Questions tagged [dbghelp]

dbghelp is the short name of the Microsoft Debug Help library.

dbghelp is Microsoft's Debug Help Library, which contains utilities for debugging applications. Three common uses for it are for writing minidump files using MinidumpWriteDump, producing a stack trace using StackWalk64 and loading symbols from PDB files, possibly from a symbol server.

108 questions
1
vote
1 answer

SymInitialize python

from ctypes import * from capstone import * k32 = windll.kernel32 dbghelp = cdll.LoadLibrary('dbghelp.dll') handle = k32.LoadLibraryEx(modulePath, 0, 1) #DONT_RESOLVE_DLL_REFERENCES hproc = k32.GetCurrentProcess() ret =…
Heorhiy
  • 190
  • 2
  • 14
1
vote
1 answer

Windows executables with complete embedded debug symbols?

Are there cases when a Windows executable (written in C++ with Visual Studio) can contain its full debug symbols? Or are the full set of debugging symbols contained only in its .pdb file? Is there a way to configure building a windows application…
djcouchycouch
  • 12,724
  • 13
  • 69
  • 108
1
vote
0 answers

SymLoadModuleEx returning ERROR_INVALID_ADDRESS

I'm using SymLoadModuleEx from Dbghelp.h shipped with VS2015. The function works only once and is returning ERROR_INVALID_ADDRESS for next calls. When I change call order so it's called for another DLL (totally different, even located elsewhere) it…
Dragin
  • 432
  • 3
  • 11
1
vote
1 answer

Distributing DbgHelp.DLL

My application relies on DBGHELP.DLL functions, especially the information about the loaded DLLs by the target processes. However, many times it fails on Windows versions lower to Vista (you know XP is still there!). Looked around and found that…
Ajay
  • 18,086
  • 12
  • 59
  • 105
1
vote
3 answers

c++ & Context structure

Does anybody know where I can find some information about the fields of the CONTEXT structure in C++?
Idov
  • 5,006
  • 17
  • 69
  • 106
1
vote
1 answer

How to track down which app is injecting dbghelp into all other processes?

It appears that on a particular system, dbghelp.dll is being loaded into all processes. Since I believe this to not be normal behavior, I am guessing that it is being injected by some other application. Is there a way to track down which app is…
user495313
  • 11
  • 2
1
vote
1 answer

DBGHelp.dll causes load of msvcrt.dll in debug version

My application compiles with VC6 sp6, uses DBGHelp.lib to get stack information. The code is simmilar in debug and release compilations. The problem is that when executing the debug version, DBGHelp.dll loads msvcrt.dll (the release version).…
itaj
  • 123
  • 7
1
vote
1 answer

Is it possible to get assembly code from a given address using dbghelp.dll?

I am able to get line information at a giving address using dbghelp.dll by calling SymGetLineFromAddr64() of dbghelp.dll. It only gives me source code information of that address (e.g. line number and file name). However, in WinDBG, I can also get…
stanleyli
  • 1,427
  • 1
  • 11
  • 28
1
vote
2 answers

How to make dbghelp to load symbols from custom sym store?

Is there any way for SymInitialize and SymFromAddr methods to automatically load symbols from a custom symbol store. I'm trying to resolve an address to a readable function name using SymFromAddr(). It seems to work fine if I have symbols for the…
pullo_van
  • 649
  • 6
  • 19
1
vote
1 answer

Can I statically link to dbghelp. What are the licensing consequences?

I need to statically link dbghelp.lib to my VS C++ application in order to obtain a dump on crash from customer machines. We have a thoroughly nonsensical requirement that the application must be a single executable file with no installation…
Guillaume CR
  • 3,006
  • 1
  • 19
  • 31
1
vote
2 answers

How do I get a meaningful stack-trace using MiniDumpWriteDump

I'm trying to programatically generate a stack trace. When my users are having a crash, in particular a random one, it's hard to talk them through the process of getting a dump so I can fix the problem. In the past once they would send me the trace…
Kmus
  • 11
  • 4
1
vote
0 answers

Get ModuleNeme from ProcessThread.StartAddress

ProcessThread.StartAddress is the memory address of the function that the operating system called that started this thread. How I get the function name and Module name? for get function name I found SymFromAddr but for Module name I need help.
codeDom
  • 1,623
  • 18
  • 54
1
vote
1 answer

How can I get the values of the local variables via DbgHelp

How can I get the values of the local variables via DbgHelp? I've tried to use the following code #include #include #include #include #include #include #pragma comment(lib,…
FrozenHeart
  • 19,844
  • 33
  • 126
  • 242
1
vote
1 answer

'SymEnumSymbols' API retrieves only the First letter of each method name

I was using this solution to retrieve method names from an unmanaged C++ library, the solution uses SymEnumerateSymbols64 function but MSDN says here that applications must use SymEnumSymbols instead, so I've found this other solution, but when I've…
ElektroStudios
  • 19,105
  • 33
  • 200
  • 417
1
vote
0 answers

Using dbghelp.dll on Windows 8.1 Update 1 crashes application

I just updated my version of Windows 8.1 Enterprise to Update 1 (the latest patches released in this week's version of Black Tuesday). I ran one of my MSVC++ applications which uses WINAPI methods that are a part of dbghelp.dll and it crashed. The…
Alexandru
  • 12,264
  • 17
  • 113
  • 208