ホーム › System.Diagnostics.Debug › GetImageUnusedHeaderBytes

GetImageUnusedHeaderBytes

関数

PEイメージヘッダーの未使用バイト数とオフセットを取得する。

DLLimagehlp.dll呼出規約winapiSetLastErrorあり対応OSWindows XP 以降

シグネチャ

// imagehlp.dll
#include <windows.h>

DWORD GetImageUnusedHeaderBytes(
    LOADED_IMAGE* LoadedImage,
    DWORD* SizeUnusedHeaderBytes
);

パラメーター

名前	型	方向
LoadedImage	LOADED_IMAGE*	in
SizeUnusedHeaderBytes	DWORD*	out

戻り値の型: DWORD

各言語での呼び出し定義

// imagehlp.dll
#include <windows.h>

DWORD GetImageUnusedHeaderBytes(
    LOADED_IMAGE* LoadedImage,
    DWORD* SizeUnusedHeaderBytes
);

[DllImport("imagehlp.dll", SetLastError = true, ExactSpelling = true)]
static extern uint GetImageUnusedHeaderBytes(
    IntPtr LoadedImage,   // LOADED_IMAGE*
    out uint SizeUnusedHeaderBytes   // DWORD* out
);

<DllImport("imagehlp.dll", SetLastError:=True, ExactSpelling:=True)>
Public Shared Function GetImageUnusedHeaderBytes(
    LoadedImage As IntPtr,   ' LOADED_IMAGE*
    <Out> ByRef SizeUnusedHeaderBytes As UInteger   ' DWORD* out
) As UInteger
End Function

' LoadedImage : LOADED_IMAGE*
' SizeUnusedHeaderBytes : DWORD* out
Declare PtrSafe Function GetImageUnusedHeaderBytes Lib "imagehlp" ( _
    ByVal LoadedImage As LongPtr, _
    ByRef SizeUnusedHeaderBytes As Long) As Long
' VBA7前提(PtrSafe)。32bit Office では LongPtr→Long。Integer=16bit / Long=32bit / LongLong=64bit。

import ctypes
from ctypes import wintypes

GetImageUnusedHeaderBytes = ctypes.windll.imagehlp.GetImageUnusedHeaderBytes
GetImageUnusedHeaderBytes.restype = wintypes.DWORD
GetImageUnusedHeaderBytes.argtypes = [
    ctypes.c_void_p,  # LoadedImage : LOADED_IMAGE*
    ctypes.POINTER(wintypes.DWORD),  # SizeUnusedHeaderBytes : DWORD* out
]
# GetLastError: use ctypes.GetLastError() (or ctypes.WinDLL(use_last_error=True))

require 'fiddle'
require 'fiddle/import'

lib = Fiddle.dlopen('imagehlp.dll')
GetImageUnusedHeaderBytes = Fiddle::Function.new(
  lib['GetImageUnusedHeaderBytes'],
  [
    Fiddle::TYPE_VOIDP,  # LoadedImage : LOADED_IMAGE*
    Fiddle::TYPE_VOIDP,  # SizeUnusedHeaderBytes : DWORD* out
  ],
  -Fiddle::TYPE_INT)

#[link(name = "imagehlp")]
extern "system" {
    fn GetImageUnusedHeaderBytes(
        LoadedImage: *mut LOADED_IMAGE,  // LOADED_IMAGE*
        SizeUnusedHeaderBytes: *mut u32  // DWORD* out
    ) -> u32;
}
// crates: windows-sys provides ready-made bindings for this API.

$sig = @"
[DllImport("imagehlp.dll", SetLastError = true)]
public static extern uint GetImageUnusedHeaderBytes(IntPtr LoadedImage, out uint SizeUnusedHeaderBytes);
"@
$api = Add-Type -MemberDefinition $sig -Name 'imagehlp_GetImageUnusedHeaderBytes' -Namespace Win32 -PassThru
# $api::GetImageUnusedHeaderBytes(LoadedImage, SizeUnusedHeaderBytes)

#uselib "imagehlp.dll"
#func global GetImageUnusedHeaderBytes "GetImageUnusedHeaderBytes" sptr, sptr
; GetImageUnusedHeaderBytes varptr(LoadedImage), varptr(SizeUnusedHeaderBytes)   ; 戻り値は stat
; LoadedImage : LOADED_IMAGE* -> "sptr"
; SizeUnusedHeaderBytes : DWORD* out -> "sptr"
; ※HSP3.7は #func のため戻り値はシステム変数 stat に格納されます。

出力引数:

#uselib "imagehlp.dll"
#cfunc global GetImageUnusedHeaderBytes "GetImageUnusedHeaderBytes" var, var
; res = GetImageUnusedHeaderBytes(LoadedImage, SizeUnusedHeaderBytes)
; LoadedImage : LOADED_IMAGE* -> "var"
; SizeUnusedHeaderBytes : DWORD* out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。#uselib "imagehlp.dll"
#cfunc global GetImageUnusedHeaderBytes "GetImageUnusedHeaderBytes" sptr, sptr
; res = GetImageUnusedHeaderBytes(varptr(LoadedImage), varptr(SizeUnusedHeaderBytes))
; LoadedImage : LOADED_IMAGE* -> "sptr"
; SizeUnusedHeaderBytes : DWORD* out -> "sptr"
; ※出力/バッファ引数はポインタ方式(token=sptr / 呼び出しは varptr(変数))。

出力引数:

; DWORD GetImageUnusedHeaderBytes(LOADED_IMAGE* LoadedImage, DWORD* SizeUnusedHeaderBytes)
#uselib "imagehlp.dll"
#cfunc global GetImageUnusedHeaderBytes "GetImageUnusedHeaderBytes" var, var
; res = GetImageUnusedHeaderBytes(LoadedImage, SizeUnusedHeaderBytes)
; LoadedImage : LOADED_IMAGE* -> "var"
; SizeUnusedHeaderBytes : DWORD* out -> "var"
; ※出力/バッファ引数は var 方式(変数を直接渡す)。varptr 方式にも切替可。; DWORD GetImageUnusedHeaderBytes(LOADED_IMAGE* LoadedImage, DWORD* SizeUnusedHeaderBytes)
#uselib "imagehlp.dll"
#cfunc global GetImageUnusedHeaderBytes "GetImageUnusedHeaderBytes" intptr, intptr
; res = GetImageUnusedHeaderBytes(varptr(LoadedImage), varptr(SizeUnusedHeaderBytes))
; LoadedImage : LOADED_IMAGE* -> "intptr"
; SizeUnusedHeaderBytes : DWORD* out -> "intptr"
; ※出力/バッファ引数はポインタ方式(token=intptr / 呼び出しは varptr(変数))。

import (
	"golang.org/x/sys/windows"
	"unsafe"
)

var (
	imagehlp = windows.NewLazySystemDLL("imagehlp.dll")
	procGetImageUnusedHeaderBytes = imagehlp.NewProc("GetImageUnusedHeaderBytes")
)

// LoadedImage (LOADED_IMAGE*), SizeUnusedHeaderBytes (DWORD* out)
r1, _, err := procGetImageUnusedHeaderBytes.Call(
	uintptr(LoadedImage),
	uintptr(SizeUnusedHeaderBytes),
)
_ = err  // syscall.Errno (valid when the call sets last-error)
_ = r1   // DWORD

function GetImageUnusedHeaderBytes(
  LoadedImage: Pointer;   // LOADED_IMAGE*
  SizeUnusedHeaderBytes: Pointer   // DWORD* out
): DWORD; stdcall;
  external 'imagehlp.dll' name 'GetImageUnusedHeaderBytes';

result := DllCall("imagehlp\GetImageUnusedHeaderBytes"
    , "Ptr", LoadedImage   ; LOADED_IMAGE*
    , "Ptr", SizeUnusedHeaderBytes   ; DWORD* out
    , "UInt")   ; return: DWORD

●GetImageUnusedHeaderBytes(LoadedImage, SizeUnusedHeaderBytes) = DLL("imagehlp.dll", "dword GetImageUnusedHeaderBytes(void*, void*)")
# 呼び出し: GetImageUnusedHeaderBytes(LoadedImage, SizeUnusedHeaderBytes)
# LoadedImage : LOADED_IMAGE* -> "void*"
# SizeUnusedHeaderBytes : DWORD* out -> "void*"
# なでしこ1は32bit・ANSI(Shift_JIS)。文字列=char*(ANSI)、ポインタ/ハンドル=void*(4byte)。