core.sys.windows.imagehlp

Windows API header module

Translated from MinGW Windows headers

Authors

Stewart Gordon

License

var API_VERSION_NUMBER BIND_ALL_IMAGES BIND_CACHE_IMPORT_DLLS BIND_NO_BOUND_IMPORTS BIND_NO_UPDATE CERT_PE_IMAGE_DIGEST_ALL_IMPORT_INFO CERT_PE_IMAGE_DIGEST_DEBUG_INFO CERT_PE_IMAGE_DIGEST_NON_PE_INFO CERT_PE_IMAGE_DIGEST_RESOURCES CERT_SECTION_TYPE_ANY IMAGE_SEPARATION SPLITSYM_EXTRACT_ALL SPLITSYM_REMOVE_PRIVATE SPLITSYM_SYMBOLPATH_IS_SRC SYMF_OMAP_GENERATED SYMF_OMAP_MODIFIED SYMOPT_CASE_INSENSITIVE SYMOPT_DEFERRED_LOADS SYMOPT_NO_CPP SYMOPT_UNDNAME UNDNAME_32_BIT_DECODE UNDNAME_COMPLETE UNDNAME_NAME_ONLY UNDNAME_NO_ACCESS_SPECIFIERS UNDNAME_NO_ALLOCATION_LANGUAGE UNDNAME_NO_ALLOCATION_MODEL UNDNAME_NO_ARGUMENTS UNDNAME_NO_CV_THISTYPE UNDNAME_NO_FUNCTION_RETURNS UNDNAME_NO_LEADING_UNDERSCORES UNDNAME_NO_MEMBER_TYPE UNDNAME_NO_MS_KEYWORDS UNDNAME_NO_MS_THISTYPE UNDNAME_NO_RETURN_UDT_MODEL UNDNAME_NO_SPECIAL_SYMS UNDNAME_NO_THISTYPE UNDNAME_NO_THROW_SIGNATURES

alias DIGEST_FUNCTION DIGEST_HANDLE LPADDRESS LPAPI_VERSION LPSTACKFRAME PENUMLOADED_MODULES_CALLBACK PFUNCTION_TABLE_ACCESS_ROUTINE PGET_MODULE_BASE_ROUTINE PIMAGE_DEBUG_INFORMATION PIMAGEHLP_DEFERRED_SYMBOL_LOAD PIMAGEHLP_DUPLICATE_SYMBOL PIMAGEHLP_LINE PIMAGEHLP_MODULE PIMAGEHLP_STATUS_ROUTINE PIMAGEHLP_SYMBOL PKDHELP PLOADED_IMAGE PREAD_PROCESS_MEMORY_ROUTINE PSYM_ENUMMODULES_CALLBACK PSYM_ENUMSYMBOLS_CALLBACK PSYMBOL_REGISTERED_CALLBACK PTRANSLATE_ADDRESS_ROUTINE

enum ADDRESS_MODE IMAGEHLP_STATUS_REASON SYM_TYPE

struct ADDRESS IMAGE_DEBUG_INFORMATION IMAGEHLP_DEFERRED_SYMBOL_LOAD IMAGEHLP_DUPLICATE_SYMBOL IMAGEHLP_LINE IMAGEHLP_MODULE IMAGEHLP_SYMBOL KDHELP LOADED_IMAGE STACKFRAME

fn BindImage BindImageEx CheckSumMappedFile CopyPdb EnumerateLoadedModules FindDebugInfoFile FindExecutableImage GetImageConfigInformation GetImageUnusedHeaderBytes GetTimestampForLoadedLibrary ImageAddCertificate ImageDirectoryEntryToData ImageEnumerateCertificates ImageGetCertificateData ImageGetCertificateHeader ImageGetDigestStream ImagehlpApiVersion ImagehlpApiVersionEx ImageLoad ImageNtHeader ImageRemoveCertificate ImageRvaToSection ImageRvaToVa ImageUnload MakeSureDirectoryPathExists MapAndLoad MapDebugInformation MapFileAndCheckSumA MapFileAndCheckSumW ReBaseImage RemovePrivateCvSymbolic RemovePrivateCvSymbolicEx RemoveRelocations SearchTreeForFile SetImageConfigInformation SplitSymbols StackWalk SymCleanup SymEnumerateModules SymEnumerateSymbols SymFunctionTableAccess SymGetLineFromAddr SymGetLineFromName SymGetLineNext SymGetLinePrev SymGetModuleBase SymGetModuleInfo SymGetOptions SymGetSearchPath SymGetSymFromAddr SymGetSymFromName SymGetSymNext SymGetSymPrev SymInitialize SymLoadModule SymMatchFileName SymRegisterCallback SymSetOptions SymSetSearchPath SymUnDName SymUnloadModule TouchFileTimes UnDecorateSymbolName UnMapAndLoad UnmapDebugInformation UpdateDebugInfoFile UpdateDebugInfoFileEx

Types 35

enumIMAGEHLP_STATUS_REASON

BindOutOfMemory

BindRvaToVaFailed

BindNoRoomInImage

BindImportModuleFailed

BindImportProcedureFailed

BindImportModule

BindImportProcedure

BindForwarder

BindForwarderNOT

BindImageModified

BindExpandFileHeaders

BindImageComplete

BindMismatchedSymbols

BindSymbolsNotUpdated

structLOADED_IMAGE

Fields

LPSTR ModuleName

HANDLE hFile

PUCHAR MappedAddress

PIMAGE_NT_HEADERS FileHeader

PIMAGE_SECTION_HEADER LastRvaSection

ULONG NumberOfSections

PIMAGE_SECTION_HEADER Sections

ULONG Characteristics

BOOLEAN fSystemImage

BOOLEAN fDOSImage

LIST_ENTRY Links

ULONG SizeOfImage

aliasPLOADED_IMAGE = LOADED_IMAGE *

structIMAGE_DEBUG_INFORMATION

Fields

LIST_ENTRY List

DWORD Size

PVOID MappedBase

USHORT Machine

USHORT Characteristics

DWORD CheckSum

DWORD ImageBase

DWORD SizeOfImage

DWORD NumberOfSections

PIMAGE_SECTION_HEADER Sections

DWORD ExportedNamesSize

LPSTR ExportedNames

DWORD NumberOfFunctionTableEntries

PIMAGE_FUNCTION_ENTRY FunctionTableEntries

DWORD LowestFunctionStartingAddress

DWORD HighestFunctionEndingAddress

DWORD NumberOfFpoTableEntries

PFPO_DATA FpoTableEntries

DWORD SizeOfCoffSymbols

PIMAGE_COFF_SYMBOLS_HEADER CoffSymbols

DWORD SizeOfCodeViewSymbols

PVOID CodeViewSymbols

LPSTR ImageFilePath

LPSTR ImageFileName

LPSTR DebugFilePath

DWORD TimeDateStamp

BOOL RomImage

PIMAGE_DEBUG_DIRECTORY DebugDirectory

DWORD NumberOfDebugDirectories

DWORD[3] Reserved

aliasPIMAGE_DEBUG_INFORMATION = IMAGE_DEBUG_INFORMATION *

enumADDRESS_MODE

AddrMode1616

AddrMode1632

AddrModeReal

AddrModeFlat

structADDRESS

Fields

DWORD Offset

WORD Segment

ADDRESS_MODE Mode

aliasLPADDRESS = ADDRESS *

structKDHELP

Fields

DWORD Thread

DWORD ThCallbackStack

DWORD NextCallback

DWORD FramePointer

DWORD KiCallUserMode

DWORD KeUserCallbackDispatcher

DWORD SystemRangeStart

DWORD ThCallbackBStore

DWORD KiUserExceptionDispatcher

DWORD StackBase

DWORD StackLimit

DWORD[5] Reserved

aliasPKDHELP = KDHELP *

structSTACKFRAME

Fields

ADDRESS AddrPC

ADDRESS AddrReturn

ADDRESS AddrFrame

ADDRESS AddrStack

LPVOID FuncTableEntry

DWORD[4] Params

BOOL Far

BOOL Virtual

DWORD[3] Reserved

KDHELP KdHelp

ADDRESS AddrBStore

aliasLPSTACKFRAME = STACKFRAME *

aliasLPAPI_VERSION = API_VERSION *

enumSYM_TYPE

SymNone

SymCoff

SymCv

SymPdb

SymExport

SymDeferred

SymSym

structIMAGEHLP_SYMBOL

Fields

DWORD SizeOfStruct

DWORD Address

DWORD Size

DWORD Flags

DWORD MaxNameLength

CHAR[1] Name

aliasPIMAGEHLP_SYMBOL = IMAGEHLP_SYMBOL *

structIMAGEHLP_MODULE

Fields

DWORD SizeOfStruct

DWORD BaseOfImage

DWORD ImageSize

DWORD TimeDateStamp

DWORD CheckSum

DWORD NumSyms

SYM_TYPE SymType

CHAR[32] ModuleName

CHAR[256] ImageName

CHAR[256] LoadedImageName

aliasPIMAGEHLP_MODULE = IMAGEHLP_MODULE *

structIMAGEHLP_LINE

Fields

DWORD SizeOfStruct

DWORD Key

DWORD LineNumber

PCHAR FileName

DWORD Address

aliasPIMAGEHLP_LINE = IMAGEHLP_LINE *

structIMAGEHLP_DEFERRED_SYMBOL_LOAD

Fields

DWORD SizeOfStruct

DWORD BaseOfImage

DWORD CheckSum

DWORD TimeDateStamp

CHAR[MAX_PATH] FileName

BOOLEAN Reparse

aliasPIMAGEHLP_DEFERRED_SYMBOL_LOAD = IMAGEHLP_DEFERRED_SYMBOL_LOAD *

structIMAGEHLP_DUPLICATE_SYMBOL

Fields

DWORD SizeOfStruct

DWORD NumberOfDups

PIMAGEHLP_SYMBOL Symbol

ULONG SelectedSymbol

aliasPIMAGEHLP_DUPLICATE_SYMBOL = IMAGEHLP_DUPLICATE_SYMBOL *

aliasDIGEST_HANDLE = HANDLE

aliasPIMAGEHLP_STATUS_ROUTINE = BOOL function(IMAGEHLP_STATUS_REASON, LPSTR, LPSTR, ULONG_PTR, ULONG_PTR)

aliasPREAD_PROCESS_MEMORY_ROUTINE = BOOL function(HANDLE , LPCVOID, LPVOID, DWORD, LPDWORD)

aliasPFUNCTION_TABLE_ACCESS_ROUTINE = LPVOID function(HANDLE, DWORD)

aliasPGET_MODULE_BASE_ROUTINE = DWORD function(HANDLE, DWORD)

aliasPTRANSLATE_ADDRESS_ROUTINE = DWORD function(HANDLE, HANDLE, LPADDRESS)

aliasPSYM_ENUMMODULES_CALLBACK = BOOL function(LPSTR, ULONG, PVOID)

aliasPSYM_ENUMSYMBOLS_CALLBACK = BOOL function(LPSTR, ULONG, ULONG, PVOID)

aliasPENUMLOADED_MODULES_CALLBACK = BOOL function(LPSTR, ULONG, ULONG, PVOID)

aliasPSYMBOL_REGISTERED_CALLBACK = BOOL function(HANDLE, ULONG, PVOID, PVOID)

aliasDIGEST_FUNCTION = BOOL function(DIGEST_HANDLE refdata, PBYTE pData, DWORD dwLength)

Functions 68

fnPIMAGE_NT_HEADERS CheckSumMappedFile(LPVOID, DWORD, LPDWORD, LPDWORD) extern(Windows) nothrow @nogc

fnDWORD MapFileAndCheckSumA(LPSTR, LPDWORD, LPDWORD) extern(Windows) nothrow @nogc

fnDWORD MapFileAndCheckSumW(PWSTR, LPDWORD, LPDWORD) extern(Windows) nothrow @nogc

fnBOOL TouchFileTimes(HANDLE, LPSYSTEMTIME) extern(Windows) nothrow @nogc

fnBOOL SplitSymbols(LPSTR, LPSTR, LPSTR, DWORD) extern(Windows) nothrow @nogc

fnHANDLE FindDebugInfoFile(LPSTR, LPSTR, LPSTR) extern(Windows) nothrow @nogc

fnHANDLE FindExecutableImage(LPSTR, LPSTR, LPSTR) extern(Windows) nothrow @nogc

fnBOOL UpdateDebugInfoFile(LPSTR, LPSTR, LPSTR, PIMAGE_NT_HEADERS) extern(Windows) nothrow @nogc

fnBOOL UpdateDebugInfoFileEx(LPSTR, LPSTR, LPSTR, PIMAGE_NT_HEADERS, DWORD) extern(Windows) nothrow @nogc

fnBOOL BindImage(LPSTR, LPSTR, LPSTR) extern(Windows) nothrow @nogc

fnBOOL BindImageEx(DWORD, LPSTR, LPSTR, LPSTR, PIMAGEHLP_STATUS_ROUTINE) extern(Windows) nothrow @nogc

BOOL ReBaseImage(LPSTR,  LPSTR,  BOOL,  BOOL,  BOOL,  ULONG,  ULONG *,  ULONG_PTR *,
       ULONG *,  ULONG_PTR *,  ULONG)

extern(Windows) nothrow @nogc

fnPLOADED_IMAGE ImageLoad(LPSTR, LPSTR) extern(Windows) nothrow @nogc

fnBOOL ImageUnload(PLOADED_IMAGE) extern(Windows) nothrow @nogc

fnPIMAGE_NT_HEADERS ImageNtHeader(PVOID) extern(Windows) nothrow @nogc

fnPVOID ImageDirectoryEntryToData(PVOID, BOOLEAN, USHORT, PULONG) extern(Windows) nothrow @nogc

fnPIMAGE_SECTION_HEADER ImageRvaToSection(PIMAGE_NT_HEADERS, PVOID, ULONG) extern(Windows) nothrow @nogc

PVOID ImageRvaToVa(PIMAGE_NT_HEADERS,  PVOID,  ULONG,
       PIMAGE_SECTION_HEADER *)

extern(Windows) nothrow @nogc

fnBOOL MapAndLoad(LPSTR, LPSTR, PLOADED_IMAGE, BOOL, BOOL) extern(Windows) nothrow @nogc

BOOL GetImageConfigInformation(PLOADED_IMAGE,
       PIMAGE_LOAD_CONFIG_DIRECTORY)

extern(Windows) nothrow @nogc

fnDWORD GetImageUnusedHeaderBytes(PLOADED_IMAGE, LPDWORD) extern(Windows) nothrow @nogc

BOOL SetImageConfigInformation(PLOADED_IMAGE,
       PIMAGE_LOAD_CONFIG_DIRECTORY)

extern(Windows) nothrow @nogc

fnBOOL UnMapAndLoad(PLOADED_IMAGE) extern(Windows) nothrow @nogc

fnPIMAGE_DEBUG_INFORMATION MapDebugInformation(HANDLE, LPSTR, LPSTR, DWORD) extern(Windows) nothrow @nogc

fnBOOL UnmapDebugInformation(PIMAGE_DEBUG_INFORMATION) extern(Windows) nothrow @nogc

fnHANDLE FindExecutableImage(LPSTR, LPSTR, LPSTR) extern(Windows) nothrow @nogc

fnBOOL SearchTreeForFile(LPSTR, LPSTR, LPSTR) extern(Windows) nothrow @nogc

fnBOOL MakeSureDirectoryPathExists(LPCSTR) extern(Windows) nothrow @nogc

fnDWORD UnDecorateSymbolName(LPCSTR, LPSTR, DWORD, DWORD) extern(Windows) nothrow @nogc

BOOL StackWalk(DWORD,  HANDLE,  HANDLE,  LPSTACKFRAME,  LPVOID,
       PREAD_PROCESS_MEMORY_ROUTINE,  PFUNCTION_TABLE_ACCESS_ROUTINE,
       PGET_MODULE_BASE_ROUTINE,  PTRANSLATE_ADDRESS_ROUTINE)

extern(Windows) nothrow @nogc

fnLPAPI_VERSION ImagehlpApiVersion() extern(Windows) nothrow @nogc

fnLPAPI_VERSION ImagehlpApiVersionEx(LPAPI_VERSION) extern(Windows) nothrow @nogc

fnDWORD GetTimestampForLoadedLibrary(HMODULE) extern(Windows) nothrow @nogc

fnBOOL RemovePrivateCvSymbolic(PCHAR, PCHAR *, ULONG *) extern(Windows) nothrow @nogc

fnVOID RemoveRelocations(PCHAR) extern(Windows) nothrow @nogc

fnDWORD SymSetOptions(DWORD) extern(Windows) nothrow @nogc

fnDWORD SymGetOptions() extern(Windows) nothrow @nogc

fnBOOL SymCleanup(HANDLE) extern(Windows) nothrow @nogc

fnBOOL SymEnumerateModules(HANDLE, PSYM_ENUMMODULES_CALLBACK, PVOID) extern(Windows) nothrow @nogc

fnBOOL SymEnumerateSymbols(HANDLE, DWORD, PSYM_ENUMSYMBOLS_CALLBACK, PVOID) extern(Windows) nothrow @nogc

fnBOOL EnumerateLoadedModules(HANDLE, PENUMLOADED_MODULES_CALLBACK, PVOID) extern(Windows) nothrow @nogc

fnLPVOID SymFunctionTableAccess(HANDLE, DWORD) extern(Windows) nothrow @nogc

fnBOOL SymGetModuleInfo(HANDLE, DWORD, PIMAGEHLP_MODULE) extern(Windows) nothrow @nogc

fnDWORD SymGetModuleBase(HANDLE, DWORD) extern(Windows) nothrow @nogc

fnBOOL SymGetSymFromAddr(HANDLE, DWORD, PDWORD, PIMAGEHLP_SYMBOL) extern(Windows) nothrow @nogc

fnBOOL SymGetSymFromName(HANDLE, LPSTR, PIMAGEHLP_SYMBOL) extern(Windows) nothrow @nogc

fnBOOL SymGetSymNext(HANDLE, PIMAGEHLP_SYMBOL) extern(Windows) nothrow @nogc

fnBOOL SymGetSymPrev(HANDLE, PIMAGEHLP_SYMBOL) extern(Windows) nothrow @nogc

fnBOOL SymGetLineFromAddr(HANDLE, DWORD, PDWORD, PIMAGEHLP_LINE) extern(Windows) nothrow @nogc

BOOL SymGetLineFromName(HANDLE,  LPSTR,  LPSTR,  DWORD,  PLONG,
       PIMAGEHLP_LINE)

extern(Windows) nothrow @nogc

fnBOOL SymGetLineNext(HANDLE, PIMAGEHLP_LINE) extern(Windows) nothrow @nogc

fnBOOL SymGetLinePrev(HANDLE, PIMAGEHLP_LINE) extern(Windows) nothrow @nogc

fnBOOL SymMatchFileName(LPSTR, LPSTR, LPSTR *, LPSTR *) extern(Windows) nothrow @nogc

fnBOOL SymInitialize(HANDLE, LPSTR, BOOL) extern(Windows) nothrow @nogc

fnBOOL SymGetSearchPath(HANDLE, LPSTR, DWORD) extern(Windows) nothrow @nogc

fnBOOL SymSetSearchPath(HANDLE, LPSTR) extern(Windows) nothrow @nogc

fnBOOL SymLoadModule(HANDLE, HANDLE, PSTR, PSTR, DWORD, DWORD) extern(Windows) nothrow @nogc

fnBOOL SymUnloadModule(HANDLE, DWORD) extern(Windows) nothrow @nogc

fnBOOL SymUnDName(PIMAGEHLP_SYMBOL, LPSTR, DWORD) extern(Windows) nothrow @nogc

fnBOOL SymRegisterCallback(HANDLE, PSYMBOL_REGISTERED_CALLBACK, PVOID) extern(Windows) nothrow @nogc

fnBOOL ImageGetDigestStream(HANDLE, DWORD, DIGEST_FUNCTION, DIGEST_HANDLE) extern(Windows) nothrow @nogc

fnBOOL ImageAddCertificate(HANDLE, LPWIN_CERTIFICATE, PDWORD) extern(Windows) nothrow @nogc

fnBOOL ImageRemoveCertificate(HANDLE, DWORD) extern(Windows) nothrow @nogc

fnBOOL ImageEnumerateCertificates(HANDLE, WORD, PDWORD, PDWORD, DWORD) extern(Windows) nothrow @nogc

fnBOOL ImageGetCertificateData(HANDLE, DWORD, LPWIN_CERTIFICATE, PDWORD) extern(Windows) nothrow @nogc

fnBOOL ImageGetCertificateHeader(HANDLE, DWORD, LPWIN_CERTIFICATE) extern(Windows) nothrow @nogc

fnBOOL CopyPdb(CHAR *, CHAR *, BOOL) extern(Windows) nothrow @nogc

fnBOOL RemovePrivateCvSymbolicEx(PCHAR, ULONG, PCHAR *, ULONG *) extern(Windows) nothrow @nogc

Variables 37

enumvarAPI_VERSION_NUMBER = 7

enumvarBIND_NO_BOUND_IMPORTS = 1

enumvarBIND_NO_UPDATE = 2

enumvarBIND_ALL_IMAGES = 4

enumvarBIND_CACHE_IMPORT_DLLS = 8

enumvarCERT_PE_IMAGE_DIGEST_DEBUG_INFO = 1

enumvarCERT_PE_IMAGE_DIGEST_RESOURCES = 2

enumvarCERT_PE_IMAGE_DIGEST_ALL_IMPORT_INFO = 4

enumvarCERT_PE_IMAGE_DIGEST_NON_PE_INFO = 8

enumvarCERT_SECTION_TYPE_ANY = 255

enumvarIMAGE_SEPARATION = 65536

enumvarSPLITSYM_REMOVE_PRIVATE = 1

enumvarSPLITSYM_EXTRACT_ALL = 2

enumvarSPLITSYM_SYMBOLPATH_IS_SRC = 4

enumvarSYMF_OMAP_GENERATED = 1

enumvarSYMF_OMAP_MODIFIED = 2

enumvarSYMOPT_CASE_INSENSITIVE = 1

enumvarSYMOPT_UNDNAME = 2

enumvarSYMOPT_DEFERRED_LOADS = 4

enumvarSYMOPT_NO_CPP = 8

enumvarUNDNAME_COMPLETE = 0

enumvarUNDNAME_NO_LEADING_UNDERSCORES = 1

enumvarUNDNAME_NO_MS_KEYWORDS = 2

enumvarUNDNAME_NO_FUNCTION_RETURNS = 4

enumvarUNDNAME_NO_ALLOCATION_MODEL = 8

enumvarUNDNAME_NO_ALLOCATION_LANGUAGE = 16

enumvarUNDNAME_NO_MS_THISTYPE = 32

enumvarUNDNAME_NO_CV_THISTYPE = 64

enumvarUNDNAME_NO_THISTYPE = 96

enumvarUNDNAME_NO_ACCESS_SPECIFIERS = 128

enumvarUNDNAME_NO_THROW_SIGNATURES = 256

enumvarUNDNAME_NO_MEMBER_TYPE = 512

enumvarUNDNAME_NO_RETURN_UDT_MODEL = 1024

enumvarUNDNAME_32_BIT_DECODE = 2048

enumvarUNDNAME_NAME_ONLY = 4096

enumvarUNDNAME_NO_ARGUMENTS = 8192

enumvarUNDNAME_NO_SPECIAL_SYMS = 16384