IImage Interface

Definition

Namespace:

Microsoft.Windows.EventTracing.Processes

Assembly:

Microsoft.Windows.EventTracing.Processes.dll

public interface IImage

type IImage = interface

Public Interface IImage

Properties

AddressRange	Gets the AddressRange in the process's virtual memory into which the image was loaded.
Checksum	Gets the MD5 checksum of the image file.
CompanyName	Gets the company name associated with the image file, if available.
CompatibilityFileId
CompatibilityProgramId
DefaultBaseAddress	Gets the default base address for the image.
FileDescription	Gets the file description of the image file.
FileName	Gets the name of the image file.
FileOffset	Gets the offset of the segment of the image file that has been loaded into AddressRange in the process's virtual memory.
FileVersion	Gets the version of the image file.
FileVersionNumber	Gets the version number of the image file.
LoadedDuration	Gets the time during which the image was loaded, if available.
LoadingThread	Gets the IThread that loaded the image, if available.
LoadingThreadId	Gets the ID of the thread that loaded the image, if available.
LoadReason	Gets the reason that the image was loaded, if available.
LoadStack	Gets the stack that resulted in the image being loaded, if available.
LoadTime	Gets the timestamp at which the image was loaded, if available.
Locale
OriginalFileName	Gets the original name of the image file at the time it was built.
ParentImage	Gets the parent of the image, if available.
Path	Gets the path of the image file.
Pdb	Gets the IPdb associated with the image, if available.
Process	Gets the IProcess into whose address space the image was loaded.
ProcessId	Gets the ID of the process into whose address space the image was loaded.
ProductName	Gets the product name associated with the image file, if available.
ProductVersion	Gets the product version associated with the image file, if available.
Size	Gets the size of the image file.
Timestamp	Gets a value that represents the timestamp of the image.
UnloadingThread	Gets the IThread that unloaded the image, if available.
UnloadingThreadId	Gets the ID of the thread that unloaded the image, if available.
UnloadStack	Gets the stack that resulted in the image being unloaded, if available.
UnloadTime	Gets the timestamp at which the image was unloaded, if available.

Methods

GetImageSections(IImageSectionDataSource)	Gets a list of the image sections for this image.
GetSymbol(Address)	Gets a symbol corresponding to an address for this image.

Extension Methods

GetProcessAddress(IImage, Address)

Gets the process virtual address from a relative virtual address for the image.