pecoff.h@ 66484

Last change on this file since 66484 was 66484, checked in by vboxsync, 8 years ago
SUPHardNt: Improved file version dumping. Version hack for dgmaster.sys.
Property svn:eol-style set to `native` Property svn:keywords set to `Id`
File size: 78.8 KB

Line
1	/* $Id: pecoff.h 66484 2017-04-08 17:20:26Z vboxsync $ */
2	/** @file
3	* IPRT - Windows NT PE & COFF Structures and Constants.
4	*/
5
6	/*
7	* Copyright (C) 2006-2016 Oracle Corporation
8	*
9	* This file is part of VirtualBox Open Source Edition (OSE), as
10	* available from http://www.virtualbox.org. This file is free software;
11	* you can redistribute it and/or modify it under the terms of the GNU
12	* General Public License (GPL) as published by the Free Software
13	* Foundation, in version 2 as it comes in the "COPYING" file of the
14	* VirtualBox OSE distribution. VirtualBox OSE is distributed in the
15	* hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
16	*
17	* The contents of this file may alternatively be used under the terms
18	* of the Common Development and Distribution License Version 1.0
19	* (CDDL) only, as it comes in the "COPYING.CDDL" file of the
20	* VirtualBox OSE distribution, in which case the provisions of the
21	* CDDL are applicable instead of those of the GPL.
22	*
23	* You may elect to license modified versions of this file under the
24	* terms and conditions of either the GPL or the CDDL or both.
25	*/
26
27	#ifndef ___iprt_formats_pecoff_h
28	#define ___iprt_formats_pecoff_h
29
30	#include <iprt/types.h>
31	#include <iprt/assert.h>
32
33
34	/** @defgroup grp_rt_formats_pecoff PE & Microsoft COFF structures and definitions
35	* @ingroup grp_rt_formats
36	* @{
37	*/
38
39
40	/**
41	* PE & COFF file header.
42	*
43	* This starts COFF files, while in PE files it's preceeded by the PE signature
44	* (see IMAGE_NT_HEADERS32, IMAGE_NT_HEADERS64).
45	*/
46	typedef struct _IMAGE_FILE_HEADER
47	{
48	uint16_t Machine; /*< 0x00 /
49	uint16_t NumberOfSections; /*< 0x02 /
50	uint32_t TimeDateStamp; /*< 0x04 /
51	uint32_t PointerToSymbolTable; /*< 0x08 /
52	uint32_t NumberOfSymbols; /*< 0x0c /
53	uint16_t SizeOfOptionalHeader; /*< 0x10 /
54	uint16_t Characteristics; /*< 0x12 /
55	} IMAGE_FILE_HEADER; /* size: 0x14 */
56	AssertCompileSize(IMAGE_FILE_HEADER, 0x14);
57	typedef IMAGE_FILE_HEADER *PIMAGE_FILE_HEADER;
58	typedef IMAGE_FILE_HEADER const *PCIMAGE_FILE_HEADER;
59
60
61	/** @name PE & COFF machine types.
62	* Used by IMAGE_FILE_HEADER::Machine and IMAGE_SEPARATE_DEBUG_HEADER::Machine.
63	* @{ */
64	/** X86 compatible CPU, 32-bit instructions. */
65	#define IMAGE_FILE_MACHINE_I386 UINT16_C(0x014c)
66	/** AMD64 compatible CPU, 64-bit instructions. */
67	#define IMAGE_FILE_MACHINE_AMD64 UINT16_C(0x8664)
68
69	/** Unknown target CPU. */
70	#define IMAGE_FILE_MACHINE_UNKNOWN UINT16_C(0x0000)
71	/** Matshushita AM33 CPU. */
72	#define IMAGE_FILE_MACHINE_AM33 UINT16_C(0x01d3)
73	/** Little endian ARM CPU. */
74	#define IMAGE_FILE_MACHINE_ARM UINT16_C(0x01c0)
75	/** ARM or Thumb stuff. */
76	#define IMAGE_FILE_MACHINE_THUMB UINT16_C(0x01c2)
77	/** ARMv7 or higher CPU, Thumb mode. */
78	#define IMAGE_FILE_MACHINE_ARMNT UINT16_C(0x01c4)
79	/** ARMv8 CPU, 64-bit mode. */
80	#define IMAGE_FILE_MACHINE_ARM64 UINT16_C(0xaa64)
81	/** EFI byte code. */
82	#define IMAGE_FILE_MACHINE_EBC UINT16_C(0x0ebc)
83	/** "Itanic" CPU. */
84	#define IMAGE_FILE_MACHINE_IA64 UINT16_C(0x0200)
85	/** Mitsubishi M32R CPU, little endian. */
86	#define IMAGE_FILE_MACHINE_M32R UINT16_C(0x9041)
87	/** MIPS CPU, compact 16-bit instructions only? */
88	#define IMAGE_FILE_MACHINE_MIPS16 UINT16_C(0x0266)
89	/** MIPS CPU with FPU, full 32-bit instructions only? */
90	#define IMAGE_FILE_MACHINE_MIPSFPU UINT16_C(0x0366)
91	/** MIPS CPU with FPU, compact 16-bit instructions? */
92	#define IMAGE_FILE_MACHINE_MIPSFPU16 UINT16_C(0x0466)
93	/** MIPS CPU, little endian, Windows CE (?) v2 designation. */
94	#define IMAGE_FILE_MACHINE_WCEMIPSV2 UINT16_C(0x0169)
95	/** Power PC CPU, little endian. */
96	#define IMAGE_FILE_MACHINE_POWERPC UINT16_C(0x01f0)
97	/** Power PC CPU with FPU, also little endian? */
98	#define IMAGE_FILE_MACHINE_POWERPCFP UINT16_C(0x01f1)
99	/** MIPS R4000 CPU, little endian. */
100	#define IMAGE_FILE_MACHINE_R4000 UINT16_C(0x0166)
101	/** Hitachi SH3 CPU. */
102	#define IMAGE_FILE_MACHINE_SH3 UINT16_C(0x01a2)
103	/** Hitachi SH3 DSP. */
104	#define IMAGE_FILE_MACHINE_SH3DSP UINT16_C(0x01a3)
105	/** Hitachi SH4 CPU. */
106	#define IMAGE_FILE_MACHINE_SH4 UINT16_C(0x01a6)
107	/** Hitachi SH5 CPU. */
108	#define IMAGE_FILE_MACHINE_SH5 UINT16_C(0x01a8)
109	/** @} */
110
111	/** @name File header characteristics (IMAGE_FILE_HEADER::Characteristics)
112	* @{ */
113	#define IMAGE_FILE_RELOCS_STRIPPED UINT16_C(0x0001)
114	#define IMAGE_FILE_EXECUTABLE_IMAGE UINT16_C(0x0002)
115	#define IMAGE_FILE_LINE_NUMS_STRIPPED UINT16_C(0x0004)
116	#define IMAGE_FILE_LOCAL_SYMS_STRIPPED UINT16_C(0x0008)
117	#define IMAGE_FILE_AGGRESIVE_WS_TRIM UINT16_C(0x0010)
118	#define IMAGE_FILE_LARGE_ADDRESS_AWARE UINT16_C(0x0020)
119	#define IMAGE_FILE_16BIT_MACHINE UINT16_C(0x0040)
120	#define IMAGE_FILE_BYTES_REVERSED_LO UINT16_C(0x0080)
121	#define IMAGE_FILE_32BIT_MACHINE UINT16_C(0x0100)
122	#define IMAGE_FILE_DEBUG_STRIPPED UINT16_C(0x0200)
123	#define IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP UINT16_C(0x0400)
124	#define IMAGE_FILE_NET_RUN_FROM_SWAP UINT16_C(0x0800)
125	#define IMAGE_FILE_SYSTEM UINT16_C(0x1000)
126	#define IMAGE_FILE_DLL UINT16_C(0x2000)
127	#define IMAGE_FILE_UP_SYSTEM_ONLY UINT16_C(0x4000)
128	#define IMAGE_FILE_BYTES_REVERSED_HI UINT16_C(0x8000)
129	/** @} */
130
131
132	/**
133	* PE data directory.
134	*
135	* This is used to locate data in the loaded image so the dynamic linker or
136	* others can make use of it. However, in the case of
137	* IMAGE_DIRECTORY_ENTRY_SECURITY it is referring to raw file offsets.
138	*/
139	typedef struct _IMAGE_DATA_DIRECTORY
140	{
141	uint32_t VirtualAddress;
142	uint32_t Size;
143	} IMAGE_DATA_DIRECTORY;
144	AssertCompileSize(IMAGE_DATA_DIRECTORY, 0x8);
145	typedef IMAGE_DATA_DIRECTORY *PIMAGE_DATA_DIRECTORY;
146	typedef IMAGE_DATA_DIRECTORY const *PCIMAGE_DATA_DIRECTORY;
147
148	/** The standard number of data directories in the optional header.
149	* I.e. the dimensions of IMAGE_OPTIONAL_HEADER32::DataDirectory and
150	* IMAGE_OPTIONAL_HEADER64::DataDirectory.
151	*/
152	#define IMAGE_NUMBEROF_DIRECTORY_ENTRIES 0x10
153
154
155	/**
156	* PE optional header, 32-bit version.
157	*/
158	typedef struct _IMAGE_OPTIONAL_HEADER32
159	{
160	uint16_t Magic; /*< 0x00 /
161	uint8_t MajorLinkerVersion; /*< 0x02 /
162	uint8_t MinorLinkerVersion; /*< 0x03 /
163	uint32_t SizeOfCode; /*< 0x04 /
164	uint32_t SizeOfInitializedData; /*< 0x08 /
165	uint32_t SizeOfUninitializedData; /*< 0x0c /
166	uint32_t AddressOfEntryPoint; /*< 0x10 /
167	uint32_t BaseOfCode; /*< 0x14 /
168	uint32_t BaseOfData; /*< 0x18 /
169	uint32_t ImageBase; /*< 0x1c /
170	uint32_t SectionAlignment; /*< 0x20 /
171	uint32_t FileAlignment; /*< 0x24 /
172	uint16_t MajorOperatingSystemVersion; /*< 0x28 /
173	uint16_t MinorOperatingSystemVersion; /*< 0x2a /
174	uint16_t MajorImageVersion; /*< 0x2c /
175	uint16_t MinorImageVersion; /*< 0x2e /
176	uint16_t MajorSubsystemVersion; /*< 0x30 /
177	uint16_t MinorSubsystemVersion; /*< 0x32 /
178	uint32_t Win32VersionValue; /*< 0x34 /
179	uint32_t SizeOfImage; /*< 0x38 /
180	uint32_t SizeOfHeaders; /*< 0x3c /
181	uint32_t CheckSum; /*< 0x40 /
182	uint16_t Subsystem; /*< 0x44 /
183	uint16_t DllCharacteristics; /*< 0x46 /
184	uint32_t SizeOfStackReserve; /*< 0x48 /
185	uint32_t SizeOfStackCommit; /*< 0x4c /
186	uint32_t SizeOfHeapReserve; /*< 0x50 /
187	uint32_t SizeOfHeapCommit; /*< 0x54 /
188	uint32_t LoaderFlags; /*< 0x58 /
189	uint32_t NumberOfRvaAndSizes; /*< 0x5c /
190	IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES]; /*< 0x60; 0x108 = 0x80 */
191	} IMAGE_OPTIONAL_HEADER32; /* size: 0xe0 */
192	AssertCompileSize(IMAGE_OPTIONAL_HEADER32, 0xe0);
193	typedef IMAGE_OPTIONAL_HEADER32 *PIMAGE_OPTIONAL_HEADER32;
194	typedef IMAGE_OPTIONAL_HEADER32 const *PCIMAGE_OPTIONAL_HEADER32;
195
196	/**
197	* PE optional header, 64-bit version.
198	*/
199	typedef struct _IMAGE_OPTIONAL_HEADER64
200	{
201	uint16_t Magic; /*< 0x00 /
202	uint8_t MajorLinkerVersion; /*< 0x02 /
203	uint8_t MinorLinkerVersion; /*< 0x03 /
204	uint32_t SizeOfCode; /*< 0x04 /
205	uint32_t SizeOfInitializedData; /*< 0x08 /
206	uint32_t SizeOfUninitializedData; /*< 0x0c /
207	uint32_t AddressOfEntryPoint; /*< 0x10 /
208	uint32_t BaseOfCode; /*< 0x14 /
209	uint64_t ImageBase; /*< 0x18 /
210	uint32_t SectionAlignment; /*< 0x20 /
211	uint32_t FileAlignment; /*< 0x24 /
212	uint16_t MajorOperatingSystemVersion; /*< 0x28 /
213	uint16_t MinorOperatingSystemVersion; /*< 0x2a /
214	uint16_t MajorImageVersion; /*< 0x2c /
215	uint16_t MinorImageVersion; /*< 0x2e /
216	uint16_t MajorSubsystemVersion; /*< 0x30 /
217	uint16_t MinorSubsystemVersion; /*< 0x32 /
218	uint32_t Win32VersionValue; /*< 0x34 /
219	uint32_t SizeOfImage; /*< 0x38 /
220	uint32_t SizeOfHeaders; /*< 0x3c /
221	uint32_t CheckSum; /*< 0x40 /
222	uint16_t Subsystem; /*< 0x44 /
223	uint16_t DllCharacteristics; /*< 0x46 /
224	uint64_t SizeOfStackReserve; /*< 0x48 /
225	uint64_t SizeOfStackCommit; /*< 0x50 /
226	uint64_t SizeOfHeapReserve; /*< 0x58 /
227	uint64_t SizeOfHeapCommit; /*< 0x60 /
228	uint32_t LoaderFlags; /*< 0x68 /
229	uint32_t NumberOfRvaAndSizes; /*< 0x6c /
230	IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES]; /*< 0x70; 0x108 = 0x80 */
231	} IMAGE_OPTIONAL_HEADER64; /* size: 0xf0 */
232	AssertCompileSize(IMAGE_OPTIONAL_HEADER64, 0xf0);
233	typedef IMAGE_OPTIONAL_HEADER64 *PIMAGE_OPTIONAL_HEADER64;
234	typedef IMAGE_OPTIONAL_HEADER64 const *PCIMAGE_OPTIONAL_HEADER64;
235
236	/** @name Optional header magic values.
237	* @{ */
238	#define IMAGE_NT_OPTIONAL_HDR32_MAGIC UINT16_C(0x010b)
239	#define IMAGE_NT_OPTIONAL_HDR64_MAGIC UINT16_C(0x020b)
240	/** @} */
241
242	/** @name IMAGE_SUBSYSTEM_XXX - Optional header subsystems.
243	* IMAGE_OPTIONAL_HEADER32::Subsystem, IMAGE_OPTIONAL_HEADER64::Subsystem
244	* @{ */
245	#define IMAGE_SUBSYSTEM_UNKNOWN UINT16_C(0x0000)
246	#define IMAGE_SUBSYSTEM_NATIVE UINT16_C(0x0001)
247	#define IMAGE_SUBSYSTEM_WINDOWS_GUI UINT16_C(0x0002)
248	#define IMAGE_SUBSYSTEM_WINDOWS_CUI UINT16_C(0x0003)
249	#define IMAGE_SUBSYSTEM_OS2_GUI UINT16_C(0x0004)
250	#define IMAGE_SUBSYSTEM_OS2_CUI UINT16_C(0x0005)
251	#define IMAGE_SUBSYSTEM_POSIX_CUI UINT16_C(0x0007)
252	/** @} */
253
254	/** @name Optional header characteristics.
255	* @{ */
256	#define IMAGE_LIBRARY_PROCESS_INIT UINT16_C(0x0001)
257	#define IMAGE_LIBRARY_PROCESS_TERM UINT16_C(0x0002)
258	#define IMAGE_LIBRARY_THREAD_INIT UINT16_C(0x0004)
259	#define IMAGE_LIBRARY_THREAD_TERM UINT16_C(0x0008)
260	#define IMAGE_DLLCHARACTERISTICS_RESERVED UINT16_C(0x0010)
261	#define IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA UINT16_C(0x0020)
262	#define IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE UINT16_C(0x0040)
263	#define IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY UINT16_C(0x0080)
264	#define IMAGE_DLLCHARACTERISTICS_NX_COMPAT UINT16_C(0x0100)
265	#define IMAGE_DLLCHARACTERISTICS_NO_ISOLATION UINT16_C(0x0200)
266	#define IMAGE_DLLCHARACTERISTICS_NO_SEH UINT16_C(0x0400)
267	#define IMAGE_DLLCHARACTERISTICS_NO_BIND UINT16_C(0x0800)
268	#define IMAGE_DLLCHARACTERISTICS_APPCONTAINER UINT16_C(0x1000)
269	#define IMAGE_DLLCHARACTERISTICS_WDM_DRIVER UINT16_C(0x2000)
270	#define IMAGE_DLLCHARACTERISTICS_GUARD_CF UINT16_C(0x4000)
271	#define IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE UINT16_C(0x8000)
272	/** @} */
273
274
275	/** @name IMAGE_DIRECTORY_ENTRY_XXX - Data directory indexes.
276	* Used to index IMAGE_OPTIONAL_HEADER32::DataDirectory and
277	* IMAGE_OPTIONAL_HEADER64::DataDirectory
278	* @{ */
279	#define IMAGE_DIRECTORY_ENTRY_EXPORT 0x0
280	#define IMAGE_DIRECTORY_ENTRY_IMPORT 0x1
281	#define IMAGE_DIRECTORY_ENTRY_RESOURCE 0x2
282	#define IMAGE_DIRECTORY_ENTRY_EXCEPTION 0x3
283	#define IMAGE_DIRECTORY_ENTRY_SECURITY 0x4
284	#define IMAGE_DIRECTORY_ENTRY_BASERELOC 0x5
285	#define IMAGE_DIRECTORY_ENTRY_DEBUG 0x6
286	#define IMAGE_DIRECTORY_ENTRY_ARCHITECTURE 0x7
287	#define IMAGE_DIRECTORY_ENTRY_COPYRIGHT IMAGE_DIRECTORY_ENTRY_ARCHITECTURE
288	#define IMAGE_DIRECTORY_ENTRY_GLOBALPTR 0x8
289	#define IMAGE_DIRECTORY_ENTRY_TLS 0x9
290	#define IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG 0xa
291	#define IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT 0xb
292	#define IMAGE_DIRECTORY_ENTRY_IAT 0xc
293	#define IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT 0xd
294	#define IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR 0xe
295	/** @} */
296
297
298	/**
299	* PE (NT) headers, 32-bit version.
300	*/
301	typedef struct _IMAGE_NT_HEADERS32
302	{
303	uint32_t Signature; /*< 0x00 /
304	IMAGE_FILE_HEADER FileHeader; /*< 0x04 /
305	IMAGE_OPTIONAL_HEADER32 OptionalHeader; /*< 0x18 /
306	} IMAGE_NT_HEADERS32; /* size: 0xf8 */
307	AssertCompileSize(IMAGE_NT_HEADERS32, 0xf8);
308	AssertCompileMemberOffset(IMAGE_NT_HEADERS32, FileHeader, 4);
309	AssertCompileMemberOffset(IMAGE_NT_HEADERS32, OptionalHeader, 24);
310	typedef IMAGE_NT_HEADERS32 *PIMAGE_NT_HEADERS32;
311	typedef IMAGE_NT_HEADERS32 const *PCIMAGE_NT_HEADERS32;
312
313	/**
314	* PE (NT) headers, 64-bit version.
315	*/
316	typedef struct _IMAGE_NT_HEADERS64
317	{
318	uint32_t Signature; /*< 0x00 /
319	IMAGE_FILE_HEADER FileHeader; /*< 0x04 /
320	IMAGE_OPTIONAL_HEADER64 OptionalHeader; /*< 0x18 /
321	} IMAGE_NT_HEADERS64; /*< 0x108 /
322	AssertCompileSize(IMAGE_NT_HEADERS64, 0x108);
323	AssertCompileMemberOffset(IMAGE_NT_HEADERS64, FileHeader, 4);
324	AssertCompileMemberOffset(IMAGE_NT_HEADERS64, OptionalHeader, 24);
325	typedef IMAGE_NT_HEADERS64 *PIMAGE_NT_HEADERS64;
326	typedef IMAGE_NT_HEADERS64 const *PCIMAGE_NT_HEADERS64;
327
328	/** The PE signature.
329	* Used by IMAGE_NT_HEADERS32::Signature, IMAGE_NT_HEADERS64::Signature. */
330	#define IMAGE_NT_SIGNATURE UINT32_C(0x00004550)
331
332
333	/** Section header short name length (IMAGE_SECTION_HEADER::Name). */
334	#define IMAGE_SIZEOF_SHORT_NAME 0x8
335
336	/**
337	* PE & COFF section header.
338	*/
339	typedef struct _IMAGE_SECTION_HEADER
340	{
341	uint8_t Name[IMAGE_SIZEOF_SHORT_NAME];
342	union
343	{
344	uint32_t PhysicalAddress;
345	uint32_t VirtualSize;
346	} Misc;
347	uint32_t VirtualAddress;
348	uint32_t SizeOfRawData;
349	uint32_t PointerToRawData;
350	uint32_t PointerToRelocations;
351	uint32_t PointerToLinenumbers;
352	uint16_t NumberOfRelocations;
353	uint16_t NumberOfLinenumbers;
354	uint32_t Characteristics;
355	} IMAGE_SECTION_HEADER;
356	AssertCompileSize(IMAGE_SECTION_HEADER, 40);
357	typedef IMAGE_SECTION_HEADER *PIMAGE_SECTION_HEADER;
358	typedef IMAGE_SECTION_HEADER const *PCIMAGE_SECTION_HEADER;
359
360	/** @name IMAGE_SCN_XXX - Section header characteristics.
361	* Used by IMAGE_SECTION_HEADER::Characteristics.
362	* @{ */
363	#define IMAGE_SCN_TYPE_REG UINT32_C(0x00000000)
364	#define IMAGE_SCN_TYPE_DSECT UINT32_C(0x00000001)
365	#define IMAGE_SCN_TYPE_NOLOAD UINT32_C(0x00000002)
366	#define IMAGE_SCN_TYPE_GROUP UINT32_C(0x00000004)
367	#define IMAGE_SCN_TYPE_NO_PAD UINT32_C(0x00000008)
368	#define IMAGE_SCN_TYPE_COPY UINT32_C(0x00000010)
369
370	#define IMAGE_SCN_CNT_CODE UINT32_C(0x00000020)
371	#define IMAGE_SCN_CNT_INITIALIZED_DATA UINT32_C(0x00000040)
372	#define IMAGE_SCN_CNT_UNINITIALIZED_DATA UINT32_C(0x00000080)
373
374	#define IMAGE_SCN_LNK_OTHER UINT32_C(0x00000100)
375	#define IMAGE_SCN_LNK_INFO UINT32_C(0x00000200)
376	#define IMAGE_SCN_TYPE_OVER UINT32_C(0x00000400)
377	#define IMAGE_SCN_LNK_REMOVE UINT32_C(0x00000800)
378	#define IMAGE_SCN_LNK_COMDAT UINT32_C(0x00001000)
379	#define IMAGE_SCN_MEM_PROTECTED UINT32_C(0x00004000)
380	#define IMAGE_SCN_NO_DEFER_SPEC_EXC UINT32_C(0x00004000)
381	#define IMAGE_SCN_GPREL UINT32_C(0x00008000)
382	#define IMAGE_SCN_MEM_FARDATA UINT32_C(0x00008000)
383	#define IMAGE_SCN_MEM_SYSHEAP UINT32_C(0x00010000)
384	#define IMAGE_SCN_MEM_PURGEABLE UINT32_C(0x00020000)
385	#define IMAGE_SCN_MEM_16BIT UINT32_C(0x00020000)
386	#define IMAGE_SCN_MEM_LOCKED UINT32_C(0x00040000)
387	#define IMAGE_SCN_MEM_PRELOAD UINT32_C(0x00080000)
388
389	#define IMAGE_SCN_ALIGN_1BYTES UINT32_C(0x00100000)
390	#define IMAGE_SCN_ALIGN_2BYTES UINT32_C(0x00200000)
391	#define IMAGE_SCN_ALIGN_4BYTES UINT32_C(0x00300000)
392	#define IMAGE_SCN_ALIGN_8BYTES UINT32_C(0x00400000)
393	#define IMAGE_SCN_ALIGN_16BYTES UINT32_C(0x00500000)
394	#define IMAGE_SCN_ALIGN_32BYTES UINT32_C(0x00600000)
395	#define IMAGE_SCN_ALIGN_64BYTES UINT32_C(0x00700000)
396	#define IMAGE_SCN_ALIGN_128BYTES UINT32_C(0x00800000)
397	#define IMAGE_SCN_ALIGN_256BYTES UINT32_C(0x00900000)
398	#define IMAGE_SCN_ALIGN_512BYTES UINT32_C(0x00A00000)
399	#define IMAGE_SCN_ALIGN_1024BYTES UINT32_C(0x00B00000)
400	#define IMAGE_SCN_ALIGN_2048BYTES UINT32_C(0x00C00000)
401	#define IMAGE_SCN_ALIGN_4096BYTES UINT32_C(0x00D00000)
402	#define IMAGE_SCN_ALIGN_8192BYTES UINT32_C(0x00E00000)
403	#define IMAGE_SCN_ALIGN_MASK UINT32_C(0x00F00000)
404	#define IMAGE_SCN_ALIGN_SHIFT 20
405
406	#define IMAGE_SCN_LNK_NRELOC_OVFL UINT32_C(0x01000000)
407	#define IMAGE_SCN_MEM_DISCARDABLE UINT32_C(0x02000000)
408	#define IMAGE_SCN_MEM_NOT_CACHED UINT32_C(0x04000000)
409	#define IMAGE_SCN_MEM_NOT_PAGED UINT32_C(0x08000000)
410	#define IMAGE_SCN_MEM_SHARED UINT32_C(0x10000000)
411	#define IMAGE_SCN_MEM_EXECUTE UINT32_C(0x20000000)
412	#define IMAGE_SCN_MEM_READ UINT32_C(0x40000000)
413	#define IMAGE_SCN_MEM_WRITE UINT32_C(0x80000000)
414	/** @} */
415
416
417	/**
418	* PE image base relocations block header.
419	*
420	* This found in IMAGE_DIRECTORY_ENTRY_BASERELOC. Each entry is follow
421	* immediately by an array of 16-bit words, where the lower 12-bits are used
422	* for the page offset and the upper 4-bits for the base relocation type
423	* (IMAGE_REL_BASE_XXX). The block should be padded with
424	* IMAGE_REL_BASED_ABSOLUTE entries to ensure 32-bit alignment of this header.
425	*/
426	typedef struct _IMAGE_BASE_RELOCATION
427	{
428	/** The RVA of the page/block the following ase relocations applies to. */
429	uint32_t VirtualAddress;
430	/** The size of this relocation block, including this header. */
431	uint32_t SizeOfBlock;
432	} IMAGE_BASE_RELOCATION;
433	AssertCompileSize(IMAGE_BASE_RELOCATION, 8);
434	typedef IMAGE_BASE_RELOCATION *PIMAGE_BASE_RELOCATION;
435	typedef IMAGE_BASE_RELOCATION const *PCIMAGE_BASE_RELOCATION;
436
437	/** @name IMAGE_REL_BASED_XXX - PE base relocations.
438	* Found in the IMAGE_DIRECTORY_ENTRY_BASERELOC data directory.
439	* @{ */
440	#define IMAGE_REL_BASED_ABSOLUTE UINT16_C(0x0)
441	#define IMAGE_REL_BASED_HIGH UINT16_C(0x1)
442	#define IMAGE_REL_BASED_LOW UINT16_C(0x2)
443	#define IMAGE_REL_BASED_HIGHLOW UINT16_C(0x3)
444	#define IMAGE_REL_BASED_HIGHADJ UINT16_C(0x4)
445	#define IMAGE_REL_BASED_MIPS_JMPADDR UINT16_C(0x5)
446	#define IMAGE_REL_BASED_MIPS_JMPADDR16 UINT16_C(0x9)
447	#define IMAGE_REL_BASED_IA64_IMM64 UINT16_C(0x9)
448	#define IMAGE_REL_BASED_DIR64 UINT16_C(0xa)
449	#define IMAGE_REL_BASED_HIGH3ADJ UINT16_C(0xb)
450	/** @} */
451
452	/**
453	* PE export directory entry.
454	*/
455	typedef struct _IMAGE_EXPORT_DIRECTORY
456	{
457	uint32_t Characteristics;
458	uint32_t TimeDateStamp;
459	uint16_t MajorVersion;
460	uint16_t MinorVersion;
461	uint32_t Name;
462	uint32_t Base;
463	uint32_t NumberOfFunctions;
464	uint32_t NumberOfNames;
465	uint32_t AddressOfFunctions;
466	uint32_t AddressOfNames;
467	uint32_t AddressOfNameOrdinals;
468	} IMAGE_EXPORT_DIRECTORY;
469	AssertCompileSize(IMAGE_EXPORT_DIRECTORY, 40);
470	typedef IMAGE_EXPORT_DIRECTORY *PIMAGE_EXPORT_DIRECTORY;
471	typedef IMAGE_EXPORT_DIRECTORY const *PCIMAGE_EXPORT_DIRECTORY;
472
473
474	/**
475	* PE import directory entry.
476	*/
477	typedef struct _IMAGE_IMPORT_DESCRIPTOR
478	{
479	union
480	{
481	uint32_t Characteristics;
482	uint32_t OriginalFirstThunk;
483	} u;
484	uint32_t TimeDateStamp;
485	uint32_t ForwarderChain;
486	uint32_t Name;
487	uint32_t FirstThunk;
488	} IMAGE_IMPORT_DESCRIPTOR;
489	AssertCompileSize(IMAGE_IMPORT_DESCRIPTOR, 20);
490	typedef IMAGE_IMPORT_DESCRIPTOR *PIMAGE_IMPORT_DESCRIPTOR;
491	typedef IMAGE_IMPORT_DESCRIPTOR const *PCIMAGE_IMPORT_DESCRIPTOR;
492
493	/**
494	* Something we currently don't make use of...
495	*/
496	typedef struct _IMAGE_IMPORT_BY_NAME
497	{
498	uint16_t Hint;
499	uint8_t Name[1];
500	} IMAGE_IMPORT_BY_NAME;
501	AssertCompileSize(IMAGE_IMPORT_BY_NAME, 4);
502	typedef IMAGE_IMPORT_BY_NAME *PIMAGE_IMPORT_BY_NAME;
503	typedef IMAGE_IMPORT_BY_NAME const *PCIMAGE_IMPORT_BY_NAME;
504
505
506	#if 0
507	/* The image_thunk_data32/64 structures are not very helpful except for getting RSI.
508	keep them around till all the code has been converted. */
509	typedef struct _IMAGE_THUNK_DATA64
510	{
511	union
512	{
513	uint64_t ForwarderString;
514	uint64_t Function;
515	uint64_t Ordinal;
516	uint64_t AddressOfData;
517	} u1;
518	} IMAGE_THUNK_DATA64;
519	typedef IMAGE_THUNK_DATA64 *PIMAGE_THUNK_DATA64;
520	typedef IMAGE_THUNK_DATA64 const *PCIMAGE_THUNK_DATA64;
521
522	typedef struct _IMAGE_THUNK_DATA32
523	{
524	union
525	{
526	uint32_t ForwarderString;
527	uint32_t Function;
528	uint32_t Ordinal;
529	uint32_t AddressOfData;
530	} u1;
531	} IMAGE_THUNK_DATA32;
532	typedef IMAGE_THUNK_DATA32 *PIMAGE_THUNK_DATA32;
533	typedef IMAGE_THUNK_DATA32 const *PCIMAGE_THUNK_DATA32;
534	#endif
535
536	/** @name PE import directory macros.
537	* @{ */
538	#define IMAGE_ORDINAL_FLAG32 UINT32_C(0x80000000)
539	#define IMAGE_ORDINAL32(ord) ((ord) & UINT32_C(0xffff))
540	#define IMAGE_SNAP_BY_ORDINAL32(ord) (!!((ord) & IMAGE_ORDINAL_FLAG32))
541
542	#define IMAGE_ORDINAL_FLAG64 UINT64_C(0x8000000000000000)
543	#define IMAGE_ORDINAL64(ord) ((ord) & UINT32_C(0xffff))
544	#define IMAGE_SNAP_BY_ORDINAL64(ord) (!!((ord) & IMAGE_ORDINAL_FLAG64))
545	/** @} */
546
547	/** @name PE Resource directory
548	* @{ */
549	typedef struct _IMAGE_RESOURCE_DIRECTORY
550	{
551	uint32_t Characteristics;
552	uint32_t TimeDateStamp;
553	uint16_t MajorVersion;
554	uint16_t MinorVersion;
555	uint16_t NumberOfNamedEntries;
556	uint16_t NumberOfIdEntries;
557	} IMAGE_RESOURCE_DIRECTORY;
558	typedef IMAGE_RESOURCE_DIRECTORY *PIMAGE_RESOURCE_DIRECTORY;
559	typedef IMAGE_RESOURCE_DIRECTORY const *PCIMAGE_RESOURCE_DIRECTORY;
560
561	typedef struct _IMAGE_RESOURCE_DIRECTORY_ENTRY
562	{
563	union
564	{
565	struct
566	{
567	uint32_t NameOffset : 31;
568	uint32_t NameIsString : 1; /*< IMAGE_RESOURCE_NAME_IS_STRING /
569	} s;
570	uint32_t Name;
571	uint16_t Id;
572	} u;
573	union
574	{
575	struct
576	{
577	uint32_t OffsetToDirectory : 31;
578	uint32_t DataIsDirectory : 1; /*< IMAGE_RESOURCE_DATA_IS_DIRECTORY/
579	} s2;
580	uint32_t OffsetToData;
581	} u2;
582	} IMAGE_RESOURCE_DIRECTORY_ENTRY;
583	typedef IMAGE_RESOURCE_DIRECTORY_ENTRY *PIMAGE_RESOURCE_DIRECTORY_ENTRY;
584	typedef IMAGE_RESOURCE_DIRECTORY_ENTRY const *PCIMAGE_RESOURCE_DIRECTORY_ENTRY;
585
586	#define IMAGE_RESOURCE_NAME_IS_STRING UINT32_C(0x80000000)
587	#define IMAGE_RESOURCE_DATA_IS_DIRECTORY UINT32_C(0x80000000)
588
589	typedef struct _IMAGE_RESOURCE_DIRECTORY_STRING
590	{
591	uint16_t Length;
592	char NameString[1];
593	} IMAGE_RESOURCE_DIRECTORY_STRING;
594	typedef IMAGE_RESOURCE_DIRECTORY_STRING *PIMAGE_RESOURCE_DIRECTORY_STRING;
595	typedef IMAGE_RESOURCE_DIRECTORY_STRING const *PCIMAGE_RESOURCE_DIRECTORY_STRING;
596
597
598	typedef struct _IMAGE_RESOURCE_DIR_STRING_U
599	{
600	uint16_t Length;
601	RTUTF16 NameString[1];
602	} IMAGE_RESOURCE_DIR_STRING_U;
603	typedef IMAGE_RESOURCE_DIR_STRING_U *PIMAGE_RESOURCE_DIR_STRING_U;
604	typedef IMAGE_RESOURCE_DIR_STRING_U const *PCIMAGE_RESOURCE_DIR_STRING_U;
605
606
607	typedef struct _IMAGE_RESOURCE_DATA_ENTRY
608	{
609	uint32_t OffsetToData;
610	uint32_t Size;
611	uint32_t CodePage;
612	uint32_t Reserved;
613	} IMAGE_RESOURCE_DATA_ENTRY;
614	typedef IMAGE_RESOURCE_DATA_ENTRY *PIMAGE_RESOURCE_DATA_ENTRY;
615	typedef IMAGE_RESOURCE_DATA_ENTRY const *PCIMAGE_RESOURCE_DATA_ENTRY;
616
617	/** @} */
618
619
620
621	/** @name Image load config directories
622	* @{ */
623
624	/** @since Windows 10 (preview 9879) */
625	typedef struct _IMAGE_LOAD_CONFIG_CODE_INTEGRITY
626	{
627	uint16_t Flags;
628	uint16_t Catalog;
629	uint32_t CatalogOffset;
630	uint32_t Reserved;
631	} IMAGE_LOAD_CONFIG_CODE_INTEGRITY;
632	AssertCompileSize(IMAGE_LOAD_CONFIG_CODE_INTEGRITY, 12);
633	typedef IMAGE_LOAD_CONFIG_CODE_INTEGRITY *PIMAGE_LOAD_CONFIG_CODE_INTEGRITY;
634	typedef IMAGE_LOAD_CONFIG_CODE_INTEGRITY const *PCIMAGE_LOAD_CONFIG_CODE_INTEGRITY;
635
636	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32_V1
637	{
638	uint32_t Size;
639	uint32_t TimeDateStamp;
640	uint16_t MajorVersion;
641	uint16_t MinorVersion;
642	uint32_t GlobalFlagsClear;
643	uint32_t GlobalFlagsSet;
644	uint32_t CriticalSectionDefaultTimeout;
645	uint32_t DeCommitFreeBlockThreshold;
646	uint32_t DeCommitTotalFreeThreshold;
647	uint32_t LockPrefixTable;
648	uint32_t MaximumAllocationSize;
649	uint32_t VirtualMemoryThreshold;
650	uint32_t ProcessHeapFlags;
651	uint32_t ProcessAffinityMask;
652	uint16_t CSDVersion;
653	uint16_t DependentLoadFlags;
654	uint32_t EditList;
655	uint32_t SecurityCookie;
656	} IMAGE_LOAD_CONFIG_DIRECTORY32_V1;
657	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY32_V1, 0x40);
658	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V1 *PIMAGE_LOAD_CONFIG_DIRECTORY32_V1;
659	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V1 const *PCIMAGE_LOAD_CONFIG_DIRECTORY32_V1;
660
661	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32_V2
662	{
663	uint32_t Size;
664	uint32_t TimeDateStamp;
665	uint16_t MajorVersion;
666	uint16_t MinorVersion;
667	uint32_t GlobalFlagsClear;
668	uint32_t GlobalFlagsSet;
669	uint32_t CriticalSectionDefaultTimeout;
670	uint32_t DeCommitFreeBlockThreshold;
671	uint32_t DeCommitTotalFreeThreshold;
672	uint32_t LockPrefixTable;
673	uint32_t MaximumAllocationSize;
674	uint32_t VirtualMemoryThreshold;
675	uint32_t ProcessHeapFlags;
676	uint32_t ProcessAffinityMask;
677	uint16_t CSDVersion;
678	uint16_t DependentLoadFlags;
679	uint32_t EditList;
680	uint32_t SecurityCookie;
681	uint32_t SEHandlerTable;
682	uint32_t SEHandlerCount;
683	} IMAGE_LOAD_CONFIG_DIRECTORY32_V2;
684	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY32_V2, 0x48);
685	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V2 *PIMAGE_LOAD_CONFIG_DIRECTORY32_V2;
686	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V2 const *PCIMAGE_LOAD_CONFIG_DIRECTORY32_V2;
687
688	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32_V3
689	{
690	uint32_t Size;
691	uint32_t TimeDateStamp;
692	uint16_t MajorVersion;
693	uint16_t MinorVersion;
694	uint32_t GlobalFlagsClear;
695	uint32_t GlobalFlagsSet;
696	uint32_t CriticalSectionDefaultTimeout;
697	uint32_t DeCommitFreeBlockThreshold;
698	uint32_t DeCommitTotalFreeThreshold;
699	uint32_t LockPrefixTable;
700	uint32_t MaximumAllocationSize;
701	uint32_t VirtualMemoryThreshold;
702	uint32_t ProcessHeapFlags;
703	uint32_t ProcessAffinityMask;
704	uint16_t CSDVersion;
705	uint16_t DependentLoadFlags;
706	uint32_t EditList;
707	uint32_t SecurityCookie;
708	uint32_t SEHandlerTable;
709	uint32_t SEHandlerCount;
710	uint32_t GuardCFCCheckFunctionPointer;
711	uint32_t GuardCFDispatchFunctionPointer;
712	uint32_t GuardCFFunctionTable;
713	uint32_t GuardCFFunctionCount;
714	uint32_t GuardFlags;
715	} IMAGE_LOAD_CONFIG_DIRECTORY32_V3;
716	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY32_V3, 0x5c);
717	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V3 *PIMAGE_LOAD_CONFIG_DIRECTORY32_V3;
718	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V3 const *PCIMAGE_LOAD_CONFIG_DIRECTORY32_V3;
719
720	/** @since Windows 10 (preview 9879) */
721	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32_V4
722	{
723	uint32_t Size;
724	uint32_t TimeDateStamp;
725	uint16_t MajorVersion;
726	uint16_t MinorVersion;
727	uint32_t GlobalFlagsClear;
728	uint32_t GlobalFlagsSet;
729	uint32_t CriticalSectionDefaultTimeout;
730	uint32_t DeCommitFreeBlockThreshold;
731	uint32_t DeCommitTotalFreeThreshold;
732	uint32_t LockPrefixTable;
733	uint32_t MaximumAllocationSize;
734	uint32_t VirtualMemoryThreshold;
735	uint32_t ProcessHeapFlags;
736	uint32_t ProcessAffinityMask;
737	uint16_t CSDVersion;
738	uint16_t DependentLoadFlags;
739	uint32_t EditList;
740	uint32_t SecurityCookie;
741	uint32_t SEHandlerTable;
742	uint32_t SEHandlerCount;
743	uint32_t GuardCFCCheckFunctionPointer;
744	uint32_t GuardCFDispatchFunctionPointer;
745	uint32_t GuardCFFunctionTable;
746	uint32_t GuardCFFunctionCount;
747	uint32_t GuardFlags;
748	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity;
749	} IMAGE_LOAD_CONFIG_DIRECTORY32_V4;
750	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY32_V4, 0x68);
751	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V4 *PIMAGE_LOAD_CONFIG_DIRECTORY32_V4;
752	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V4 const *PCIMAGE_LOAD_CONFIG_DIRECTORY32_V4;
753
754	/** @since Windows 10 build 14286 (or maybe earlier). */
755	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32_V5
756	{
757	uint32_t Size;
758	uint32_t TimeDateStamp;
759	uint16_t MajorVersion;
760	uint16_t MinorVersion;
761	uint32_t GlobalFlagsClear;
762	uint32_t GlobalFlagsSet;
763	uint32_t CriticalSectionDefaultTimeout;
764	uint32_t DeCommitFreeBlockThreshold;
765	uint32_t DeCommitTotalFreeThreshold;
766	uint32_t LockPrefixTable;
767	uint32_t MaximumAllocationSize;
768	uint32_t VirtualMemoryThreshold;
769	uint32_t ProcessHeapFlags;
770	uint32_t ProcessAffinityMask;
771	uint16_t CSDVersion;
772	uint16_t DependentLoadFlags;
773	uint32_t EditList;
774	uint32_t SecurityCookie;
775	uint32_t SEHandlerTable;
776	uint32_t SEHandlerCount;
777	uint32_t GuardCFCCheckFunctionPointer;
778	uint32_t GuardCFDispatchFunctionPointer;
779	uint32_t GuardCFFunctionTable;
780	uint32_t GuardCFFunctionCount;
781	uint32_t GuardFlags;
782	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity;
783	uint32_t GuardAddressTakenIatEntryTable;
784	uint32_t GuardAddressTakenIatEntryCount;
785	uint32_t GuardLongJumpTargetTable;
786	uint32_t GuardLongJumpTargetCount;
787	} IMAGE_LOAD_CONFIG_DIRECTORY32_V5;
788	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY32_V5, 0x78);
789	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V5 *PIMAGE_LOAD_CONFIG_DIRECTORY32_V5;
790	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V5 const *PCIMAGE_LOAD_CONFIG_DIRECTORY32_V5;
791
792	/** @since Windows 10 build 14383 (or maybe earlier). */
793	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32_V6
794	{
795	uint32_t Size; /*< 0x00 /
796	uint32_t TimeDateStamp; /*< 0x04 /
797	uint16_t MajorVersion; /*< 0x08 /
798	uint16_t MinorVersion; /*< 0x0a /
799	uint32_t GlobalFlagsClear; /*< 0x0c /
800	uint32_t GlobalFlagsSet; /*< 0x10 /
801	uint32_t CriticalSectionDefaultTimeout; /*< 0x14 /
802	uint32_t DeCommitFreeBlockThreshold; /*< 0x18 /
803	uint32_t DeCommitTotalFreeThreshold; /*< 0x1c /
804	uint32_t LockPrefixTable; /*< 0x20 /
805	uint32_t MaximumAllocationSize; /*< 0x24 /
806	uint32_t VirtualMemoryThreshold; /*< 0x28 /
807	uint32_t ProcessHeapFlags; /*< 0x2c /
808	uint32_t ProcessAffinityMask; /*< 0x30 /
809	uint16_t CSDVersion; /*< 0x34 /
810	uint16_t DependentLoadFlags; /*< 0x36 /
811	uint32_t EditList; /*< 0x38 /
812	uint32_t SecurityCookie; /*< 0x3c /
813	uint32_t SEHandlerTable; /*< 0x40 /
814	uint32_t SEHandlerCount; /*< 0x44 /
815	uint32_t GuardCFCCheckFunctionPointer; /*< 0x48 /
816	uint32_t GuardCFDispatchFunctionPointer; /*< 0x4c /
817	uint32_t GuardCFFunctionTable; /*< 0x50 /
818	uint32_t GuardCFFunctionCount; /*< 0x54 /
819	uint32_t GuardFlags; /*< 0x58 /
820	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity; /*< 0x5c /
821	uint32_t GuardAddressTakenIatEntryTable; /*< 0x68 /
822	uint32_t GuardAddressTakenIatEntryCount; /*< 0x6c /
823	uint32_t GuardLongJumpTargetTable; /*< 0x70 /
824	uint32_t GuardLongJumpTargetCount; /*< 0x74 /
825	uint32_t DynamicValueRelocTable; /*< 0x78 /
826	uint32_t HybridMetadataPointer; /*< 0x7c /
827	} IMAGE_LOAD_CONFIG_DIRECTORY32_V6;
828	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY32_V6, 0x80);
829	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V6 *PIMAGE_LOAD_CONFIG_DIRECTORY32_V6;
830	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V6 const *PCIMAGE_LOAD_CONFIG_DIRECTORY32_V6;
831
832	/** @since Windows 10 build 14901 (or maybe earlier). */
833	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32_V7
834	{
835	uint32_t Size; /*< 0x00 /
836	uint32_t TimeDateStamp; /*< 0x04 /
837	uint16_t MajorVersion; /*< 0x08 /
838	uint16_t MinorVersion; /*< 0x0a /
839	uint32_t GlobalFlagsClear; /*< 0x0c /
840	uint32_t GlobalFlagsSet; /*< 0x10 /
841	uint32_t CriticalSectionDefaultTimeout; /*< 0x14 /
842	uint32_t DeCommitFreeBlockThreshold; /*< 0x18 /
843	uint32_t DeCommitTotalFreeThreshold; /*< 0x1c /
844	uint32_t LockPrefixTable; /*< 0x20 /
845	uint32_t MaximumAllocationSize; /*< 0x24 /
846	uint32_t VirtualMemoryThreshold; /*< 0x28 /
847	uint32_t ProcessHeapFlags; /*< 0x2c /
848	uint32_t ProcessAffinityMask; /*< 0x30 /
849	uint16_t CSDVersion; /*< 0x34 /
850	uint16_t DependentLoadFlags; /*< 0x36 /
851	uint32_t EditList; /*< 0x38 /
852	uint32_t SecurityCookie; /*< 0x3c /
853	uint32_t SEHandlerTable; /*< 0x40 /
854	uint32_t SEHandlerCount; /*< 0x44 /
855	uint32_t GuardCFCCheckFunctionPointer; /*< 0x48 /
856	uint32_t GuardCFDispatchFunctionPointer; /*< 0x4c /
857	uint32_t GuardCFFunctionTable; /*< 0x50 /
858	uint32_t GuardCFFunctionCount; /*< 0x54 /
859	uint32_t GuardFlags; /*< 0x58 /
860	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity; /*< 0x5c /
861	uint32_t GuardAddressTakenIatEntryTable; /*< 0x68 /
862	uint32_t GuardAddressTakenIatEntryCount; /*< 0x6c /
863	uint32_t GuardLongJumpTargetTable; /*< 0x70 /
864	uint32_t GuardLongJumpTargetCount; /*< 0x74 /
865	uint32_t DynamicValueRelocTable; /*< 0x78 /
866	uint32_t CHPEMetadataPointer; /*< 0x7c Not sure when this was renamed from HybridMetadataPointer. /
867	uint32_t GuardRFFailureRoutine; /*< 0x80 /
868	uint32_t GuardRFFailureRoutineFunctionPointer; /*< 0x84 /
869	uint32_t DynamicValueRelocTableOffset; /*< 0x88 /
870	uint16_t DynamicValueRelocTableSection; /*< 0x8c /
871	uint16_t Reserved2; /*< 0x8e /
872	} IMAGE_LOAD_CONFIG_DIRECTORY32_V7;
873	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY32_V7, 0x90);
874	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V7 *PIMAGE_LOAD_CONFIG_DIRECTORY32_V7;
875	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V7 const *PCIMAGE_LOAD_CONFIG_DIRECTORY32_V7;
876
877	/** @since Windows 10 build 15002 (or maybe earlier). */
878	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY32_V8
879	{
880	uint32_t Size; /*< 0x00 /
881	uint32_t TimeDateStamp; /*< 0x04 /
882	uint16_t MajorVersion; /*< 0x08 /
883	uint16_t MinorVersion; /*< 0x0a /
884	uint32_t GlobalFlagsClear; /*< 0x0c /
885	uint32_t GlobalFlagsSet; /*< 0x10 /
886	uint32_t CriticalSectionDefaultTimeout; /*< 0x14 /
887	uint32_t DeCommitFreeBlockThreshold; /*< 0x18 /
888	uint32_t DeCommitTotalFreeThreshold; /*< 0x1c /
889	uint32_t LockPrefixTable; /*< 0x20 /
890	uint32_t MaximumAllocationSize; /*< 0x24 /
891	uint32_t VirtualMemoryThreshold; /*< 0x28 /
892	uint32_t ProcessHeapFlags; /*< 0x2c /
893	uint32_t ProcessAffinityMask; /*< 0x30 /
894	uint16_t CSDVersion; /*< 0x34 /
895	uint16_t DependentLoadFlags; /*< 0x36 /
896	uint32_t EditList; /*< 0x38 /
897	uint32_t SecurityCookie; /*< 0x3c /
898	uint32_t SEHandlerTable; /*< 0x40 /
899	uint32_t SEHandlerCount; /*< 0x44 /
900	uint32_t GuardCFCCheckFunctionPointer; /*< 0x48 /
901	uint32_t GuardCFDispatchFunctionPointer; /*< 0x4c /
902	uint32_t GuardCFFunctionTable; /*< 0x50 /
903	uint32_t GuardCFFunctionCount; /*< 0x54 /
904	uint32_t GuardFlags; /*< 0x58 /
905	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity; /*< 0x5c /
906	uint32_t GuardAddressTakenIatEntryTable; /*< 0x68 /
907	uint32_t GuardAddressTakenIatEntryCount; /*< 0x6c /
908	uint32_t GuardLongJumpTargetTable; /*< 0x70 /
909	uint32_t GuardLongJumpTargetCount; /*< 0x74 /
910	uint32_t DynamicValueRelocTable; /*< 0x78 /
911	uint32_t CHPEMetadataPointer; /*< 0x7c Not sure when this was renamed from HybridMetadataPointer. /
912	uint32_t GuardRFFailureRoutine; /*< 0x80 /
913	uint32_t GuardRFFailureRoutineFunctionPointer; /*< 0x84 /
914	uint32_t DynamicValueRelocTableOffset; /*< 0x88 /
915	uint16_t DynamicValueRelocTableSection; /*< 0x8c /
916	uint16_t Reserved2; /*< 0x8e /
917	uint32_t GuardRFVerifyStackPointerFunctionPointer; /*< 0x90 /
918	uint32_t HotPatchTableOffset; /*< 0x94 /
919	} IMAGE_LOAD_CONFIG_DIRECTORY32_V8;
920	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY32_V8, 0x98);
921	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V8 *PIMAGE_LOAD_CONFIG_DIRECTORY32_V8;
922	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V8 const *PCIMAGE_LOAD_CONFIG_DIRECTORY32_V8;
923
924	typedef IMAGE_LOAD_CONFIG_DIRECTORY32_V8 IMAGE_LOAD_CONFIG_DIRECTORY32;
925	typedef PIMAGE_LOAD_CONFIG_DIRECTORY32_V8 PIMAGE_LOAD_CONFIG_DIRECTORY32;
926	typedef PCIMAGE_LOAD_CONFIG_DIRECTORY32_V8 PCIMAGE_LOAD_CONFIG_DIRECTORY32;
927
928
929	/* No _IMAGE_LOAD_CONFIG_DIRECTORY64_V1 exists. */
930
931	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64_V2
932	{
933	uint32_t Size;
934	uint32_t TimeDateStamp;
935	uint16_t MajorVersion;
936	uint16_t MinorVersion;
937	uint32_t GlobalFlagsClear;
938	uint32_t GlobalFlagsSet;
939	uint32_t CriticalSectionDefaultTimeout;
940	uint64_t DeCommitFreeBlockThreshold;
941	uint64_t DeCommitTotalFreeThreshold;
942	uint64_t LockPrefixTable;
943	uint64_t MaximumAllocationSize;
944	uint64_t VirtualMemoryThreshold;
945	uint64_t ProcessAffinityMask;
946	uint32_t ProcessHeapFlags;
947	uint16_t CSDVersion;
948	uint16_t DependentLoadFlags;
949	uint64_t EditList;
950	uint64_t SecurityCookie;
951	uint64_t SEHandlerTable;
952	uint64_t SEHandlerCount;
953	} IMAGE_LOAD_CONFIG_DIRECTORY64_V2;
954	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY64_V2, 0x70);
955	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V2 *PIMAGE_LOAD_CONFIG_DIRECTORY64_V2;
956	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V2 const *PCIMAGE_LOAD_CONFIG_DIRECTORY64_V2;
957
958	#pragma pack(4) /* Why not 8 byte alignment, baka microsofties?!? */
959	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64_V3
960	{
961	uint32_t Size;
962	uint32_t TimeDateStamp;
963	uint16_t MajorVersion;
964	uint16_t MinorVersion;
965	uint32_t GlobalFlagsClear;
966	uint32_t GlobalFlagsSet;
967	uint32_t CriticalSectionDefaultTimeout;
968	uint64_t DeCommitFreeBlockThreshold;
969	uint64_t DeCommitTotalFreeThreshold;
970	uint64_t LockPrefixTable;
971	uint64_t MaximumAllocationSize;
972	uint64_t VirtualMemoryThreshold;
973	uint64_t ProcessAffinityMask;
974	uint32_t ProcessHeapFlags;
975	uint16_t CSDVersion;
976	uint16_t DependentLoadFlags;
977	uint64_t EditList;
978	uint64_t SecurityCookie;
979	uint64_t SEHandlerTable;
980	uint64_t SEHandlerCount;
981	uint64_t GuardCFCCheckFunctionPointer;
982	uint64_t GuardCFDispatchFunctionPointer;
983	uint64_t GuardCFFunctionTable;
984	uint64_t GuardCFFunctionCount;
985	uint32_t GuardFlags;
986	} IMAGE_LOAD_CONFIG_DIRECTORY64_V3;
987	#pragma pack()
988	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY64_V3, 0x94);
989	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V3 *PIMAGE_LOAD_CONFIG_DIRECTORY64_V3;
990	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V3 const *PCIMAGE_LOAD_CONFIG_DIRECTORY64_V3;
991
992	/** @since Windows 10 (Preview (9879). */
993	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64_V4
994	{
995	uint32_t Size; /*< 0x00 /
996	uint32_t TimeDateStamp; /*< 0x04 /
997	uint16_t MajorVersion; /*< 0x08 /
998	uint16_t MinorVersion; /*< 0x0a /
999	uint32_t GlobalFlagsClear; /*< 0x0c /
1000	uint32_t GlobalFlagsSet; /*< 0x10 /
1001	uint32_t CriticalSectionDefaultTimeout; /*< 0x14 /
1002	uint64_t DeCommitFreeBlockThreshold; /*< 0x18 /
1003	uint64_t DeCommitTotalFreeThreshold; /*< 0x20 /
1004	uint64_t LockPrefixTable; /*< 0x28 /
1005	uint64_t MaximumAllocationSize; /*< 0x30 /
1006	uint64_t VirtualMemoryThreshold; /*< 0x38 /
1007	uint64_t ProcessAffinityMask; /*< 0x40 /
1008	uint32_t ProcessHeapFlags; /*< 0x48 /
1009	uint16_t CSDVersion; /*< 0x4c /
1010	uint16_t DependentLoadFlags; /*< 0x4e /
1011	uint64_t EditList; /*< 0x50 /
1012	uint64_t SecurityCookie; /*< 0x58 /
1013	uint64_t SEHandlerTable; /*< 0x60 /
1014	uint64_t SEHandlerCount; /*< 0x68 /
1015	uint64_t GuardCFCCheckFunctionPointer; /*< 0x70 /
1016	uint64_t GuardCFDispatchFunctionPointer; /*< 0x78 /
1017	uint64_t GuardCFFunctionTable; /*< 0x80 /
1018	uint64_t GuardCFFunctionCount; /*< 0x88 /
1019	uint32_t GuardFlags; /*< 0x90 /
1020	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity; /*< 0x94 /
1021	} IMAGE_LOAD_CONFIG_DIRECTORY64_V4;
1022	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY64_V4, 0xa0);
1023	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V4 *PIMAGE_LOAD_CONFIG_DIRECTORY64_V4;
1024	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V4 const *PCIMAGE_LOAD_CONFIG_DIRECTORY64_V4;
1025
1026	/** @since Windows 10 build 14286 (or maybe earlier). */
1027	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64_V5
1028	{
1029	uint32_t Size; /*< 0x00 /
1030	uint32_t TimeDateStamp; /*< 0x04 /
1031	uint16_t MajorVersion; /*< 0x08 /
1032	uint16_t MinorVersion; /*< 0x0a /
1033	uint32_t GlobalFlagsClear; /*< 0x0c /
1034	uint32_t GlobalFlagsSet; /*< 0x10 /
1035	uint32_t CriticalSectionDefaultTimeout; /*< 0x14 /
1036	uint64_t DeCommitFreeBlockThreshold; /*< 0x18 /
1037	uint64_t DeCommitTotalFreeThreshold; /*< 0x20 /
1038	uint64_t LockPrefixTable; /*< 0x28 /
1039	uint64_t MaximumAllocationSize; /*< 0x30 /
1040	uint64_t VirtualMemoryThreshold; /*< 0x38 /
1041	uint64_t ProcessAffinityMask; /*< 0x40 /
1042	uint32_t ProcessHeapFlags; /*< 0x48 /
1043	uint16_t CSDVersion; /*< 0x4c /
1044	uint16_t DependentLoadFlags; /*< 0x4e /
1045	uint64_t EditList; /*< 0x50 /
1046	uint64_t SecurityCookie; /*< 0x58 /
1047	uint64_t SEHandlerTable; /*< 0x60 /
1048	uint64_t SEHandlerCount; /*< 0x68 /
1049	uint64_t GuardCFCCheckFunctionPointer; /*< 0x70 /
1050	uint64_t GuardCFDispatchFunctionPointer; /*< 0x78 /
1051	uint64_t GuardCFFunctionTable; /*< 0x80 /
1052	uint64_t GuardCFFunctionCount; /*< 0x88 /
1053	uint32_t GuardFlags; /*< 0x90 /
1054	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity; /*< 0x94 /
1055	uint64_t GuardAddressTakenIatEntryTable; /*< 0xa0 /
1056	uint64_t GuardAddressTakenIatEntryCount; /*< 0xa8 /
1057	uint64_t GuardLongJumpTargetTable; /*< 0xb0 /
1058	uint64_t GuardLongJumpTargetCount; /*< 0xb8 /
1059	} IMAGE_LOAD_CONFIG_DIRECTORY64_V5;
1060	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY64_V5, 0xc0);
1061	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V5 *PIMAGE_LOAD_CONFIG_DIRECTORY64_V5;
1062	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V5 const *PCIMAGE_LOAD_CONFIG_DIRECTORY64_V5;
1063
1064	/** @since Windows 10 build 14393 (or maybe earlier). */
1065	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64_V6
1066	{
1067	uint32_t Size; /*< 0x00 /
1068	uint32_t TimeDateStamp; /*< 0x04 /
1069	uint16_t MajorVersion; /*< 0x08 /
1070	uint16_t MinorVersion; /*< 0x0a /
1071	uint32_t GlobalFlagsClear; /*< 0x0c /
1072	uint32_t GlobalFlagsSet; /*< 0x10 /
1073	uint32_t CriticalSectionDefaultTimeout; /*< 0x14 /
1074	uint64_t DeCommitFreeBlockThreshold; /*< 0x18 /
1075	uint64_t DeCommitTotalFreeThreshold; /*< 0x20 /
1076	uint64_t LockPrefixTable; /*< 0x28 /
1077	uint64_t MaximumAllocationSize; /*< 0x30 /
1078	uint64_t VirtualMemoryThreshold; /*< 0x38 /
1079	uint64_t ProcessAffinityMask; /*< 0x40 /
1080	uint32_t ProcessHeapFlags; /*< 0x48 /
1081	uint16_t CSDVersion; /*< 0x4c /
1082	uint16_t DependentLoadFlags; /*< 0x4e /
1083	uint64_t EditList; /*< 0x50 /
1084	uint64_t SecurityCookie; /*< 0x58 /
1085	uint64_t SEHandlerTable; /*< 0x60 /
1086	uint64_t SEHandlerCount; /*< 0x68 /
1087	uint64_t GuardCFCCheckFunctionPointer; /*< 0x70 /
1088	uint64_t GuardCFDispatchFunctionPointer; /*< 0x78 /
1089	uint64_t GuardCFFunctionTable; /*< 0x80 /
1090	uint64_t GuardCFFunctionCount; /*< 0x88 /
1091	uint32_t GuardFlags; /*< 0x90 /
1092	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity; /*< 0x94 /
1093	uint64_t GuardAddressTakenIatEntryTable; /*< 0xa0 /
1094	uint64_t GuardAddressTakenIatEntryCount; /*< 0xa8 /
1095	uint64_t GuardLongJumpTargetTable; /*< 0xb0 /
1096	uint64_t GuardLongJumpTargetCount; /*< 0xb8 /
1097	uint64_t DynamicValueRelocTable; /*< 0xc0 /
1098	uint64_t HybridMetadataPointer; /*< 0xc8 /
1099	} IMAGE_LOAD_CONFIG_DIRECTORY64_V6;
1100	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY64_V6, 0xd0);
1101	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V6 *PIMAGE_LOAD_CONFIG_DIRECTORY64_V6;
1102	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V6 const *PCIMAGE_LOAD_CONFIG_DIRECTORY64_V6;
1103
1104	/** @since Windows 10 build 14901 (or maybe earlier). */
1105	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64_V7
1106	{
1107	uint32_t Size; /*< 0x00 /
1108	uint32_t TimeDateStamp; /*< 0x04 /
1109	uint16_t MajorVersion; /*< 0x08 /
1110	uint16_t MinorVersion; /*< 0x0a /
1111	uint32_t GlobalFlagsClear; /*< 0x0c /
1112	uint32_t GlobalFlagsSet; /*< 0x10 /
1113	uint32_t CriticalSectionDefaultTimeout; /*< 0x14 /
1114	uint64_t DeCommitFreeBlockThreshold; /*< 0x18 /
1115	uint64_t DeCommitTotalFreeThreshold; /*< 0x20 /
1116	uint64_t LockPrefixTable; /*< 0x28 /
1117	uint64_t MaximumAllocationSize; /*< 0x30 /
1118	uint64_t VirtualMemoryThreshold; /*< 0x38 /
1119	uint64_t ProcessAffinityMask; /*< 0x40 /
1120	uint32_t ProcessHeapFlags; /*< 0x48 /
1121	uint16_t CSDVersion; /*< 0x4c /
1122	uint16_t DependentLoadFlags; /*< 0x4e /
1123	uint64_t EditList; /*< 0x50 /
1124	uint64_t SecurityCookie; /*< 0x58 /
1125	uint64_t SEHandlerTable; /*< 0x60 /
1126	uint64_t SEHandlerCount; /*< 0x68 /
1127	uint64_t GuardCFCCheckFunctionPointer; /*< 0x70 /
1128	uint64_t GuardCFDispatchFunctionPointer; /*< 0x78 /
1129	uint64_t GuardCFFunctionTable; /*< 0x80 /
1130	uint64_t GuardCFFunctionCount; /*< 0x88 /
1131	uint32_t GuardFlags; /*< 0x90 /
1132	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity; /*< 0x94 /
1133	uint64_t GuardAddressTakenIatEntryTable; /*< 0xa0 /
1134	uint64_t GuardAddressTakenIatEntryCount; /*< 0xa8 /
1135	uint64_t GuardLongJumpTargetTable; /*< 0xb0 /
1136	uint64_t GuardLongJumpTargetCount; /*< 0xb8 /
1137	uint64_t DynamicValueRelocTable; /*< 0xc0 /
1138	uint64_t CHPEMetadataPointer; /*< 0xc8 Not sure when this was renamed from HybridMetadataPointer. /
1139	uint64_t GuardRFFailureRoutine; /*< 0xd0 /
1140	uint64_t GuardRFFailureRoutineFunctionPointer; /*< 0xd8 /
1141	uint32_t DynamicValueRelocTableOffset; /*< 0xe0 /
1142	uint16_t DynamicValueRelocTableSection; /*< 0xe4 /
1143	uint16_t Reserved2; /*< 0xe6 /
1144	} IMAGE_LOAD_CONFIG_DIRECTORY64_V7;
1145	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY64_V7, 0xe8);
1146	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V7 *PIMAGE_LOAD_CONFIG_DIRECTORY64_V7;
1147	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V7 const *PCIMAGE_LOAD_CONFIG_DIRECTORY64_V7;
1148
1149	/** @since Windows 10 build 15002 (or maybe earlier). */
1150	#pragma pack(4) /* Stupid, stupid microsofties! */
1151	typedef struct _IMAGE_LOAD_CONFIG_DIRECTORY64_V8
1152	{
1153	uint32_t Size; /*< 0x00 /
1154	uint32_t TimeDateStamp; /*< 0x04 /
1155	uint16_t MajorVersion; /*< 0x08 /
1156	uint16_t MinorVersion; /*< 0x0a /
1157	uint32_t GlobalFlagsClear; /*< 0x0c /
1158	uint32_t GlobalFlagsSet; /*< 0x10 /
1159	uint32_t CriticalSectionDefaultTimeout; /*< 0x14 /
1160	uint64_t DeCommitFreeBlockThreshold; /*< 0x18 /
1161	uint64_t DeCommitTotalFreeThreshold; /*< 0x20 /
1162	uint64_t LockPrefixTable; /*< 0x28 /
1163	uint64_t MaximumAllocationSize; /*< 0x30 /
1164	uint64_t VirtualMemoryThreshold; /*< 0x38 /
1165	uint64_t ProcessAffinityMask; /*< 0x40 /
1166	uint32_t ProcessHeapFlags; /*< 0x48 /
1167	uint16_t CSDVersion; /*< 0x4c /
1168	uint16_t DependentLoadFlags; /*< 0x4e /
1169	uint64_t EditList; /*< 0x50 /
1170	uint64_t SecurityCookie; /*< 0x58 /
1171	uint64_t SEHandlerTable; /*< 0x60 /
1172	uint64_t SEHandlerCount; /*< 0x68 /
1173	uint64_t GuardCFCCheckFunctionPointer; /*< 0x70 /
1174	uint64_t GuardCFDispatchFunctionPointer; /*< 0x78 /
1175	uint64_t GuardCFFunctionTable; /*< 0x80 /
1176	uint64_t GuardCFFunctionCount; /*< 0x88 /
1177	uint32_t GuardFlags; /*< 0x90 /
1178	IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity; /*< 0x94 /
1179	uint64_t GuardAddressTakenIatEntryTable; /*< 0xa0 /
1180	uint64_t GuardAddressTakenIatEntryCount; /*< 0xa8 /
1181	uint64_t GuardLongJumpTargetTable; /*< 0xb0 /
1182	uint64_t GuardLongJumpTargetCount; /*< 0xb8 /
1183	uint64_t DynamicValueRelocTable; /*< 0xc0 /
1184	uint64_t CHPEMetadataPointer; /*< 0xc8 /
1185	uint64_t GuardRFFailureRoutine; /*< 0xd0 /
1186	uint64_t GuardRFFailureRoutineFunctionPointer; /*< 0xd8 /
1187	uint32_t DynamicValueRelocTableOffset; /*< 0xe0 /
1188	uint16_t DynamicValueRelocTableSection; /*< 0xe4 /
1189	uint16_t Reserved2; /*< 0xe6 /
1190	uint64_t GuardRFVerifyStackPointerFunctionPointer; /*< 0xe8 /
1191	uint32_t HotPatchTableOffset; /*< 0xf0 /
1192	} IMAGE_LOAD_CONFIG_DIRECTORY64_V8;
1193	#pragma pack()
1194	AssertCompileSize(IMAGE_LOAD_CONFIG_DIRECTORY64_V8, 0xf4);
1195	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V8 *PIMAGE_LOAD_CONFIG_DIRECTORY64_V8;
1196	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V8 const *PCIMAGE_LOAD_CONFIG_DIRECTORY64_V8;
1197
1198	typedef IMAGE_LOAD_CONFIG_DIRECTORY64_V8 IMAGE_LOAD_CONFIG_DIRECTORY64;
1199	typedef PIMAGE_LOAD_CONFIG_DIRECTORY64_V8 PIMAGE_LOAD_CONFIG_DIRECTORY64;
1200	typedef PCIMAGE_LOAD_CONFIG_DIRECTORY64_V8 PCIMAGE_LOAD_CONFIG_DIRECTORY64;
1201
1202	/** @} */
1203
1204
1205	/**
1206	* PE certificate directory.
1207	*
1208	* Found in IMAGE_DIRECTORY_ENTRY_SECURITY.
1209	*/
1210	typedef struct WIN_CERTIFICATE
1211	{
1212	uint32_t dwLength;
1213	uint16_t wRevision;
1214	uint16_t wCertificateType;
1215	uint8_t bCertificate[8];
1216	} WIN_CERTIFICATE;
1217	AssertCompileSize(WIN_CERTIFICATE, 16);
1218	typedef WIN_CERTIFICATE *PWIN_CERTIFICATE;
1219	typedef WIN_CERTIFICATE const *PCWIN_CERTIFICATE;
1220
1221	/** @name WIN_CERT_REVISION_XXX - Certificate data directory revision.
1222	* Used WIN_CERTIFICATE::wRevision found in the
1223	* IMAGE_DIRECTORY_ENTRY_SECURITY data directory. */
1224	#define WIN_CERT_REVISION_1_0 UINT16_C(0x0100)
1225	#define WIN_CERT_REVISION_2_0 UINT16_C(0x0200)
1226	/** @} */
1227
1228	/** @name WIN_CERT_TYPE_XXX - Signature type.
1229	* Used by WIN_CERTIFICATE::wCertificateType.
1230	* @{ */
1231	#define WIN_CERT_TYPE_X509 UINT16_C(1)
1232	#define WIN_CERT_TYPE_PKCS_SIGNED_DATA UINT16_C(2)
1233	#define WIN_CERT_TYPE_RESERVED_1 UINT16_C(3)
1234	#define WIN_CERT_TYPE_TS_STACK_SIGNED UINT16_C(4)
1235	#define WIN_CERT_TYPE_EFI_PKCS115 UINT16_C(0x0ef0)
1236	#define WIN_CERT_TYPE_EFI_GUID UINT16_C(0x0ef1)
1237	/** @} */
1238
1239	/** The alignment of the certificate table.
1240	* @remarks Found thru signtool experiments. */
1241	#define WIN_CERTIFICATE_ALIGNMENT UINT32_C(8)
1242
1243
1244	/**
1245	* Debug directory.
1246	*
1247	* Found in IMAGE_DIRECTORY_ENTRY_DEBUG.
1248	*/
1249	typedef struct _IMAGE_DEBUG_DIRECTORY
1250	{
1251	uint32_t Characteristics;
1252	uint32_t TimeDateStamp;
1253	uint16_t MajorVersion;
1254	uint16_t MinorVersion;
1255	uint32_t Type;
1256	uint32_t SizeOfData;
1257	uint32_t AddressOfRawData;
1258	uint32_t PointerToRawData;
1259	} IMAGE_DEBUG_DIRECTORY;
1260	AssertCompileSize(IMAGE_DEBUG_DIRECTORY, 28);
1261	typedef IMAGE_DEBUG_DIRECTORY *PIMAGE_DEBUG_DIRECTORY;
1262	typedef IMAGE_DEBUG_DIRECTORY const *PCIMAGE_DEBUG_DIRECTORY;
1263
1264	/** @name IMAGE_DEBUG_TYPE_XXX - Debug format types.
1265	* Used by IMAGE_DEBUG_DIRECTORY::Type.
1266	* @{ */
1267	#define IMAGE_DEBUG_TYPE_UNKNOWN UINT32_C(0x0)
1268	#define IMAGE_DEBUG_TYPE_COFF UINT32_C(0x1)
1269	#define IMAGE_DEBUG_TYPE_CODEVIEW UINT32_C(0x2)
1270	#define IMAGE_DEBUG_TYPE_FPO UINT32_C(0x3)
1271	#define IMAGE_DEBUG_TYPE_MISC UINT32_C(0x4)
1272	#define IMAGE_DEBUG_TYPE_EXCEPTION UINT32_C(0x5)
1273	#define IMAGE_DEBUG_TYPE_FIXUP UINT32_C(0x6)
1274	#define IMAGE_DEBUG_TYPE_OMAP_TO_SRC UINT32_C(0x7)
1275	#define IMAGE_DEBUG_TYPE_OMAP_FROM_SRC UINT32_C(0x8)
1276	#define IMAGE_DEBUG_TYPE_BORLAND UINT32_C(0x9)
1277	#define IMAGE_DEBUG_TYPE_RESERVED10 UINT32_C(0x10)
1278	/** @} */
1279
1280	/** @name IMAGE_DEBUG_MISC_XXX - Misc debug data type.
1281	* Used by IMAGE_DEBUG_MISC::DataType.
1282	* @{ */
1283	#define IMAGE_DEBUG_MISC_EXENAME UINT32_C(1)
1284	/** @} */
1285
1286
1287	/**
1288	* The format of IMAGE_DEBUG_TYPE_MISC debug info.
1289	*/
1290	typedef struct _IMAGE_DEBUG_MISC
1291	{
1292	uint32_t DataType;
1293	uint32_t Length;
1294	uint8_t Unicode;
1295	uint8_t Reserved[3];
1296	uint8_t Data[1];
1297	} IMAGE_DEBUG_MISC;
1298	AssertCompileSize(IMAGE_DEBUG_MISC, 16);
1299	typedef IMAGE_DEBUG_MISC *PIMAGE_DEBUG_MISC;
1300	typedef IMAGE_DEBUG_MISC const *PCIMAGE_DEBUG_MISC;
1301
1302
1303
1304	/**
1305	* The header of a .DBG file (NT4).
1306	*/
1307	typedef struct _IMAGE_SEPARATE_DEBUG_HEADER
1308	{
1309	uint16_t Signature; /*< 0x00 /
1310	uint16_t Flags; /*< 0x02 /
1311	uint16_t Machine; /*< 0x04 /
1312	uint16_t Characteristics; /*< 0x06 /
1313	uint32_t TimeDateStamp; /*< 0x08 /
1314	uint32_t CheckSum; /*< 0x0c /
1315	uint32_t ImageBase; /*< 0x10 /
1316	uint32_t SizeOfImage; /*< 0x14 /
1317	uint32_t NumberOfSections; /*< 0x18 /
1318	uint32_t ExportedNamesSize; /*< 0x1c /
1319	uint32_t DebugDirectorySize; /*< 0x20 /
1320	uint32_t SectionAlignment; /*< 0x24 /
1321	uint32_t Reserved[2]; /*< 0x28 /
1322	} IMAGE_SEPARATE_DEBUG_HEADER; /* size: 0x30 */
1323	AssertCompileSize(IMAGE_SEPARATE_DEBUG_HEADER, 0x30);
1324	typedef IMAGE_SEPARATE_DEBUG_HEADER *PIMAGE_SEPARATE_DEBUG_HEADER;
1325	typedef IMAGE_SEPARATE_DEBUG_HEADER const *PCIMAGE_SEPARATE_DEBUG_HEADER;
1326
1327	/** The signature of a IMAGE_SEPARATE_DEBUG_HEADER. */
1328	#define IMAGE_SEPARATE_DEBUG_SIGNATURE UINT16_C(0x4944)
1329
1330
1331	/**
1332	* The format of IMAGE_DEBUG_TYPE_COFF debug info.
1333	*/
1334	typedef struct _IMAGE_COFF_SYMBOLS_HEADER
1335	{
1336	uint32_t NumberOfSymbols;
1337	uint32_t LvaToFirstSymbol;
1338	uint32_t NumberOfLinenumbers;
1339	uint32_t LvaToFirstLinenumber;
1340	uint32_t RvaToFirstByteOfCode;
1341	uint32_t RvaToLastByteOfCode;
1342	uint32_t RvaToFirstByteOfData;
1343	uint32_t RvaToLastByteOfData;
1344	} IMAGE_COFF_SYMBOLS_HEADER;
1345	AssertCompileSize(IMAGE_COFF_SYMBOLS_HEADER, 0x20);
1346	typedef IMAGE_COFF_SYMBOLS_HEADER *PIMAGE_COFF_SYMBOLS_HEADER;
1347	typedef IMAGE_COFF_SYMBOLS_HEADER const *PCIMAGE_COFF_SYMBOLS_HEADER;
1348
1349
1350	/**
1351	* Line number format of IMAGE_DEBUG_TYPE_COFF debug info.
1352	*
1353	* @remarks This has misaligned members.
1354	*/
1355	#pragma pack(2)
1356	typedef struct _IMAGE_LINENUMBER
1357	{
1358	union
1359	{
1360	uint32_t VirtualAddress;
1361	uint32_t SymbolTableIndex;
1362	} Type;
1363	uint16_t Linenumber;
1364	} IMAGE_LINENUMBER;
1365	#pragma pack()
1366	AssertCompileSize(IMAGE_LINENUMBER, 6);
1367	typedef IMAGE_LINENUMBER *PIMAGE_LINENUMBER;
1368	typedef IMAGE_LINENUMBER const *PCIMAGE_LINENUMBER;
1369
1370
1371	/** The size of a IMAGE_SYMBOL & IMAGE_AUX_SYMBOL structure. */
1372	#define IMAGE_SIZE_OF_SYMBOL 18
1373	/** The size of a IMAGE_SYMBOL_EX & IMAGE_AUX_SYMBOL_EX structure. */
1374	#define IMAGE_SIZE_OF_SYMBOL_EX 20
1375
1376	/**
1377	* COFF symbol.
1378	*/
1379	#pragma pack(2)
1380	typedef struct _IMAGE_SYMBOL
1381	{
1382	union
1383	{
1384	uint8_t ShortName[8];
1385	struct
1386	{
1387	uint32_t Short;
1388	uint32_t Long;
1389	} Name;
1390	uint32_t LongName[2];
1391	} N;
1392
1393	uint32_t Value;
1394	int16_t SectionNumber;
1395	uint16_t Type;
1396	uint8_t StorageClass;
1397	uint8_t NumberOfAuxSymbols;
1398	} IMAGE_SYMBOL;
1399	#pragma pack()
1400	AssertCompileSize(IMAGE_SYMBOL, IMAGE_SIZE_OF_SYMBOL);
1401	typedef IMAGE_SYMBOL *PIMAGE_SYMBOL;
1402	typedef IMAGE_SYMBOL const *PCIMAGE_SYMBOL;
1403
1404	/**
1405	* COFF auxiliary symbol token defintion (whatever that is).
1406	*/
1407	#pragma pack(2)
1408	typedef struct IMAGE_AUX_SYMBOL_TOKEN_DEF
1409	{
1410	uint8_t bAuxType;
1411	uint8_t bReserved;
1412	uint32_t SymbolTableIndex;
1413	uint8_t rgbReserved[12];
1414	} IMAGE_AUX_SYMBOL_TOKEN_DEF;
1415	#pragma pack()
1416	AssertCompileSize(IMAGE_AUX_SYMBOL_TOKEN_DEF, IMAGE_SIZE_OF_SYMBOL);
1417	typedef IMAGE_AUX_SYMBOL_TOKEN_DEF *PIMAGE_AUX_SYMBOL_TOKEN_DEF;
1418	typedef IMAGE_AUX_SYMBOL_TOKEN_DEF const *PCIMAGE_AUX_SYMBOL_TOKEN_DEF;
1419
1420	/**
1421	* COFF auxiliary symbol.
1422	*/
1423	#pragma pack(1)
1424	typedef union _IMAGE_AUX_SYMBOL
1425	{
1426	struct
1427	{
1428	uint32_t TagIndex;
1429	union
1430	{
1431	struct
1432	{
1433	uint16_t Linenumber;
1434	uint16_t Size;
1435	} LnSz;
1436	} Misc;
1437	union
1438	{
1439	struct
1440	{
1441	uint32_t PointerToLinenumber;
1442	uint32_t PointerToNextFunction;
1443	} Function;
1444	struct
1445	{
1446	uint16_t Dimension[4];
1447	} Array;
1448	} FcnAry;
1449	uint16_t TvIndex;
1450	} Sym;
1451
1452	struct
1453	{
1454	uint8_t Name[IMAGE_SIZE_OF_SYMBOL];
1455	} File;
1456
1457	struct
1458	{
1459	uint32_t Length;
1460	uint16_t NumberOfRelocations;
1461	uint16_t NumberOfLinenumbers;
1462	uint32_t CheckSum;
1463	uint16_t Number;
1464	uint8_t Selection;
1465	uint8_t bReserved;
1466	uint16_t HighNumber;
1467	} Section;
1468
1469	IMAGE_AUX_SYMBOL_TOKEN_DEF TokenDef;
1470	struct
1471	{
1472	uint32_t crc;
1473	uint8_t rgbReserved[14];
1474	} CRC;
1475	} IMAGE_AUX_SYMBOL;
1476	#pragma pack()
1477	AssertCompileSize(IMAGE_AUX_SYMBOL, IMAGE_SIZE_OF_SYMBOL);
1478	typedef IMAGE_AUX_SYMBOL *PIMAGE_AUX_SYMBOL;
1479	typedef IMAGE_AUX_SYMBOL const *PCIMAGE_AUX_SYMBOL;
1480
1481
1482	/**
1483	* Extended COFF symbol.
1484	*/
1485	typedef struct _IMAGE_SYMBOL_EX
1486	{
1487	union
1488	{
1489	uint8_t ShortName[8];
1490	struct
1491	{
1492	uint32_t Short;
1493	uint32_t Long;
1494	} Name;
1495	uint32_t LongName[2];
1496	} N;
1497
1498	uint32_t Value;
1499	int32_t SectionNumber; /* The difference from IMAGE_SYMBOL */
1500	uint16_t Type;
1501	uint8_t StorageClass;
1502	uint8_t NumberOfAuxSymbols;
1503	} IMAGE_SYMBOL_EX;
1504	AssertCompileSize(IMAGE_SYMBOL_EX, IMAGE_SIZE_OF_SYMBOL_EX);
1505	typedef IMAGE_SYMBOL_EX *PIMAGE_SYMBOL_EX;
1506	typedef IMAGE_SYMBOL_EX const *PCIMAGE_SYMBOL_EX;
1507
1508	/**
1509	* Extended COFF auxiliary symbol.
1510	*/
1511	typedef union _IMAGE_AUX_SYMBOL_EX
1512	{
1513	struct
1514	{
1515	uint32_t WeakDefaultSymIndex;
1516	uint32_t WeakSearchType;
1517	uint8_t rgbReserved[12];
1518	} Sym;
1519
1520	struct
1521	{
1522	uint8_t Name[IMAGE_SIZE_OF_SYMBOL_EX];
1523	} File;
1524
1525	struct
1526	{
1527	uint32_t Length;
1528	uint16_t NumberOfRelocations;
1529	uint16_t NumberOfLinenumbers;
1530	uint32_t CheckSum;
1531	uint16_t Number;
1532	uint8_t Selection;
1533	uint8_t bReserved;
1534	uint16_t HighNumber;
1535	uint8_t rgbReserved[2];
1536	} Section;
1537
1538	IMAGE_AUX_SYMBOL_TOKEN_DEF TokenDef;
1539
1540	struct
1541	{
1542	uint32_t crc;
1543	uint8_t rgbReserved[16];
1544	} CRC;
1545	} IMAGE_AUX_SYMBOL_EX;
1546	AssertCompileSize(IMAGE_AUX_SYMBOL_EX, IMAGE_SIZE_OF_SYMBOL_EX);
1547	typedef IMAGE_AUX_SYMBOL_EX *PIMAGE_AUX_SYMBOL_EX;
1548	typedef IMAGE_AUX_SYMBOL_EX const *PCIMAGE_AUX_SYMBOL_EX;
1549
1550	/** @name Special COFF section numbers.
1551	* Used by IMAGE_SYMBOL::SectionNumber and IMAGE_SYMBOL_EX::SectionNumber
1552	* @{ */
1553	#define IMAGE_SYM_UNDEFINED INT16_C(0)
1554	#define IMAGE_SYM_ABSOLUTE INT16_C(-1)
1555	#define IMAGE_SYM_DEBUG INT16_C(-2)
1556	/** @} */
1557
1558	/** @name IMAGE_SYM_CLASS_XXX - COFF symbol storage classes.
1559	* @{ */
1560	#define IMAGE_SYM_CLASS_END_OF_FUNCTION UINT8_C(0xff) /* -1 */
1561	#define IMAGE_SYM_CLASS_NULL UINT8_C(0)
1562	#define IMAGE_SYM_CLASS_AUTOMATIC UINT8_C(1)
1563	#define IMAGE_SYM_CLASS_EXTERNAL UINT8_C(2)
1564	#define IMAGE_SYM_CLASS_STATIC UINT8_C(3)
1565	#define IMAGE_SYM_CLASS_REGISTER UINT8_C(4)
1566	#define IMAGE_SYM_CLASS_EXTERNAL_DEF UINT8_C(5)
1567	#define IMAGE_SYM_CLASS_LABEL UINT8_C(6)
1568	#define IMAGE_SYM_CLASS_UNDEFINED_LABEL UINT8_C(7)
1569	#define IMAGE_SYM_CLASS_MEMBER_OF_STRUCT UINT8_C(8)
1570	#define IMAGE_SYM_CLASS_ARGUMENT UINT8_C(9)
1571	#define IMAGE_SYM_CLASS_STRUCT_TAG UINT8_C(10)
1572	#define IMAGE_SYM_CLASS_MEMBER_OF_UNION UINT8_C(11)
1573	#define IMAGE_SYM_CLASS_UNION_TAG UINT8_C(12)
1574	#define IMAGE_SYM_CLASS_TYPE_DEFINITION UINT8_C(13)
1575	#define IMAGE_SYM_CLASS_UNDEFINED_STATIC UINT8_C(14)
1576	#define IMAGE_SYM_CLASS_ENUM_TAG UINT8_C(15)
1577	#define IMAGE_SYM_CLASS_MEMBER_OF_ENUM UINT8_C(16)
1578	#define IMAGE_SYM_CLASS_REGISTER_PARAM UINT8_C(17)
1579	#define IMAGE_SYM_CLASS_BIT_FIELD UINT8_C(18)
1580	#define IMAGE_SYM_CLASS_FAR_EXTERNAL UINT8_C(68)
1581	#define IMAGE_SYM_CLASS_BLOCK UINT8_C(100)
1582	#define IMAGE_SYM_CLASS_FUNCTION UINT8_C(101)
1583	#define IMAGE_SYM_CLASS_END_OF_STRUCT UINT8_C(102)
1584	#define IMAGE_SYM_CLASS_FILE UINT8_C(103)
1585	#define IMAGE_SYM_CLASS_SECTION UINT8_C(104)
1586	#define IMAGE_SYM_CLASS_WEAK_EXTERNAL UINT8_C(105)
1587	#define IMAGE_SYM_CLASS_CLR_TOKEN UINT8_C(107)
1588	/** @} */
1589
1590	/** @name IMAGE_SYM_TYPE_XXX - COFF symbol base types
1591	* @{ */
1592	#define IMAGE_SYM_TYPE_NULL UINT16_C(0x0000)
1593	#define IMAGE_SYM_TYPE_VOID UINT16_C(0x0001)
1594	#define IMAGE_SYM_TYPE_CHAR UINT16_C(0x0002)
1595	#define IMAGE_SYM_TYPE_SHORT UINT16_C(0x0003)
1596	#define IMAGE_SYM_TYPE_INT UINT16_C(0x0004)
1597	#define IMAGE_SYM_TYPE_LONG UINT16_C(0x0005)
1598	#define IMAGE_SYM_TYPE_FLOAT UINT16_C(0x0006)
1599	#define IMAGE_SYM_TYPE_DOUBLE UINT16_C(0x0007)
1600	#define IMAGE_SYM_TYPE_STRUCT UINT16_C(0x0008)
1601	#define IMAGE_SYM_TYPE_UNION UINT16_C(0x0009)
1602	#define IMAGE_SYM_TYPE_ENUM UINT16_C(0x000a)
1603	#define IMAGE_SYM_TYPE_MOE UINT16_C(0x000b)
1604	#define IMAGE_SYM_TYPE_BYTE UINT16_C(0x000c)
1605	#define IMAGE_SYM_TYPE_WORD UINT16_C(0x000d)
1606	#define IMAGE_SYM_TYPE_UINT UINT16_C(0x000e)
1607	#define IMAGE_SYM_TYPE_DWORD UINT16_C(0x000f)
1608	#define IMAGE_SYM_TYPE_PCODE UINT16_C(0x8000)
1609	/** @} */
1610
1611	/** @name IMAGE_SYM_DTYPE_XXX - COFF symbol complex types
1612	* @{ */
1613	#define IMAGE_SYM_DTYPE_NULL UINT16_C(0x0)
1614	#define IMAGE_SYM_DTYPE_POINTER UINT16_C(0x1)
1615	#define IMAGE_SYM_DTYPE_FUNCTION UINT16_C(0x2)
1616	#define IMAGE_SYM_DTYPE_ARRAY UINT16_C(0x3)
1617	/** @} */
1618
1619	/** @name COFF Symbol type masks and shift counts.
1620	* @{ */
1621	#define N_BTMASK UINT16_C(0x000f)
1622	#define N_TMASK UINT16_C(0x0030)
1623	#define N_TMASK1 UINT16_C(0x00c0)
1624	#define N_TMASK2 UINT16_C(0x00f0)
1625	#define N_BTSHFT 4
1626	#define N_TSHIFT 2
1627	/** @} */
1628
1629	/** @name COFF Symbol type macros.
1630	* @{ */
1631	#define BTYPE(a_Type) ( (a_Type) & N_BTMASK )
1632	#define ISPTR(a_Type) ( ((a_Type) & N_TMASK) == (IMAGE_SYM_DTYPE_POINTER << N_BTSHFT) )
1633	#define ISFCN(a_Type) ( ((a_Type) & N_TMASK) == (IMAGE_SYM_DTYPE_FUNCTION << N_BTSHFT) )
1634	#define ISARY(a_Type) ( ((a_Type) & N_TMASK) == (IMAGE_SYM_DTYPE_ARRAY << N_BTSHFT) )
1635	#define ISTAG(a_StorageClass) ( (a_StorageClass) == IMAGE_SYM_CLASS_STRUCT_TAG \
1636	\|\| (a_StorageClass) == IMAGE_SYM_CLASS_UNION_TAG \
1637	\|\| (a_StorageClass) == IMAGE_SYM_CLASS_ENUM_TAG )
1638	/** @} */
1639
1640
1641	/**
1642	* COFF relocation table entry.
1643	*
1644	* @note The size of the structure is not a multiple of the largest member
1645	* (uint32_t), so odd relocation table entry members will have
1646	* misaligned uint32_t members.
1647	*/
1648	#pragma pack(1)
1649	typedef struct _IMAGE_RELOCATION
1650	{
1651	union
1652	{
1653	uint32_t VirtualAddress;
1654	uint32_t RelocCount;
1655	} u;
1656	uint32_t SymbolTableIndex;
1657	uint16_t Type;
1658	} IMAGE_RELOCATION;
1659	#pragma pack()
1660	/** The size of a COFF relocation entry. */
1661	#define IMAGE_SIZEOF_RELOCATION 10
1662	AssertCompileSize(IMAGE_RELOCATION, IMAGE_SIZEOF_RELOCATION);
1663	typedef IMAGE_RELOCATION *PIMAGE_RELOCATION;
1664	typedef IMAGE_RELOCATION const *PCIMAGE_RELOCATION;
1665
1666
1667	/** @name IMAGE_REL_AMD64_XXX - COFF relocations for AMD64 CPUs.
1668	* Used by IMAGE_RELOCATION::Type.
1669	* @{ */
1670	#define IMAGE_REL_AMD64_ABSOLUTE UINT16_C(0x0000)
1671	#define IMAGE_REL_AMD64_ADDR64 UINT16_C(0x0001)
1672	#define IMAGE_REL_AMD64_ADDR32 UINT16_C(0x0002)
1673	#define IMAGE_REL_AMD64_ADDR32NB UINT16_C(0x0003)
1674	#define IMAGE_REL_AMD64_REL32 UINT16_C(0x0004)
1675	#define IMAGE_REL_AMD64_REL32_1 UINT16_C(0x0005)
1676	#define IMAGE_REL_AMD64_REL32_2 UINT16_C(0x0006)
1677	#define IMAGE_REL_AMD64_REL32_3 UINT16_C(0x0007)
1678	#define IMAGE_REL_AMD64_REL32_4 UINT16_C(0x0008)
1679	#define IMAGE_REL_AMD64_REL32_5 UINT16_C(0x0009)
1680	#define IMAGE_REL_AMD64_SECTION UINT16_C(0x000a)
1681	#define IMAGE_REL_AMD64_SECREL UINT16_C(0x000b)
1682	#define IMAGE_REL_AMD64_SECREL7 UINT16_C(0x000c)
1683	#define IMAGE_REL_AMD64_TOKEN UINT16_C(0x000d)
1684	#define IMAGE_REL_AMD64_SREL32 UINT16_C(0x000e)
1685	#define IMAGE_REL_AMD64_PAIR UINT16_C(0x000f)
1686	#define IMAGE_REL_AMD64_SSPAN32 UINT16_C(0x0010)
1687	/** @} */
1688
1689	/** @name ARM IMAGE_REL_ARM_XXX - COFF relocations for ARM CPUs.
1690	* Used by IMAGE_RELOCATION::Type.
1691	* @{ */
1692	#define IMAGE_REL_ARM_ABSOLUTE UINT16_C(0x0000)
1693	#define IMAGE_REL_ARM_ADDR32 UINT16_C(0x0001)
1694	#define IMAGE_REL_ARM_ADDR32NB UINT16_C(0x0002)
1695	#define IMAGE_REL_ARM_BRANCH24 UINT16_C(0x0003)
1696	#define IMAGE_REL_ARM_BRANCH11 UINT16_C(0x0004)
1697	#define IMAGE_REL_ARM_TOKEN UINT16_C(0x0005)
1698	#define IMAGE_REL_ARM_BLX24 UINT16_C(0x0008)
1699	#define IMAGE_REL_ARM_BLX11 UINT16_C(0x0009)
1700	#define IMAGE_REL_ARM_SECTION UINT16_C(0x000e)
1701	#define IMAGE_REL_ARM_SECREL UINT16_C(0x000f)
1702	#define IMAGE_REL_ARM_MOV32A UINT16_C(0x0010)
1703	#define IMAGE_REL_ARM_MOV32T UINT16_C(0x0011)
1704	#define IMAGE_REL_ARM_BRANCH20T UINT16_C(0x0012)
1705	#define IMAGE_REL_ARM_BRANCH24T UINT16_C(0x0014)
1706	#define IMAGE_REL_ARM_BLX23T UINT16_C(0x0015)
1707	/** @} */
1708
1709	/** @name IMAGE_REL_ARM64_XXX - COFF relocations for ARMv8 CPUs (64-bit).
1710	* Used by IMAGE_RELOCATION::Type.
1711	* @{ */
1712	#define IMAGE_REL_ARM64_ABSOLUTE UINT16_C(0x0000)
1713	#define IMAGE_REL_ARM64_ADDR32 UINT16_C(0x0001)
1714	#define IMAGE_REL_ARM64_ADDR32NB UINT16_C(0x0002)
1715	#define IMAGE_REL_ARM64_BRANCH26 UINT16_C(0x0003)
1716	#define IMAGE_REL_ARM64_PAGEBASE_REL21 UINT16_C(0x0004)
1717	#define IMAGE_REL_ARM64_REL21 UINT16_C(0x0005)
1718	#define IMAGE_REL_ARM64_PAGEOFFSET_12A UINT16_C(0x0006)
1719	#define IMAGE_REL_ARM64_PAGEOFFSET_12L UINT16_C(0x0007)
1720	#define IMAGE_REL_ARM64_SECREL UINT16_C(0x0008)
1721	#define IMAGE_REL_ARM64_SECREL_LOW12A UINT16_C(0x0009)
1722	#define IMAGE_REL_ARM64_SECREL_HIGH12A UINT16_C(0x000a)
1723	#define IMAGE_REL_ARM64_SECREL_LOW12L UINT16_C(0x000b)
1724	#define IMAGE_REL_ARM64_TOKEN UINT16_C(0x000c)
1725	#define IMAGE_REL_ARM64_SECTION UINT16_C(0x000d)
1726	#define IMAGE_REL_ARM64_ADDR64 UINT16_C(0x000e)
1727	/** @} */
1728
1729	/** @name IMAGE_REL_SH3_XXX - COFF relocation for Hitachi SuperH CPUs.
1730	* Used by IMAGE_RELOCATION::Type.
1731	* @{ */
1732	#define IMAGE_REL_SH3_ABSOLUTE UINT16_C(0x0000)
1733	#define IMAGE_REL_SH3_DIRECT16 UINT16_C(0x0001)
1734	#define IMAGE_REL_SH3_DIRECT32 UINT16_C(0x0002)
1735	#define IMAGE_REL_SH3_DIRECT8 UINT16_C(0x0003)
1736	#define IMAGE_REL_SH3_DIRECT8_WORD UINT16_C(0x0004)
1737	#define IMAGE_REL_SH3_DIRECT8_LONG UINT16_C(0x0005)
1738	#define IMAGE_REL_SH3_DIRECT4 UINT16_C(0x0006)
1739	#define IMAGE_REL_SH3_DIRECT4_WORD UINT16_C(0x0007)
1740	#define IMAGE_REL_SH3_DIRECT4_LONG UINT16_C(0x0008)
1741	#define IMAGE_REL_SH3_PCREL8_WORD UINT16_C(0x0009)
1742	#define IMAGE_REL_SH3_PCREL8_LONG UINT16_C(0x000a)
1743	#define IMAGE_REL_SH3_PCREL12_WORD UINT16_C(0x000b)
1744	#define IMAGE_REL_SH3_STARTOF_SECTION UINT16_C(0x000c)
1745	#define IMAGE_REL_SH3_SIZEOF_SECTION UINT16_C(0x000d)
1746	#define IMAGE_REL_SH3_SECTION UINT16_C(0x000e)
1747	#define IMAGE_REL_SH3_SECREL UINT16_C(0x000f)
1748	#define IMAGE_REL_SH3_DIRECT32_NB UINT16_C(0x0010)
1749	#define IMAGE_REL_SH3_GPREL4_LONG UINT16_C(0x0011)
1750	#define IMAGE_REL_SH3_TOKEN UINT16_C(0x0012)
1751	#define IMAGE_REL_SHM_PCRELPT UINT16_C(0x0013)
1752	#define IMAGE_REL_SHM_REFLO UINT16_C(0x0014)
1753	#define IMAGE_REL_SHM_REFHALF UINT16_C(0x0015)
1754	#define IMAGE_REL_SHM_RELLO UINT16_C(0x0016)
1755	#define IMAGE_REL_SHM_RELHALF UINT16_C(0x0017)
1756	#define IMAGE_REL_SHM_PAIR UINT16_C(0x0018)
1757	#define IMAGE_REL_SHM_NOMODE UINT16_C(0x8000)
1758	/** @} */
1759
1760	/** @name IMAGE_REL_PPC_XXX - COFF relocations for IBM PowerPC CPUs.
1761	* Used by IMAGE_RELOCATION::Type.
1762	* @{ */
1763	#define IMAGE_REL_PPC_ABSOLUTE UINT16_C(0x0000)
1764	#define IMAGE_REL_PPC_ADDR64 UINT16_C(0x0001)
1765	#define IMAGE_REL_PPC_ADDR32 UINT16_C(0x0002)
1766	#define IMAGE_REL_PPC_ADDR24 UINT16_C(0x0003)
1767	#define IMAGE_REL_PPC_ADDR16 UINT16_C(0x0004)
1768	#define IMAGE_REL_PPC_ADDR14 UINT16_C(0x0005)
1769	#define IMAGE_REL_PPC_REL24 UINT16_C(0x0006)
1770	#define IMAGE_REL_PPC_REL14 UINT16_C(0x0007)
1771	#define IMAGE_REL_PPC_ADDR32NB UINT16_C(0x000a)
1772	#define IMAGE_REL_PPC_SECREL UINT16_C(0x000b)
1773	#define IMAGE_REL_PPC_SECTION UINT16_C(0x000c)
1774	#define IMAGE_REL_PPC_SECREL16 UINT16_C(0x000f)
1775	#define IMAGE_REL_PPC_REFHI UINT16_C(0x0010)
1776	#define IMAGE_REL_PPC_REFLO UINT16_C(0x0011)
1777	#define IMAGE_REL_PPC_PAIR UINT16_C(0x0012)
1778	#define IMAGE_REL_PPC_SECRELLO UINT16_C(0x0013)
1779	#define IMAGE_REL_PPC_GPREL UINT16_C(0x0015)
1780	#define IMAGE_REL_PPC_TOKEN UINT16_C(0x0016)
1781	/** @} */
1782
1783	/** @name IMAGE_REL_I386_XXX - COFF relocations for x86 CPUs.
1784	* Used by IMAGE_RELOCATION::Type.
1785	* @{ */
1786	#define IMAGE_REL_I386_ABSOLUTE UINT16_C(0x0000)
1787	#define IMAGE_REL_I386_DIR16 UINT16_C(0x0001)
1788	#define IMAGE_REL_I386_REL16 UINT16_C(0x0002)
1789	#define IMAGE_REL_I386_DIR32 UINT16_C(0x0006)
1790	#define IMAGE_REL_I386_DIR32NB UINT16_C(0x0007)
1791	#define IMAGE_REL_I386_SEG12 UINT16_C(0x0009)
1792	#define IMAGE_REL_I386_SECTION UINT16_C(0x000A)
1793	#define IMAGE_REL_I386_SECREL UINT16_C(0x000B)
1794	#define IMAGE_REL_I386_TOKEN UINT16_C(0x000C)
1795	#define IMAGE_REL_I386_SECREL7 UINT16_C(0x000D)
1796	#define IMAGE_REL_I386_REL32 UINT16_C(0x0014)
1797	/** @} */
1798
1799	/** @name IMAGE_REL_IA64_XXX - COFF relocations for "Itanic" CPUs.
1800	* @{ */
1801	#define IMAGE_REL_IA64_ABSOLUTE UINT16_C(0x0000)
1802	#define IMAGE_REL_IA64_IMM14 UINT16_C(0x0001)
1803	#define IMAGE_REL_IA64_IMM22 UINT16_C(0x0002)
1804	#define IMAGE_REL_IA64_IMM64 UINT16_C(0x0003)
1805	#define IMAGE_REL_IA64_DIR32 UINT16_C(0x0004)
1806	#define IMAGE_REL_IA64_DIR64 UINT16_C(0x0005)
1807	#define IMAGE_REL_IA64_PCREL21B UINT16_C(0x0006)
1808	#define IMAGE_REL_IA64_PCREL21M UINT16_C(0x0007)
1809	#define IMAGE_REL_IA64_PCREL21F UINT16_C(0x0008)
1810	#define IMAGE_REL_IA64_GPREL22 UINT16_C(0x0009)
1811	#define IMAGE_REL_IA64_LTOFF22 UINT16_C(0x000a)
1812	#define IMAGE_REL_IA64_SECTION UINT16_C(0x000b)
1813	#define IMAGE_REL_IA64_SECREL22 UINT16_C(0x000c)
1814	#define IMAGE_REL_IA64_SECREL64I UINT16_C(0x000d)
1815	#define IMAGE_REL_IA64_SECREL32 UINT16_C(0x000e)
1816	#define IMAGE_REL_IA64_DIR32NB UINT16_C(0x0010)
1817	#define IMAGE_REL_IA64_SREL14 UINT16_C(0x0011)
1818	#define IMAGE_REL_IA64_SREL22 UINT16_C(0x0012)
1819	#define IMAGE_REL_IA64_SREL32 UINT16_C(0x0013)
1820	#define IMAGE_REL_IA64_UREL32 UINT16_C(0x0014)
1821	#define IMAGE_REL_IA64_PCREL60X UINT16_C(0x0015)
1822	#define IMAGE_REL_IA64_PCREL60B UINT16_C(0x0016)
1823	#define IMAGE_REL_IA64_PCREL60F UINT16_C(0x0017)
1824	#define IMAGE_REL_IA64_PCREL60I UINT16_C(0x0018)
1825	#define IMAGE_REL_IA64_PCREL60M UINT16_C(0x0019)
1826	#define IMAGE_REL_IA64_IMMGPREL64 UINT16_C(0x001a)
1827	#define IMAGE_REL_IA64_TOKEN UINT16_C(0x001b)
1828	#define IMAGE_REL_IA64_GPREL32 UINT16_C(0x001c)
1829	#define IMAGE_REL_IA64_ADDEND UINT16_C(0x001f)
1830	/** @} */
1831
1832	/** @name IMAGE_REL_MIPS_XXX - COFF relocations for MIPS CPUs.
1833	* Used by IMAGE_RELOCATION::Type.
1834	* @{ */
1835	#define IMAGE_REL_MIPS_ABSOLUTE UINT16_C(0x0000)
1836	#define IMAGE_REL_MIPS_REFHALF UINT16_C(0x0001)
1837	#define IMAGE_REL_MIPS_REFWORD UINT16_C(0x0002)
1838	#define IMAGE_REL_MIPS_JMPADDR UINT16_C(0x0003)
1839	#define IMAGE_REL_MIPS_REFHI UINT16_C(0x0004)
1840	#define IMAGE_REL_MIPS_REFLO UINT16_C(0x0005)
1841	#define IMAGE_REL_MIPS_GPREL UINT16_C(0x0006)
1842	#define IMAGE_REL_MIPS_LITERAL UINT16_C(0x0007)
1843	#define IMAGE_REL_MIPS_SECTION UINT16_C(0x000a)
1844	#define IMAGE_REL_MIPS_SECREL UINT16_C(0x000b)
1845	#define IMAGE_REL_MIPS_SECRELLO UINT16_C(0x000c)
1846	#define IMAGE_REL_MIPS_SECRELHI UINT16_C(0x000d)
1847	#define IMAGE_REL_MIPS_JMPADDR16 UINT16_C(0x0010)
1848	#define IMAGE_REL_MIPS_REFWORDNB UINT16_C(0x0022)
1849	#define IMAGE_REL_MIPS_PAIR UINT16_C(0x0025)
1850	/** @} */
1851
1852	/** @name IMAGE_REL_M32R_XXX - COFF relocations for Mitsubishi M32R CPUs.
1853	* Used by IMAGE_RELOCATION::Type.
1854	* @{ */
1855	#define IMAGE_REL_M32R_ABSOLUTE UINT16_C(0x0000)
1856	#define IMAGE_REL_M32R_ADDR32 UINT16_C(0x0001)
1857	#define IMAGE_REL_M32R_ADDR32NB UINT16_C(0x0002)
1858	#define IMAGE_REL_M32R_ADDR24 UINT16_C(0x0003)
1859	#define IMAGE_REL_M32R_GPREL16 UINT16_C(0x0004)
1860	#define IMAGE_REL_M32R_PCREL24 UINT16_C(0x0005)
1861	#define IMAGE_REL_M32R_PCREL16 UINT16_C(0x0006)
1862	#define IMAGE_REL_M32R_PCREL8 UINT16_C(0x0007)
1863	#define IMAGE_REL_M32R_REFHALF UINT16_C(0x0008)
1864	#define IMAGE_REL_M32R_REFHI UINT16_C(0x0009)
1865	#define IMAGE_REL_M32R_REFLO UINT16_C(0x000a)
1866	#define IMAGE_REL_M32R_PAIR UINT16_C(0x000b)
1867	#define IMAGE_REL_M32R_SECTION UINT16_C(0x000c)
1868	#define IMAGE_REL_M32R_SECREL UINT16_C(0x000d)
1869	#define IMAGE_REL_M32R_TOKEN UINT16_C(0x000e)
1870	/** @} */
1871
1872
1873	/** @} */
1874
1875	#endif
1876

Note: See TracBrowser for help on using the repository browser.

source: vbox/trunk/include/iprt/formats/pecoff.h@ 66484

Download in other formats: