ホーム › System.Diagnostics.Debug.Extensions › WINDBG_OLDKD_EXTENSION_APIS

WINDBG_OLDKD_EXTENSION_APIS

構造体

サイズx64: 80 バイト / x86: 40 バイト

サイズ=各フィールドのバイト数(x64/x86 で異なる場合は x64/x86 と併記)。x64/x86 列=フィールドのバイトオフセット(HSPで dupptr / lpoke / wpoke 等に使用)。

フィールド

フィールド	型	サイズ	x64	x86	説明
nSize	DWORD	4	+0	+0	この構造体のバイトサイズを表す。
lpOutputRoutine	PWINDBG_OUTPUT_ROUTINE	8/4	+8	+4	デバッガへ出力する旧式カーネルデバッグ関数へのポインタ。
lpGetExpressionRoutine	PWINDBG_GET_EXPRESSION32	8/4	+16	+8	式を評価する旧式関数（32ビット版）へのポインタ。
lpGetSymbolRoutine	PWINDBG_GET_SYMBOL32	8/4	+24	+12	アドレスからシンボル名を取得する旧式関数（32ビット版）へのポインタ。
lpDisasmRoutine	PWINDBG_DISASM32	8/4	+32	+16	逆アセンブルを行う旧式関数（32ビット版）へのポインタ。
lpCheckControlCRoutine	PWINDBG_CHECK_CONTROL_C	8/4	+40	+20	Ctrl+C中断の有無を確認する旧式関数へのポインタ。
lpReadVirtualMemRoutine	PWINDBG_READ_PROCESS_MEMORY_ROUTINE32	8/4	+48	+24	仮想メモリを読み出す旧式関数（32ビット版）へのポインタ。
lpWriteVirtualMemRoutine	PWINDBG_WRITE_PROCESS_MEMORY_ROUTINE32	8/4	+56	+28	仮想メモリへ書き込む旧式関数（32ビット版）へのポインタ。
lpReadPhysicalMemRoutine	PWINDBG_OLDKD_READ_PHYSICAL_MEMORY	8/4	+64	+32	物理メモリを読み出す旧式関数へのポインタ。
lpWritePhysicalMemRoutine	PWINDBG_OLDKD_WRITE_PHYSICAL_MEMORY	8/4	+72	+36	物理メモリへ書き込む旧式関数へのポインタ。

各言語での定義

#include <windows.h>

// WINDBG_OLDKD_EXTENSION_APIS  (x64 80 / x86 40 バイト)
typedef struct WINDBG_OLDKD_EXTENSION_APIS {
    DWORD nSize;
    PWINDBG_OUTPUT_ROUTINE lpOutputRoutine;
    PWINDBG_GET_EXPRESSION32 lpGetExpressionRoutine;
    PWINDBG_GET_SYMBOL32 lpGetSymbolRoutine;
    PWINDBG_DISASM32 lpDisasmRoutine;
    PWINDBG_CHECK_CONTROL_C lpCheckControlCRoutine;
    PWINDBG_READ_PROCESS_MEMORY_ROUTINE32 lpReadVirtualMemRoutine;
    PWINDBG_WRITE_PROCESS_MEMORY_ROUTINE32 lpWriteVirtualMemRoutine;
    PWINDBG_OLDKD_READ_PHYSICAL_MEMORY lpReadPhysicalMemRoutine;
    PWINDBG_OLDKD_WRITE_PHYSICAL_MEMORY lpWritePhysicalMemRoutine;
} WINDBG_OLDKD_EXTENSION_APIS;

using System;
using System.Runtime.InteropServices;

[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct WINDBG_OLDKD_EXTENSION_APIS
{
    public uint nSize;
    public IntPtr lpOutputRoutine;
    public IntPtr lpGetExpressionRoutine;
    public IntPtr lpGetSymbolRoutine;
    public IntPtr lpDisasmRoutine;
    public IntPtr lpCheckControlCRoutine;
    public IntPtr lpReadVirtualMemRoutine;
    public IntPtr lpWriteVirtualMemRoutine;
    public IntPtr lpReadPhysicalMemRoutine;
    public IntPtr lpWritePhysicalMemRoutine;
}

Imports System.Runtime.InteropServices

<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure WINDBG_OLDKD_EXTENSION_APIS
    Public nSize As UInteger
    Public lpOutputRoutine As IntPtr
    Public lpGetExpressionRoutine As IntPtr
    Public lpGetSymbolRoutine As IntPtr
    Public lpDisasmRoutine As IntPtr
    Public lpCheckControlCRoutine As IntPtr
    Public lpReadVirtualMemRoutine As IntPtr
    Public lpWriteVirtualMemRoutine As IntPtr
    Public lpReadPhysicalMemRoutine As IntPtr
    Public lpWritePhysicalMemRoutine As IntPtr
End Structure

import ctypes
from ctypes import wintypes

class WINDBG_OLDKD_EXTENSION_APIS(ctypes.Structure):
    _fields_ = [
        ("nSize", wintypes.DWORD),
        ("lpOutputRoutine", ctypes.c_void_p),
        ("lpGetExpressionRoutine", ctypes.c_void_p),
        ("lpGetSymbolRoutine", ctypes.c_void_p),
        ("lpDisasmRoutine", ctypes.c_void_p),
        ("lpCheckControlCRoutine", ctypes.c_void_p),
        ("lpReadVirtualMemRoutine", ctypes.c_void_p),
        ("lpWriteVirtualMemRoutine", ctypes.c_void_p),
        ("lpReadPhysicalMemRoutine", ctypes.c_void_p),
        ("lpWritePhysicalMemRoutine", ctypes.c_void_p),
    ]

#[repr(C)]
pub struct WINDBG_OLDKD_EXTENSION_APIS {
    pub nSize: u32,
    pub lpOutputRoutine: *mut core::ffi::c_void,
    pub lpGetExpressionRoutine: *mut core::ffi::c_void,
    pub lpGetSymbolRoutine: *mut core::ffi::c_void,
    pub lpDisasmRoutine: *mut core::ffi::c_void,
    pub lpCheckControlCRoutine: *mut core::ffi::c_void,
    pub lpReadVirtualMemRoutine: *mut core::ffi::c_void,
    pub lpWriteVirtualMemRoutine: *mut core::ffi::c_void,
    pub lpReadPhysicalMemRoutine: *mut core::ffi::c_void,
    pub lpWritePhysicalMemRoutine: *mut core::ffi::c_void,
}

import "golang.org/x/sys/windows"

type WINDBG_OLDKD_EXTENSION_APIS struct {
	nSize uint32
	lpOutputRoutine uintptr
	lpGetExpressionRoutine uintptr
	lpGetSymbolRoutine uintptr
	lpDisasmRoutine uintptr
	lpCheckControlCRoutine uintptr
	lpReadVirtualMemRoutine uintptr
	lpWriteVirtualMemRoutine uintptr
	lpReadPhysicalMemRoutine uintptr
	lpWritePhysicalMemRoutine uintptr
}

type
  WINDBG_OLDKD_EXTENSION_APIS = record
    nSize: DWORD;
    lpOutputRoutine: Pointer;
    lpGetExpressionRoutine: Pointer;
    lpGetSymbolRoutine: Pointer;
    lpDisasmRoutine: Pointer;
    lpCheckControlCRoutine: Pointer;
    lpReadVirtualMemRoutine: Pointer;
    lpWriteVirtualMemRoutine: Pointer;
    lpReadPhysicalMemRoutine: Pointer;
    lpWritePhysicalMemRoutine: Pointer;
  end;

const WINDBG_OLDKD_EXTENSION_APIS = extern struct {
    nSize: u32,
    lpOutputRoutine: ?*anyopaque,
    lpGetExpressionRoutine: ?*anyopaque,
    lpGetSymbolRoutine: ?*anyopaque,
    lpDisasmRoutine: ?*anyopaque,
    lpCheckControlCRoutine: ?*anyopaque,
    lpReadVirtualMemRoutine: ?*anyopaque,
    lpWriteVirtualMemRoutine: ?*anyopaque,
    lpReadPhysicalMemRoutine: ?*anyopaque,
    lpWritePhysicalMemRoutine: ?*anyopaque,
};

type
  WINDBG_OLDKD_EXTENSION_APIS {.bycopy.} = object
    nSize: uint32
    lpOutputRoutine: pointer
    lpGetExpressionRoutine: pointer
    lpGetSymbolRoutine: pointer
    lpDisasmRoutine: pointer
    lpCheckControlCRoutine: pointer
    lpReadVirtualMemRoutine: pointer
    lpWriteVirtualMemRoutine: pointer
    lpReadPhysicalMemRoutine: pointer
    lpWritePhysicalMemRoutine: pointer

struct WINDBG_OLDKD_EXTENSION_APIS
{
    uint nSize;
    void* lpOutputRoutine;
    void* lpGetExpressionRoutine;
    void* lpGetSymbolRoutine;
    void* lpDisasmRoutine;
    void* lpCheckControlCRoutine;
    void* lpReadVirtualMemRoutine;
    void* lpWriteVirtualMemRoutine;
    void* lpReadPhysicalMemRoutine;
    void* lpWritePhysicalMemRoutine;
}

HSP用定義

HSP3.7/3.8 は構造体機能が無いため4byte整数配列(dim)+peek/poke で操作(32/64bitでサイズ・位置が異なる場合はタブで分割)。IronHSP は NSTRUCT(#defstruct/stdim/->)で32/64bit共通。

; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x86 レイアウト)
; WINDBG_OLDKD_EXTENSION_APIS サイズ: 40 バイト(x86)
dim st, 10    ; 4byte整数×10(構造体サイズ 40 / 4 切り上げ)
; nSize : DWORD (+0, 4byte)  st.0 = 値  /  値 = st.0   (lpoke/lpeek も可)
; lpOutputRoutine : PWINDBG_OUTPUT_ROUTINE (+4, 4byte)  st.1 = 値  /  値 = st.1   (lpoke/lpeek も可)
; lpGetExpressionRoutine : PWINDBG_GET_EXPRESSION32 (+8, 4byte)  st.2 = 値  /  値 = st.2   (lpoke/lpeek も可)
; lpGetSymbolRoutine : PWINDBG_GET_SYMBOL32 (+12, 4byte)  st.3 = 値  /  値 = st.3   (lpoke/lpeek も可)
; lpDisasmRoutine : PWINDBG_DISASM32 (+16, 4byte)  st.4 = 値  /  値 = st.4   (lpoke/lpeek も可)
; lpCheckControlCRoutine : PWINDBG_CHECK_CONTROL_C (+20, 4byte)  st.5 = 値  /  値 = st.5   (lpoke/lpeek も可)
; lpReadVirtualMemRoutine : PWINDBG_READ_PROCESS_MEMORY_ROUTINE32 (+24, 4byte)  st.6 = 値  /  値 = st.6   (lpoke/lpeek も可)
; lpWriteVirtualMemRoutine : PWINDBG_WRITE_PROCESS_MEMORY_ROUTINE32 (+28, 4byte)  st.7 = 値  /  値 = st.7   (lpoke/lpeek も可)
; lpReadPhysicalMemRoutine : PWINDBG_OLDKD_READ_PHYSICAL_MEMORY (+32, 4byte)  st.8 = 値  /  値 = st.8   (lpoke/lpeek も可)
; lpWritePhysicalMemRoutine : PWINDBG_OLDKD_WRITE_PHYSICAL_MEMORY (+36, 4byte)  st.9 = 値  /  値 = st.9   (lpoke/lpeek も可)
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。

; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x64 レイアウト)
; WINDBG_OLDKD_EXTENSION_APIS サイズ: 80 バイト(x64)
dim st, 20    ; 4byte整数×20(構造体サイズ 80 / 4 切り上げ)
; nSize : DWORD (+0, 4byte)  st.0 = 値  /  値 = st.0   (lpoke/lpeek も可)
; lpOutputRoutine : PWINDBG_OUTPUT_ROUTINE (+8, 8byte)  qpoke st,8,値 / qpeek(st,8)  ※IronHSPのみ。3.7/3.8は lpoke st,8,下位 : lpoke st,12,上位
; lpGetExpressionRoutine : PWINDBG_GET_EXPRESSION32 (+16, 8byte)  qpoke st,16,値 / qpeek(st,16)  ※IronHSPのみ。3.7/3.8は lpoke st,16,下位 : lpoke st,20,上位
; lpGetSymbolRoutine : PWINDBG_GET_SYMBOL32 (+24, 8byte)  qpoke st,24,値 / qpeek(st,24)  ※IronHSPのみ。3.7/3.8は lpoke st,24,下位 : lpoke st,28,上位
; lpDisasmRoutine : PWINDBG_DISASM32 (+32, 8byte)  qpoke st,32,値 / qpeek(st,32)  ※IronHSPのみ。3.7/3.8は lpoke st,32,下位 : lpoke st,36,上位
; lpCheckControlCRoutine : PWINDBG_CHECK_CONTROL_C (+40, 8byte)  qpoke st,40,値 / qpeek(st,40)  ※IronHSPのみ。3.7/3.8は lpoke st,40,下位 : lpoke st,44,上位
; lpReadVirtualMemRoutine : PWINDBG_READ_PROCESS_MEMORY_ROUTINE32 (+48, 8byte)  qpoke st,48,値 / qpeek(st,48)  ※IronHSPのみ。3.7/3.8は lpoke st,48,下位 : lpoke st,52,上位
; lpWriteVirtualMemRoutine : PWINDBG_WRITE_PROCESS_MEMORY_ROUTINE32 (+56, 8byte)  qpoke st,56,値 / qpeek(st,56)  ※IronHSPのみ。3.7/3.8は lpoke st,56,下位 : lpoke st,60,上位
; lpReadPhysicalMemRoutine : PWINDBG_OLDKD_READ_PHYSICAL_MEMORY (+64, 8byte)  qpoke st,64,値 / qpeek(st,64)  ※IronHSPのみ。3.7/3.8は lpoke st,64,下位 : lpoke st,68,上位
; lpWritePhysicalMemRoutine : PWINDBG_OLDKD_WRITE_PHYSICAL_MEMORY (+72, 8byte)  qpoke st,72,値 / qpeek(st,72)  ※IronHSPのみ。3.7/3.8は lpoke st,72,下位 : lpoke st,76,上位
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。

; IronHSP は NSTRUCT(構造体)をサポート。32bit/64bit どちらでも同じコードで動作します。
#defstruct global WINDBG_OLDKD_EXTENSION_APIS
    #field int nSize
    #field intptr lpOutputRoutine
    #field intptr lpGetExpressionRoutine
    #field intptr lpGetSymbolRoutine
    #field intptr lpDisasmRoutine
    #field intptr lpCheckControlCRoutine
    #field intptr lpReadVirtualMemRoutine
    #field intptr lpWriteVirtualMemRoutine
    #field intptr lpReadPhysicalMemRoutine
    #field intptr lpWritePhysicalMemRoutine
#endstruct

stdim st, WINDBG_OLDKD_EXTENSION_APIS        ; NSTRUCT 変数を確保
st->nSize = 100
mes "nSize=" + st->nSize

WINDBG_OLDKD_EXTENSION_APIS

フィールド

各言語での定義

HSP用 定義

HSP用定義