ホーム › System.Diagnostics.Debug.Extensions › WINDBG_EXTENSION_APIS32
WINDBG_EXTENSION_APIS32
構造体サイズ=各フィールドのバイト数(x64/x86 で異なる場合は x64/x86 と併記)。x64/x86 列=フィールドのバイトオフセット(HSPで dupptr / lpoke / wpoke 等に使用)。
フィールド
| フィールド | 型 | サイズ | x64 | x86 | 説明 |
|---|---|---|---|---|---|
| nSize | DWORD | 4 | +0 | +0 | この構造体のバイトサイズを表す。 |
| lpOutputRoutine | PWINDBG_OUTPUT_ROUTINE | 8/4 | +8 | +4 | デバッガへ出力するコールバック関数へのポインタ。 |
| lpGetExpressionRoutine | PWINDBG_GET_EXPRESSION32 | 8/4 | +16 | +8 | 式を評価するコールバック関数(32ビット版)へのポインタ。 |
| lpGetSymbolRoutine | PWINDBG_GET_SYMBOL32 | 8/4 | +24 | +12 | アドレスからシンボル名を取得する関数(32ビット版)へのポインタ。 |
| lpDisasmRoutine | PWINDBG_DISASM32 | 8/4 | +32 | +16 | 逆アセンブルを行う関数(32ビット版)へのポインタ。 |
| lpCheckControlCRoutine | PWINDBG_CHECK_CONTROL_C | 8/4 | +40 | +20 | Ctrl+C中断の有無を確認する関数へのポインタ。 |
| lpReadProcessMemoryRoutine | PWINDBG_READ_PROCESS_MEMORY_ROUTINE32 | 8/4 | +48 | +24 | 対象プロセスのメモリを読み出す関数(32ビット版)へのポインタ。 |
| lpWriteProcessMemoryRoutine | PWINDBG_WRITE_PROCESS_MEMORY_ROUTINE32 | 8/4 | +56 | +28 | 対象プロセスのメモリへ書き込む関数(32ビット版)へのポインタ。 |
| lpGetThreadContextRoutine | PWINDBG_GET_THREAD_CONTEXT_ROUTINE | 8/4 | +64 | +32 | スレッドコンテキストを取得する関数へのポインタ。 |
| lpSetThreadContextRoutine | PWINDBG_SET_THREAD_CONTEXT_ROUTINE | 8/4 | +72 | +36 | スレッドコンテキストを設定する関数へのポインタ。 |
| lpIoctlRoutine | PWINDBG_IOCTL_ROUTINE | 8/4 | +80 | +40 | I/O制御を実行する関数へのポインタ。 |
| lpStackTraceRoutine | PWINDBG_STACKTRACE_ROUTINE32 | 8/4 | +88 | +44 | スタックトレースを取得する関数(32ビット版)へのポインタ。 |
各言語での定義
#include <windows.h>
// WINDBG_EXTENSION_APIS32 (x64 96 / x86 48 バイト)
typedef struct WINDBG_EXTENSION_APIS32 {
DWORD nSize;
PWINDBG_OUTPUT_ROUTINE lpOutputRoutine;
PWINDBG_GET_EXPRESSION32 lpGetExpressionRoutine;
PWINDBG_GET_SYMBOL32 lpGetSymbolRoutine;
PWINDBG_DISASM32 lpDisasmRoutine;
PWINDBG_CHECK_CONTROL_C lpCheckControlCRoutine;
PWINDBG_READ_PROCESS_MEMORY_ROUTINE32 lpReadProcessMemoryRoutine;
PWINDBG_WRITE_PROCESS_MEMORY_ROUTINE32 lpWriteProcessMemoryRoutine;
PWINDBG_GET_THREAD_CONTEXT_ROUTINE lpGetThreadContextRoutine;
PWINDBG_SET_THREAD_CONTEXT_ROUTINE lpSetThreadContextRoutine;
PWINDBG_IOCTL_ROUTINE lpIoctlRoutine;
PWINDBG_STACKTRACE_ROUTINE32 lpStackTraceRoutine;
} WINDBG_EXTENSION_APIS32;using System;
using System.Runtime.InteropServices;
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct WINDBG_EXTENSION_APIS32
{
public uint nSize;
public IntPtr lpOutputRoutine;
public IntPtr lpGetExpressionRoutine;
public IntPtr lpGetSymbolRoutine;
public IntPtr lpDisasmRoutine;
public IntPtr lpCheckControlCRoutine;
public IntPtr lpReadProcessMemoryRoutine;
public IntPtr lpWriteProcessMemoryRoutine;
public IntPtr lpGetThreadContextRoutine;
public IntPtr lpSetThreadContextRoutine;
public IntPtr lpIoctlRoutine;
public IntPtr lpStackTraceRoutine;
}Imports System.Runtime.InteropServices
<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure WINDBG_EXTENSION_APIS32
Public nSize As UInteger
Public lpOutputRoutine As IntPtr
Public lpGetExpressionRoutine As IntPtr
Public lpGetSymbolRoutine As IntPtr
Public lpDisasmRoutine As IntPtr
Public lpCheckControlCRoutine As IntPtr
Public lpReadProcessMemoryRoutine As IntPtr
Public lpWriteProcessMemoryRoutine As IntPtr
Public lpGetThreadContextRoutine As IntPtr
Public lpSetThreadContextRoutine As IntPtr
Public lpIoctlRoutine As IntPtr
Public lpStackTraceRoutine As IntPtr
End Structureimport ctypes
from ctypes import wintypes
class WINDBG_EXTENSION_APIS32(ctypes.Structure):
_fields_ = [
("nSize", wintypes.DWORD),
("lpOutputRoutine", ctypes.c_void_p),
("lpGetExpressionRoutine", ctypes.c_void_p),
("lpGetSymbolRoutine", ctypes.c_void_p),
("lpDisasmRoutine", ctypes.c_void_p),
("lpCheckControlCRoutine", ctypes.c_void_p),
("lpReadProcessMemoryRoutine", ctypes.c_void_p),
("lpWriteProcessMemoryRoutine", ctypes.c_void_p),
("lpGetThreadContextRoutine", ctypes.c_void_p),
("lpSetThreadContextRoutine", ctypes.c_void_p),
("lpIoctlRoutine", ctypes.c_void_p),
("lpStackTraceRoutine", ctypes.c_void_p),
]#[repr(C)]
pub struct WINDBG_EXTENSION_APIS32 {
pub nSize: u32,
pub lpOutputRoutine: *mut core::ffi::c_void,
pub lpGetExpressionRoutine: *mut core::ffi::c_void,
pub lpGetSymbolRoutine: *mut core::ffi::c_void,
pub lpDisasmRoutine: *mut core::ffi::c_void,
pub lpCheckControlCRoutine: *mut core::ffi::c_void,
pub lpReadProcessMemoryRoutine: *mut core::ffi::c_void,
pub lpWriteProcessMemoryRoutine: *mut core::ffi::c_void,
pub lpGetThreadContextRoutine: *mut core::ffi::c_void,
pub lpSetThreadContextRoutine: *mut core::ffi::c_void,
pub lpIoctlRoutine: *mut core::ffi::c_void,
pub lpStackTraceRoutine: *mut core::ffi::c_void,
}import "golang.org/x/sys/windows"
type WINDBG_EXTENSION_APIS32 struct {
nSize uint32
lpOutputRoutine uintptr
lpGetExpressionRoutine uintptr
lpGetSymbolRoutine uintptr
lpDisasmRoutine uintptr
lpCheckControlCRoutine uintptr
lpReadProcessMemoryRoutine uintptr
lpWriteProcessMemoryRoutine uintptr
lpGetThreadContextRoutine uintptr
lpSetThreadContextRoutine uintptr
lpIoctlRoutine uintptr
lpStackTraceRoutine uintptr
}type
WINDBG_EXTENSION_APIS32 = record
nSize: DWORD;
lpOutputRoutine: Pointer;
lpGetExpressionRoutine: Pointer;
lpGetSymbolRoutine: Pointer;
lpDisasmRoutine: Pointer;
lpCheckControlCRoutine: Pointer;
lpReadProcessMemoryRoutine: Pointer;
lpWriteProcessMemoryRoutine: Pointer;
lpGetThreadContextRoutine: Pointer;
lpSetThreadContextRoutine: Pointer;
lpIoctlRoutine: Pointer;
lpStackTraceRoutine: Pointer;
end;const WINDBG_EXTENSION_APIS32 = extern struct {
nSize: u32,
lpOutputRoutine: ?*anyopaque,
lpGetExpressionRoutine: ?*anyopaque,
lpGetSymbolRoutine: ?*anyopaque,
lpDisasmRoutine: ?*anyopaque,
lpCheckControlCRoutine: ?*anyopaque,
lpReadProcessMemoryRoutine: ?*anyopaque,
lpWriteProcessMemoryRoutine: ?*anyopaque,
lpGetThreadContextRoutine: ?*anyopaque,
lpSetThreadContextRoutine: ?*anyopaque,
lpIoctlRoutine: ?*anyopaque,
lpStackTraceRoutine: ?*anyopaque,
};type
WINDBG_EXTENSION_APIS32 {.bycopy.} = object
nSize: uint32
lpOutputRoutine: pointer
lpGetExpressionRoutine: pointer
lpGetSymbolRoutine: pointer
lpDisasmRoutine: pointer
lpCheckControlCRoutine: pointer
lpReadProcessMemoryRoutine: pointer
lpWriteProcessMemoryRoutine: pointer
lpGetThreadContextRoutine: pointer
lpSetThreadContextRoutine: pointer
lpIoctlRoutine: pointer
lpStackTraceRoutine: pointerstruct WINDBG_EXTENSION_APIS32
{
uint nSize;
void* lpOutputRoutine;
void* lpGetExpressionRoutine;
void* lpGetSymbolRoutine;
void* lpDisasmRoutine;
void* lpCheckControlCRoutine;
void* lpReadProcessMemoryRoutine;
void* lpWriteProcessMemoryRoutine;
void* lpGetThreadContextRoutine;
void* lpSetThreadContextRoutine;
void* lpIoctlRoutine;
void* lpStackTraceRoutine;
}HSP用 定義
HSP3.7/3.8 は構造体機能が無いため4byte整数配列(dim)+peek/poke で操作(32/64bitでサイズ・位置が異なる場合はタブで分割)。IronHSP は NSTRUCT(#defstruct/stdim/->)で32/64bit共通。
; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x86 レイアウト)
; WINDBG_EXTENSION_APIS32 サイズ: 48 バイト(x86)
dim st, 12 ; 4byte整数×12(構造体サイズ 48 / 4 切り上げ)
; nSize : DWORD (+0, 4byte) st.0 = 値 / 値 = st.0 (lpoke/lpeek も可)
; lpOutputRoutine : PWINDBG_OUTPUT_ROUTINE (+4, 4byte) st.1 = 値 / 値 = st.1 (lpoke/lpeek も可)
; lpGetExpressionRoutine : PWINDBG_GET_EXPRESSION32 (+8, 4byte) st.2 = 値 / 値 = st.2 (lpoke/lpeek も可)
; lpGetSymbolRoutine : PWINDBG_GET_SYMBOL32 (+12, 4byte) st.3 = 値 / 値 = st.3 (lpoke/lpeek も可)
; lpDisasmRoutine : PWINDBG_DISASM32 (+16, 4byte) st.4 = 値 / 値 = st.4 (lpoke/lpeek も可)
; lpCheckControlCRoutine : PWINDBG_CHECK_CONTROL_C (+20, 4byte) st.5 = 値 / 値 = st.5 (lpoke/lpeek も可)
; lpReadProcessMemoryRoutine : PWINDBG_READ_PROCESS_MEMORY_ROUTINE32 (+24, 4byte) st.6 = 値 / 値 = st.6 (lpoke/lpeek も可)
; lpWriteProcessMemoryRoutine : PWINDBG_WRITE_PROCESS_MEMORY_ROUTINE32 (+28, 4byte) st.7 = 値 / 値 = st.7 (lpoke/lpeek も可)
; lpGetThreadContextRoutine : PWINDBG_GET_THREAD_CONTEXT_ROUTINE (+32, 4byte) st.8 = 値 / 値 = st.8 (lpoke/lpeek も可)
; lpSetThreadContextRoutine : PWINDBG_SET_THREAD_CONTEXT_ROUTINE (+36, 4byte) st.9 = 値 / 値 = st.9 (lpoke/lpeek も可)
; lpIoctlRoutine : PWINDBG_IOCTL_ROUTINE (+40, 4byte) st.10 = 値 / 値 = st.10 (lpoke/lpeek も可)
; lpStackTraceRoutine : PWINDBG_STACKTRACE_ROUTINE32 (+44, 4byte) st.11 = 値 / 値 = st.11 (lpoke/lpeek も可)
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x64 レイアウト)
; WINDBG_EXTENSION_APIS32 サイズ: 96 バイト(x64)
dim st, 24 ; 4byte整数×24(構造体サイズ 96 / 4 切り上げ)
; nSize : DWORD (+0, 4byte) st.0 = 値 / 値 = st.0 (lpoke/lpeek も可)
; lpOutputRoutine : PWINDBG_OUTPUT_ROUTINE (+8, 8byte) qpoke st,8,値 / qpeek(st,8) ※IronHSPのみ。3.7/3.8は lpoke st,8,下位 : lpoke st,12,上位
; lpGetExpressionRoutine : PWINDBG_GET_EXPRESSION32 (+16, 8byte) qpoke st,16,値 / qpeek(st,16) ※IronHSPのみ。3.7/3.8は lpoke st,16,下位 : lpoke st,20,上位
; lpGetSymbolRoutine : PWINDBG_GET_SYMBOL32 (+24, 8byte) qpoke st,24,値 / qpeek(st,24) ※IronHSPのみ。3.7/3.8は lpoke st,24,下位 : lpoke st,28,上位
; lpDisasmRoutine : PWINDBG_DISASM32 (+32, 8byte) qpoke st,32,値 / qpeek(st,32) ※IronHSPのみ。3.7/3.8は lpoke st,32,下位 : lpoke st,36,上位
; lpCheckControlCRoutine : PWINDBG_CHECK_CONTROL_C (+40, 8byte) qpoke st,40,値 / qpeek(st,40) ※IronHSPのみ。3.7/3.8は lpoke st,40,下位 : lpoke st,44,上位
; lpReadProcessMemoryRoutine : PWINDBG_READ_PROCESS_MEMORY_ROUTINE32 (+48, 8byte) qpoke st,48,値 / qpeek(st,48) ※IronHSPのみ。3.7/3.8は lpoke st,48,下位 : lpoke st,52,上位
; lpWriteProcessMemoryRoutine : PWINDBG_WRITE_PROCESS_MEMORY_ROUTINE32 (+56, 8byte) qpoke st,56,値 / qpeek(st,56) ※IronHSPのみ。3.7/3.8は lpoke st,56,下位 : lpoke st,60,上位
; lpGetThreadContextRoutine : PWINDBG_GET_THREAD_CONTEXT_ROUTINE (+64, 8byte) qpoke st,64,値 / qpeek(st,64) ※IronHSPのみ。3.7/3.8は lpoke st,64,下位 : lpoke st,68,上位
; lpSetThreadContextRoutine : PWINDBG_SET_THREAD_CONTEXT_ROUTINE (+72, 8byte) qpoke st,72,値 / qpeek(st,72) ※IronHSPのみ。3.7/3.8は lpoke st,72,下位 : lpoke st,76,上位
; lpIoctlRoutine : PWINDBG_IOCTL_ROUTINE (+80, 8byte) qpoke st,80,値 / qpeek(st,80) ※IronHSPのみ。3.7/3.8は lpoke st,80,下位 : lpoke st,84,上位
; lpStackTraceRoutine : PWINDBG_STACKTRACE_ROUTINE32 (+88, 8byte) qpoke st,88,値 / qpeek(st,88) ※IronHSPのみ。3.7/3.8は lpoke st,88,下位 : lpoke st,92,上位
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。; IronHSP は NSTRUCT(構造体)をサポート。32bit/64bit どちらでも同じコードで動作します。
#defstruct global WINDBG_EXTENSION_APIS32
#field int nSize
#field intptr lpOutputRoutine
#field intptr lpGetExpressionRoutine
#field intptr lpGetSymbolRoutine
#field intptr lpDisasmRoutine
#field intptr lpCheckControlCRoutine
#field intptr lpReadProcessMemoryRoutine
#field intptr lpWriteProcessMemoryRoutine
#field intptr lpGetThreadContextRoutine
#field intptr lpSetThreadContextRoutine
#field intptr lpIoctlRoutine
#field intptr lpStackTraceRoutine
#endstruct
stdim st, WINDBG_EXTENSION_APIS32 ; NSTRUCT 変数を確保
st->nSize = 100
mes "nSize=" + st->nSize