core.sys.windows.imagehlp

Windows API header module

Translated from MinGW Windows headers

Authors

Stewart Gordon

License

Types 35

BindOutOfMemory
BindRvaToVaFailed
BindNoRoomInImage
BindImportModuleFailed
BindImportProcedureFailed
BindImportModule
BindImportProcedure
BindForwarder
BindForwarderNOT
BindImageModified
BindExpandFileHeaders
BindImageComplete
BindMismatchedSymbols
BindSymbolsNotUpdated
Fields
LPSTR ModuleName
HANDLE hFile
PUCHAR MappedAddress
PIMAGE_SECTION_HEADER LastRvaSection
ULONG NumberOfSections
ULONG Characteristics
BOOLEAN fSystemImage
BOOLEAN fDOSImage
ULONG SizeOfImage
Fields
DWORD Size
PVOID MappedBase
USHORT Machine
USHORT Characteristics
DWORD CheckSum
DWORD ImageBase
DWORD SizeOfImage
DWORD NumberOfSections
DWORD ExportedNamesSize
LPSTR ExportedNames
DWORD NumberOfFunctionTableEntries
PIMAGE_FUNCTION_ENTRY FunctionTableEntries
DWORD LowestFunctionStartingAddress
DWORD HighestFunctionEndingAddress
DWORD NumberOfFpoTableEntries
PFPO_DATA FpoTableEntries
DWORD SizeOfCoffSymbols
DWORD SizeOfCodeViewSymbols
PVOID CodeViewSymbols
LPSTR ImageFilePath
LPSTR ImageFileName
LPSTR DebugFilePath
DWORD TimeDateStamp
BOOL RomImage
PIMAGE_DEBUG_DIRECTORY DebugDirectory
DWORD NumberOfDebugDirectories
DWORD[3] Reserved
AddrMode1616
AddrMode1632
AddrModeReal
AddrModeFlat
structADDRESS
Fields
DWORD Offset
WORD Segment
structKDHELP
Fields
DWORD Thread
DWORD ThCallbackStack
DWORD NextCallback
DWORD FramePointer
DWORD KiCallUserMode
DWORD KeUserCallbackDispatcher
DWORD SystemRangeStart
DWORD ThCallbackBStore
DWORD KiUserExceptionDispatcher
DWORD StackBase
DWORD StackLimit
DWORD[5] Reserved
aliasPKDHELP = KDHELP *
Fields
ADDRESS AddrPC
ADDRESS AddrReturn
ADDRESS AddrFrame
ADDRESS AddrStack
LPVOID FuncTableEntry
DWORD[4] Params
BOOL Far
BOOL Virtual
DWORD[3] Reserved
KDHELP KdHelp
ADDRESS AddrBStore
SymNone
SymCoff
SymCv
SymPdb
SymExport
SymDeferred
SymSym
Fields
DWORD SizeOfStruct
DWORD Address
DWORD Size
DWORD Flags
DWORD MaxNameLength
CHAR[1] Name
Fields
DWORD SizeOfStruct
DWORD BaseOfImage
DWORD ImageSize
DWORD TimeDateStamp
DWORD CheckSum
DWORD NumSyms
SYM_TYPE SymType
CHAR[32] ModuleName
CHAR[256] ImageName
CHAR[256] LoadedImageName
Fields
DWORD SizeOfStruct
DWORD Key
DWORD LineNumber
PCHAR FileName
DWORD Address
Fields
DWORD SizeOfStruct
DWORD BaseOfImage
DWORD CheckSum
DWORD TimeDateStamp
CHAR[MAX_PATH] FileName
BOOLEAN Reparse
Fields
DWORD SizeOfStruct
DWORD NumberOfDups
ULONG SelectedSymbol
aliasPIMAGEHLP_STATUS_ROUTINE = BOOL function(IMAGEHLP_STATUS_REASON, LPSTR, LPSTR, ULONG_PTR, ULONG_PTR)
aliasPREAD_PROCESS_MEMORY_ROUTINE = BOOL function(HANDLE , LPCVOID, LPVOID, DWORD, LPDWORD)
aliasPFUNCTION_TABLE_ACCESS_ROUTINE = LPVOID function(HANDLE, DWORD)
aliasPGET_MODULE_BASE_ROUTINE = DWORD function(HANDLE, DWORD)
aliasPSYM_ENUMMODULES_CALLBACK = BOOL function(LPSTR, ULONG, PVOID)
aliasPSYM_ENUMSYMBOLS_CALLBACK = BOOL function(LPSTR, ULONG, ULONG, PVOID)
aliasPENUMLOADED_MODULES_CALLBACK = BOOL function(LPSTR, ULONG, ULONG, PVOID)
aliasDIGEST_FUNCTION = BOOL function(DIGEST_HANDLE refdata, PBYTE pData, DWORD dwLength)

Functions 68

fnPIMAGE_NT_HEADERS CheckSumMappedFile(LPVOID, DWORD, LPDWORD, LPDWORD)
fnDWORD MapFileAndCheckSumA(LPSTR, LPDWORD, LPDWORD)
fnDWORD MapFileAndCheckSumW(PWSTR, LPDWORD, LPDWORD)
fnBOOL SplitSymbols(LPSTR, LPSTR, LPSTR, DWORD)
fnHANDLE FindDebugInfoFile(LPSTR, LPSTR, LPSTR)
fnHANDLE FindExecutableImage(LPSTR, LPSTR, LPSTR)
fnBOOL UpdateDebugInfoFile(LPSTR, LPSTR, LPSTR, PIMAGE_NT_HEADERS)
fnBOOL UpdateDebugInfoFileEx(LPSTR, LPSTR, LPSTR, PIMAGE_NT_HEADERS, DWORD)
fnBOOL BindImage(LPSTR, LPSTR, LPSTR)
fnBOOL BindImageEx(DWORD, LPSTR, LPSTR, LPSTR, PIMAGEHLP_STATUS_ROUTINE)
fnBOOL ReBaseImage(LPSTR, LPSTR, BOOL, BOOL, BOOL, ULONG, ULONG *, ULONG_PTR *, ULONG *, ULONG_PTR *, ULONG)
fnPLOADED_IMAGE ImageLoad(LPSTR, LPSTR)
fnBOOL MapAndLoad(LPSTR, LPSTR, PLOADED_IMAGE, BOOL, BOOL)
fnHANDLE FindExecutableImage(LPSTR, LPSTR, LPSTR)
fnBOOL SearchTreeForFile(LPSTR, LPSTR, LPSTR)
fnDWORD UnDecorateSymbolName(LPCSTR, LPSTR, DWORD, DWORD)
fnBOOL RemovePrivateCvSymbolic(PCHAR, PCHAR *, ULONG *)
fnDWORD SymSetOptions(DWORD)
fnDWORD SymGetOptions()
fnDWORD SymGetModuleBase(HANDLE, DWORD)
fnBOOL SymGetSymFromAddr(HANDLE, DWORD, PDWORD, PIMAGEHLP_SYMBOL)
fnBOOL SymGetLineFromAddr(HANDLE, DWORD, PDWORD, PIMAGEHLP_LINE)
fnBOOL SymGetLineFromName(HANDLE, LPSTR, LPSTR, DWORD, PLONG, PIMAGEHLP_LINE)
fnBOOL SymMatchFileName(LPSTR, LPSTR, LPSTR *, LPSTR *)
fnBOOL SymInitialize(HANDLE, LPSTR, BOOL)
fnBOOL SymGetSearchPath(HANDLE, LPSTR, DWORD)
fnBOOL SymSetSearchPath(HANDLE, LPSTR)
fnBOOL SymLoadModule(HANDLE, HANDLE, PSTR, PSTR, DWORD, DWORD)
fnBOOL SymUnloadModule(HANDLE, DWORD)
fnBOOL SymUnDName(PIMAGEHLP_SYMBOL, LPSTR, DWORD)
fnBOOL ImageEnumerateCertificates(HANDLE, WORD, PDWORD, PDWORD, DWORD)
fnBOOL CopyPdb(CHAR *, CHAR *, BOOL)
fnBOOL RemovePrivateCvSymbolicEx(PCHAR, ULONG, PCHAR *, ULONG *)

Variables 37

enumvarAPI_VERSION_NUMBER = 7
enumvarBIND_NO_BOUND_IMPORTS = 1
enumvarBIND_NO_UPDATE = 2
enumvarBIND_ALL_IMAGES = 4
enumvarBIND_CACHE_IMPORT_DLLS = 8
enumvarCERT_PE_IMAGE_DIGEST_DEBUG_INFO = 1
enumvarCERT_PE_IMAGE_DIGEST_RESOURCES = 2
enumvarCERT_PE_IMAGE_DIGEST_ALL_IMPORT_INFO = 4
enumvarCERT_PE_IMAGE_DIGEST_NON_PE_INFO = 8
enumvarCERT_SECTION_TYPE_ANY = 255
enumvarIMAGE_SEPARATION = 65536
enumvarSPLITSYM_REMOVE_PRIVATE = 1
enumvarSPLITSYM_EXTRACT_ALL = 2
enumvarSPLITSYM_SYMBOLPATH_IS_SRC = 4
enumvarSYMF_OMAP_GENERATED = 1
enumvarSYMF_OMAP_MODIFIED = 2
enumvarSYMOPT_CASE_INSENSITIVE = 1
enumvarSYMOPT_UNDNAME = 2
enumvarSYMOPT_DEFERRED_LOADS = 4
enumvarSYMOPT_NO_CPP = 8
enumvarUNDNAME_COMPLETE = 0
enumvarUNDNAME_NO_LEADING_UNDERSCORES = 1
enumvarUNDNAME_NO_MS_KEYWORDS = 2
enumvarUNDNAME_NO_FUNCTION_RETURNS = 4
enumvarUNDNAME_NO_ALLOCATION_MODEL = 8
enumvarUNDNAME_NO_ALLOCATION_LANGUAGE = 16
enumvarUNDNAME_NO_MS_THISTYPE = 32
enumvarUNDNAME_NO_CV_THISTYPE = 64
enumvarUNDNAME_NO_THISTYPE = 96
enumvarUNDNAME_NO_ACCESS_SPECIFIERS = 128
enumvarUNDNAME_NO_THROW_SIGNATURES = 256
enumvarUNDNAME_NO_MEMBER_TYPE = 512
enumvarUNDNAME_NO_RETURN_UDT_MODEL = 1024
enumvarUNDNAME_32_BIT_DECODE = 2048
enumvarUNDNAME_NAME_ONLY = 4096
enumvarUNDNAME_NO_ARGUMENTS = 8192
enumvarUNDNAME_NO_SPECIAL_SYMS = 16384