MExcept.h

#pragma once

#include "../Include/Winheaders.h"
#include "../Process/MemBlock.h"

namespace blackbone
{

struct ExceptionModule
{
    ptr_t base;
    ptr_t size;
};


struct ModuleTable
{
    ptr_t count;                    // Number of used entries
    ExceptionModule entry[250];     // Module data
};

class MExcept
{
public:
    // For debug purposes only
    BLACKBONE_API static void*  g_pImageBase;
    BLACKBONE_API static size_t g_imageSize;

protected:
    BLACKBONE_API MExcept( class Process& proc );
    BLACKBONE_API ~MExcept();

    BLACKBONE_API NTSTATUS CreateVEH( size_t pTargetBase, size_t imageSize, eModType mt, bool partial );

    BLACKBONE_API NTSTATUS RemoveVEH( bool partial );

private:
    MExcept( const MExcept& ) = delete;
    MExcept& operator =(const MExcept&) = delete;

private:
    class Process& _proc;   // Underlying process
    MemBlock _pVEHCode;     // VEH function codecave
    MemBlock _pModTable;    // x64 module address range table
    size_t   _hVEH = 0;     // VEH handle
};

}