813 lines
28 KiB
C
813 lines
28 KiB
C
/*
|
|
* Debugger i386 specific functions
|
|
*
|
|
* Copyright 2004 Eric Pouech
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
|
|
*/
|
|
|
|
#include "debugger.h"
|
|
#include "wine/debug.h"
|
|
|
|
#ifdef __i386__
|
|
|
|
WINE_DEFAULT_DEBUG_CHANNEL(winedbg);
|
|
|
|
/* db_disasm.c */
|
|
extern void be_i386_disasm_one_insn(ADDRESS64* addr, int display);
|
|
|
|
#define STEP_FLAG 0x00000100 /* single step flag */
|
|
#define V86_FLAG 0x00020000
|
|
|
|
#define IS_VM86_MODE(ctx) (ctx->EFlags & V86_FLAG)
|
|
|
|
static ADDRESS_MODE get_selector_type(HANDLE hThread, const CONTEXT* ctx, WORD sel)
|
|
{
|
|
LDT_ENTRY le;
|
|
|
|
if (IS_VM86_MODE(ctx)) return AddrModeReal;
|
|
/* null or system selector */
|
|
if (!(sel & 4) || ((sel >> 3) < 17)) return AddrModeFlat;
|
|
if (dbg_curr_process->process_io->get_selector(hThread, sel, &le))
|
|
return le.HighWord.Bits.Default_Big ? AddrMode1632 : AddrMode1616;
|
|
/* selector doesn't exist */
|
|
return -1;
|
|
}
|
|
|
|
static void* be_i386_linearize(HANDLE hThread, const ADDRESS64* addr)
|
|
{
|
|
LDT_ENTRY le;
|
|
|
|
switch (addr->Mode)
|
|
{
|
|
case AddrModeReal:
|
|
return (void*)((DWORD)(LOWORD(addr->Segment) << 4) + (DWORD)addr->Offset);
|
|
case AddrMode1632:
|
|
if (!(addr->Segment & 4) || ((addr->Segment >> 3) < 17))
|
|
return (void*)(DWORD)addr->Offset;
|
|
/* fall through */
|
|
case AddrMode1616:
|
|
if (!dbg_curr_process->process_io->get_selector(hThread, addr->Segment, &le)) return NULL;
|
|
return (void*)((le.HighWord.Bits.BaseHi << 24) +
|
|
(le.HighWord.Bits.BaseMid << 16) + le.BaseLow +
|
|
(DWORD)addr->Offset);
|
|
case AddrModeFlat:
|
|
return (void*)(DWORD)addr->Offset;
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
static BOOL be_i386_build_addr(HANDLE hThread, const CONTEXT* ctx, ADDRESS64* addr,
|
|
unsigned seg, unsigned long offset)
|
|
{
|
|
addr->Mode = AddrModeFlat;
|
|
addr->Segment = seg;
|
|
addr->Offset = offset;
|
|
if (seg)
|
|
{
|
|
addr->Mode = get_selector_type(hThread, ctx, seg);
|
|
switch (addr->Mode)
|
|
{
|
|
case AddrModeReal:
|
|
case AddrMode1616:
|
|
addr->Offset &= 0xffff;
|
|
break;
|
|
case AddrModeFlat:
|
|
case AddrMode1632:
|
|
break;
|
|
default:
|
|
addr->Mode = -1;
|
|
return FALSE;
|
|
}
|
|
}
|
|
return TRUE;
|
|
}
|
|
|
|
static BOOL be_i386_get_addr(HANDLE hThread, const CONTEXT* ctx,
|
|
enum be_cpu_addr bca, ADDRESS64* addr)
|
|
{
|
|
switch (bca)
|
|
{
|
|
case be_cpu_addr_pc:
|
|
return be_i386_build_addr(hThread, ctx, addr, ctx->SegCs, ctx->Eip);
|
|
case be_cpu_addr_stack:
|
|
return be_i386_build_addr(hThread, ctx, addr, ctx->SegSs, ctx->Esp);
|
|
case be_cpu_addr_frame:
|
|
return be_i386_build_addr(hThread, ctx, addr, ctx->SegSs, ctx->Ebp);
|
|
}
|
|
return FALSE;
|
|
}
|
|
|
|
static BOOL be_i386_get_register_info(int regno, enum be_cpu_addr* kind)
|
|
{
|
|
switch (regno)
|
|
{
|
|
case CV_REG_EIP: *kind = be_cpu_addr_pc; return TRUE;
|
|
case CV_REG_EBP: *kind = be_cpu_addr_frame; return TRUE;
|
|
case CV_REG_ESP: *kind = be_cpu_addr_stack; return TRUE;
|
|
}
|
|
return FALSE;
|
|
}
|
|
|
|
static void be_i386_single_step(CONTEXT* ctx, BOOL enable)
|
|
{
|
|
if (enable) ctx->EFlags |= STEP_FLAG;
|
|
else ctx->EFlags &= ~STEP_FLAG;
|
|
}
|
|
|
|
static void be_i386_all_print_context(HANDLE hThread, const CONTEXT* ctx)
|
|
{
|
|
long double ST[8]; /* These are for floating regs */
|
|
int cnt;
|
|
|
|
/* Break out the FPU state and the floating point registers */
|
|
dbg_printf("Floating Point Unit status:\n");
|
|
dbg_printf(" FLCW:%04x ", LOWORD(ctx->FloatSave.ControlWord));
|
|
dbg_printf(" FLTW:%04x ", LOWORD(ctx->FloatSave.TagWord));
|
|
dbg_printf(" FLEO:%08x ", (unsigned int) ctx->FloatSave.ErrorOffset);
|
|
dbg_printf(" FLSW:%04x", LOWORD(ctx->FloatSave.StatusWord));
|
|
|
|
/* Isolate the condition code bits - note they are not contiguous */
|
|
dbg_printf("(CC:%d%d%d%d", (ctx->FloatSave.StatusWord & 0x00004000) >> 14,
|
|
(ctx->FloatSave.StatusWord & 0x00000400) >> 10,
|
|
(ctx->FloatSave.StatusWord & 0x00000200) >> 9,
|
|
(ctx->FloatSave.StatusWord & 0x00000100) >> 8);
|
|
|
|
/* Now pull out the 3 bit of the TOP stack pointer */
|
|
dbg_printf(" TOP:%01x", (unsigned int) (ctx->FloatSave.StatusWord & 0x00003800) >> 11);
|
|
|
|
/* Lets analyse the error bits and indicate the status
|
|
* the Invalid Op flag has sub status which is tested as follows */
|
|
if (ctx->FloatSave.StatusWord & 0x00000001) { /* Invalid Fl OP */
|
|
if (ctx->FloatSave.StatusWord & 0x00000040) { /* Stack Fault */
|
|
if (ctx->FloatSave.StatusWord & 0x00000200) /* C1 says Overflow */
|
|
dbg_printf(" #IE(Stack Overflow)");
|
|
else
|
|
dbg_printf(" #IE(Stack Underflow)"); /* Underflow */
|
|
}
|
|
else dbg_printf(" #IE(Arthimetic error)"); /* Invalid Fl OP */
|
|
}
|
|
|
|
if (ctx->FloatSave.StatusWord & 0x00000002) dbg_printf(" #DE"); /* Denormalised OP */
|
|
if (ctx->FloatSave.StatusWord & 0x00000004) dbg_printf(" #ZE"); /* Zero Divide */
|
|
if (ctx->FloatSave.StatusWord & 0x00000008) dbg_printf(" #OE"); /* Overflow */
|
|
if (ctx->FloatSave.StatusWord & 0x00000010) dbg_printf(" #UE"); /* Underflow */
|
|
if (ctx->FloatSave.StatusWord & 0x00000020) dbg_printf(" #PE"); /* Precision error */
|
|
if (ctx->FloatSave.StatusWord & 0x00000040)
|
|
if (!(ctx->FloatSave.StatusWord & 0x00000001))
|
|
dbg_printf(" #SE"); /* Stack Fault (don't think this can occur) */
|
|
if (ctx->FloatSave.StatusWord & 0x00000080) dbg_printf(" #ES"); /* Error Summary */
|
|
if (ctx->FloatSave.StatusWord & 0x00008000) dbg_printf(" #FB"); /* FPU Busy */
|
|
dbg_printf(")\n");
|
|
|
|
/* Here are the rest of the registers */
|
|
dbg_printf(" FLES:%08x FLDO:%08x FLDS:%08x FLCNS:%08x\n",
|
|
ctx->FloatSave.ErrorSelector,
|
|
ctx->FloatSave.DataOffset,
|
|
ctx->FloatSave.DataSelector,
|
|
ctx->FloatSave.Cr0NpxState);
|
|
|
|
/* Now for the floating point registers */
|
|
dbg_printf("Floating Point Registers:\n");
|
|
for (cnt = 0; cnt < 4; cnt++)
|
|
{
|
|
memcpy(&ST[cnt], &ctx->FloatSave.RegisterArea[cnt * 10], 10);
|
|
dbg_printf(" ST%d:%Lf ", cnt, ST[cnt]);
|
|
}
|
|
dbg_printf("\n");
|
|
for (cnt = 4; cnt < 8; cnt++)
|
|
{
|
|
memcpy(&ST[cnt], &ctx->FloatSave.RegisterArea[cnt * 10], 10);
|
|
dbg_printf(" ST%d:%Lf ", cnt, ST[cnt]);
|
|
}
|
|
dbg_printf("\n");
|
|
}
|
|
|
|
static void be_i386_print_context(HANDLE hThread, const CONTEXT* ctx, int all_regs)
|
|
{
|
|
static const char flags[] = "aVR-N--ODITSZ-A-P-C";
|
|
int i;
|
|
char buf[33];
|
|
|
|
dbg_printf("Register dump:\n");
|
|
|
|
/* First get the segment registers out of the way */
|
|
dbg_printf(" CS:%04x SS:%04x DS:%04x ES:%04x FS:%04x GS:%04x",
|
|
(WORD)ctx->SegCs, (WORD)ctx->SegSs,
|
|
(WORD)ctx->SegDs, (WORD)ctx->SegEs,
|
|
(WORD)ctx->SegFs, (WORD)ctx->SegGs);
|
|
|
|
strcpy(buf, flags);
|
|
for (i = 0; buf[i]; i++)
|
|
if (buf[i] != '-' && !(ctx->EFlags & (1 << (sizeof(flags) - 2 - i))))
|
|
buf[i] = ' ';
|
|
|
|
switch (get_selector_type(hThread, ctx, ctx->SegCs))
|
|
{
|
|
case AddrMode1616:
|
|
case AddrModeReal:
|
|
dbg_printf("\n IP:%04x SP:%04x BP:%04x FLAGS:%04x(%s)\n",
|
|
LOWORD(ctx->Eip), LOWORD(ctx->Esp),
|
|
LOWORD(ctx->Ebp), LOWORD(ctx->EFlags), buf);
|
|
dbg_printf(" AX:%04x BX:%04x CX:%04x DX:%04x SI:%04x DI:%04x\n",
|
|
LOWORD(ctx->Eax), LOWORD(ctx->Ebx),
|
|
LOWORD(ctx->Ecx), LOWORD(ctx->Edx),
|
|
LOWORD(ctx->Esi), LOWORD(ctx->Edi));
|
|
break;
|
|
case AddrModeFlat:
|
|
case AddrMode1632:
|
|
dbg_printf("\n EIP:%08x ESP:%08x EBP:%08x EFLAGS:%08x(%s)\n",
|
|
ctx->Eip, ctx->Esp, ctx->Ebp, ctx->EFlags, buf);
|
|
dbg_printf(" EAX:%08x EBX:%08x ECX:%08x EDX:%08x\n",
|
|
ctx->Eax, ctx->Ebx, ctx->Ecx, ctx->Edx);
|
|
dbg_printf(" ESI:%08x EDI:%08x\n",
|
|
ctx->Esi, ctx->Edi);
|
|
break;
|
|
}
|
|
|
|
if (all_regs) be_i386_all_print_context(hThread, ctx); /* print floating regs */
|
|
|
|
}
|
|
|
|
static void be_i386_print_segment_info(HANDLE hThread, const CONTEXT* ctx)
|
|
{
|
|
if (get_selector_type(hThread, ctx, ctx->SegCs) == AddrMode1616)
|
|
{
|
|
info_win32_segments(ctx->SegDs >> 3, 1);
|
|
if (ctx->SegEs != ctx->SegDs) info_win32_segments(ctx->SegEs >> 3, 1);
|
|
}
|
|
info_win32_segments(ctx->SegFs >> 3, 1);
|
|
}
|
|
|
|
static struct dbg_internal_var be_i386_ctx[] =
|
|
{
|
|
{CV_REG_AL, "AL", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Eax), dbg_itype_unsigned_char_int},
|
|
{CV_REG_CL, "CL", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Ecx), dbg_itype_unsigned_char_int},
|
|
{CV_REG_DL, "DL", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Edx), dbg_itype_unsigned_char_int},
|
|
{CV_REG_BL, "BL", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Ebx), dbg_itype_unsigned_char_int},
|
|
{CV_REG_AH, "AH", (DWORD_PTR*)(FIELD_OFFSET(CONTEXT, Eax)+1), dbg_itype_unsigned_char_int},
|
|
{CV_REG_CH, "CH", (DWORD_PTR*)(FIELD_OFFSET(CONTEXT, Ecx)+1), dbg_itype_unsigned_char_int},
|
|
{CV_REG_DH, "DH", (DWORD_PTR*)(FIELD_OFFSET(CONTEXT, Edx)+1), dbg_itype_unsigned_char_int},
|
|
{CV_REG_BH, "BH", (DWORD_PTR*)(FIELD_OFFSET(CONTEXT, Ebx)+1), dbg_itype_unsigned_char_int},
|
|
{CV_REG_AX, "AX", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Eax), dbg_itype_unsigned_short_int},
|
|
{CV_REG_CX, "CX", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Ecx), dbg_itype_unsigned_short_int},
|
|
{CV_REG_DX, "DX", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Edx), dbg_itype_unsigned_short_int},
|
|
{CV_REG_BX, "BX", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Ebx), dbg_itype_unsigned_short_int},
|
|
{CV_REG_SP, "SP", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Esp), dbg_itype_unsigned_short_int},
|
|
{CV_REG_BP, "BP", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Ebp), dbg_itype_unsigned_short_int},
|
|
{CV_REG_SI, "SI", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Esi), dbg_itype_unsigned_short_int},
|
|
{CV_REG_DI, "DI", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Edi), dbg_itype_unsigned_short_int},
|
|
{CV_REG_EAX, "EAX", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Eax), dbg_itype_unsigned_int},
|
|
{CV_REG_ECX, "ECX", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Ecx), dbg_itype_unsigned_int},
|
|
{CV_REG_EDX, "EDX", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Edx), dbg_itype_unsigned_int},
|
|
{CV_REG_EBX, "EBX", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Ebx), dbg_itype_unsigned_int},
|
|
{CV_REG_ESP, "ESP", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Esp), dbg_itype_unsigned_int},
|
|
{CV_REG_EBP, "EBP", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Ebp), dbg_itype_unsigned_int},
|
|
{CV_REG_ESI, "ESI", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Esi), dbg_itype_unsigned_int},
|
|
{CV_REG_EDI, "EDI", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Edi), dbg_itype_unsigned_int},
|
|
{CV_REG_ES, "ES", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, SegEs), dbg_itype_unsigned_short_int},
|
|
{CV_REG_CS, "CS", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, SegCs), dbg_itype_unsigned_short_int},
|
|
{CV_REG_SS, "SS", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, SegSs), dbg_itype_unsigned_short_int},
|
|
{CV_REG_DS, "DS", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, SegDs), dbg_itype_unsigned_short_int},
|
|
{CV_REG_FS, "FS", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, SegFs), dbg_itype_unsigned_short_int},
|
|
{CV_REG_GS, "GS", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, SegGs), dbg_itype_unsigned_short_int},
|
|
{CV_REG_IP, "IP", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Eip), dbg_itype_unsigned_short_int},
|
|
{CV_REG_FLAGS, "FLAGS", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, EFlags), dbg_itype_unsigned_short_int},
|
|
{CV_REG_EIP, "EIP", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, Eip), dbg_itype_unsigned_int},
|
|
{CV_REG_EFLAGS, "EFLAGS", (DWORD_PTR*)FIELD_OFFSET(CONTEXT, EFlags), dbg_itype_unsigned_int},
|
|
{0, NULL, 0, dbg_itype_none}
|
|
};
|
|
|
|
static BOOL be_i386_is_step_over_insn(const void* insn)
|
|
{
|
|
BYTE ch;
|
|
|
|
for (;;)
|
|
{
|
|
if (!dbg_read_memory(insn, &ch, sizeof(ch))) return FALSE;
|
|
|
|
switch (ch)
|
|
{
|
|
/* Skip all prefixes */
|
|
case 0x2e: /* cs: */
|
|
case 0x36: /* ss: */
|
|
case 0x3e: /* ds: */
|
|
case 0x26: /* es: */
|
|
case 0x64: /* fs: */
|
|
case 0x65: /* gs: */
|
|
case 0x66: /* opcode size prefix */
|
|
case 0x67: /* addr size prefix */
|
|
case 0xf0: /* lock */
|
|
case 0xf2: /* repne */
|
|
case 0xf3: /* repe */
|
|
insn = (const char*)insn + 1;
|
|
continue;
|
|
|
|
/* Handle call instructions */
|
|
case 0xcd: /* int <intno> */
|
|
case 0xe8: /* call <offset> */
|
|
case 0x9a: /* lcall <seg>:<off> */
|
|
return TRUE;
|
|
|
|
case 0xff: /* call <regmodrm> */
|
|
if (!dbg_read_memory((const char*)insn + 1, &ch, sizeof(ch)))
|
|
return FALSE;
|
|
return (((ch & 0x38) == 0x10) || ((ch & 0x38) == 0x18));
|
|
|
|
/* Handle string instructions */
|
|
case 0x6c: /* insb */
|
|
case 0x6d: /* insw */
|
|
case 0x6e: /* outsb */
|
|
case 0x6f: /* outsw */
|
|
case 0xa4: /* movsb */
|
|
case 0xa5: /* movsw */
|
|
case 0xa6: /* cmpsb */
|
|
case 0xa7: /* cmpsw */
|
|
case 0xaa: /* stosb */
|
|
case 0xab: /* stosw */
|
|
case 0xac: /* lodsb */
|
|
case 0xad: /* lodsw */
|
|
case 0xae: /* scasb */
|
|
case 0xaf: /* scasw */
|
|
return TRUE;
|
|
|
|
default:
|
|
return FALSE;
|
|
}
|
|
}
|
|
}
|
|
|
|
static BOOL be_i386_is_function_return(const void* insn)
|
|
{
|
|
BYTE ch;
|
|
|
|
if (!dbg_read_memory(insn, &ch, sizeof(ch))) return FALSE;
|
|
if (ch == 0xF3) /* REP */
|
|
{
|
|
insn = (const char*)insn + 1;
|
|
if (!dbg_read_memory(insn, &ch, sizeof(ch))) return FALSE;
|
|
}
|
|
return (ch == 0xC2) || (ch == 0xC3);
|
|
}
|
|
|
|
static BOOL be_i386_is_break_insn(const void* insn)
|
|
{
|
|
BYTE c;
|
|
|
|
if (!dbg_read_memory(insn, &c, sizeof(c))) return FALSE;
|
|
return c == 0xCC;
|
|
}
|
|
|
|
static unsigned get_size(ADDRESS_MODE am)
|
|
{
|
|
if (am == AddrModeReal || am == AddrMode1616) return 16;
|
|
return 32;
|
|
}
|
|
|
|
static BOOL fetch_value(const char* addr, unsigned sz, int* value)
|
|
{
|
|
char value8;
|
|
short value16;
|
|
|
|
switch (sz)
|
|
{
|
|
case 8:
|
|
if (!dbg_read_memory(addr, &value8, sizeof(value8)))
|
|
return FALSE;
|
|
*value = value8;
|
|
break;
|
|
case 16:
|
|
if (!dbg_read_memory(addr, &value16, sizeof(value16)))
|
|
return FALSE;
|
|
*value = value16;
|
|
break;
|
|
case 32:
|
|
if (!dbg_read_memory(addr, value, sizeof(*value)))
|
|
return FALSE;
|
|
break;
|
|
default: return FALSE;
|
|
}
|
|
return TRUE;
|
|
}
|
|
|
|
static BOOL be_i386_is_func_call(const void* insn, ADDRESS64* callee)
|
|
{
|
|
BYTE ch;
|
|
int delta;
|
|
short segment;
|
|
unsigned dst = 0;
|
|
unsigned operand_size;
|
|
ADDRESS_MODE cs_addr_mode;
|
|
|
|
cs_addr_mode = get_selector_type(dbg_curr_thread->handle, &dbg_context,
|
|
dbg_context.SegCs);
|
|
operand_size = get_size(cs_addr_mode);
|
|
|
|
/* get operand_size (also getting rid of the various prefixes */
|
|
do
|
|
{
|
|
if (!dbg_read_memory(insn, &ch, sizeof(ch))) return FALSE;
|
|
if (ch == 0x66)
|
|
{
|
|
operand_size = 48 - operand_size; /* 16 => 32, 32 => 16 */
|
|
insn = (const char*)insn + 1;
|
|
}
|
|
} while (ch == 0x66 || ch == 0x67);
|
|
|
|
switch (ch)
|
|
{
|
|
case 0xe8: /* relative near call */
|
|
callee->Mode = cs_addr_mode;
|
|
if (!fetch_value((const char*)insn + 1, operand_size, &delta))
|
|
return FALSE;
|
|
callee->Segment = dbg_context.SegCs;
|
|
callee->Offset = (DWORD)insn + 1 + (operand_size / 8) + delta;
|
|
return TRUE;
|
|
|
|
case 0x9a: /* absolute far call */
|
|
if (!dbg_read_memory((const char*)insn + 1 + operand_size / 8,
|
|
&segment, sizeof(segment)))
|
|
return FALSE;
|
|
callee->Mode = get_selector_type(dbg_curr_thread->handle, &dbg_context,
|
|
segment);
|
|
if (!fetch_value((const char*)insn + 1, operand_size, &delta))
|
|
return FALSE;
|
|
callee->Segment = segment;
|
|
callee->Offset = delta;
|
|
return TRUE;
|
|
|
|
case 0xff:
|
|
if (!dbg_read_memory((const char*)insn + 1, &ch, sizeof(ch)))
|
|
return FALSE;
|
|
/* keep only the CALL and LCALL insn:s */
|
|
switch ((ch >> 3) & 0x07)
|
|
{
|
|
case 0x02:
|
|
segment = dbg_context.SegCs;
|
|
break;
|
|
case 0x03:
|
|
if (!dbg_read_memory((const char*)insn + 1 + operand_size / 8,
|
|
&segment, sizeof(segment)))
|
|
return FALSE;
|
|
break;
|
|
default: return FALSE;
|
|
}
|
|
/* FIXME: we only support the 32 bit far calls for now */
|
|
if (operand_size != 32)
|
|
{
|
|
WINE_FIXME("Unsupported yet call insn (0xFF 0x%02x) with 16 bit operand-size at %p\n", ch, insn);
|
|
return FALSE;
|
|
}
|
|
switch (ch & 0xC7) /* keep Mod R/M only (skip reg) */
|
|
{
|
|
case 0x04:
|
|
case 0x44:
|
|
case 0x84:
|
|
WINE_FIXME("Unsupported yet call insn (0xFF 0x%02x) (SIB bytes) at %p\n", ch, insn);
|
|
return FALSE;
|
|
case 0x05: /* addr32 */
|
|
if ((ch & 0x38) == 0x10 || /* call */
|
|
(ch & 0x38) == 0x18) /* lcall */
|
|
{
|
|
void *addr;
|
|
if (!dbg_read_memory((const char *)insn + 2, &addr, sizeof(addr)))
|
|
return FALSE;
|
|
if ((ch & 0x38) == 0x18) /* lcall */
|
|
{
|
|
if (!dbg_read_memory((const char*)addr + operand_size, &segment, sizeof(segment)))
|
|
return FALSE;
|
|
}
|
|
else segment = dbg_context.SegCs;
|
|
if (!dbg_read_memory((const char*)addr, &dst, sizeof(dst)))
|
|
return FALSE;
|
|
callee->Mode = get_selector_type(dbg_curr_thread->handle, &dbg_context, segment);
|
|
callee->Segment = segment;
|
|
callee->Offset = dst;
|
|
return TRUE;
|
|
}
|
|
return FALSE;
|
|
default:
|
|
switch (ch & 0x07)
|
|
{
|
|
case 0x00: dst = dbg_context.Eax; break;
|
|
case 0x01: dst = dbg_context.Ecx; break;
|
|
case 0x02: dst = dbg_context.Edx; break;
|
|
case 0x03: dst = dbg_context.Ebx; break;
|
|
case 0x04: dst = dbg_context.Esp; break;
|
|
case 0x05: dst = dbg_context.Ebp; break;
|
|
case 0x06: dst = dbg_context.Esi; break;
|
|
case 0x07: dst = dbg_context.Edi; break;
|
|
}
|
|
if ((ch >> 6) != 0x03) /* indirect address */
|
|
{
|
|
if (ch >> 6) /* we got a displacement */
|
|
{
|
|
if (!fetch_value((const char*)insn + 2, (ch >> 6) == 0x01 ? 8 : 32, &delta))
|
|
return FALSE;
|
|
dst += delta;
|
|
}
|
|
if (((ch >> 3) & 0x07) == 0x03) /* LCALL */
|
|
{
|
|
if (!dbg_read_memory((const char*)dst + operand_size, &segment, sizeof(segment)))
|
|
return FALSE;
|
|
}
|
|
else segment = dbg_context.SegCs;
|
|
if (!dbg_read_memory((const char*)dst, &delta, sizeof(delta)))
|
|
return FALSE;
|
|
callee->Mode = get_selector_type(dbg_curr_thread->handle, &dbg_context,
|
|
segment);
|
|
callee->Segment = segment;
|
|
callee->Offset = delta;
|
|
}
|
|
else
|
|
{
|
|
callee->Mode = cs_addr_mode;
|
|
callee->Segment = dbg_context.SegCs;
|
|
callee->Offset = dst;
|
|
}
|
|
}
|
|
return TRUE;
|
|
|
|
default:
|
|
return FALSE;
|
|
}
|
|
}
|
|
|
|
static BOOL be_i386_is_jump(const void* insn, ADDRESS64* jumpee)
|
|
{
|
|
BYTE ch;
|
|
int delta;
|
|
unsigned operand_size;
|
|
ADDRESS_MODE cs_addr_mode;
|
|
|
|
cs_addr_mode = get_selector_type(dbg_curr_thread->handle, &dbg_context,
|
|
dbg_context.SegCs);
|
|
operand_size = get_size(cs_addr_mode);
|
|
|
|
/* get operand_size (also getting rid of the various prefixes */
|
|
do
|
|
{
|
|
if (!dbg_read_memory(insn, &ch, sizeof(ch))) return FALSE;
|
|
if (ch == 0x66)
|
|
{
|
|
operand_size = 48 - operand_size; /* 16 => 32, 32 => 16 */
|
|
insn = (const char*)insn + 1;
|
|
}
|
|
} while (ch == 0x66 || ch == 0x67);
|
|
|
|
switch (ch)
|
|
{
|
|
case 0xe9: /* jmp near */
|
|
jumpee->Mode = cs_addr_mode;
|
|
if (!fetch_value((const char*)insn + 1, operand_size, &delta))
|
|
return FALSE;
|
|
jumpee->Segment = dbg_context.SegCs;
|
|
jumpee->Offset = (DWORD)insn + 1 + (operand_size / 8) + delta;
|
|
return TRUE;
|
|
default: WINE_FIXME("unknown %x\n", ch); return FALSE;
|
|
}
|
|
return FALSE;
|
|
}
|
|
|
|
#define DR7_CONTROL_SHIFT 16
|
|
#define DR7_CONTROL_SIZE 4
|
|
|
|
#define DR7_RW_EXECUTE (0x0)
|
|
#define DR7_RW_WRITE (0x1)
|
|
#define DR7_RW_READ (0x3)
|
|
|
|
#define DR7_LEN_1 (0x0)
|
|
#define DR7_LEN_2 (0x4)
|
|
#define DR7_LEN_4 (0xC)
|
|
|
|
#define DR7_LOCAL_ENABLE_SHIFT 0
|
|
#define DR7_GLOBAL_ENABLE_SHIFT 1
|
|
#define DR7_ENABLE_SIZE 2
|
|
|
|
#define DR7_LOCAL_ENABLE_MASK (0x55)
|
|
#define DR7_GLOBAL_ENABLE_MASK (0xAA)
|
|
|
|
#define DR7_CONTROL_RESERVED (0xFC00)
|
|
#define DR7_LOCAL_SLOWDOWN (0x100)
|
|
#define DR7_GLOBAL_SLOWDOWN (0x200)
|
|
|
|
#define DR7_ENABLE_MASK(dr) (1<<(DR7_LOCAL_ENABLE_SHIFT+DR7_ENABLE_SIZE*(dr)))
|
|
#define IS_DR7_SET(ctrl,dr) ((ctrl)&DR7_ENABLE_MASK(dr))
|
|
|
|
static inline int be_i386_get_unused_DR(CONTEXT* ctx, DWORD** r)
|
|
{
|
|
if (!IS_DR7_SET(ctx->Dr7, 0))
|
|
{
|
|
*r = &ctx->Dr0;
|
|
return 0;
|
|
}
|
|
if (!IS_DR7_SET(ctx->Dr7, 1))
|
|
{
|
|
*r = &ctx->Dr1;
|
|
return 1;
|
|
}
|
|
if (!IS_DR7_SET(ctx->Dr7, 2))
|
|
{
|
|
*r = &ctx->Dr2;
|
|
return 2;
|
|
}
|
|
if (!IS_DR7_SET(ctx->Dr7, 3))
|
|
{
|
|
*r = &ctx->Dr3;
|
|
return 3;
|
|
}
|
|
dbg_printf("All hardware registers have been used\n");
|
|
|
|
return -1;
|
|
}
|
|
|
|
static BOOL be_i386_insert_Xpoint(HANDLE hProcess, const struct be_process_io* pio,
|
|
CONTEXT* ctx, enum be_xpoint_type type,
|
|
void* addr, unsigned long* val, unsigned size)
|
|
{
|
|
unsigned char ch;
|
|
SIZE_T sz;
|
|
DWORD *pr;
|
|
int reg;
|
|
unsigned long bits;
|
|
|
|
switch (type)
|
|
{
|
|
case be_xpoint_break:
|
|
if (size != 0) return FALSE;
|
|
if (!pio->read(hProcess, addr, &ch, 1, &sz) || sz != 1) return FALSE;
|
|
*val = ch;
|
|
ch = 0xcc;
|
|
if (!pio->write(hProcess, addr, &ch, 1, &sz) || sz != 1) return FALSE;
|
|
break;
|
|
case be_xpoint_watch_exec:
|
|
bits = DR7_RW_EXECUTE;
|
|
goto hw_bp;
|
|
case be_xpoint_watch_read:
|
|
bits = DR7_RW_READ;
|
|
goto hw_bp;
|
|
case be_xpoint_watch_write:
|
|
bits = DR7_RW_WRITE;
|
|
hw_bp:
|
|
if ((reg = be_i386_get_unused_DR(ctx, &pr)) == -1) return FALSE;
|
|
*pr = (DWORD)addr;
|
|
if (type != be_xpoint_watch_exec) switch (size)
|
|
{
|
|
case 4: bits |= DR7_LEN_4; break;
|
|
case 2: bits |= DR7_LEN_2; break;
|
|
case 1: bits |= DR7_LEN_1; break;
|
|
default: return FALSE;
|
|
}
|
|
*val = reg;
|
|
/* clear old values */
|
|
ctx->Dr7 &= ~(0x0F << (DR7_CONTROL_SHIFT + DR7_CONTROL_SIZE * reg));
|
|
/* set the correct ones */
|
|
ctx->Dr7 |= bits << (DR7_CONTROL_SHIFT + DR7_CONTROL_SIZE * reg);
|
|
ctx->Dr7 |= DR7_ENABLE_MASK(reg) | DR7_LOCAL_SLOWDOWN;
|
|
break;
|
|
default:
|
|
dbg_printf("Unknown bp type %c\n", type);
|
|
return FALSE;
|
|
}
|
|
return TRUE;
|
|
}
|
|
|
|
static BOOL be_i386_remove_Xpoint(HANDLE hProcess, const struct be_process_io* pio,
|
|
CONTEXT* ctx, enum be_xpoint_type type,
|
|
void* addr, unsigned long val, unsigned size)
|
|
{
|
|
SIZE_T sz;
|
|
unsigned char ch;
|
|
|
|
switch (type)
|
|
{
|
|
case be_xpoint_break:
|
|
if (size != 0) return FALSE;
|
|
if (!pio->read(hProcess, addr, &ch, 1, &sz) || sz != 1) return FALSE;
|
|
if (ch != (unsigned char)0xCC)
|
|
WINE_FIXME("Cannot get back %02x instead of 0xCC at %08lx\n",
|
|
ch, (unsigned long)addr);
|
|
ch = (unsigned char)val;
|
|
if (!pio->write(hProcess, addr, &ch, 1, &sz) || sz != 1) return FALSE;
|
|
break;
|
|
case be_xpoint_watch_exec:
|
|
case be_xpoint_watch_read:
|
|
case be_xpoint_watch_write:
|
|
/* simply disable the entry */
|
|
ctx->Dr7 &= ~DR7_ENABLE_MASK(val);
|
|
break;
|
|
default:
|
|
dbg_printf("Unknown bp type %c\n", type);
|
|
return FALSE;
|
|
}
|
|
return TRUE;
|
|
}
|
|
|
|
static BOOL be_i386_is_watchpoint_set(const CONTEXT* ctx, unsigned idx)
|
|
{
|
|
return ctx->Dr6 & (1 << idx);
|
|
}
|
|
|
|
static void be_i386_clear_watchpoint(CONTEXT* ctx, unsigned idx)
|
|
{
|
|
ctx->Dr6 &= ~(1 << idx);
|
|
}
|
|
|
|
static int be_i386_adjust_pc_for_break(CONTEXT* ctx, BOOL way)
|
|
{
|
|
if (way)
|
|
{
|
|
ctx->Eip--;
|
|
return -1;
|
|
}
|
|
ctx->Eip++;
|
|
return 1;
|
|
}
|
|
|
|
static BOOL be_i386_fetch_integer(const struct dbg_lvalue* lvalue, unsigned size,
|
|
BOOL is_signed, LONGLONG* ret)
|
|
{
|
|
if (size != 1 && size != 2 && size != 4 && size != 8) return FALSE;
|
|
|
|
memset(ret, 0, sizeof(*ret)); /* clear unread bytes */
|
|
/* FIXME: this assumes that debuggee and debugger use the same
|
|
* integral representation
|
|
*/
|
|
if (!memory_read_value(lvalue, size, ret)) return FALSE;
|
|
|
|
/* propagate sign information */
|
|
if (is_signed && size < 8 && (*ret >> (size * 8 - 1)) != 0)
|
|
{
|
|
ULONGLONG neg = -1;
|
|
*ret |= neg << (size * 8);
|
|
}
|
|
return TRUE;
|
|
}
|
|
|
|
static BOOL be_i386_fetch_float(const struct dbg_lvalue* lvalue, unsigned size,
|
|
long double* ret)
|
|
{
|
|
char tmp[sizeof(long double)];
|
|
|
|
/* FIXME: this assumes that debuggee and debugger use the same
|
|
* representation for reals
|
|
*/
|
|
if (!memory_read_value(lvalue, size, tmp)) return FALSE;
|
|
|
|
/* float & double types have to be promoted to a long double */
|
|
if (size == sizeof(float)) *ret = *(float*)tmp;
|
|
else if (size == sizeof(double)) *ret = *(double*)tmp;
|
|
else if (size == sizeof(long double)) *ret = *(long double*)tmp;
|
|
else return FALSE;
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
static BOOL be_i386_store_integer(const struct dbg_lvalue* lvalue, unsigned size,
|
|
BOOL is_signed, LONGLONG val)
|
|
{
|
|
/* this is simple as we're on a little endian CPU */
|
|
return memory_write_value(lvalue, size, &val);
|
|
}
|
|
|
|
struct backend_cpu be_i386 =
|
|
{
|
|
IMAGE_FILE_MACHINE_I386,
|
|
4,
|
|
be_i386_linearize,
|
|
be_i386_build_addr,
|
|
be_i386_get_addr,
|
|
be_i386_get_register_info,
|
|
be_i386_single_step,
|
|
be_i386_print_context,
|
|
be_i386_print_segment_info,
|
|
be_i386_ctx,
|
|
be_i386_is_step_over_insn,
|
|
be_i386_is_function_return,
|
|
be_i386_is_break_insn,
|
|
be_i386_is_func_call,
|
|
be_i386_is_jump,
|
|
be_i386_disasm_one_insn,
|
|
be_i386_insert_Xpoint,
|
|
be_i386_remove_Xpoint,
|
|
be_i386_is_watchpoint_set,
|
|
be_i386_clear_watchpoint,
|
|
be_i386_adjust_pc_for_break,
|
|
be_i386_fetch_integer,
|
|
be_i386_fetch_float,
|
|
be_i386_store_integer,
|
|
};
|
|
#endif
|