summaryrefslogtreecommitdiffhomepage
path: root/include
diff options
context:
space:
mode:
Diffstat (limited to 'include')
-rw-r--r--include/ntapi/nt_debug.h25
-rw-r--r--include/ntapi/ntapi.h1
2 files changed, 26 insertions, 0 deletions
diff --git a/include/ntapi/nt_debug.h b/include/ntapi/nt_debug.h
index 5e40cba..3e11193 100644
--- a/include/ntapi/nt_debug.h
+++ b/include/ntapi/nt_debug.h
@@ -208,6 +208,24 @@ typedef enum _nt_dbg_fltr_type {
} nt_dbg_fltr_type;
+/* execution flow masks */
+#define NT_DBG_FLOW_MASK_IDLE (1 << NT_DBG_STATE_IDLE)
+#define NT_DBG_FLOW_MASK_REPLY_PENDING (1 << NT_DBG_STATE_REPLY_PENDING)
+
+#define NT_DBG_FLOW_MASK_CREATE_THREAD (1 << NT_DBG_STATE_CREATE_THREAD)
+#define NT_DBG_FLOW_MASK_CREATE_PROCESS (1 << NT_DBG_STATE_CREATE_PROCESS)
+
+#define NT_DBG_FLOW_MASK_EXIT_THREAD (1 << NT_DBG_STATE_EXIT_THREAD)
+#define NT_DBG_FLOW_MASK_EXIT_PROCESS (1 << NT_DBG_STATE_EXIT_PROCESS)
+
+#define NT_DBG_FLOW_MASK_EXCEPTION (1 << NT_DBG_STATE_EXCEPTION)
+#define NT_DBG_FLOW_MASK_BREAKPOINT (1 << NT_DBG_STATE_BREAKPOINT)
+#define NT_DBG_FLOW_MASK_SINGLE_STEP (1 << NT_DBG_STATE_SINGLE_STEP)
+
+#define NT_DBG_FLOW_MASK_DLL_LOAD (1 << NT_DBG_STATE_DLL_LOAD)
+#define NT_DBG_FLOW_MASK_DLL_UNLOAD (1 << NT_DBG_STATE_DLL_UNLOAD)
+
+
/* debug events */
typedef struct _nt_dbg_km_thread_exit {
int32_t exit_status;
@@ -321,4 +339,11 @@ typedef int32_t __stdcall ntapi_tt_create_attach_debug_object(
__in void * hprocess,
__in uint32_t flags);
+typedef int32_t __stdcall ntapi_tt_debug_execution_flow(
+ __in void * hdbgobj,
+ __in void * hserver,
+ __in void * hlogfile,
+ __in uint32_t evtmask,
+ __in uint64_t * nevents);
+
#endif
diff --git a/include/ntapi/ntapi.h b/include/ntapi/ntapi.h
index dc2c22e..493edb2 100644
--- a/include/ntapi/ntapi.h
+++ b/include/ntapi/ntapi.h
@@ -669,6 +669,7 @@ typedef struct _ntapi_vtbl {
/* nt_debug.h */
ntapi_tt_create_debug_object * tt_create_debug_object;
ntapi_tt_create_attach_debug_object * tt_create_attach_debug_object;
+ ntapi_tt_debug_execution_flow * tt_debug_execution_flow;
} ntapi_vtbl;