/*++ BUILD Version: 0001 // Increment this if a change has global effects Copyright (c) 1985-1999, Microsoft Corporation Module Name: vdmdbg.h Abstract: Prodecure declarations, constant definitions, type definition and macros for the VDMDBG.DLL VDM Debugger interface. --*/ #ifndef _VDMDBG_ #define _VDMDBG_ #if _MSC_VER > 1000 #pragma once #endif #ifdef __cplusplus extern "C" { #endif #include #define STATUS_VDM_EVENT STATUS_SEGMENT_NOTIFICATION #ifndef DBG_SEGLOAD #define DBG_SEGLOAD 0 #define DBG_SEGMOVE 1 #define DBG_SEGFREE 2 #define DBG_MODLOAD 3 #define DBG_MODFREE 4 #define DBG_SINGLESTEP 5 #define DBG_BREAK 6 #define DBG_GPFAULT 7 #define DBG_DIVOVERFLOW 8 #define DBG_INSTRFAULT 9 #define DBG_TASKSTART 10 #define DBG_TASKSTOP 11 #define DBG_DLLSTART 12 #define DBG_DLLSTOP 13 #define DBG_ATTACH 14 #define DBG_TOOLHELP 15 #define DBG_STACKFAULT 16 #define DBG_WOWINIT 17 #define DBG_TEMPBP 18 #define DBG_MODMOVE 19 #define DBG_INIT 20 #define DBG_GPFAULT2 21 #endif // // These flags are set in the same WORD as the DBG_ event id's (above). // #define VDMEVENT_NEEDS_INTERACTIVE 0x8000 #define VDMEVENT_VERBOSE 0x4000 #define VDMEVENT_PE 0x2000 #define VDMEVENT_ALLFLAGS 0xe000 // // These flags are set in the second WORD of the exception event // parameters. // #define VDMEVENT_V86 0x0001 #define VDMEVENT_PM16 0x0002 // // The following flags control the contents of the CONTEXT structure. // #define VDMCONTEXT_i386 0x00010000 // this assumes that i386 and #define VDMCONTEXT_i486 0x00010000 // i486 have identical context records #define VDMCONTEXT_CONTROL (VDMCONTEXT_i386 | 0x00000001L) // SS:SP, CS:IP, FLAGS, BP #define VDMCONTEXT_INTEGER (VDMCONTEXT_i386 | 0x00000002L) // AX, BX, CX, DX, SI, DI #define VDMCONTEXT_SEGMENTS (VDMCONTEXT_i386 | 0x00000004L) // DS, ES, FS, GS #define VDMCONTEXT_FLOATING_POINT (VDMCONTEXT_i386 | 0x00000008L) // 387 state #define VDMCONTEXT_DEBUG_REGISTERS (VDMCONTEXT_i386 | 0x00000010L) // DB 0-3,6,7 #define VDMCONTEXT_EXTENDED_REGISTERS (VDMCONTEXT_i386 | 0x00000020L) // cpu specific extensions #define VDMCONTEXT_FULL (VDMCONTEXT_CONTROL | VDMCONTEXT_INTEGER |\ VDMCONTEXT_SEGMENTS) #ifdef _X86_ // On x86 machines, just copy the definition of the CONTEXT and LDT_ENTRY // structures. typedef struct _CONTEXT VDMCONTEXT; typedef struct _LDT_ENTRY VDMLDT_ENTRY; #else // _X86_ // // Define the size of the 80387 save area, which is in the context frame. // #define SIZE_OF_80387_REGISTERS 80 typedef struct _FLOATING_SAVE_AREA { ULONG ControlWord; ULONG StatusWord; ULONG TagWord; ULONG ErrorOffset; ULONG ErrorSelector; ULONG DataOffset; ULONG DataSelector; UCHAR RegisterArea[SIZE_OF_80387_REGISTERS]; ULONG Cr0NpxState; } FLOATING_SAVE_AREA; // // Simulated context structure for the 16-bit environment // typedef struct _VDMCONTEXT { // // The flags values within this flag control the contents of // a CONTEXT record. // // If the context record is used as an input parameter, then // for each portion of the context record controlled by a flag // whose value is set, it is assumed that that portion of the // context record contains valid context. If the context record // is being used to modify a threads context, then only that // portion of the threads context will be modified. // // If the context record is used as an IN OUT parameter to capture // the context of a thread, then only those portions of the thread's // context corresponding to set flags will be returned. // // The context record is never used as an OUT only parameter. // // CONTEXT_FULL on some systems (MIPS namely) does not contain the // CONTEXT_SEGMENTS definition. VDMDBG assumes that CONTEXT_INTEGER also // includes CONTEXT_SEGMENTS to account for this. // ULONG ContextFlags; // // This section is specified/returned if CONTEXT_DEBUG_REGISTERS is // set in ContextFlags. Note that CONTEXT_DEBUG_REGISTERS is NOT // included in CONTEXT_FULL. // ULONG Dr0; ULONG Dr1; ULONG Dr2; ULONG Dr3; ULONG Dr6; ULONG Dr7; // // This section is specified/returned if the // ContextFlags word contians the flag CONTEXT_FLOATING_POINT. // FLOATING_SAVE_AREA FloatSave; // // This section is specified/returned if the // ContextFlags word contians the flag CONTEXT_SEGMENTS. // ULONG SegGs; ULONG SegFs; ULONG SegEs; ULONG SegDs; // // This section is specified/returned if the // ContextFlags word contians the flag CONTEXT_INTEGER. // ULONG Edi; ULONG Esi; ULONG Ebx; ULONG Edx; ULONG Ecx; ULONG Eax; // // This section is specified/returned if the // ContextFlags word contians the flag CONTEXT_CONTROL. // ULONG Ebp; ULONG Eip; ULONG SegCs; // MUST BE SANITIZED ULONG EFlags; // MUST BE SANITIZED ULONG Esp; ULONG SegSs; } VDMCONTEXT; // // LDT descriptor entry // typedef struct _VDMLDT_ENTRY { USHORT LimitLow; USHORT BaseLow; union { struct { UCHAR BaseMid; UCHAR Flags1; // Declare as bytes to avoid alignment UCHAR Flags2; // Problems. UCHAR BaseHi; } Bytes; struct { ULONG BaseMid : 8; ULONG Type : 5; ULONG Dpl : 2; ULONG Pres : 1; ULONG LimitHi : 4; ULONG Sys : 1; ULONG Reserved_0 : 1; ULONG Default_Big : 1; ULONG Granularity : 1; ULONG BaseHi : 8; } Bits; } HighWord; } VDMLDT_ENTRY; #endif // _X86_ typedef VDMCONTEXT *LPVDMCONTEXT; typedef VDMLDT_ENTRY *LPVDMLDT_ENTRY; #define VDMCONTEXT_TO_PROGRAM_COUNTER(Context) (PVOID)((Context)->Eip) #define VDMCONTEXT_LENGTH (sizeof(VDMCONTEXT)) #define VDMCONTEXT_ALIGN (sizeof(ULONG)) #define VDMCONTEXT_ROUND (VDMCONTEXT_ALIGN - 1) #define V86FLAGS_CARRY 0x00001 #define V86FLAGS_PARITY 0x00004 #define V86FLAGS_AUXCARRY 0x00010 #define V86FLAGS_ZERO 0x00040 #define V86FLAGS_SIGN 0x00080 #define V86FLAGS_TRACE 0x00100 #define V86FLAGS_INTERRUPT 0x00200 #define V86FLAGS_DIRECTION 0x00400 #define V86FLAGS_OVERFLOW 0x00800 #define V86FLAGS_IOPL 0x03000 #define V86FLAGS_IOPL_BITS 0x12 #define V86FLAGS_RESUME 0x10000 #define V86FLAGS_V86 0x20000 // Used to detect RealMode v. ProtMode #define V86FLAGS_ALIGNMENT 0x40000 #define MAX_MODULE_NAME 8 + 1 #define MAX_PATH16 255 typedef struct _SEGMENT_NOTE { WORD Selector1; // Selector of operation WORD Selector2; // Dest. Sel. for moving segments WORD Segment; // Segment within Module CHAR Module[MAX_MODULE_NAME+1]; // Module name CHAR FileName[MAX_PATH16+1]; // PathName to executable image WORD Type; // Code / Data, etc. DWORD Length; // Length of image } SEGMENT_NOTE; typedef struct _IMAGE_NOTE { CHAR Module[MAX_MODULE_NAME+1]; // Module CHAR FileName[MAX_PATH16+1]; // Path to executable image WORD hModule; // 16-bit hModule WORD hTask; // 16-bit hTask } IMAGE_NOTE; typedef struct { DWORD dwSize; char szModule[MAX_MODULE_NAME+1]; HANDLE hModule; WORD wcUsage; char szExePath[MAX_PATH16+1]; WORD wNext; } MODULEENTRY, *LPMODULEENTRY; #define SN_CODE 0 // Protect mode code segment #define SN_DATA 1 // Protect mode data segment #define SN_V86 2 // V86 mode segment typedef struct _TEMP_BP_NOTE { WORD Seg; // Dest. Segment or Selector DWORD Offset; // Dest. Offset BOOL bPM; // TRUE for PM, FALSE for V86 } TEMP_BP_NOTE; typedef struct _VDM_SEGINFO { WORD Selector; // Selector or RM segment WORD SegNumber; // Logical segment number in executable DWORD Length; // Length of segment WORD Type; // Type (0=v86, 1=PM) CHAR ModuleName[MAX_MODULE_NAME]; // Module CHAR FileName[MAX_PATH16]; // Path to executable image } VDM_SEGINFO; /* GlobalFirst()/GlobalNext() flags */ #define GLOBAL_ALL 0 #define GLOBAL_LRU 1 #define GLOBAL_FREE 2 /* GLOBALENTRY.wType entries */ #define GT_UNKNOWN 0 #define GT_DGROUP 1 #define GT_DATA 2 #define GT_CODE 3 #define GT_TASK 4 #define GT_RESOURCE 5 #define GT_MODULE 6 #define GT_FREE 7 #define GT_INTERNAL 8 #define GT_SENTINEL 9 #define GT_BURGERMASTER 10 /* If GLOBALENTRY.wType==GT_RESOURCE, the following is GLOBALENTRY.wData: */ #define GD_USERDEFINED 0 #define GD_CURSORCOMPONENT 1 #define GD_BITMAP 2 #define GD_ICONCOMPONENT 3 #define GD_MENU 4 #define GD_DIALOG 5 #define GD_STRING 6 #define GD_FONTDIR 7 #define GD_FONT 8 #define GD_ACCELERATORS 9 #define GD_RCDATA 10 #define GD_ERRTABLE 11 #define GD_CURSOR 12 #define GD_ICON 14 #define GD_NAMETABLE 15 #define GD_MAX_RESOURCE 15 typedef struct { DWORD dwSize; DWORD dwAddress; DWORD dwBlockSize; HANDLE hBlock; WORD wcLock; WORD wcPageLock; WORD wFlags; BOOL wHeapPresent; HANDLE hOwner; WORD wType; WORD wData; DWORD dwNext; DWORD dwNextAlt; } GLOBALENTRY, *LPGLOBALENTRY; typedef DWORD (CALLBACK* DEBUGEVENTPROC)( LPDEBUG_EVENT, LPVOID ); // Macros to access VDM_EVENT parameters #define W1(x) ((USHORT)(x.ExceptionInformation[0])) #define W2(x) ((USHORT)(x.ExceptionInformation[0] >> 16)) #define W3(x) ((USHORT)(x.ExceptionInformation[1])) #define W4(x) ((USHORT)(x.ExceptionInformation[1] >> 16)) #define DW3(x) (x.ExceptionInformation[2]) #define DW4(x) (x.ExceptionInformation[3]) #include BOOL WINAPI VDMProcessException( LPDEBUG_EVENT lpDebugEvent ); BOOL WINAPI VDMGetThreadSelectorEntry( HANDLE hProcess, HANDLE hThread, WORD wSelector, LPVDMLDT_ENTRY lpSelectorEntry ); ULONG WINAPI VDMGetPointer( HANDLE hProcess, HANDLE hThread, WORD wSelector, DWORD dwOffset, BOOL fProtMode ); // VDMGetThreadContext, VDMSetThreadContext are obselete // Use VDMGetContext, VDMSetContext BOOL WINAPI VDMGetContext( HANDLE hProcess, HANDLE hThread, LPVDMCONTEXT lpVDMContext ); BOOL WINAPI VDMSetContext( HANDLE hProcess, HANDLE hThread, LPVDMCONTEXT lpVDMContext ); BOOL WINAPI VDMGetSelectorModule( HANDLE hProcess, HANDLE hThread, WORD wSelector, PUINT lpSegmentNumber, LPSTR lpModuleName, UINT nNameSize, LPSTR lpModulePath, UINT nPathSize ); BOOL WINAPI VDMGetModuleSelector( HANDLE hProcess, HANDLE hThread, UINT wSegmentNumber, LPSTR lpModuleName, LPWORD lpSelector ); BOOL WINAPI VDMModuleFirst( HANDLE hProcess, HANDLE hThread, LPMODULEENTRY lpModuleEntry, DEBUGEVENTPROC lpEventProc, LPVOID lpData ); BOOL WINAPI VDMModuleNext( HANDLE hProcess, HANDLE hThread, LPMODULEENTRY lpModuleEntry, DEBUGEVENTPROC lpEventProc, LPVOID lpData ); BOOL WINAPI VDMGlobalFirst( HANDLE hProcess, HANDLE hThread, LPGLOBALENTRY lpGlobalEntry, WORD wFlags, DEBUGEVENTPROC lpEventProc, LPVOID lpData ); BOOL WINAPI VDMGlobalNext( HANDLE hProcess, HANDLE hThread, LPGLOBALENTRY lpGlobalEntry, WORD wFlags, DEBUGEVENTPROC lpEventProc, LPVOID lpData ); typedef BOOL (WINAPI *PROCESSENUMPROC)( DWORD dwProcessId, DWORD dwAttributes, LPARAM lpUserDefined ); typedef BOOL (WINAPI *TASKENUMPROC)( DWORD dwThreadId, WORD hMod16, WORD hTask16, LPARAM lpUserDefined ); typedef BOOL (WINAPI *TASKENUMPROCEX)( DWORD dwThreadId, WORD hMod16, WORD hTask16, PSZ pszModName, PSZ pszFileName, LPARAM lpUserDefined ); #define WOW_SYSTEM (DWORD)0x0001 INT WINAPI VDMEnumProcessWOW( PROCESSENUMPROC fp, LPARAM lparam ); INT WINAPI VDMEnumTaskWOW( DWORD dwProcessId, TASKENUMPROC fp, LPARAM lparam ); // // VDMEnumTaskWOWEx is the same as VDMEnumTaskWOW except // the callback procedure gets two more parameters, // the module name of the EXE and the full path to the // EXE. // INT WINAPI VDMEnumTaskWOWEx( DWORD dwProcessId, TASKENUMPROCEX fp, LPARAM lparam ); // // VDMTerminateTaskWOW rudely terminates a 16-bit WOW task // similar to the way TerminateProcess kills a Win32 // process. // BOOL WINAPI VDMTerminateTaskWOW( DWORD dwProcessId, WORD htask ); // // VDMStartTaskInWOW launches a Win16 task in a pre-existing // WOW VDM. Note that the caller is responsible for ensuring // the program is a 16-bit Windows program. If it is a DOS // or Win32 program, it will still be launched from within // the target WOW VDM. // // The supplied command line and show command are passed // unchanged to the 16-bit WinExec API in the target WOW VDM. // // Note this routine is ANSI-only. // BOOL WINAPI VDMStartTaskInWOW( DWORD dwProcessId, LPSTR lpCommandLine, WORD wShow ); // // VDMKillWOW is not implemented. // BOOL WINAPI VDMKillWOW( VOID ); // // VDMDetectWOW is not implemented. // BOOL WINAPI VDMDetectWOW( VOID ); BOOL WINAPI VDMBreakThread( HANDLE hProcess, HANDLE hThread ); DWORD WINAPI VDMGetDbgFlags( HANDLE hProcess ); BOOL WINAPI VDMSetDbgFlags( HANDLE hProcess, DWORD dwFlags ); #define VDMDBG_BREAK_DOSTASK 0x00000001 #define VDMDBG_BREAK_WOWTASK 0x00000002 #define VDMDBG_BREAK_LOADDLL 0x00000004 #define VDMDBG_BREAK_EXCEPTIONS 0x00000008 #define VDMDBG_BREAK_DEBUGGER 0x00000010 #define VDMDBG_TRACE_HISTORY 0x00000080 // // VDMIsModuleLoaded can be used to determine if the 16-bit // executable referenced by the full path name parameter is // loaded in ntvdm. // // Note that this function uses an internal table in vdmdbg.dll // to determine a module's existence. One important usage of this // function is to print a message when a particular module is // loaded for the first time. To accomplish this, call this // routine during a DBG_SEGLOAD notification BEFORE the entry // point VDMProcessException has been called. If it returns FALSE, // then the module has not yet been loaded. // BOOL WINAPI VDMIsModuleLoaded( LPSTR szPath ); BOOL WINAPI VDMGetSegmentInfo( WORD Selector, ULONG Offset, BOOL bProtectMode, VDM_SEGINFO *pSegInfo ); // // VDMGetSymbol // // This routine reads the standard .SYM file format. // // szModule - module name (max 9 chars) // SegNumber - logical segment number of segment (see VDM_SEGINFO) // Offset - offset in segment // bProtectMode - TRUE for PM, FALSE for V86 mode // bNextSymbol - FALSE to find nearest sym BEFORE offset, TRUE for AFTER // szSymbolName - receives symbol name (must point to 256 byte buffer) // pDisplacement - distance in bytes from nearest symbol // BOOL WINAPI VDMGetSymbol( LPSTR szModule, WORD SegNumber, DWORD Offset, BOOL bProtectMode, BOOL bNextSymbol, LPSTR szSymbolName, PDWORD pDisplacement ); BOOL WINAPI VDMGetAddrExpression( LPSTR szModule, LPSTR szSymbol, PWORD Selector, PDWORD Offset, PWORD Type ); #define VDMADDR_V86 2 #define VDMADDR_PM16 4 #define VDMADDR_PM32 16 // // typedefs for main entry points // typedef BOOL (WINAPI *VDMPROCESSEXCEPTIONPROC)(LPDEBUG_EVENT); typedef BOOL (WINAPI *VDMGETTHREADSELECTORENTRYPROC)(HANDLE,HANDLE,DWORD,LPVDMLDT_ENTRY); typedef ULONG (WINAPI *VDMGETPOINTERPROC)(HANDLE,HANDLE,WORD,DWORD,BOOL); typedef BOOL (WINAPI *VDMGETCONTEXTPROC)(HANDLE,HANDLE,LPVDMCONTEXT); typedef BOOL (WINAPI *VDMSETCONTEXTPROC)(HANDLE,HANDLE,LPVDMCONTEXT); typedef BOOL (WINAPI *VDMKILLWOWPROC)(VOID); typedef BOOL (WINAPI *VDMDETECTWOWPROC)(VOID); typedef BOOL (WINAPI *VDMBREAKTHREADPROC)(HANDLE); typedef BOOL (WINAPI *VDMGETSELECTORMODULEPROC)(HANDLE,HANDLE,WORD,PUINT,LPSTR, UINT,LPSTR, UINT); typedef BOOL (WINAPI *VDMGETMODULESELECTORPROC)(HANDLE,HANDLE,UINT,LPSTR,LPWORD); typedef BOOL (WINAPI *VDMMODULEFIRSTPROC)(HANDLE,HANDLE,LPMODULEENTRY,DEBUGEVENTPROC,LPVOID); typedef BOOL (WINAPI *VDMMODULENEXTPROC)(HANDLE,HANDLE,LPMODULEENTRY,DEBUGEVENTPROC,LPVOID); typedef BOOL (WINAPI *VDMGLOBALFIRSTPROC)(HANDLE,HANDLE,LPGLOBALENTRY,WORD,DEBUGEVENTPROC,LPVOID); typedef BOOL (WINAPI *VDMGLOBALNEXTPROC)(HANDLE,HANDLE,LPGLOBALENTRY,WORD,DEBUGEVENTPROC,LPVOID); typedef INT (WINAPI *VDMENUMPROCESSWOWPROC)(PROCESSENUMPROC,LPARAM); typedef INT (WINAPI *VDMENUMTASKWOWPROC)(DWORD,TASKENUMPROC,LPARAM); typedef INT (WINAPI *VDMENUMTASKWOWEXPROC)(DWORD,TASKENUMPROCEX,LPARAM); typedef BOOL (WINAPI *VDMTERMINATETASKINWOWPROC)(DWORD,WORD); typedef BOOL (WINAPI *VDMSTARTTASKINWOWPROC)(DWORD,LPSTR,WORD); typedef DWORD (WINAPI *VDMGETDBGFLAGSPROC)(HANDLE); typedef BOOL (WINAPI *VDMSETDBGFLAGSPROC)(HANDLE,DWORD); typedef BOOL (WINAPI *VDMISMODULELOADEDPROC)(LPSTR); typedef BOOL (WINAPI *VDMGETSEGMENTINFOPROC)(WORD,ULONG,BOOL,VDM_SEGINFO); typedef BOOL (WINAPI *VDMGETSYMBOLPROC)(LPSTR, WORD, DWORD, BOOL, BOOL, LPSTR, PDWORD); typedef BOOL (WINAPI *VDMGETADDREXPRESSIONPROC)(LPSTR, LPSTR, PWORD, PDWORD, PWORD); #ifdef __cplusplus } #endif #endif // _VDMDBG_