diff options
author | Adam <you@example.com> | 2020-05-17 05:51:50 +0200 |
---|---|---|
committer | Adam <you@example.com> | 2020-05-17 05:51:50 +0200 |
commit | e611b132f9b8abe35b362e5870b74bce94a1e58e (patch) | |
tree | a5781d2ec0e085eeca33cf350cf878f2efea6fe5 /public/sdk/inc/ntiodump.h | |
download | NT4.0-e611b132f9b8abe35b362e5870b74bce94a1e58e.tar NT4.0-e611b132f9b8abe35b362e5870b74bce94a1e58e.tar.gz NT4.0-e611b132f9b8abe35b362e5870b74bce94a1e58e.tar.bz2 NT4.0-e611b132f9b8abe35b362e5870b74bce94a1e58e.tar.lz NT4.0-e611b132f9b8abe35b362e5870b74bce94a1e58e.tar.xz NT4.0-e611b132f9b8abe35b362e5870b74bce94a1e58e.tar.zst NT4.0-e611b132f9b8abe35b362e5870b74bce94a1e58e.zip |
Diffstat (limited to 'public/sdk/inc/ntiodump.h')
-rw-r--r-- | public/sdk/inc/ntiodump.h | 64 |
1 files changed, 64 insertions, 0 deletions
diff --git a/public/sdk/inc/ntiodump.h b/public/sdk/inc/ntiodump.h new file mode 100644 index 000000000..9025f64f5 --- /dev/null +++ b/public/sdk/inc/ntiodump.h @@ -0,0 +1,64 @@ +/*++ BUILD Version: 0001 // Increment this if a change has global effects + +Copyright (c) 1994 Microsoft Corporation + +Module Name: + + ntiodump.h + +Abstract: + + This is the include file that defines all constants and types for + accessing memory dump files. + +Author: + + Darryl Havens (darrylh) 6-jan-1994 + +Revision History: + + +--*/ + +#ifndef _NTIODUMP_ +#define _NTIODUMP_ + +// +// Define the information required to process memory dumps. +// + +// +// Define dump header longword offset constants. +// + +#define DH_PHYSICAL_MEMORY_BLOCK 25 +#define DH_CONTEXT_RECORD 200 +#define DH_EXCEPTION_RECORD 500 + +// +// Define the dump header structure. +// + +typedef struct _DUMP_HEADER { + ULONG Signature; + ULONG ValidDump; + ULONG MajorVersion; + ULONG MinorVersion; + ULONG DirectoryTableBase; + PULONG PfnDataBase; + PLIST_ENTRY PsLoadedModuleList; + PLIST_ENTRY PsActiveProcessHead; + ULONG MachineImageType; + ULONG NumberProcessors; + ULONG BugCheckCode; + ULONG BugCheckParameter1; + ULONG BugCheckParameter2; + ULONG BugCheckParameter3; + ULONG BugCheckParameter4; + CHAR VersionUser[32]; + ULONG Spare1; + ULONG Spare2; +} DUMP_HEADER, *PDUMP_HEADER; + + +#endif // _NTIODUMP_ |