LOAD_DLL_DEBUG_INFO
The LOAD_DLL_DEBUG_INFO
structure contains information about a dynamic-link library (DLL) that has just
been loaded.
typedef struct _LOAD_DLL_DEBUG_INFO { // lddi
HANDLE
hFile;
LPVOID
lpBaseOfDll;
DWORD dwDebugInfoFileOffset;
DWORD nDebugInfoSize;
LPVOID
lpImageName;
WORD
fUnicode;
} LOAD_DLL_DEBUG_INFO;
Members
hFile
Identifies a
handle of the DLL. If this member is NULL, the handle is not valid. Otherwise,
the member is opened for reading and read-sharing in the context of the
debugger.
lpBaseOfDll
Points to the
base address of the DLL in the address space of the process loading the DLL.
dwDebugInfoFileOffset
Specifies the
offset to the debugging information in the file identified by the hFile
member. The kernel expects the debugging information to be in CodeView 4.0
format. This format is currently a derivative of Common Object File Format
(COFF).
nDebugInfoSize
Specifies the
size, in bytes, of the debugging information in the file. If this value is
zero, there is no debugging information.
lpImageName
Points to the
filename associated with hFile. This member may be NULL, or it may
contain the address of a string pointer in the address space of the process
being debugged. That address may, in turn, either be NULL or point to the
actual filename. If fUnicode is a nonzero value, the name string is
Unicode; otherwise, it is ANSI.
This member is strictly optional. Debuggers must be prepared to handle
the case where lpImageName is NULL or *lpImageName (in the address
space of the process being debugged) is NULL. Specifically, this release of
Windows NT will never provide an image name for a create process event, and it
will not likely pass an image name for the first DLL event. This version of
Windows NT will also never provide this information in the case of debugging
events that originate from a call to the DebugActiveProcess function.
fUnicode
Indicates
whether a filename specified by lpImageName is Unicode or ANSI. A
nonzero value for this member indicates Unicode; zero indicates ANSI.
See Also