blob: 9025f64f5cef806be63cb6b89e44f8a198eec8e1 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
/*++ BUILD Version: 0001 // Increment this if a change has global effects
Copyright (c) 1994 Microsoft Corporation
Module Name:
ntiodump.h
Abstract:
This is the include file that defines all constants and types for
accessing memory dump files.
Author:
Darryl Havens (darrylh) 6-jan-1994
Revision History:
--*/
#ifndef _NTIODUMP_
#define _NTIODUMP_
//
// Define the information required to process memory dumps.
//
//
// Define dump header longword offset constants.
//
#define DH_PHYSICAL_MEMORY_BLOCK 25
#define DH_CONTEXT_RECORD 200
#define DH_EXCEPTION_RECORD 500
//
// Define the dump header structure.
//
typedef struct _DUMP_HEADER {
ULONG Signature;
ULONG ValidDump;
ULONG MajorVersion;
ULONG MinorVersion;
ULONG DirectoryTableBase;
PULONG PfnDataBase;
PLIST_ENTRY PsLoadedModuleList;
PLIST_ENTRY PsActiveProcessHead;
ULONG MachineImageType;
ULONG NumberProcessors;
ULONG BugCheckCode;
ULONG BugCheckParameter1;
ULONG BugCheckParameter2;
ULONG BugCheckParameter3;
ULONG BugCheckParameter4;
CHAR VersionUser[32];
ULONG Spare1;
ULONG Spare2;
} DUMP_HEADER, *PDUMP_HEADER;
#endif // _NTIODUMP_
|
