调试器开发实例_调试器框架设计

 1 // LilisiDebug.cpp : Defines the entry point for the console application.
 2 //
 3 
 4 #include "stdafx.h"
 5 #include <windows.h>
 6 
 7 int main(int argc, char* argv[])
 8 {
 9     STARTUPINFO si = { 0 };
10     si.cb = sizeof(si);    
11     PROCESS_INFORMATION pi = { 0 };
12 
13     BOOL bRet = CreateProcess(TEXT("C:\\windows\\system32\\calc.exe"),
14                               NULL,
15                               NULL,
16                               NULL,
17                               FALSE,
18                               DEBUG_ONLY_THIS_PROCESS | CREATE_NEW_CONSOLE,
19                               NULL,
20                               NULL,
21                               &si,
22                               &pi);
23         
24         if ( bRet == FALSE) 
25         {
26             
27             printf("Open Debug Process Error!");
28             return -1;
29         }        
30         CloseHandle(pi.hThread);
31         CloseHandle(pi.hProcess);        
32         return 0;
33 }

 1 typedef struct _DEBUG_EVENT 
 2 {
 3    DWORD dwDebugEventCode;
 4    DWORD dwProcessId;
 5    DWORD dwThreadId;
 6    union {
 7      EXCEPTION_DEBUG_INFO Exception;
 8      CREATE_THREAD_DEBUG_INFO CreateThread;
 9      CREATE_PROCESS_DEBUG_INFO CreateProcessInfo;
10      EXIT_THREAD_DEBUG_INFO ExitThread;
11      EXIT_PROCESS_DEBUG_INFO ExitProcess;
12      LOAD_DLL_DEBUG_INFO LoadDll;
13      UNLOAD_DLL_DEBUG_INFO UnloadDll;
14      OUTPUT_DEBUG_STRING_INFO DebugString;
15      RIP_INFO RipInfo;
16    } u;
17  } DEBUG_EVENT,  

 1 DEBUG_EVENT DebugEv;                   // debugging event information 
 2 DWORD dwContinueStatus = DBG_CONTINUE; // exception continuation 
 3 for(;;) 
 4 { 
 5 
 6 // Wait for a debugging event to occur. The second parameter indicates 
 7 // that the function does not return until a debugging event occurs. 
 8 
 9     WaitForDebugEvent(&DebugEv, INFINITE); 
10 
11 // Process the debugging event code. 
12 switch (DebugEv.dwDebugEventCode) 
13     { 
14         case EXCEPTION_DEBUG_EVENT: 
15         // Process the exception code. When handling 
16         // exceptions, remember to set the continuation 
17         // status parameter (dwContinueStatus). This value 
18         // is used by the ContinueDebugEvent function. 
19 
20             switch (DebugEv.u.Exception.ExceptionRecord.ExceptionCode) 
21             { 
22                 case EXCEPTION_ACCESS_VIOLATION: 
23                 // First chance: Pass this on to the system. 
24                 // Last chance: Display an appropriate error. 
25 
26                 case EXCEPTION_BREAKPOINT: 
27                 // First chance: Display the current 
28                 // instruction and register values. 
29 
30                 case EXCEPTION_DATATYPE_MISALIGNMENT: 
31                 // First chance: Pass this on to the system. 
32                 // Last chance: Display an appropriate error. 
33 
34                 case EXCEPTION_SINGLE_STEP: 
35                 // First chance: Update the display of the 
36                 // current instruction and register values. 
37 
38                 case DBG_CONTROL_C: 
39                 // First chance: Pass this on to the system. 
40                 // Last chance: Display an appropriate error. 
41 
42                 // Handle other exceptions. 
43             } 
44         case CREATE_THREAD_DEBUG_EVENT: 
45         // As needed, examine or change the thread‘s registers 
46         // with the GetThreadContext and SetThreadContext functions; 
47         // and suspend and resume thread execution with the 
48         // SuspendThread and ResumeThread functions. 
49 
50         case CREATE_PROCESS_DEBUG_EVENT: 
51         // As needed, examine or change the registers of the 
52         // process‘s initial thread with the GetThreadContext and 
53         // SetThreadContext functions; read from and write to the 
54         // process‘s virtual memory with the ReadProcessMemory and 
55         // WriteProcessMemory functions; and suspend and resume 
56         // thread execution with the SuspendThread and ResumeThread 
57         // functions. 
58 
59         case EXIT_THREAD_DEBUG_EVENT: 
60         // Display the thread‘s exit code. 
61 
62         case EXIT_PROCESS_DEBUG_EVENT: 
63         // Display the process‘s exit code. 
64 
65         case LOAD_DLL_DEBUG_EVENT: 
66         // Read the debugging information included in the newly 
67         // loaded DLL. 
68 
69         case UNLOAD_DLL_DEBUG_EVENT: 
70         // Display a message that the DLL has been unloaded. 
71 
72         case OUTPUT_DEBUG_STRING_EVENT: 
73         // Display the output debugging string. 
74         }     
75     // Resume executing the thread that reported the debugging event.  
76        ContinueDebugEvent(DebugEv.dwProcessId, 
77                    DebugEv.dwThreadId, dwContinueStatus);
78 }