vdm.h File Reference

Go to the source code of this file.

Classes
struct	_Vdm_InterruptHandler
struct	_Vdm_FaultHandler
struct	_VdmEventInfo
struct	_Vdm_Printer_Info
struct	_VdmTraceInfo
struct	_tagFAMILY_TABLE
struct	_Vdm_Tib
struct	_VDM_PROCESS_OBJECTS

Macros
#define	_VM_DEBUG_   0x00
#define	VM_EXEC_DEBUG   0x01
#define	VMTRACE(x, fmt, ...)   DPRINT(fmt, ##__VA_ARGS__)
#define	TRAMPOLINE_BASE   0x10000
#define	TRAMPOLINE_TIB   0x12000
#define	TRAMPOLINE_TEB   0x13000
#define	TRAMPOLINE_BOP   0xFEC4C4
#define	VdmState    (PULONG)FIXED_NTVDMSTATE_LINEAR_PC_AT

Typedefs
typedef enum _VdmEventClass	VDMEVENTCLASS
typedef enum _VdmEventClass *	PVDMEVENTCLASS
typedef struct _Vdm_InterruptHandler	VDM_INTERRUPTHANDLER
typedef struct _Vdm_InterruptHandler *	PVDM_INTERRUPTHANDLER
typedef struct _Vdm_FaultHandler	VDM_FAULTHANDLER
typedef struct _Vdm_FaultHandler *	PVDM_FAULTHANDLER
typedef struct _VdmEventInfo	VDMEVENTINFO
typedef struct _VdmEventInfo *	PVDMEVENTINFO
typedef struct _Vdm_Printer_Info	VDM_PRINTER_INFO
typedef struct _Vdm_Printer_Info *	PVDM_PRINTER_INFO
typedef struct _VdmTraceInfo	VDMTRACEINFO
typedef struct _VdmTraceInfo *	PVDMTRACEINFO
typedef struct _tagFAMILY_TABLE	FAMILY_TABLE
typedef struct _tagFAMILY_TABLE *	PFAMILY_TABLE
typedef struct _Vdm_Tib	VDM_TIB
typedef struct _Vdm_Tib *	PVDM_TIB
typedef struct _VDM_PROCESS_OBJECTS	VDM_PROCESS_OBJECTS
typedef struct _VDM_PROCESS_OBJECTS *	PVDM_PROCESS_OBJECTS

Enumerations
enum	_VdmEventClass {   VdmIO , VdmStringIO , VdmMemAccess , VdmIntAck ,   VdmBop , VdmError , VdmIrq13 }

Functions
NTSTATUS NTAPI	VdmpStartExecution (VOID)

Macro Definition Documentation

_VM_DEBUG_

#define _VM_DEBUG_   0x00

Definition at line 12 of file vdm.h.

TRAMPOLINE_BASE

#define TRAMPOLINE_BASE   0x10000

Definition at line 36 of file vdm.h.

TRAMPOLINE_BOP

#define TRAMPOLINE_BOP   0xFEC4C4

Definition at line 43 of file vdm.h.

TRAMPOLINE_TEB

#define TRAMPOLINE_TEB   0x13000

Definition at line 38 of file vdm.h.

TRAMPOLINE_TIB

#define TRAMPOLINE_TIB   0x12000

Definition at line 37 of file vdm.h.

VdmState

#define VdmState    (PULONG)FIXED_NTVDMSTATE_LINEAR_PC_AT

Definition at line 48 of file vdm.h.

VM_EXEC_DEBUG

#define VM_EXEC_DEBUG   0x01

Definition at line 17 of file vdm.h.

VMTRACE

#define VMTRACE	(		x,
			fmt,
			...
	)		DPRINT(fmt, ##__VA_ARGS__)

Definition at line 30 of file vdm.h.

Typedef Documentation

FAMILY_TABLE

typedef struct _tagFAMILY_TABLE FAMILY_TABLE

PFAMILY_TABLE

typedef struct _tagFAMILY_TABLE * PFAMILY_TABLE

PVDM_FAULTHANDLER

typedef struct _Vdm_FaultHandler * PVDM_FAULTHANDLER

PVDM_INTERRUPTHANDLER

typedef struct _Vdm_InterruptHandler * PVDM_INTERRUPTHANDLER

PVDM_PRINTER_INFO

typedef struct _Vdm_Printer_Info * PVDM_PRINTER_INFO

PVDM_PROCESS_OBJECTS

typedef struct _VDM_PROCESS_OBJECTS * PVDM_PROCESS_OBJECTS

PVDM_TIB

typedef struct _Vdm_Tib * PVDM_TIB

PVDMEVENTCLASS

typedef enum _VdmEventClass * PVDMEVENTCLASS

PVDMEVENTINFO

typedef struct _VdmEventInfo * PVDMEVENTINFO

PVDMTRACEINFO

typedef struct _VdmTraceInfo * PVDMTRACEINFO

VDM_FAULTHANDLER

typedef struct _Vdm_FaultHandler VDM_FAULTHANDLER

VDM_INTERRUPTHANDLER

typedef struct _Vdm_InterruptHandler VDM_INTERRUPTHANDLER

VDM_PRINTER_INFO

typedef struct _Vdm_Printer_Info VDM_PRINTER_INFO

VDM_PROCESS_OBJECTS

typedef struct _VDM_PROCESS_OBJECTS VDM_PROCESS_OBJECTS

VDM_TIB

typedef struct _Vdm_Tib VDM_TIB

VDMEVENTCLASS

typedef enum _VdmEventClass VDMEVENTCLASS

VDMEVENTINFO

typedef struct _VdmEventInfo VDMEVENTINFO

VDMTRACEINFO

typedef struct _VdmTraceInfo VDMTRACEINFO

Enumeration Type Documentation

_VdmEventClass

enum _VdmEventClass

Enumerator
VdmIO
VdmStringIO
VdmMemAccess
VdmIntAck
VdmBop
VdmError
VdmIrq13

Definition at line 54 of file vdm.h.

{
    VdmIO,
    VdmStringIO,
    VdmMemAccess,
    VdmIntAck,
    VdmBop,
    VdmError,
    VdmIrq13
} VDMEVENTCLASS, *PVDMEVENTCLASS;

Function Documentation

VdmpStartExecution()

NTSTATUS NTAPI VdmpStartExecution

(

VOID

)

Definition at line 171 of file vdmexec.c.

{
    PETHREAD Thread = PsGetCurrentThread();
    PKTRAP_FRAME VdmFrame;
    NTSTATUS Status;
    PVDM_TIB VdmTib;
    BOOLEAN Interrupts;
    KIRQL OldIrql;
    CONTEXT VdmContext;
    PAGED_CODE();
 
    /* Get the thread's VDM frame and TIB */
    VdmFrame = (PVOID)((ULONG_PTR)Thread->Tcb.InitialStack -
                                  sizeof(FX_SAVE_AREA) -
                                  sizeof(KTRAP_FRAME));
    Status = VdmpGetVdmTib(&VdmTib);
    if (!NT_SUCCESS(Status)) return STATUS_INVALID_SYSTEM_SERVICE;
 
    /* Go to APC level */
    KeRaiseIrql(APC_LEVEL, &OldIrql);
 
    /* Check if interrupts are enabled */
    Interrupts = (BOOLEAN)(VdmTib->VdmContext.EFlags & EFLAGS_INTERRUPT_MASK);
 
    /* We don't support full VDM yet, this shouldn't happen */
    ASSERT(*VdmState == 0);
    ASSERT(VdmTib->VdmContext.EFlags & EFLAGS_V86_MASK);
 
    /* Check if VME is supported and V86 mode was enabled */
    if ((KeI386VirtualIntExtensions) &&
        (VdmTib->VdmContext.EFlags & EFLAGS_V86_MASK))
    {
        /* Check if interrupts are enabled */
        if (Interrupts)
        {
            /* Set fake IF flag */
            VdmTib->VdmContext.EFlags |= EFLAGS_VIF;
        }
        else
        {
            /* Remove fake IF flag, turn on real IF flag */
            VdmTib->VdmContext.EFlags &= ~EFLAGS_VIF;
            VdmTib->VdmContext.EFlags |= EFLAGS_INTERRUPT_MASK;
        }
    }
    else
    {
        /* Set interrupt state in the VDM State */
        if (VdmTib->VdmContext.EFlags & EFLAGS_INTERRUPT_MASK)
        {
            /* Enable them as well */
            InterlockedOr((PLONG)VdmState, EFLAGS_INTERRUPT_MASK);
        }
        else
        {
            /* Disable them */
            InterlockedAnd((PLONG)VdmState, ~EFLAGS_INTERRUPT_MASK);
        }
 
        /* Enable the interrupt flag */
        VdmTib->VdmContext.EFlags |= EFLAGS_INTERRUPT_MASK;
    }
 
    /*  Get the VDM context and make sure it's not an edited frame */
    VdmContext = VdmTib->VdmContext;
    if (!(VdmContext.SegCs & FRAME_EDITED))
    {
        /* Fail */
        KeLowerIrql(OldIrql);
        return STATUS_INVALID_SYSTEM_SERVICE;
    }
 
    /* Now do the VDM Swap */
    VdmSwapContext(VdmFrame, &VdmTib->MonitorContext, &VdmContext);
 
    /* Lower the IRQL and return EAX */
    KeLowerIrql(OldIrql);
    return VdmFrame->Eax;
}

Referenced by NtVdmControl().