DosDebug Buffer

From EDM2
Jump to: navigation, search

DosDebug Buffer

DosDebug buffer structure.

Type

ULONG   Pid
ULONG   Tid
LONG    Cmd
LONG    Value
ULONG   Addr
ULONG   Buffer
ULONG   Len
ULONG   Index
ULONG   MTE
ULONG   EAX
ULONG   ECX
ULONG   EDX
ULONG   EBX
ULONG   ESP
ULONG   EBP
ULONG   ESI
ULONG   EDI
ULONG   EFlags
ULONG   EIP
ULONG   CSLim
ULONG   CSBase
UCHAR   CSAcc
UCHAR   CSAtr
USHORT  CS
ULONG   DSLim
ULONG   DSBase
UCHAR   DSAcc
UCHAR   DSAtr
USHORT  DS
ULONG   ESLim
ULONG   ESBase
UCHAR   ESAcc
UCHAR   ESAtr
USHORT  ES
ULONG   FSLim
ULONG   FSBase
UCHAR   FSAcc
UCHAR   FSAtr
USHORT  FS
ULONG   GSLim
ULONG   GSBase
UCHAR   GSAcc
UCHAR   GSAtr
USHORT  GS
ULONG   SSLim
ULONG   SSBase
UCHAR   SSAcc
UCHAR   SSAtr
USHORT  SS

C Declaration Method

typedef struct

Fields

Pid     Debuggee Process ID
Tid     Debuggee Thread ID
Cmd     Command or Notification
Value   Generic Data Value
Addr    Debuggee Address
Buffer  Debugger Buffer Address
Len     Length of Range
Index   Generic Identifier Index
MTE     Module Table Entry Handle
EAX     Register Set
ECX
EDX
EBX
ESP
EBP
ESI
EDI
EFlags
EIP
CSLim   Byte Granular Limits
CSBase  Byte Granular Base
CSAcc   Access Bytes
CSAtr   Attribute Bytes
CS
DSLim
DSBase
DSAcc
DSAtr
DS
ESLim
ESBase
ESAcc
ESAtr
ES
FSLim
FSBase
FSAcc
FSAtr
FS
GSLim
GSBase
GSAcc
GSAtr
GS
SSLim
SSBase
SSAcc
SSAtr
SS