Win32 API 日本語リファレンス
ホーム › System.Diagnostics.Debug.Extensions › DEBUG_DRIVER_OBJECT_INFO

DEBUG_DRIVER_OBJECT_INFO

構造体
サイズx64: 56 バイト / x86: 56 バイト

サイズ=各フィールドのバイト数(x64/x86 で異なる場合は x64/x86 と併記)。x64/x86 列=フィールドのバイトオフセット(HSPで dupptr / lpoke / wpoke 等に使用)。

フィールド

フィールド型サイズx64x86説明
SizeOfStructDWORD4+0+0この構造体のバイトサイズ。呼び出し前に設定する。
DriverSizeDWORD4+4+4ドライバイメージのバイトサイズ。
DriverObjAddressULONGLONG8+8+8ドライバオブジェクトのアドレス。
DriverStartULONGLONG8+16+16ドライバイメージの開始アドレス。
DriverExtensionULONGLONG8+24+24ドライバ拡張領域のアドレス。
DeviceObjectULONGLONG8+32+32ドライバに属する先頭デバイスオブジェクトのアドレス。
DriverName_DriverName_e__Struct16+40+40ドライバ名（バッファ・長さ等）を保持する無名構造体。

構造体: _DriverName_e__Struct x64 16B / x86 16B

フィールド型サイズx64x86
LengthWORD2+0+0
MaximumLengthWORD2+2+2
BufferULONGLONG8+8+8

各言語での定義

#include <windows.h>

// DEBUG_DRIVER_OBJECT_INFO  (x64 56 / x86 56 バイト)
typedef struct DEBUG_DRIVER_OBJECT_INFO {
    DWORD SizeOfStruct;
    DWORD DriverSize;
    ULONGLONG DriverObjAddress;
    ULONGLONG DriverStart;
    ULONGLONG DriverExtension;
    ULONGLONG DeviceObject;
    _DriverName_e__Struct DriverName;
} DEBUG_DRIVER_OBJECT_INFO;
using System;
using System.Runtime.InteropServices;

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct DEBUG_DRIVER_OBJECT_INFO
{
    public uint SizeOfStruct;
    public uint DriverSize;
    public ulong DriverObjAddress;
    public ulong DriverStart;
    public ulong DriverExtension;
    public ulong DeviceObject;
    public _DriverName_e__Struct DriverName;
}
Imports System.Runtime.InteropServices

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure DEBUG_DRIVER_OBJECT_INFO
    Public SizeOfStruct As UInteger
    Public DriverSize As UInteger
    Public DriverObjAddress As ULong
    Public DriverStart As ULong
    Public DriverExtension As ULong
    Public DeviceObject As ULong
    Public DriverName As _DriverName_e__Struct
End Structure
import ctypes
from ctypes import wintypes

class DEBUG_DRIVER_OBJECT_INFO(ctypes.Structure):
    _fields_ = [
        ("SizeOfStruct", wintypes.DWORD),
        ("DriverSize", wintypes.DWORD),
        ("DriverObjAddress", ctypes.c_ulonglong),
        ("DriverStart", ctypes.c_ulonglong),
        ("DriverExtension", ctypes.c_ulonglong),
        ("DeviceObject", ctypes.c_ulonglong),
        ("DriverName", _DriverName_e__Struct),
    ]
#[repr(C)]
pub struct DEBUG_DRIVER_OBJECT_INFO {
    pub SizeOfStruct: u32,
    pub DriverSize: u32,
    pub DriverObjAddress: u64,
    pub DriverStart: u64,
    pub DriverExtension: u64,
    pub DeviceObject: u64,
    pub DriverName: _DriverName_e__Struct,
}
import "golang.org/x/sys/windows"

type DEBUG_DRIVER_OBJECT_INFO struct {
	SizeOfStruct uint32
	DriverSize uint32
	DriverObjAddress uint64
	DriverStart uint64
	DriverExtension uint64
	DeviceObject uint64
	DriverName _DriverName_e__Struct
}
type
  DEBUG_DRIVER_OBJECT_INFO = record
    SizeOfStruct: DWORD;
    DriverSize: DWORD;
    DriverObjAddress: UInt64;
    DriverStart: UInt64;
    DriverExtension: UInt64;
    DeviceObject: UInt64;
    DriverName: _DriverName_e__Struct;
  end;
const DEBUG_DRIVER_OBJECT_INFO = extern struct {
    SizeOfStruct: u32,
    DriverSize: u32,
    DriverObjAddress: u64,
    DriverStart: u64,
    DriverExtension: u64,
    DeviceObject: u64,
    DriverName: _DriverName_e__Struct,
};
type
  DEBUG_DRIVER_OBJECT_INFO {.bycopy.} = object
    SizeOfStruct: uint32
    DriverSize: uint32
    DriverObjAddress: uint64
    DriverStart: uint64
    DriverExtension: uint64
    DeviceObject: uint64
    DriverName: _DriverName_e__Struct
struct DEBUG_DRIVER_OBJECT_INFO
{
    uint SizeOfStruct;
    uint DriverSize;
    ulong DriverObjAddress;
    ulong DriverStart;
    ulong DriverExtension;
    ulong DeviceObject;
    _DriverName_e__Struct DriverName;
}

HSP用 定義

HSP3.7/3.8 は構造体機能が無いため4byte整数配列(dim)+peek/poke で操作(32/64bitでサイズ・位置が異なる場合はタブで分割)。IronHSP は NSTRUCT(#defstruct/stdim/->)で32/64bit共通。

; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x64 レイアウト)
; DEBUG_DRIVER_OBJECT_INFO サイズ: 56 バイト(x64)
dim st, 14    ; 4byte整数×14(構造体サイズ 56 / 4 切り上げ)
; SizeOfStruct : DWORD (+0, 4byte)  st.0 = 値  /  値 = st.0   (lpoke/lpeek も可)
; DriverSize : DWORD (+4, 4byte)  st.1 = 値  /  値 = st.1   (lpoke/lpeek も可)
; DriverObjAddress : ULONGLONG (+8, 8byte)  qpoke st,8,値 / qpeek(st,8)  ※IronHSPのみ。3.7/3.8は lpoke st,8,下位 : lpoke st,12,上位
; DriverStart : ULONGLONG (+16, 8byte)  qpoke st,16,値 / qpeek(st,16)  ※IronHSPのみ。3.7/3.8は lpoke st,16,下位 : lpoke st,20,上位
; DriverExtension : ULONGLONG (+24, 8byte)  qpoke st,24,値 / qpeek(st,24)  ※IronHSPのみ。3.7/3.8は lpoke st,24,下位 : lpoke st,28,上位
; DeviceObject : ULONGLONG (+32, 8byte)  qpoke st,32,値 / qpeek(st,32)  ※IronHSPのみ。3.7/3.8は lpoke st,32,下位 : lpoke st,36,上位
; DriverName : _DriverName_e__Struct (+40, 16byte)  varptr(st)+40 を基点に操作(16byte:入れ子/配列)
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。
; IronHSP は NSTRUCT(構造体)をサポート。32bit/64bit どちらでも同じコードで動作します。
#defstruct global DEBUG_DRIVER_OBJECT_INFO
    #field int SizeOfStruct
    #field int DriverSize
    #field int64 DriverObjAddress
    #field int64 DriverStart
    #field int64 DriverExtension
    #field int64 DeviceObject
    #field _DriverName_e__Struct DriverName
#endstruct

stdim st, DEBUG_DRIVER_OBJECT_INFO        ; NSTRUCT 変数を確保
st->SizeOfStruct = 100
mes "SizeOfStruct=" + st->SizeOfStruct