VDMLDT_ENTRY *LPVDMLDT_ENTRY;
|
|
|
|
#define VDMCONTEXT_TO_PROGRAM_COUNTER(Context) (PVOID)((Context)->Eip)
|
|
|
|
#define VDMCONTEXT_LENGTH (sizeof(VDMCONTEXT))
|
|
#define VDMCONTEXT_ALIGN (sizeof(ULONG))
|
|
#define VDMCONTEXT_ROUND (VDMCONTEXT_ALIGN - 1)
|
|
|
|
#define V86FLAGS_CARRY 0x00001
|
|
#define V86FLAGS_PARITY 0x00004
|
|
#define V86FLAGS_AUXCARRY 0x00010
|
|
#define V86FLAGS_ZERO 0x00040
|
|
#define V86FLAGS_SIGN 0x00080
|
|
#define V86FLAGS_TRACE 0x00100
|
|
#define V86FLAGS_INTERRUPT 0x00200
|
|
#define V86FLAGS_DIRECTION 0x00400
|
|
#define V86FLAGS_OVERFLOW 0x00800
|
|
#define V86FLAGS_IOPL 0x03000
|
|
#define V86FLAGS_IOPL_BITS 0x12
|
|
#define V86FLAGS_RESUME 0x10000
|
|
#define V86FLAGS_V86 0x20000 // Used to detect RealMode v. ProtMode
|
|
#define V86FLAGS_ALIGNMENT 0x40000
|
|
|
|
#define MAX_MODULE_NAME 8 + 1
|
|
#define MAX_PATH16 255
|
|
|
|
typedef struct _SEGMENT_NOTE {
|
|
WORD Selector1; // Selector of operation
|
|
WORD Selector2; // Dest. Sel. for moving segments
|
|
WORD Segment; // Segment within Module
|
|
CHAR Module[MAX_MODULE_NAME+1]; // Module name
|
|
CHAR FileName[MAX_PATH16+1]; // PathName to executable image
|
|
WORD Type; // Code / Data, etc.
|
|
DWORD Length; // Length of image
|
|
} SEGMENT_NOTE;
|
|
|
|
typedef struct _IMAGE_NOTE {
|
|
CHAR Module[MAX_MODULE_NAME+1]; // Module
|
|
CHAR FileName[MAX_PATH16+1]; // Path to executable image
|
|
WORD hModule; // 16-bit hModule
|
|
WORD hTask; // 16-bit hTask
|
|
} IMAGE_NOTE;
|
|
|
|
typedef struct {
|
|
DWORD dwSize;
|
|
char szModule[MAX_MODULE_NAME+1];
|
|
HANDLE hModule;
|
|
WORD wcUsage;
|
|
char szExePath[MAX_PATH16+1];
|
|
WORD wNext;
|
|
} MODULEENTRY, *LPMODULEENTRY;
|
|
|
|
|
|
#define SN_CODE 0 // Protect mode code segment
|
|
#define SN_DATA 1 // Protect mode data segment
|
|
#define SN_V86 2 // V86 mode segment
|
|
|
|
typedef struct _TEMP_BP_NOTE {
|
|
WORD Seg; // Dest. Segment or Selector
|
|
DWORD Offset; // Dest. Offset
|
|
BOOL bPM; // TRUE for PM, FALSE for V86
|
|
} TEMP_BP_NOTE;
|
|
|
|
typedef struct _VDM_SEGINFO {
|
|
WORD Selector; // Selector or RM segment
|
|
WORD SegNumber; // Logical segment number in executable
|
|
DWORD Length; // Length of segment
|
|
WORD Type; // Type (0=v86, 1=PM)
|
|
CHAR ModuleName[MAX_MODULE_NAME]; // Module
|
|
CHAR FileName[MAX_PATH16]; // Path to executable image
|
|
} VDM_SEGINFO;
|
|
|
|
/* GlobalFirst()/GlobalNext() flags */
|
|
#define GLOBAL_ALL 0
|
|
#define GLOBAL_LRU 1
|
|
#define GLOBAL_FREE 2
|
|
|
|
/* GLOBALENTRY.wType entries */
|
|
#define GT_UNKNOWN 0
|
|
#define GT_DGROUP 1
|
|
#define GT_DATA 2
|
|
#define GT_CODE 3
|
|
#define GT_TASK 4
|
|
#define GT_RESOURCE 5
|
|
#define GT_MODULE 6
|
|
#define GT_FREE 7
|
|
#define GT_INTERNAL 8
|
|
#define GT_SENTINEL 9
|
|
#define GT_BURGERMASTER 10
|
|
|
|
/* If GLOBALENTRY.wType==GT_RESOURCE, the following is GLOBALENTRY.wData: */
|
|
#define GD_USERDEFINED 0
|
|
#define GD_CURSORCOMPONENT 1
|
|
#define GD_BITMAP 2
|
|
#define GD_ICONCOMPONENT 3
|
|
#define GD_MENU 4
|
|
#define GD_DIALOG 5
|
|
#define GD_STRING 6
|
|
#define GD_FONTDIR 7
|
|
#define GD_FONT 8
|
|
#define GD_ACCELERATORS 9
|
|
#define GD_RCDATA 10
|
|
#define GD_ERRTABLE 11
|
|
#define GD_CURSOR 12
|
|
#define GD_ICON 14
|
|
#define GD_NAMETABLE 15
|
|
#define GD_MAX_RESOURCE 15
|
|
|
|
typedef struct {
|
|
DWORD dwSize;
|
|
DWORD dwAddress;
|
|
DWORD dwBlockSize;
|
|
HANDLE hBlock;
|
|
WORD wcLock;
|
|
WORD wcPageLock;
|
|
WORD wFlags;
|
|
BOOL wHeapPresent;
|
|
HANDLE hOwner;
|
|
WORD wType;
|
|
WORD wData;
|
|
DWORD dwNext;
|
|
DWORD dwNextAlt;
|
|
} GLOBALENTRY, *LPGLOBALENTRY;
|
|
|
|
typedef DWORD (CALLBACK* DEBUGEVENTPROC)( LPDEBUG_EVENT, LPVOID );
|
|
|
|
// Macros to access VDM_EVENT parameters
|
|
#define W1(x) ((USHORT)(x.ExceptionInformation[0]))
|
|
#define W2(x) ((USHORT)(x.ExceptionInformation[0] >> 16))
|
|
#define W3(x) ((USHORT)(x.ExceptionInformation[1]))
|
|
#define W4(x) ((USHORT)(x.ExceptionInformation[1] >> 16))
|
|
#define DW3(x) (x.ExceptionInformation[2])
|
|
#define DW4(x) (x.ExceptionInformation[3])
|
|
|
|
#include <poppack.h>
|
|
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMProcessException(
|
|
LPDEBUG_EVENT lpDebugEvent
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMGetThreadSelectorEntry(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
WORD wSelector,
|
|
LPVDMLDT_ENTRY lpSelectorEntry
|
|
);
|
|
|
|
ULONG
|
|
WINAPI
|
|
VDMGetPointer(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
WORD wSelector,
|
|
DWORD dwOffset,
|
|
BOOL fProtMode
|
|
);
|
|
|
|
// VDMGetThreadContext, VDMSetThreadContext are obselete
|
|
// Use VDMGetContext, VDMSetContext
|
|
BOOL
|
|
WINAPI
|
|
VDMGetContext(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
LPVDMCONTEXT lpVDMContext
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMSetContext(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
LPVDMCONTEXT lpVDMContext
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMGetSelectorModule(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
WORD wSelector,
|
|
PUINT lpSegmentNumber,
|
|
LPSTR lpModuleName,
|
|
UINT nNameSize,
|
|
LPSTR lpModulePath,
|
|
UINT nPathSize
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMGetModuleSelector(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
UINT wSegmentNumber,
|
|
LPSTR lpModuleName,
|
|
LPWORD lpSelector
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMModuleFirst(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
LPMODULEENTRY lpModuleEntry,
|
|
DEBUGEVENTPROC lpEventProc,
|
|
LPVOID lpData
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMModuleNext(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
LPMODULEENTRY lpModuleEntry,
|
|
DEBUGEVENTPROC lpEventProc,
|
|
LPVOID lpData
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMGlobalFirst(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
LPGLOBALENTRY lpGlobalEntry,
|
|
WORD wFlags,
|
|
DEBUGEVENTPROC lpEventProc,
|
|
LPVOID lpData
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMGlobalNext(
|
|
HANDLE hProcess,
|
|
HANDLE hThread,
|
|
LPGLOBALENTRY lpGlobalEntry,
|
|
WORD wFlags,
|
|
DEBUGEVENTPROC lpEventProc,
|
|
LPVOID lpData
|
|
);
|
|
|
|
typedef BOOL (WINAPI *PROCESSENUMPROC)( DWORD dwProcessId, DWORD dwAttributes, LPARAM lpUserDefined );
|
|
typedef BOOL (WINAPI *TASKENUMPROC)( DWORD dwThreadId, WORD hMod16, WORD hTask16, LPARAM lpUserDefined );
|
|
typedef BOOL (WINAPI *TASKENUMPROCEX)( DWORD dwThreadId, WORD hMod16, WORD hTask16,
|
|
PSZ pszModName, PSZ pszFileName, LPARAM lpUserDefined );
|
|
|
|
#define WOW_SYSTEM (DWORD)0x0001
|
|
|
|
INT
|
|
WINAPI
|
|
VDMEnumProcessWOW(
|
|
PROCESSENUMPROC fp,
|
|
LPARAM lparam
|
|
);
|
|
|
|
INT
|
|
WINAPI
|
|
VDMEnumTaskWOW(
|
|
DWORD dwProcessId,
|
|
TASKENUMPROC fp,
|
|
LPARAM lparam
|
|
);
|
|
|
|
//
|
|
// VDMEnumTaskWOWEx is the same as VDMEnumTaskWOW except
|
|
// the callback procedure gets two more parameters,
|
|
// the module name of the EXE and the full path to the
|
|
// EXE.
|
|
//
|
|
|
|
INT
|
|
WINAPI
|
|
VDMEnumTaskWOWEx(
|
|
DWORD dwProcessId,
|
|
TASKENUMPROCEX fp,
|
|
LPARAM lparam
|
|
);
|
|
|
|
//
|
|
// VDMTerminateTaskWOW rudely terminates a 16-bit WOW task
|
|
// similar to the way TerminateProcess kills a Win32
|
|
// process.
|
|
//
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMTerminateTaskWOW(
|
|
DWORD dwProcessId,
|
|
WORD htask
|
|
);
|
|
|
|
//
|
|
// VDMStartTaskInWOW launches a Win16 task in a pre-existing
|
|
// WOW VDM. Note that the caller is responsible for ensuring
|
|
// the program is a 16-bit Windows program. If it is a DOS
|
|
// or Win32 program, it will still be launched from within
|
|
// the target WOW VDM.
|
|
//
|
|
// The supplied command line and show command are passed
|
|
// unchanged to the 16-bit WinExec API in the target WOW VDM.
|
|
//
|
|
// Note this routine is ANSI-only.
|
|
//
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMStartTaskInWOW(
|
|
DWORD dwProcessId,
|
|
LPSTR lpCommandLine,
|
|
WORD wShow
|
|
);
|
|
|
|
//
|
|
// VDMKillWOW is not implemented.
|
|
//
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMKillWOW(
|
|
VOID
|
|
);
|
|
|
|
//
|
|
// VDMDetectWOW is not implemented.
|
|
//
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMDetectWOW(
|
|
VOID
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMBreakThread(
|
|
HANDLE hProcess,
|
|
HANDLE hThread
|
|
);
|
|
|
|
DWORD
|
|
WINAPI
|
|
VDMGetDbgFlags(
|
|
HANDLE hProcess
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMSetDbgFlags(
|
|
HANDLE hProcess,
|
|
DWORD dwFlags
|
|
);
|
|
|
|
#define VDMDBG_BREAK_DOSTASK 0x00000001
|
|
#define VDMDBG_BREAK_WOWTASK 0x00000002
|
|
#define VDMDBG_BREAK_LOADDLL 0x00000004
|
|
#define VDMDBG_BREAK_EXCEPTIONS 0x00000008
|
|
#define VDMDBG_BREAK_DEBUGGER 0x00000010
|
|
#define VDMDBG_TRACE_HISTORY 0x00000080
|
|
|
|
//
|
|
// VDMIsModuleLoaded can be used to determine if the 16-bit
|
|
// executable referenced by the full path name parameter is
|
|
// loaded in ntvdm.
|
|
//
|
|
// Note that this function uses an internal table in vdmdbg.dll
|
|
// to determine a module's existence. One important usage of this
|
|
// function is to print a message when a particular module is
|
|
// loaded for the first time. To accomplish this, call this
|
|
// routine during a DBG_SEGLOAD notification BEFORE the entry
|
|
// point VDMProcessException has been called. If it returns FALSE,
|
|
// then the module has not yet been loaded.
|
|
//
|
|
BOOL
|
|
WINAPI
|
|
VDMIsModuleLoaded(
|
|
LPSTR szPath
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMGetSegmentInfo(
|
|
WORD Selector,
|
|
ULONG Offset,
|
|
BOOL bProtectMode,
|
|
VDM_SEGINFO *pSegInfo
|
|
);
|
|
|
|
//
|
|
// VDMGetSymbol
|
|
//
|
|
// This routine reads the standard .SYM file format.
|
|
//
|
|
// szModule - module name (max 9 chars)
|
|
// SegNumber - logical segment number of segment (see VDM_SEGINFO)
|
|
// Offset - offset in segment
|
|
// bProtectMode - TRUE for PM, FALSE for V86 mode
|
|
// bNextSymbol - FALSE to find nearest sym BEFORE offset, TRUE for AFTER
|
|
// szSymbolName - receives symbol name (must point to 256 byte buffer)
|
|
// pDisplacement - distance in bytes from nearest symbol
|
|
//
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMGetSymbol(
|
|
LPSTR szModule,
|
|
WORD SegNumber,
|
|
DWORD Offset,
|
|
BOOL bProtectMode,
|
|
BOOL bNextSymbol,
|
|
LPSTR szSymbolName,
|
|
PDWORD pDisplacement
|
|
);
|
|
|
|
BOOL
|
|
WINAPI
|
|
VDMGetAddrExpression(
|
|
LPSTR szModule,
|
|
LPSTR szSymbol,
|
|
PWORD Selector,
|
|
PDWORD Offset,
|
|
PWORD Type
|
|
);
|
|
|
|
#define VDMADDR_V86 2
|
|
#define VDMADDR_PM16 4
|
|
#define VDMADDR_PM32 16
|
|
|
|
//
|
|
// typedefs for main entry points
|
|
//
|
|
|
|
typedef BOOL (WINAPI *VDMPROCESSEXCEPTIONPROC)(LPDEBUG_EVENT);
|
|
typedef BOOL (WINAPI *VDMGETTHREADSELECTORENTRYPROC)(HANDLE,HANDLE,DWORD,LPVDMLDT_ENTRY);
|
|
typedef ULONG (WINAPI *VDMGETPOINTERPROC)(HANDLE,HANDLE,WORD,DWORD,BOOL);
|
|
typedef BOOL (WINAPI *VDMGETCONTEXTPROC)(HANDLE,HANDLE,LPVDMCONTEXT);
|
|
typedef BOOL (WINAPI *VDMSETCONTEXTPROC)(HANDLE,HANDLE,LPVDMCONTEXT);
|
|
typedef BOOL (WINAPI *VDMKILLWOWPROC)(VOID);
|
|
typedef BOOL (WINAPI *VDMDETECTWOWPROC)(VOID);
|
|
typedef BOOL (WINAPI *VDMBREAKTHREADPROC)(HANDLE);
|
|
typedef BOOL (WINAPI *VDMGETSELECTORMODULEPROC)(HANDLE,HANDLE,WORD,PUINT,LPSTR, UINT,LPSTR, UINT);
|
|
typedef BOOL (WINAPI *VDMGETMODULESELECTORPROC)(HANDLE,HANDLE,UINT,LPSTR,LPWORD);
|
|
typedef BOOL (WINAPI *VDMMODULEFIRSTPROC)(HANDLE,HANDLE,LPMODULEENTRY,DEBUGEVENTPROC,LPVOID);
|
|
typedef BOOL (WINAPI *VDMMODULENEXTPROC)(HANDLE,HANDLE,LPMODULEENTRY,DEBUGEVENTPROC,LPVOID);
|
|
typedef BOOL (WINAPI *VDMGLOBALFIRSTPROC)(HANDLE,HANDLE,LPGLOBALENTRY,WORD,DEBUGEVENTPROC,LPVOID);
|
|
typedef BOOL (WINAPI *VDMGLOBALNEXTPROC)(HANDLE,HANDLE,LPGLOBALENTRY,WORD,DEBUGEVENTPROC,LPVOID);
|
|
|
|
typedef INT (WINAPI *VDMENUMPROCESSWOWPROC)(PROCESSENUMPROC,LPARAM);
|
|
typedef INT (WINAPI *VDMENUMTASKWOWPROC)(DWORD,TASKENUMPROC,LPARAM);
|
|
typedef INT (WINAPI *VDMENUMTASKWOWEXPROC)(DWORD,TASKENUMPROCEX,LPARAM);
|
|
typedef BOOL (WINAPI *VDMTERMINATETASKINWOWPROC)(DWORD,WORD);
|
|
typedef BOOL (WINAPI *VDMSTARTTASKINWOWPROC)(DWORD,LPSTR,WORD);
|
|
|
|
typedef DWORD (WINAPI *VDMGETDBGFLAGSPROC)(HANDLE);
|
|
typedef BOOL (WINAPI *VDMSETDBGFLAGSPROC)(HANDLE,DWORD);
|
|
typedef BOOL (WINAPI *VDMISMODULELOADEDPROC)(LPSTR);
|
|
typedef BOOL (WINAPI *VDMGETSEGMENTINFOPROC)(WORD,ULONG,BOOL,VDM_SEGINFO);
|
|
typedef BOOL (WINAPI *VDMGETSYMBOLPROC)(LPSTR, WORD, DWORD, BOOL, BOOL, LPSTR, PDWORD);
|
|
typedef BOOL (WINAPI *VDMGETADDREXPRESSIONPROC)(LPSTR, LPSTR, PWORD, PDWORD, PWORD);
|
|
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif // _VDMDBG_
|