parsecrash.pl

dumprom source code,use for learning the dumprom.exe tool for wince

0x00 DWORD magic
0x04 *wstr name
0x08 *GTGTinfo pgtgt1
0x0c DWORD dw1
0x10 *GTGTinfo pgtgt2
0x14 DWORD dw2
0x18 DWORD dw3
0x1c DWORD dw4

!struct fsopendev_t
0x00 *fsopendev_t nextptr
0x04 DWORD dwOpenData
0x08 *fsdev_t lpDev
0x0c *DWORD lpdwDevRefCnt
0x10 DWORD dwOpenRefCnt
0x14 DWORD KHandle
0x18 DWORD hProc

!struct fsdev_t
0x00 *fsdev_t listnext
0x04 *fsdev_t listprev
0x08 DWORD index
0x0c DWORD dwData
0x10 DWORD dwLoadOrder
0x14 DWORD fnInit
0x18 DWORD fnDeinit
0x1c DWORD fnOpen
0x20 DWORD fnClose
0x24 DWORD fnRead
0x28 DWORD fnWrite
0x2c DWORD fnSeek
0x30 DWORD fnControl
0x34 DWORD fnPowerup
0x38 DWORD fnPowerdn
0x3c DWORD hLib
0x40 DWORD dwId
0x44 DWORD PwrOn
0x48 wchar@3 type
0x4e WORD wFlags
0x50 DWORD dwRefCnt

!struct W32Hinfo
0x00 DWORD w0
0x04 *W32Hinfo next
0x08 DWORD w1
0x0c DWORD oid
0x10 *GTGTinfo pgtgt
0x14 DWORD w2
0x18 DWORD w3
0x1c DWORD w4
0x20 DWORD w5

!struct BDEVinfo
0x000 DWORD@11 dw1
0x02c wchar@256 name1
0x22c DWORD@13 dw2
0x260 wchar@28 name2
0x298 DWORD@2 dw3

!struct STRGinfo
0x00 DWORD magic
0x04 *storageinfo pstorageinfo
0x08 *partitioninfo ppartitioninfo
0x0c DWORD@7 dw1

!struct partitioninfo
0x00  DWORD@8 dw

!struct storageinfo
0x0000 *somestoragestr somestring
0x0004 DWORD dw1a
0x0008 DWORD bdevhandle
0x000c wchar@16 devname
0x002c wchar@32 desc1
0x006c wchar@32 desc2
0x00ac wchar@260 partdll
0x02b4 wchar@260 profilekey
0x04bc wchar@260 fsname
0x06c4 DWORD@165 dw2
0x0958 wchar@32 desc3
0x0998 DWORD@29 dw3
0x0a0c wchar@260 driverkey
0x0c14 DWORD@11 dw4

!struct somestoragestr
0x00 DWORD codeptr
0x04 wchar@260 str

#  z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/kernel.h
!struct FSMAP
0x00 DWORD hNext;          /* Next map in list */
0x04 DWORD hFile;          /* File, or INVALID_HANDLE_VALUE for just vm */
0x08 DWORD pBase;          /* pointer to start of kernel mapped region */
0x0c DWORD pDirty;         /* non-null if r/w real file, points to dirty bitmap */
0x10 DWORD  length;        /* length of mapped region */
0x14 DWORD  filelen;       /* length of file if hFile != INVALID_HANDLE_VALUE */
0x18 DWORD  reslen;        /* length of reservation */
0x1c *Name  name;          /* points to name of event */
0x20 *CLEANEVENT lpmlist;  /* List of mappings */
0x24 DWORD   dwDirty;      /* Count of dirty pages */
0x28 BYTE   bRestart;      /* Has been flushed */
0x29 BYTE   bNoAutoFlush;  /* Disallow automatic flushing */
0x2a BYTE   bDirectROM;    /* File mapped directly from ROM */
0x2b BYTE   bFlushFlags;   /* Flush flags */
0x2c PGPOOL_Q pgqueue;     /* list of the page owned by the mapfile */

# z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/schedule.h
!struct PROXY
0x00 DWORD  pQPrev;         /* Previous proxy for this object queue, must be first for ReQueueByPriority */
0x04 DWORD  pQNext;         /* Next proxy for this object queue */
0x08 DWORD  pQUp;
0x0c DWORD  pQDown;
0x10 DWORD  pThLinkNext;    /* Next proxy for this thread */
0x14 DWORD  pObject;         /* Pointer to object we're blocked on */
0x18 BYTE    bType;         /* Type of object we're blocked on */
0x19 BYTE    prio;          /* Current prio we're enqueued on */
0x1a WORD    wCount;        /* Count matching thread's wCount */
0x1c *THREAD pTh;           /* Thread "owning" this proxy */
0x20 DWORD   dwRetVal;       /* Return value if this is why we wake up */

#  z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/kernel.h
!struct Module
0x00 *Module    lpSelf;                /* Self pointer for validation */
0x04 *Module    pMod;                   /* Next module in chain */
0x08 *wstr      lpszModName;            /* Module name */
0x0c DWORD       inuse;                 /* Bit vector of use */
0x10 WORD@32    refcnt;                 /* Reference count per process*/
0x50 DWORD       BasePtr;               /* Base pointer of dll load (not 0 based) */
0x54 DWORD       DbgFlags;              /* Debug flags */
0x58 DWORD       ZonePtr;               /* Debug zone pointer */
0x5c DWORD       startip;               /* 0 based entrypoint */
0x60 openexe_t  oe;                     /* Pointer to executable file handle */
0x70 e32_lite   e32;                    /* E32 header */
0xc4 *o32_lite  o32_ptr;                /* O32 chain ptr */
0xc8 DWORD       dwNoNotify;            /* 1 bit per process, set if notifications disabled */
0xcc WORD       wFlags;
0xce BYTE       bTrustLevel;
0xcf BYTE       bPadding;
0xd0 *Module    pmodResource;           /* module that contains the resources */
0xd4 DWORD       rwLow;                 /* base address of RW section for ROM DLL */
0xd8 DWORD       rwHigh;                /* high address RW section for ROM DLL */
0xdc PGPOOL_Q   pgqueue;                /* list of the page owned by the module */
0xe0 DWORD      pShimInfo;              /* pointer to shim information */

# z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/schedule.h
!struct Name
0x00 WORD wPool
0x02 wchar@260 name

# z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/kernel.h
!struct MemoryInfo
0x00 DWORD  pKData;         /* start of kernel's data */
0x04 DWORD  pKEnd;          /* end of kernel's data & bss */
0x08 DWORD  cFi;            /* # of entries in free memory array */
0x0c *FreeInfo pFi;         /* Pointer to cFi FREEINFO entries */

# z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/kernel.h
!struct FreeInfo
0x00 DWORD  paStart;    /* start of available region */
0x04 DWORD  paEnd;      /* end of region (last byte + 1) */
0x08 DWORD  paRealEnd;
0x0c DWORD  pUseMap;    /* ptr to page usage count map */

#  z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/kernel.h
!struct MemBlock
0x00 DWORD        alk;       /* 00: key code for this set of pages */
0x04 BYTE        cUses;      /* 04: # of page table entries sharing this leaf */
0x05 BYTE        flags;      /* 05: mapping flags */
0x06 WORD        ixBase;     /* 06: first block in region */
0x08 WORD        hPf;        /* 08: handle to pager */
0x0a WORD        cLocks;     /* 0a: lock count */
0x0c DWORD       aPages;     /* 0c: entrylo values */

#  z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/kernel.h
!struct APISET
0x00 CINFO  cinfo
0x14 DWORD  iReg

# z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/schedule.h
!struct EVENT
0x00 DWORD hNext;           /* Next event in list */
0x04 *PROXY pProxList;
0x08 *PROXY@32 pProxHash;
0x88 DWORD hPrev;           /* previous event in list */
0x8c BYTE onequeue;
0x8d BYTE state;             /* TRUE: signalled, FALSE: unsignalled */
0x8e BYTE manualreset;       /* TRUE: manual reset, FALSE: autoreset */
0x8f BYTE bMaxPrio;
0x90 *Name name;             /* points to name of event */
0x94 *PROXY pIntrProxy;
0x98 DWORD dwData;           /* data associated with the event (CE extention) */

# z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/schedule.h
!struct MUTEX
0x00 DWORD hNext;       /* Next mutex in list */
0x04 *PROXY pProxList;
0x08 *PROXY@32 pProxHash;
0x88 DWORD hPrev;       /* previous mutex in list */
0x8c BYTE bListed;
0x8d BYTE bListedPrio;
0x8e WORD LockCount;         /* current lock count */
0x90 DWORD pPrevOwned; /* Prev crit/mutex owned (for prio inversion) */   // was *MUTEX
0x94 DWORD pNextOwned; /* Next crit/mutex owned (for prio inversion) */   // was *MUTEX
0x98 DWORD pUpOwned;         // was *MUTEX
0x9c DWORD pDownOwned;       // was *MUTEX
0xa0 *THREAD pOwner;  /* owner thread */
0xa4 *Name name;             /* points to name of event */

# z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/schedule.h
!struct SEMAPHORE
0x00 DWORD hNext;       /* Next semaphore in list */
0x04 *PROXY pProxList;
0x08 *PROXY@32 pProxHash;
0x88 DWORD hPrev;       /* previous semaphore in list */
0x8c DWORD lCount;            /* current count */
0x90 DWORD lMaxCount;         /* Maximum count */
0x94 DWORD lPending;          /* Pending count */
0x98 *Name name;         /* points to name of event */

!struct DBInfo
0x00 *DBInfo  next
0x04 DWORD    hDatabase
0x08 DWORD    dw1
0x0c DWORD    dw2
0x10 *DBVolume pVolume
0x14 DWORD    oid
0x18 DWORD@2  dw4

!struct DBVolume
0x00 *DBVolume next
0x04 DWORD  dw1
0x08 DWORD  dw2
0x0c DWORD  dw3
0x10 wchar@260 path

!struct SocketInfo
0x00 DWORD@16 dw

# z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/schedule.h
!struct CLEANEVENT
0x00 *CLEANEVENT ceptr;
0x04 DWORD base;
0x08 DWORD size;
0x0c DWORD op;

# z:/sources/wince500/PRIVATE/WINCEOS/COREOS/NK/INC/schedule.h
!struct CRIT
0x00 *CRITICAL_SECTION lpcs;  /* Pointer to critical_section structure */
0x04 *PROXY pProxList;
0x08 *PROXY@32 pProxHash;
0x88 *CRIT  pPrev;            /* previous event in list */
0x8c BYTE bListed;             /* Is this on someone's owner list */
0x8d BYTE bListedPrio;
0x8e BYTE iOwnerProc;          /* Index of owner process */
0x8f BYTE bPad;
0x90 DWORD pPrevOwned; /* Prev crit/mutex (for prio inversion) */                   // was *CRIT
0x94 DWORD pNextOwned; /* Next crit/mutex section owned (for prio inversion) */     // was *CRIT
0x98 DWORD pUpOwned;           // was *CRIT
0x9c DWORD pDownOwned;         // was *CRIT
0xa0 *CRIT pNext;             /* Next CRIT in list */

# z:/sources/wince500/PUBLIC/COMMON/SDK/INC/winbase.h
!struct CRITICAL_SECTION
0x00 DWORD LockCount;         /* Nesting count on critical section */
0x04 DWORD OwnerThread;         	/* Handle of owner thread */
0x08 DWORD hCrit;					/* Handle to this critical section */
0x0c DWORD needtrap;					/* Trap in when freeing critical section */
0x10 DWORD dwContentions;			/* Count of contentions */

!struct DWLIST
0x00 DWORD@8 dw

#  z:/sources/wince500/PUBLIC/COMMON/OAK/INC/romldr.h
!struct ROMHDR
0x00 DWORD dllFirst
0x04 DWORD dllLast
0x08 DWORD physStart
0x0C DWORD physLast
0x10 DWORD nummods
0x14 DWORD ulRAMStart
0x18 DWORD ulRAMFree
0x1C DWORD ulRAMEnd
0x20 DWORD ulCopyEntries
0x24 DWORD ulCopyOffset
0x28 DWORD ulProfileLe
0x2C DWORD ulProfileOffset
0x30 DWORD numfiles
0x34 DWORD ulKernelFlags
0x38 DWORD ulFSRamPercent
0x3C DWORD ulDrivglobStart
0x40 DWORD ulDrivglobLen
0x44 WORD usCPUType
0x46 WORD usMiscFlags
0x48 DWORD pExtensions
0x4C DWORD ulTrackingStart
0x50 DWORD ulTrackingLen
	
#  z:/sources/wince500/PUBLIC/COMMON/OAK/INC/romldr.h
!struct COPYentry
0x00 DWORD ulSource
0x04 DWORD ulDest
0x08 DWORD ulCopyLen
0x0C DWORD ulDestLen

#  z:/sources/wince500/PUBLIC/COMMON/OAK/INC/romldr.h
!struct FILESentry
0x00 DWORD dwFileAttributes
0x04 FILETIME ftTime
0x0C DWORD nRealFileSize
0x10 DWORD nCompFileSize
0x14 *wstr lpszFileName
0x18 DWORD ulLoadOffset

#  z:/sources/wince500/PUBLIC/COMMON/OAK/INC/romldr.h
!struct TOCentry
0x00 DWORD dwFileAttributes
0x04 FILETIME ftTime
0x0C DWORD nFileSize
0x10 *wstr lpszFileName
0x14 DWORD ulE32Offset
0x18 DWORD ulO32Offset
0x1C DWORD ulLoadOffset

#  z:/sources/wince500/PUBLIC/COMMON/OAK/INC/romldr.h
!struct e32_rom
0x00 WORD e32_objcnt
0x02 WORD e32_imageflags
0x04 DWORD e32_entryrva
0x08 DWORD e32_vbase
0x0C WORD e32_subsysmajor
0x0E WORD e32_subsysminor
0x10 DWORD e32_stackmax
0x14 DWORD e32_vsize
0x18 DWORD e32_sect14rva
0x1C DWORD e32_sect14size
0x20 DWORD e32_timestamp
0x24 info@9  e32_unit
0x6c DWORD e32_subsys
	
#  z:/sources/wince500/PUBLIC/COMMON/OAK/INC/romldr.h
!struct o32_rom
0x00 DWORD o32_vsize
0x04 DWORD o32_rva
0x08 DWORD o32_psize
0x0C DWORD o32_dataptr
0x10 DWORD o32_realaddr
0x14 DWORD o32_flags
	
!struct IMAGE_DEBUG_DIRECTORY
0x00 DWORD Characteristics
0x04 DWORD TimeDateStamp
0x08 WORD MajorVersion
0x0A WORD MinorVersion
0x0C DWORD Type
0x10 DWORD SizeOfData
0x14 DWORD AddressOfRawData
0x18 DWORD PointerToRawData

#  z:/sources/wince500/PUBLIC/COMMON/SDK/INC/winnt.h
!struct IMAGE_DOS_HEADER
0x00 WORD   e_magic