Process Hacker
svcext.h
Go to the documentation of this file.
1 #ifndef SVCEXT_H
2 #define SVCEXT_H
3 
4 // API
5 
6 typedef enum _DN_API_NUMBER
7 {
8  DnGetRuntimeNameByAddressApiNumber = 1,
9  DnPredictAddressesFromClrDataApiNumber = 2
10 } DN_API_NUMBER;
11 
12 typedef union _DN_API_GETRUNTIMENAMEBYADDRESS
13 {
14  struct
15  {
16  ULONG ProcessId;
17  ULONG Reserved;
18  ULONG64 Address;
19  PH_RELATIVE_STRINGREF Name; // out
20  } i;
21  struct
22  {
23  ULONG64 Displacement;
24  ULONG NameLength;
25  } o;
26 } DN_API_GETRUNTIMENAMEBYADDRESS, *PDN_API_GETRUNTIMENAMEBYADDRESS;
27 
28 typedef union _DN_API_PREDICTADDRESSESFROMCLRDATA
29 {
30  struct
31  {
32  ULONG ProcessId;
33  ULONG ThreadId;
34  ULONG PcAddress;
35  ULONG FrameAddress;
36  ULONG StackAddress;
37  } i;
38  struct
39  {
40  ULONG PredictedEip;
41  ULONG PredictedEbp;
42  ULONG PredictedEsp;
43  } o;
44 } DN_API_PREDICTADDRESSESFROMCLRDATA, *PDN_API_PREDICTADDRESSESFROMCLRDATA;
45 
46 // Calls
47 
48 PPH_STRING CallGetRuntimeNameByAddress(
49  _In_ HANDLE ProcessId,
50  _In_ ULONG64 Address,
51  _Out_opt_ PULONG64 Displacement
52  );
53 
54 VOID CallPredictAddressesFromClrData(
55  _In_ HANDLE ProcessId,
56  _In_ HANDLE ThreadId,
57  _In_ PVOID PcAddress,
58  _In_ PVOID FrameAddress,
59  _In_ PVOID StackAddress,
60  _Out_ PVOID *PredictedEip,
61  _Out_ PVOID *PredictedEbp,
62  _Out_ PVOID *PredictedEsp
63  );
64 
65 #endif