ldrPE.h revision b5d785ac6dd8ed3ffb391fbd67ef38259ed66902
/* $Id$ */
/** @file
* IPRT - Windows NT PE Structures and Constants.
*/
/*
* Copyright (C) 2006-2013 Oracle Corporation
*
* This file is part of VirtualBox Open Source Edition (OSE), as
* available from http://www.virtualbox.org. This file is free software;
* General Public License (GPL) as published by the Free Software
* Foundation, in version 2 as it comes in the "COPYING" file of the
* VirtualBox OSE distribution. VirtualBox OSE is distributed in the
* hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
*
* The contents of this file may alternatively be used under the terms
* of the Common Development and Distribution License Version 1.0
* (CDDL) only, as it comes in the "COPYING.CDDL" file of the
* VirtualBox OSE distribution, in which case the provisions of the
* CDDL are applicable instead of those of the GPL.
*
* You may elect to license modified versions of this file under the
* terms and conditions of either the GPL or the CDDL or both.
*/
#ifndef ___internal_ldrPE_h
#define ___internal_ldrPE_h
/*******************************************************************************
* Defined Constants And Macros *
*******************************************************************************/
#define IMAGE_NT_SIGNATURE 0x00004550
/* file header */
#define IMAGE_FILE_MACHINE_I386 0x014c
#define IMAGE_FILE_MACHINE_AMD64 0x8664
#define IMAGE_FILE_RELOCS_STRIPPED 0x0001
#define IMAGE_FILE_EXECUTABLE_IMAGE 0x0002
#define IMAGE_FILE_LINE_NUMS_STRIPPED 0x0004
#define IMAGE_FILE_LOCAL_SYMS_STRIPPED 0x0008
#define IMAGE_FILE_AGGRESIVE_WS_TRIM 0x0010
#define IMAGE_FILE_LARGE_ADDRESS_AWARE 0x0020
#define IMAGE_FILE_16BIT_MACHINE 0x0040
#define IMAGE_FILE_BYTES_REVERSED_LO 0x0080
#define IMAGE_FILE_32BIT_MACHINE 0x0100
#define IMAGE_FILE_DEBUG_STRIPPED 0x0200
#define IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP 0x0400
#define IMAGE_FILE_NET_RUN_FROM_SWAP 0x0800
#define IMAGE_FILE_SYSTEM 0x1000
#define IMAGE_FILE_DLL 0x2000
#define IMAGE_FILE_UP_SYSTEM_ONLY 0x4000
#define IMAGE_FILE_BYTES_REVERSED_HI 0x8000
/* optional header */
#define IMAGE_NT_OPTIONAL_HDR32_MAGIC 0x10B
#define IMAGE_NT_OPTIONAL_HDR64_MAGIC 0x20B
#define IMAGE_SUBSYSTEM_UNKNOWN 0x0
#define IMAGE_SUBSYSTEM_NATIVE 0x1
#define IMAGE_SUBSYSTEM_WINDOWS_GUI 0x2
#define IMAGE_SUBSYSTEM_WINDOWS_CUI 0x3
#define IMAGE_SUBSYSTEM_OS2_GUI 0x4
#define IMAGE_SUBSYSTEM_OS2_CUI 0x5
#define IMAGE_SUBSYSTEM_POSIX_CUI 0x7
#define IMAGE_LIBRARY_PROCESS_INIT 0x0001
#define IMAGE_LIBRARY_PROCESS_TERM 0x0002
#define IMAGE_LIBRARY_THREAD_INIT 0x0004
#define IMAGE_LIBRARY_THREAD_TERM 0x0008
#define IMAGE_DLLCHARACTERISTICS_NO_ISOLATION 0x0200
#define IMAGE_DLLCHARACTERISTICS_NO_SEH 0x0400
#define IMAGE_DLLCHARACTERISTICS_NO_BIND 0x0800
#define IMAGE_DLLCHARACTERISTICS_WDM_DRIVER 0x2000
#define IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE 0x8000
#define IMAGE_NUMBEROF_DIRECTORY_ENTRIES 0x10
#define IMAGE_DIRECTORY_ENTRY_EXPORT 0x0
#define IMAGE_DIRECTORY_ENTRY_IMPORT 0x1
#define IMAGE_DIRECTORY_ENTRY_RESOURCE 0x2
#define IMAGE_DIRECTORY_ENTRY_EXCEPTION 0x3
#define IMAGE_DIRECTORY_ENTRY_SECURITY 0x4
#define IMAGE_DIRECTORY_ENTRY_BASERELOC 0x5
#define IMAGE_DIRECTORY_ENTRY_DEBUG 0x6
#define IMAGE_DIRECTORY_ENTRY_ARCHITECTURE 0x7
#define IMAGE_DIRECTORY_ENTRY_GLOBALPTR 0x8
#define IMAGE_DIRECTORY_ENTRY_TLS 0x9
#define IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG 0xa
#define IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT 0xb
#define IMAGE_DIRECTORY_ENTRY_IAT 0xc
#define IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT 0xd
#define IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR 0xe
/* section header */
#define IMAGE_SIZEOF_SHORT_NAME 0x8
#define IMAGE_SCN_TYPE_REG 0x00000000
#define IMAGE_SCN_TYPE_DSECT 0x00000001
#define IMAGE_SCN_TYPE_NOLOAD 0x00000002
#define IMAGE_SCN_TYPE_GROUP 0x00000004
#define IMAGE_SCN_TYPE_NO_PAD 0x00000008
#define IMAGE_SCN_TYPE_COPY 0x00000010
#define IMAGE_SCN_CNT_CODE 0x00000020
#define IMAGE_SCN_CNT_INITIALIZED_DATA 0x00000040
#define IMAGE_SCN_CNT_UNINITIALIZED_DATA 0x00000080
#define IMAGE_SCN_LNK_OTHER 0x00000100
#define IMAGE_SCN_LNK_INFO 0x00000200
#define IMAGE_SCN_TYPE_OVER 0x00000400
#define IMAGE_SCN_LNK_REMOVE 0x00000800
#define IMAGE_SCN_LNK_COMDAT 0x00001000
#define IMAGE_SCN_MEM_PROTECTED 0x00004000
#define IMAGE_SCN_NO_DEFER_SPEC_EXC 0x00004000
#define IMAGE_SCN_GPREL 0x00008000
#define IMAGE_SCN_MEM_FARDATA 0x00008000
#define IMAGE_SCN_MEM_SYSHEAP 0x00010000
#define IMAGE_SCN_MEM_PURGEABLE 0x00020000
#define IMAGE_SCN_MEM_16BIT 0x00020000
#define IMAGE_SCN_MEM_LOCKED 0x00040000
#define IMAGE_SCN_MEM_PRELOAD 0x00080000
#define IMAGE_SCN_ALIGN_1BYTES 0x00100000
#define IMAGE_SCN_ALIGN_2BYTES 0x00200000
#define IMAGE_SCN_ALIGN_4BYTES 0x00300000
#define IMAGE_SCN_ALIGN_8BYTES 0x00400000
#define IMAGE_SCN_ALIGN_16BYTES 0x00500000
#define IMAGE_SCN_ALIGN_32BYTES 0x00600000
#define IMAGE_SCN_ALIGN_64BYTES 0x00700000
#define IMAGE_SCN_ALIGN_128BYTES 0x00800000
#define IMAGE_SCN_ALIGN_256BYTES 0x00900000
#define IMAGE_SCN_ALIGN_512BYTES 0x00A00000
#define IMAGE_SCN_ALIGN_1024BYTES 0x00B00000
#define IMAGE_SCN_ALIGN_2048BYTES 0x00C00000
#define IMAGE_SCN_ALIGN_4096BYTES 0x00D00000
#define IMAGE_SCN_ALIGN_8192BYTES 0x00E00000
#define IMAGE_SCN_ALIGN_MASK 0x00F00000
#define IMAGE_SCN_ALIGN_SHIFT 20
#define IMAGE_SCN_LNK_NRELOC_OVFL 0x01000000
#define IMAGE_SCN_MEM_DISCARDABLE 0x02000000
#define IMAGE_SCN_MEM_NOT_CACHED 0x04000000
#define IMAGE_SCN_MEM_NOT_PAGED 0x08000000
#define IMAGE_SCN_MEM_SHARED 0x10000000
#define IMAGE_SCN_MEM_EXECUTE 0x20000000
#define IMAGE_SCN_MEM_READ 0x40000000
#define IMAGE_SCN_MEM_WRITE 0x80000000
/* relocations */
#define IMAGE_REL_BASED_ABSOLUTE 0x0
#define IMAGE_REL_BASED_HIGH 0x1
#define IMAGE_REL_BASED_LOW 0x2
#define IMAGE_REL_BASED_HIGHLOW 0x3
#define IMAGE_REL_BASED_HIGHADJ 0x4
#define IMAGE_REL_BASED_MIPS_JMPADDR 0x5
#define IMAGE_REL_BASED_MIPS_JMPADDR16 0x9
#define IMAGE_REL_BASED_IA64_IMM64 0x9
#define IMAGE_REL_BASED_DIR64 0xa
#define IMAGE_REL_BASED_HIGH3ADJ 0xb
/* imports */
#define IMAGE_ORDINAL_FLAG32 0x80000000
#define IMAGE_ORDINAL_FLAG64 0x8000000000000000ULL
/* debug dir */
/* security directory */
/* For .DBG files. */
#define IMAGE_SIZE_OF_SYMBOL 18
#define IMAGE_SIZE_OF_SYMBOL_EX 20
#define IMAGE_SYM_UNDEFINED INT16_C(0)
#define IMAGE_SYM_CLASS_NULL UINT8_C(0)
#define N_BTSHFT 4
#define N_TSHIFT 2
|| (a_StorageClass) == IMAGE_SYM_CLASS_UNION_TAG \
|| (a_StorageClass) == IMAGE_SYM_CLASS_ENUM_TAG )
/*******************************************************************************
* Structures and Typedefs *
*******************************************************************************/
typedef struct _IMAGE_FILE_HEADER
{
} IMAGE_FILE_HEADER; /* size: 0x14 */
typedef IMAGE_FILE_HEADER *PIMAGE_FILE_HEADER;
typedef IMAGE_FILE_HEADER const *PCIMAGE_FILE_HEADER;
typedef struct _IMAGE_DATA_DIRECTORY
{
typedef IMAGE_DATA_DIRECTORY *PIMAGE_DATA_DIRECTORY;
typedef IMAGE_DATA_DIRECTORY const *PCIMAGE_DATA_DIRECTORY;
typedef struct _IMAGE_OPTIONAL_HEADER32
{
} IMAGE_OPTIONAL_HEADER32; /* size: 0xe0 */
typedef IMAGE_OPTIONAL_HEADER32 const *PCIMAGE_OPTIONAL_HEADER32;
typedef struct _IMAGE_OPTIONAL_HEADER64
{
} IMAGE_OPTIONAL_HEADER64; /* size: 0xf0 */
typedef IMAGE_OPTIONAL_HEADER64 const *PCIMAGE_OPTIONAL_HEADER64;
typedef struct _IMAGE_NT_HEADERS
{
} IMAGE_NT_HEADERS32; /* size: 0xf8 */
typedef IMAGE_NT_HEADERS32 *PIMAGE_NT_HEADERS32;
typedef IMAGE_NT_HEADERS32 const *PCIMAGE_NT_HEADERS32;
typedef struct _IMAGE_NT_HEADERS64
{
} IMAGE_NT_HEADERS64; /**< 0x108 */
typedef IMAGE_NT_HEADERS64 *PIMAGE_NT_HEADERS64;
typedef IMAGE_NT_HEADERS64 const *PCIMAGE_NT_HEADERS64;
typedef struct _IMAGE_SECTION_HEADER
{
union
{
} Misc;
typedef IMAGE_SECTION_HEADER *PIMAGE_SECTION_HEADER;
typedef IMAGE_SECTION_HEADER const *PCIMAGE_SECTION_HEADER;
typedef struct _IMAGE_BASE_RELOCATION
{
typedef IMAGE_BASE_RELOCATION *PIMAGE_BASE_RELOCATION;
typedef IMAGE_BASE_RELOCATION const *PCIMAGE_BASE_RELOCATION;
typedef struct _IMAGE_EXPORT_DIRECTORY
{
typedef IMAGE_EXPORT_DIRECTORY const *PCIMAGE_EXPORT_DIRECTORY;
typedef struct _IMAGE_IMPORT_DESCRIPTOR
{
union
{
} u;
typedef IMAGE_IMPORT_DESCRIPTOR const *PCIMAGE_IMPORT_DESCRIPTOR;
typedef struct _IMAGE_IMPORT_BY_NAME
{
typedef IMAGE_IMPORT_BY_NAME *PIMAGE_IMPORT_BY_NAME;
typedef IMAGE_IMPORT_BY_NAME const *PCIMAGE_IMPORT_BY_NAME;
/* The image_thunk_data32/64 structures are not very helpful except for getting RSI. keep them around till all the code has been converted. */
typedef struct _IMAGE_THUNK_DATA64
{
union
{
} u1;
typedef IMAGE_THUNK_DATA64 *PIMAGE_THUNK_DATA64;
typedef IMAGE_THUNK_DATA64 const *PCIMAGE_THUNK_DATA64;
typedef struct _IMAGE_THUNK_DATA32
{
union
{
} u1;
typedef IMAGE_THUNK_DATA32 *PIMAGE_THUNK_DATA32;
typedef IMAGE_THUNK_DATA32 const *PCIMAGE_THUNK_DATA32;
typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32
{
typedef IMAGE_LOAD_CONFIG_DIRECTORY32 const *PCIMAGE_LOAD_CONFIG_DIRECTORY32;
typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64
{
typedef IMAGE_LOAD_CONFIG_DIRECTORY64 const *PCIMAGE_LOAD_CONFIG_DIRECTORY64;
typedef struct _IMAGE_DEBUG_DIRECTORY
{
typedef IMAGE_DEBUG_DIRECTORY *PIMAGE_DEBUG_DIRECTORY;
typedef IMAGE_DEBUG_DIRECTORY const *PCIMAGE_DEBUG_DIRECTORY;
typedef struct _IMAGE_DEBUG_MISC
{
typedef IMAGE_DEBUG_MISC *PIMAGE_DEBUG_MISC;
typedef IMAGE_DEBUG_MISC const *PCIMAGE_DEBUG_MISC;
typedef struct WIN_CERTIFICATE
{
typedef WIN_CERTIFICATE *PWIN_CERTIFICATE;
typedef WIN_CERTIFICATE const *PCWIN_CERTIFICATE;
/* WARNING! NO MORE PRAGMA PACK 4 from here on. Assert size of all new types. */
/* WARNING! NO MORE PRAGMA PACK 4 from here on. Assert size of all new types. */
/* WARNING! NO MORE PRAGMA PACK 4 from here on. Assert size of all new types. */
/* WARNING! NO MORE PRAGMA PACK 4 from here on. Assert size of all new types. */
/* WARNING! NO MORE PRAGMA PACK 4 from here on. Assert size of all new types. */
/* WARNING! NO MORE PRAGMA PACK 4 from here on. Assert size of all new types. */
/* WARNING! NO MORE PRAGMA PACK 4 from here on. Assert size of all new types. */
/* WARNING! NO MORE PRAGMA PACK 4 from here on. Assert size of all new types. */
/* WARNING! NO MORE PRAGMA PACK 4 from here on. Assert size of all new types. */
#pragma pack()
/** The header of a .DBG file (NT4). */
typedef struct _IMAGE_SEPARATE_DEBUG_HEADER
{
} IMAGE_SEPARATE_DEBUG_HEADER; /* size: 0x30 */
typedef IMAGE_SEPARATE_DEBUG_HEADER const *PCIMAGE_SEPARATE_DEBUG_HEADER;
typedef struct _IMAGE_COFF_SYMBOLS_HEADER
{
typedef IMAGE_COFF_SYMBOLS_HEADER const *PCIMAGE_COFF_SYMBOLS_HEADER;
#pragma pack(2)
typedef struct _IMAGE_LINENUMBER
{
union
{
} Type;
#pragma pack()
typedef IMAGE_LINENUMBER *PIMAGE_LINENUMBER;
typedef IMAGE_LINENUMBER const *PCIMAGE_LINENUMBER;
#pragma pack(2)
typedef struct _IMAGE_SYMBOL
{
union
{
struct
{
} Name;
} N;
} IMAGE_SYMBOL;
#pragma pack()
typedef IMAGE_SYMBOL *PIMAGE_SYMBOL;
typedef IMAGE_SYMBOL const *PCIMAGE_SYMBOL;
#pragma pack(2)
typedef struct IMAGE_AUX_SYMBOL_TOKEN_DEF
{
#pragma pack()
typedef IMAGE_AUX_SYMBOL_TOKEN_DEF const *PCIMAGE_AUX_SYMBOL_TOKEN_DEF;
#pragma pack(1)
typedef union _IMAGE_AUX_SYMBOL
{
struct
{
union
{
struct
{
} LnSz;
} Misc;
union
{
struct
{
} Function;
struct
{
} Array;
} FcnAry;
} Sym;
struct
{
} File;
struct
{
} Section;
struct
{
} CRC;
#pragma pack()
typedef IMAGE_AUX_SYMBOL *PIMAGE_AUX_SYMBOL;
typedef IMAGE_AUX_SYMBOL const *PCIMAGE_AUX_SYMBOL;
typedef struct _IMAGE_SYMBOL_EX
{
union
{
struct
{
} Name;
} N;
typedef IMAGE_SYMBOL_EX *PIMAGE_SYMBOL_EX;
typedef IMAGE_SYMBOL_EX const *PCIMAGE_SYMBOL_EX;
typedef union _IMAGE_AUX_SYMBOL_EX
{
struct
{
} Sym;
struct
{
} File;
struct
{
} Section;
struct
{
} CRC;
#pragma pack()
typedef IMAGE_AUX_SYMBOL_EX *PIMAGE_AUX_SYMBOL_EX;
typedef IMAGE_AUX_SYMBOL_EX const *PCIMAGE_AUX_SYMBOL_EX;
#endif