Debugging Tools for Windows SDK API

[GoneFishing]

I'm trying to call DebugCreate function in MASM.
It's described in MSDN as follows:

                                 HRESULT DebugCreate(
                                                          _In_   REFIID InterfaceId,
                                                          _Out_  PVOID *Interface
                                                     );

IID of IDebugControl is defined in dbgeng.h :
   

Code Select Expand

/* 5182e668-105e-416e-ad92-24ef800424ba */
DEFINE_GUID(IID_IDebugControl, 0x5182e668, 0x105e, 0x416e,
                          0xad, 0x92, 0x24, 0xef, 0x80, 0x04, 0x24, 0xba);

I've never dealt with GUIDs . How do I define it in MASM?

Thanks 

[dedndave]

Code Select Expand

        .DATA
IID_IDebugControl GUID <5182E668h,105Eh,416Eh,<0ADh,92h,24h,0EFh,80h,4,24h,0BAh>>

it may be "more correct" to place it in the .CONST section
however, that creates another section
as long as your code is good, and doesn't overwrite the value, it's ok to place it in .DATA

you could place it in the .CODE section, i suppose   :P

[GoneFishing]

Now  it's S_OK!
THANKS!

[TouEnMasm]

Perhaps can you just translate dbgeng.h with this
http://masm32.com/board/index.php?topic=576.msg4665#msg4665

All the header's of the Debugging Tools for Windows are easily translatable.

[GoneFishing]

Assembling the code I receive the following error:

Assembling: test.asm

***********
ASCII build
***********

test.asm(166) : error A2114: INVOKE argument type mismatch : argument : 2
IDebugClient(20): Macro Called From
  test.asm(166): Main Line Code
_
Assembly Error

test.asm(166)

Code Select Expand

IDebugClient CreateProcess, 0, offset debuggee, DEBUG_PROCESS

SDK API:

HRESULT
  IDebugClient::CreateProcess(
    IN ULONG64  Server,
    IN PSTR  CommandLine,
    IN ULONG  CreateFlags
    );

dbgeng.inc:

Code Select Expand

IDebugClient_CreateProcess TYPEDEF  PROTO :DWORD ,:QWORD ,:DWORD ,:DWORD
FIDebugClient_CreateProcess TYPEDEF PTR  IDebugClient_CreateProcess

... ... ...    ... ... ...   ... ... ...

STIDebugClient STRUCT
...
CreateProcess FIDebugClient_CreateProcess  ?
...
STIDebugClient ENDS

... ... ...    ... ... ...   ... ... ...

IDebugClient MACRO  Function:REQ, args:VARARG
; definition de la macro locale InvokeInterface
    LOCAL InvokeInterface, arg
    FOR arg, <args>     ;verifier que edx n'est pas dans la liste d'arguments args
        IFIDNI <&arg>, <edx> ;
            .ERR <edx is not allowed as a coinvoke parameter>
        ENDIF
    ENDM
    IFIDNI <&pInterface>, <edx>
        .ERR <edx is not allowed as a coinvoke parameter>
    ENDIF
;InvokeInterface = concatene ...CATSTR(concatene) MACRO instruction MASM32
;---------- on doit mettre ppv en premier argument -----------------------------------
    InvokeInterface CATSTR <invoke (STIDebugClient PTR[edx]).>,<&Function,ppvIDebugClient>
    IFNB <args>     ; add the list of parameter arguments if any
        InvokeInterface CATSTR InvokeInterface, <, >, <&args>
    ENDIF
;   forme les lignes de codes
    mov edx, ppvIDebugClient
    mov edx, [edx]
    InvokeInterface
ENDM




Just cannot figure out what's wrong :(

Dbgeng.h was converted to inc with the headinc tool (adviced by ToutEnMasm, many thanks to him!)

[qWord]

Seems like that you interchanged the types of the first and the second argument (declaration of IDebugClient_CreateProcess). Furthermore, INVOKE can't handle 64Bit constants: you might simply spilt the QWORD in two DWORDs. Alternatively you can use EDX::EAX or a variable to pass the argument.

[japheth]

Just cannot figure out what's wrong :(

Can't help directly, but I once also wrote a debugger based on the MS debug engine, and IDebugClient::CreateProcess() is also used there of course. It worked. By comparing my implementation with yours you may get an idea what's wrong.

www.japheth.de/Download/debxxf/CDBA.zip

[GoneFishing]

Thank you, guys!
qWord:
          Hi, I'm very glad that your answer was the first
          I'll try changing QWORD to DWORD and will see the result

japheth:
          already downloading it

[GoneFishing]

Isn't it ironic, I was supplied with an excellent source code and yet I cannot even compile it

CDBA.ASM: 1023 lines, 2 passes, 829 ms, 0 warnings, 0 errors
CDBA.obj : error LNK2005: _start already defined in CDBA.obj
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugClient
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugControl
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugEventCallbacks
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugInputCallbacks
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugOutputCallbacks
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugSymbols
CDBA.exe : fatal error LNK1120: 6 unresolved externals
_
Link error

I want to compile it with debugging options
japheth, please help if you see it

[japheth]

CDBA.ASM: 1023 lines, 2 passes, 829 ms, 0 warnings, 0 errors
CDBA.obj : error LNK2005: _start already defined in CDBA_test.obj
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugClient
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugControl
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugEventCallbacks
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugInputCallbacks
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugOutputCallbacks
CDBA.obj : error LNK2001: unresolved external symbol _IID_IDebugSymbols
CDBA.exe : fatal error LNK1120: 6 unresolved externals
_
Link error

I want to compile it with debugging options
japheth, please help if you see it

It looks like the linker can't find a few IIDs. I did put these IIDs into uuid.lib supplied with WinInc, just for convenience.

[GoneFishing]

Japheth, thank you for  your help and providing the whole set of tools for coding !

I downloaded WinInc. After that I had to change only includelib path to lib\uuid.lib . Compiles and runs perfectly :t

But now I came upon another problem : assembling with -Zi argument  either in JWASM or ML ends up with LINK ERROR.
jwasm:

CDBA.ASM: 1023 lines, 2 passes, 703 ms, 0 warnings, 0 errors
CDBA.obj : error LNK2005: _start already defined in CDBA_test.obj
CDBA.exe : fatal error LNK1169: one or more multiply defined symbols found

ml(6.14):

Assembling: CDBA.asm
LINK : error LNK2001: unresolved external symbol _start
CDBA.exe : fatal error LNK1120: 1 unresolved externals

What am I to do to fix it?

[japheth]

What am I to do to fix it?

There seems to be a strange error in jwasm and masm - the entry symbol must be declared public if -Zi is set:

Code Select Expand


start proc c public

invoke main
invoke ExitProcess, eax

start endp


Note that the source contains a option proc:private, hence procedures are not automatically public here.

[GoneFishing]

Now I see ... and am going to read MASM basics and your source code with more attention
Thanks.