WinNT.h
上传用户:dzyhzl
上传日期:2019-04-29
资源大小:56270k
文件大小:293k
- DWORD e32_datapage; // Offset of Enumerated Data Pages
- DWORD e32_preload; // Number of preload pages
- DWORD e32_nrestab; // Offset of Non-resident Names Table
- DWORD e32_cbnrestab; // Size of Non-resident Name Table
- DWORD e32_nressum; // Non-resident Name Table Checksum
- DWORD e32_autodata; // Object # for automatic data object
- DWORD e32_debuginfo; // Offset of the debugging information
- DWORD e32_debuglen; // The length of the debugging info. in bytes
- DWORD e32_instpreload; // Number of instance pages in preload section of VXD file
- DWORD e32_instdemand; // Number of instance pages in demand load section of VXD file
- DWORD e32_heapsize; // Size of heap - for 16-bit apps
- BYTE e32_res3[12]; // Reserved words
- DWORD e32_winresoff;
- DWORD e32_winreslen;
- WORD e32_devid; // Device ID for VxD
- WORD e32_ddkver; // DDK version for VxD
- } IMAGE_VXD_HEADER, *PIMAGE_VXD_HEADER;
- #ifndef _MAC
- #include "poppack.h" // Back to 4 byte packing
- #endif
- //
- // File header format.
- //
- typedef struct _IMAGE_FILE_HEADER {
- WORD Machine;
- WORD NumberOfSections;
- DWORD TimeDateStamp;
- DWORD PointerToSymbolTable;
- DWORD NumberOfSymbols;
- WORD SizeOfOptionalHeader;
- WORD Characteristics;
- } IMAGE_FILE_HEADER, *PIMAGE_FILE_HEADER;
- #define IMAGE_SIZEOF_FILE_HEADER 20
- #define IMAGE_FILE_RELOCS_STRIPPED 0x0001 // Relocation info stripped from file.
- #define IMAGE_FILE_EXECUTABLE_IMAGE 0x0002 // File is executable (i.e. no unresolved externel references).
- #define IMAGE_FILE_LINE_NUMS_STRIPPED 0x0004 // Line nunbers stripped from file.
- #define IMAGE_FILE_LOCAL_SYMS_STRIPPED 0x0008 // Local symbols stripped from file.
- #define IMAGE_FILE_AGGRESIVE_WS_TRIM 0x0010 // Agressively trim working set
- #define IMAGE_FILE_LARGE_ADDRESS_AWARE 0x0020 // App can handle >2gb addresses
- #define IMAGE_FILE_BYTES_REVERSED_LO 0x0080 // Bytes of machine word are reversed.
- #define IMAGE_FILE_32BIT_MACHINE 0x0100 // 32 bit word machine.
- #define IMAGE_FILE_DEBUG_STRIPPED 0x0200 // Debugging info stripped from file in .DBG file
- #define IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP 0x0400 // If Image is on removable media, copy and run from the swap file.
- #define IMAGE_FILE_NET_RUN_FROM_SWAP 0x0800 // If Image is on Net, copy and run from the swap file.
- #define IMAGE_FILE_SYSTEM 0x1000 // System File.
- #define IMAGE_FILE_DLL 0x2000 // File is a DLL.
- #define IMAGE_FILE_UP_SYSTEM_ONLY 0x4000 // File should only be run on a UP machine
- #define IMAGE_FILE_BYTES_REVERSED_HI 0x8000 // Bytes of machine word are reversed.
- #define IMAGE_FILE_MACHINE_UNKNOWN 0
- #define IMAGE_FILE_MACHINE_I386 0x014c // Intel 386.
- #define IMAGE_FILE_MACHINE_R3000 0x0162 // MIPS little-endian, 0x160 big-endian
- #define IMAGE_FILE_MACHINE_R4000 0x0166 // MIPS little-endian
- #define IMAGE_FILE_MACHINE_R10000 0x0168 // MIPS little-endian
- #define IMAGE_FILE_MACHINE_WCEMIPSV2 0x0169 // MIPS little-endian WCE v2
- #define IMAGE_FILE_MACHINE_ALPHA 0x0184 // Alpha_AXP
- #define IMAGE_FILE_MACHINE_SH3 0x01a2 // SH3 little-endian
- #define IMAGE_FILE_MACHINE_SH3DSP 0x01a3
- #define IMAGE_FILE_MACHINE_SH3E 0x01a4 // SH3E little-endian
- #define IMAGE_FILE_MACHINE_SH4 0x01a6 // SH4 little-endian
- #define IMAGE_FILE_MACHINE_SH5 0x01a8 // SH5
- #define IMAGE_FILE_MACHINE_ARM 0x01c0 // ARM Little-Endian
- #define IMAGE_FILE_MACHINE_THUMB 0x01c2
- #define IMAGE_FILE_MACHINE_AM33 0x01d3
- #define IMAGE_FILE_MACHINE_POWERPC 0x01F0 // IBM PowerPC Little-Endian
- #define IMAGE_FILE_MACHINE_POWERPCFP 0x01f1
- #define IMAGE_FILE_MACHINE_IA64 0x0200 // Intel 64
- #define IMAGE_FILE_MACHINE_MIPS16 0x0266 // MIPS
- #define IMAGE_FILE_MACHINE_ALPHA64 0x0284 // ALPHA64
- #define IMAGE_FILE_MACHINE_MIPSFPU 0x0366 // MIPS
- #define IMAGE_FILE_MACHINE_MIPSFPU16 0x0466 // MIPS
- #define IMAGE_FILE_MACHINE_AXP64 IMAGE_FILE_MACHINE_ALPHA64
- #define IMAGE_FILE_MACHINE_TRICORE 0x0520 // Infineon
- #define IMAGE_FILE_MACHINE_CEF 0x0CEF
- #define IMAGE_FILE_MACHINE_EBC 0x0EBC // EFI Byte Code
- #define IMAGE_FILE_MACHINE_AMD64 0x8664 // AMD64 (K8)
- #define IMAGE_FILE_MACHINE_M32R 0x9041 // M32R little-endian
- #define IMAGE_FILE_MACHINE_CEE 0xC0EE
- //
- // Directory format.
- //
- typedef struct _IMAGE_DATA_DIRECTORY {
- DWORD VirtualAddress;
- DWORD Size;
- } IMAGE_DATA_DIRECTORY, *PIMAGE_DATA_DIRECTORY;
- #define IMAGE_NUMBEROF_DIRECTORY_ENTRIES 16
- //
- // Optional header format.
- //
- typedef struct _IMAGE_OPTIONAL_HEADER {
- //
- // Standard fields.
- //
- WORD Magic;
- BYTE MajorLinkerVersion;
- BYTE MinorLinkerVersion;
- DWORD SizeOfCode;
- DWORD SizeOfInitializedData;
- DWORD SizeOfUninitializedData;
- DWORD AddressOfEntryPoint;
- DWORD BaseOfCode;
- DWORD BaseOfData;
- //
- // NT additional fields.
- //
- DWORD ImageBase;
- DWORD SectionAlignment;
- DWORD FileAlignment;
- WORD MajorOperatingSystemVersion;
- WORD MinorOperatingSystemVersion;
- WORD MajorImageVersion;
- WORD MinorImageVersion;
- WORD MajorSubsystemVersion;
- WORD MinorSubsystemVersion;
- DWORD Win32VersionValue;
- DWORD SizeOfImage;
- DWORD SizeOfHeaders;
- DWORD CheckSum;
- WORD Subsystem;
- WORD DllCharacteristics;
- DWORD SizeOfStackReserve;
- DWORD SizeOfStackCommit;
- DWORD SizeOfHeapReserve;
- DWORD SizeOfHeapCommit;
- DWORD LoaderFlags;
- DWORD NumberOfRvaAndSizes;
- IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
- } IMAGE_OPTIONAL_HEADER32, *PIMAGE_OPTIONAL_HEADER32;
- typedef struct _IMAGE_ROM_OPTIONAL_HEADER {
- WORD Magic;
- BYTE MajorLinkerVersion;
- BYTE MinorLinkerVersion;
- DWORD SizeOfCode;
- DWORD SizeOfInitializedData;
- DWORD SizeOfUninitializedData;
- DWORD AddressOfEntryPoint;
- DWORD BaseOfCode;
- DWORD BaseOfData;
- DWORD BaseOfBss;
- DWORD GprMask;
- DWORD CprMask[4];
- DWORD GpValue;
- } IMAGE_ROM_OPTIONAL_HEADER, *PIMAGE_ROM_OPTIONAL_HEADER;
- typedef struct _IMAGE_OPTIONAL_HEADER64 {
- WORD Magic;
- BYTE MajorLinkerVersion;
- BYTE MinorLinkerVersion;
- DWORD SizeOfCode;
- DWORD SizeOfInitializedData;
- DWORD SizeOfUninitializedData;
- DWORD AddressOfEntryPoint;
- DWORD BaseOfCode;
- ULONGLONG ImageBase;
- DWORD SectionAlignment;
- DWORD FileAlignment;
- WORD MajorOperatingSystemVersion;
- WORD MinorOperatingSystemVersion;
- WORD MajorImageVersion;
- WORD MinorImageVersion;
- WORD MajorSubsystemVersion;
- WORD MinorSubsystemVersion;
- DWORD Win32VersionValue;
- DWORD SizeOfImage;
- DWORD SizeOfHeaders;
- DWORD CheckSum;
- WORD Subsystem;
- WORD DllCharacteristics;
- ULONGLONG SizeOfStackReserve;
- ULONGLONG SizeOfStackCommit;
- ULONGLONG SizeOfHeapReserve;
- ULONGLONG SizeOfHeapCommit;
- DWORD LoaderFlags;
- DWORD NumberOfRvaAndSizes;
- IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
- } IMAGE_OPTIONAL_HEADER64, *PIMAGE_OPTIONAL_HEADER64;
- #define IMAGE_SIZEOF_ROM_OPTIONAL_HEADER 56
- #define IMAGE_SIZEOF_STD_OPTIONAL_HEADER 28
- #define IMAGE_SIZEOF_NT_OPTIONAL32_HEADER 224
- #define IMAGE_SIZEOF_NT_OPTIONAL64_HEADER 240
- #define IMAGE_NT_OPTIONAL_HDR32_MAGIC 0x10b
- #define IMAGE_NT_OPTIONAL_HDR64_MAGIC 0x20b
- #define IMAGE_ROM_OPTIONAL_HDR_MAGIC 0x107
- #ifdef _WIN64
- typedef IMAGE_OPTIONAL_HEADER64 IMAGE_OPTIONAL_HEADER;
- typedef PIMAGE_OPTIONAL_HEADER64 PIMAGE_OPTIONAL_HEADER;
- #define IMAGE_SIZEOF_NT_OPTIONAL_HEADER IMAGE_SIZEOF_NT_OPTIONAL64_HEADER
- #define IMAGE_NT_OPTIONAL_HDR_MAGIC IMAGE_NT_OPTIONAL_HDR64_MAGIC
- #else
- typedef IMAGE_OPTIONAL_HEADER32 IMAGE_OPTIONAL_HEADER;
- typedef PIMAGE_OPTIONAL_HEADER32 PIMAGE_OPTIONAL_HEADER;
- #define IMAGE_SIZEOF_NT_OPTIONAL_HEADER IMAGE_SIZEOF_NT_OPTIONAL32_HEADER
- #define IMAGE_NT_OPTIONAL_HDR_MAGIC IMAGE_NT_OPTIONAL_HDR32_MAGIC
- #endif
- typedef struct _IMAGE_NT_HEADERS64 {
- DWORD Signature;
- IMAGE_FILE_HEADER FileHeader;
- IMAGE_OPTIONAL_HEADER64 OptionalHeader;
- } IMAGE_NT_HEADERS64, *PIMAGE_NT_HEADERS64;
- typedef struct _IMAGE_NT_HEADERS {
- DWORD Signature;
- IMAGE_FILE_HEADER FileHeader;
- IMAGE_OPTIONAL_HEADER32 OptionalHeader;
- } IMAGE_NT_HEADERS32, *PIMAGE_NT_HEADERS32;
- typedef struct _IMAGE_ROM_HEADERS {
- IMAGE_FILE_HEADER FileHeader;
- IMAGE_ROM_OPTIONAL_HEADER OptionalHeader;
- } IMAGE_ROM_HEADERS, *PIMAGE_ROM_HEADERS;
- #ifdef _WIN64
- typedef IMAGE_NT_HEADERS64 IMAGE_NT_HEADERS;
- typedef PIMAGE_NT_HEADERS64 PIMAGE_NT_HEADERS;
- #else
- typedef IMAGE_NT_HEADERS32 IMAGE_NT_HEADERS;
- typedef PIMAGE_NT_HEADERS32 PIMAGE_NT_HEADERS;
- #endif
- // IMAGE_FIRST_SECTION doesn't need 32/64 versions since the file header is the same either way.
- #define IMAGE_FIRST_SECTION( ntheader ) ((PIMAGE_SECTION_HEADER)
- ((ULONG_PTR)ntheader +
- FIELD_OFFSET( IMAGE_NT_HEADERS, OptionalHeader ) +
- ((PIMAGE_NT_HEADERS)(ntheader))->FileHeader.SizeOfOptionalHeader
- ))
- // Subsystem Values
- #define IMAGE_SUBSYSTEM_UNKNOWN 0 // Unknown subsystem.
- #define IMAGE_SUBSYSTEM_NATIVE 1 // Image doesn't require a subsystem.
- #define IMAGE_SUBSYSTEM_WINDOWS_GUI 2 // Image runs in the Windows GUI subsystem.
- #define IMAGE_SUBSYSTEM_WINDOWS_CUI 3 // Image runs in the Windows character subsystem.
- #define IMAGE_SUBSYSTEM_OS2_CUI 5 // image runs in the OS/2 character subsystem.
- #define IMAGE_SUBSYSTEM_POSIX_CUI 7 // image runs in the Posix character subsystem.
- #define IMAGE_SUBSYSTEM_NATIVE_WINDOWS 8 // image is a native Win9x driver.
- #define IMAGE_SUBSYSTEM_WINDOWS_CE_GUI 9 // Image runs in the Windows CE subsystem.
- #define IMAGE_SUBSYSTEM_EFI_APPLICATION 10 //
- #define IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER 11 //
- #define IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER 12 //
- #define IMAGE_SUBSYSTEM_EFI_ROM 13
- #define IMAGE_SUBSYSTEM_XBOX 14
- // DllCharacteristics Entries
- // IMAGE_LIBRARY_PROCESS_INIT 0x0001 // Reserved.
- // IMAGE_LIBRARY_PROCESS_TERM 0x0002 // Reserved.
- // IMAGE_LIBRARY_THREAD_INIT 0x0004 // Reserved.
- // IMAGE_LIBRARY_THREAD_TERM 0x0008 // Reserved.
- #define IMAGE_DLLCHARACTERISTICS_NO_BIND 0x0800 // Do not bind this image.
- // 0x1000 // Reserved.
- #define IMAGE_DLLCHARACTERISTICS_WDM_DRIVER 0x2000 // Driver uses WDM model
- // 0x4000 // Reserved.
- #define IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE 0x8000
- // Directory Entries
- #define IMAGE_DIRECTORY_ENTRY_EXPORT 0 // Export Directory
- #define IMAGE_DIRECTORY_ENTRY_IMPORT 1 // Import Directory
- #define IMAGE_DIRECTORY_ENTRY_RESOURCE 2 // Resource Directory
- #define IMAGE_DIRECTORY_ENTRY_EXCEPTION 3 // Exception Directory
- #define IMAGE_DIRECTORY_ENTRY_SECURITY 4 // Security Directory
- #define IMAGE_DIRECTORY_ENTRY_BASERELOC 5 // Base Relocation Table
- #define IMAGE_DIRECTORY_ENTRY_DEBUG 6 // Debug Directory
- // IMAGE_DIRECTORY_ENTRY_COPYRIGHT 7 // (X86 usage)
- #define IMAGE_DIRECTORY_ENTRY_ARCHITECTURE 7 // Architecture Specific Data
- #define IMAGE_DIRECTORY_ENTRY_GLOBALPTR 8 // RVA of GP
- #define IMAGE_DIRECTORY_ENTRY_TLS 9 // TLS Directory
- #define IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG 10 // Load Configuration Directory
- #define IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT 11 // Bound Import Directory in headers
- #define IMAGE_DIRECTORY_ENTRY_IAT 12 // Import Address Table
- #define IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT 13 // Delay Load Import Descriptors
- #define IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR 14 // COM Runtime descriptor
- //
- // Non-COFF Object file header
- //
- typedef struct ANON_OBJECT_HEADER {
- WORD Sig1; // Must be IMAGE_FILE_MACHINE_UNKNOWN
- WORD Sig2; // Must be 0xffff
- WORD Version; // >= 1 (implies the CLSID field is present)
- WORD Machine;
- DWORD TimeDateStamp;
- CLSID ClassID; // Used to invoke CoCreateInstance
- DWORD SizeOfData; // Size of data that follows the header
- } ANON_OBJECT_HEADER;
- //
- // Section header format.
- //
- #define IMAGE_SIZEOF_SHORT_NAME 8
- typedef struct _IMAGE_SECTION_HEADER {
- BYTE Name[IMAGE_SIZEOF_SHORT_NAME];
- union {
- DWORD PhysicalAddress;
- DWORD VirtualSize;
- } Misc;
- DWORD VirtualAddress;
- DWORD SizeOfRawData;
- DWORD PointerToRawData;
- DWORD PointerToRelocations;
- DWORD PointerToLinenumbers;
- WORD NumberOfRelocations;
- WORD NumberOfLinenumbers;
- DWORD Characteristics;
- } IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER;
- #define IMAGE_SIZEOF_SECTION_HEADER 40
- //
- // Section characteristics.
- //
- // IMAGE_SCN_TYPE_REG 0x00000000 // Reserved.
- // IMAGE_SCN_TYPE_DSECT 0x00000001 // Reserved.
- // IMAGE_SCN_TYPE_NOLOAD 0x00000002 // Reserved.
- // IMAGE_SCN_TYPE_GROUP 0x00000004 // Reserved.
- #define IMAGE_SCN_TYPE_NO_PAD 0x00000008 // Reserved.
- // IMAGE_SCN_TYPE_COPY 0x00000010 // Reserved.
- #define IMAGE_SCN_CNT_CODE 0x00000020 // Section contains code.
- #define IMAGE_SCN_CNT_INITIALIZED_DATA 0x00000040 // Section contains initialized data.
- #define IMAGE_SCN_CNT_UNINITIALIZED_DATA 0x00000080 // Section contains uninitialized data.
- #define IMAGE_SCN_LNK_OTHER 0x00000100 // Reserved.
- #define IMAGE_SCN_LNK_INFO 0x00000200 // Section contains comments or some other type of information.
- // IMAGE_SCN_TYPE_OVER 0x00000400 // Reserved.
- #define IMAGE_SCN_LNK_REMOVE 0x00000800 // Section contents will not become part of image.
- #define IMAGE_SCN_LNK_COMDAT 0x00001000 // Section contents comdat.
- // 0x00002000 // Reserved.
- // IMAGE_SCN_MEM_PROTECTED - Obsolete 0x00004000
- #define IMAGE_SCN_NO_DEFER_SPEC_EXC 0x00004000 // Reset speculative exceptions handling bits in the TLB entries for this section.
- #define IMAGE_SCN_GPREL 0x00008000 // Section content can be accessed relative to GP
- #define IMAGE_SCN_MEM_FARDATA 0x00008000
- // IMAGE_SCN_MEM_SYSHEAP - Obsolete 0x00010000
- #define IMAGE_SCN_MEM_PURGEABLE 0x00020000
- #define IMAGE_SCN_MEM_16BIT 0x00020000
- #define IMAGE_SCN_MEM_LOCKED 0x00040000
- #define IMAGE_SCN_MEM_PRELOAD 0x00080000
- #define IMAGE_SCN_ALIGN_1BYTES 0x00100000 //
- #define IMAGE_SCN_ALIGN_2BYTES 0x00200000 //
- #define IMAGE_SCN_ALIGN_4BYTES 0x00300000 //
- #define IMAGE_SCN_ALIGN_8BYTES 0x00400000 //
- #define IMAGE_SCN_ALIGN_16BYTES 0x00500000 // Default alignment if no others are specified.
- #define IMAGE_SCN_ALIGN_32BYTES 0x00600000 //
- #define IMAGE_SCN_ALIGN_64BYTES 0x00700000 //
- #define IMAGE_SCN_ALIGN_128BYTES 0x00800000 //
- #define IMAGE_SCN_ALIGN_256BYTES 0x00900000 //
- #define IMAGE_SCN_ALIGN_512BYTES 0x00A00000 //
- #define IMAGE_SCN_ALIGN_1024BYTES 0x00B00000 //
- #define IMAGE_SCN_ALIGN_2048BYTES 0x00C00000 //
- #define IMAGE_SCN_ALIGN_4096BYTES 0x00D00000 //
- #define IMAGE_SCN_ALIGN_8192BYTES 0x00E00000 //
- // Unused 0x00F00000
- #define IMAGE_SCN_ALIGN_MASK 0x00F00000
- #define IMAGE_SCN_LNK_NRELOC_OVFL 0x01000000 // Section contains extended relocations.
- #define IMAGE_SCN_MEM_DISCARDABLE 0x02000000 // Section can be discarded.
- #define IMAGE_SCN_MEM_NOT_CACHED 0x04000000 // Section is not cachable.
- #define IMAGE_SCN_MEM_NOT_PAGED 0x08000000 // Section is not pageable.
- #define IMAGE_SCN_MEM_SHARED 0x10000000 // Section is shareable.
- #define IMAGE_SCN_MEM_EXECUTE 0x20000000 // Section is executable.
- #define IMAGE_SCN_MEM_READ 0x40000000 // Section is readable.
- #define IMAGE_SCN_MEM_WRITE 0x80000000 // Section is writeable.
- //
- // TLS Chaacteristic Flags
- //
- #define IMAGE_SCN_SCALE_INDEX 0x00000001 // Tls index is scaled
- #ifndef _MAC
- #include "pshpack2.h" // Symbols, relocs, and linenumbers are 2 byte packed
- #endif
- //
- // Symbol format.
- //
- typedef struct _IMAGE_SYMBOL {
- union {
- BYTE ShortName[8];
- struct {
- DWORD Short; // if 0, use LongName
- DWORD Long; // offset into string table
- } Name;
- DWORD LongName[2]; // PBYTE [2]
- } N;
- DWORD Value;
- SHORT SectionNumber;
- WORD Type;
- BYTE StorageClass;
- BYTE NumberOfAuxSymbols;
- } IMAGE_SYMBOL;
- typedef IMAGE_SYMBOL UNALIGNED *PIMAGE_SYMBOL;
- #define IMAGE_SIZEOF_SYMBOL 18
- //
- // Section values.
- //
- // Symbols have a section number of the section in which they are
- // defined. Otherwise, section numbers have the following meanings:
- //
- #define IMAGE_SYM_UNDEFINED (SHORT)0 // Symbol is undefined or is common.
- #define IMAGE_SYM_ABSOLUTE (SHORT)-1 // Symbol is an absolute value.
- #define IMAGE_SYM_DEBUG (SHORT)-2 // Symbol is a special debug item.
- #define IMAGE_SYM_SECTION_MAX 0xFEFF // Values 0xFF00-0xFFFF are special
- //
- // Type (fundamental) values.
- //
- #define IMAGE_SYM_TYPE_NULL 0x0000 // no type.
- #define IMAGE_SYM_TYPE_VOID 0x0001 //
- #define IMAGE_SYM_TYPE_CHAR 0x0002 // type character.
- #define IMAGE_SYM_TYPE_SHORT 0x0003 // type short integer.
- #define IMAGE_SYM_TYPE_INT 0x0004 //
- #define IMAGE_SYM_TYPE_LONG 0x0005 //
- #define IMAGE_SYM_TYPE_FLOAT 0x0006 //
- #define IMAGE_SYM_TYPE_DOUBLE 0x0007 //
- #define IMAGE_SYM_TYPE_STRUCT 0x0008 //
- #define IMAGE_SYM_TYPE_UNION 0x0009 //
- #define IMAGE_SYM_TYPE_ENUM 0x000A // enumeration.
- #define IMAGE_SYM_TYPE_MOE 0x000B // member of enumeration.
- #define IMAGE_SYM_TYPE_BYTE 0x000C //
- #define IMAGE_SYM_TYPE_WORD 0x000D //
- #define IMAGE_SYM_TYPE_UINT 0x000E //
- #define IMAGE_SYM_TYPE_DWORD 0x000F //
- #define IMAGE_SYM_TYPE_PCODE 0x8000 //
- //
- // Type (derived) values.
- //
- #define IMAGE_SYM_DTYPE_NULL 0 // no derived type.
- #define IMAGE_SYM_DTYPE_POINTER 1 // pointer.
- #define IMAGE_SYM_DTYPE_FUNCTION 2 // function.
- #define IMAGE_SYM_DTYPE_ARRAY 3 // array.
- //
- // Storage classes.
- //
- #define IMAGE_SYM_CLASS_END_OF_FUNCTION (BYTE )-1
- #define IMAGE_SYM_CLASS_NULL 0x0000
- #define IMAGE_SYM_CLASS_AUTOMATIC 0x0001
- #define IMAGE_SYM_CLASS_EXTERNAL 0x0002
- #define IMAGE_SYM_CLASS_STATIC 0x0003
- #define IMAGE_SYM_CLASS_REGISTER 0x0004
- #define IMAGE_SYM_CLASS_EXTERNAL_DEF 0x0005
- #define IMAGE_SYM_CLASS_LABEL 0x0006
- #define IMAGE_SYM_CLASS_UNDEFINED_LABEL 0x0007
- #define IMAGE_SYM_CLASS_MEMBER_OF_STRUCT 0x0008
- #define IMAGE_SYM_CLASS_ARGUMENT 0x0009
- #define IMAGE_SYM_CLASS_STRUCT_TAG 0x000A
- #define IMAGE_SYM_CLASS_MEMBER_OF_UNION 0x000B
- #define IMAGE_SYM_CLASS_UNION_TAG 0x000C
- #define IMAGE_SYM_CLASS_TYPE_DEFINITION 0x000D
- #define IMAGE_SYM_CLASS_UNDEFINED_STATIC 0x000E
- #define IMAGE_SYM_CLASS_ENUM_TAG 0x000F
- #define IMAGE_SYM_CLASS_MEMBER_OF_ENUM 0x0010
- #define IMAGE_SYM_CLASS_REGISTER_PARAM 0x0011
- #define IMAGE_SYM_CLASS_BIT_FIELD 0x0012
- #define IMAGE_SYM_CLASS_FAR_EXTERNAL 0x0044 //
- #define IMAGE_SYM_CLASS_BLOCK 0x0064
- #define IMAGE_SYM_CLASS_FUNCTION 0x0065
- #define IMAGE_SYM_CLASS_END_OF_STRUCT 0x0066
- #define IMAGE_SYM_CLASS_FILE 0x0067
- // new
- #define IMAGE_SYM_CLASS_SECTION 0x0068
- #define IMAGE_SYM_CLASS_WEAK_EXTERNAL 0x0069
- #define IMAGE_SYM_CLASS_CLR_TOKEN 0x006B
- // type packing constants
- #define N_BTMASK 0x000F
- #define N_TMASK 0x0030
- #define N_TMASK1 0x00C0
- #define N_TMASK2 0x00F0
- #define N_BTSHFT 4
- #define N_TSHIFT 2
- // MACROS
- // Basic Type of x
- #define BTYPE(x) ((x) & N_BTMASK)
- // Is x a pointer?
- #ifndef ISPTR
- #define ISPTR(x) (((x) & N_TMASK) == (IMAGE_SYM_DTYPE_POINTER << N_BTSHFT))
- #endif
- // Is x a function?
- #ifndef ISFCN
- #define ISFCN(x) (((x) & N_TMASK) == (IMAGE_SYM_DTYPE_FUNCTION << N_BTSHFT))
- #endif
- // Is x an array?
- #ifndef ISARY
- #define ISARY(x) (((x) & N_TMASK) == (IMAGE_SYM_DTYPE_ARRAY << N_BTSHFT))
- #endif
- // Is x a structure, union, or enumeration TAG?
- #ifndef ISTAG
- #define ISTAG(x) ((x)==IMAGE_SYM_CLASS_STRUCT_TAG || (x)==IMAGE_SYM_CLASS_UNION_TAG || (x)==IMAGE_SYM_CLASS_ENUM_TAG)
- #endif
- #ifndef INCREF
- #define INCREF(x) ((((x)&~N_BTMASK)<<N_TSHIFT)|(IMAGE_SYM_DTYPE_POINTER<<N_BTSHFT)|((x)&N_BTMASK))
- #endif
- #ifndef DECREF
- #define DECREF(x) ((((x)>>N_TSHIFT)&~N_BTMASK)|((x)&N_BTMASK))
- #endif
- //
- // Auxiliary entry format.
- //
- typedef union _IMAGE_AUX_SYMBOL {
- struct {
- DWORD TagIndex; // struct, union, or enum tag index
- union {
- struct {
- WORD Linenumber; // declaration line number
- WORD Size; // size of struct, union, or enum
- } LnSz;
- DWORD TotalSize;
- } Misc;
- union {
- struct { // if ISFCN, tag, or .bb
- DWORD PointerToLinenumber;
- DWORD PointerToNextFunction;
- } Function;
- struct { // if ISARY, up to 4 dimen.
- WORD Dimension[4];
- } Array;
- } FcnAry;
- WORD TvIndex; // tv index
- } Sym;
- struct {
- BYTE Name[IMAGE_SIZEOF_SYMBOL];
- } File;
- struct {
- DWORD Length; // section length
- WORD NumberOfRelocations; // number of relocation entries
- WORD NumberOfLinenumbers; // number of line numbers
- DWORD CheckSum; // checksum for communal
- SHORT Number; // section number to associate with
- BYTE Selection; // communal selection type
- } Section;
- } IMAGE_AUX_SYMBOL;
- typedef IMAGE_AUX_SYMBOL UNALIGNED *PIMAGE_AUX_SYMBOL;
- #define IMAGE_SIZEOF_AUX_SYMBOL 18
- typedef enum IMAGE_AUX_SYMBOL_TYPE {
- IMAGE_AUX_SYMBOL_TYPE_TOKEN_DEF = 1,
- } IMAGE_AUX_SYMBOL_TYPE;
- #include <pshpack2.h>
- typedef struct IMAGE_AUX_SYMBOL_TOKEN_DEF {
- BYTE bAuxType; // IMAGE_AUX_SYMBOL_TYPE
- BYTE bReserved; // Must be 0
- DWORD SymbolTableIndex;
- BYTE rgbReserved[12]; // Must be 0
- } IMAGE_AUX_SYMBOL_TOKEN_DEF;
- typedef IMAGE_AUX_SYMBOL_TOKEN_DEF UNALIGNED *PIMAGE_AUX_SYMBOL_TOKEN_DEF;
- #include <poppack.h>
- //
- // Communal selection types.
- //
- #define IMAGE_COMDAT_SELECT_NODUPLICATES 1
- #define IMAGE_COMDAT_SELECT_ANY 2
- #define IMAGE_COMDAT_SELECT_SAME_SIZE 3
- #define IMAGE_COMDAT_SELECT_EXACT_MATCH 4
- #define IMAGE_COMDAT_SELECT_ASSOCIATIVE 5
- #define IMAGE_COMDAT_SELECT_LARGEST 6
- #define IMAGE_COMDAT_SELECT_NEWEST 7
- #define IMAGE_WEAK_EXTERN_SEARCH_NOLIBRARY 1
- #define IMAGE_WEAK_EXTERN_SEARCH_LIBRARY 2
- #define IMAGE_WEAK_EXTERN_SEARCH_ALIAS 3
- //
- // Relocation format.
- //
- typedef struct _IMAGE_RELOCATION {
- union {
- DWORD VirtualAddress;
- DWORD RelocCount; // Set to the real count when IMAGE_SCN_LNK_NRELOC_OVFL is set
- };
- DWORD SymbolTableIndex;
- WORD Type;
- } IMAGE_RELOCATION;
- typedef IMAGE_RELOCATION UNALIGNED *PIMAGE_RELOCATION;
- #define IMAGE_SIZEOF_RELOCATION 10
- //
- // I386 relocation types.
- //
- #define IMAGE_REL_I386_ABSOLUTE 0x0000 // Reference is absolute, no relocation is necessary
- #define IMAGE_REL_I386_DIR16 0x0001 // Direct 16-bit reference to the symbols virtual address
- #define IMAGE_REL_I386_REL16 0x0002 // PC-relative 16-bit reference to the symbols virtual address
- #define IMAGE_REL_I386_DIR32 0x0006 // Direct 32-bit reference to the symbols virtual address
- #define IMAGE_REL_I386_DIR32NB 0x0007 // Direct 32-bit reference to the symbols virtual address, base not included
- #define IMAGE_REL_I386_SEG12 0x0009 // Direct 16-bit reference to the segment-selector bits of a 32-bit virtual address
- #define IMAGE_REL_I386_SECTION 0x000A
- #define IMAGE_REL_I386_SECREL 0x000B
- #define IMAGE_REL_I386_TOKEN 0x000C // clr token
- #define IMAGE_REL_I386_SECREL7 0x000D // 7 bit offset from base of section containing target
- #define IMAGE_REL_I386_REL32 0x0014 // PC-relative 32-bit reference to the symbols virtual address
- //
- // MIPS relocation types.
- //
- #define IMAGE_REL_MIPS_ABSOLUTE 0x0000 // Reference is absolute, no relocation is necessary
- #define IMAGE_REL_MIPS_REFHALF 0x0001
- #define IMAGE_REL_MIPS_REFWORD 0x0002
- #define IMAGE_REL_MIPS_JMPADDR 0x0003
- #define IMAGE_REL_MIPS_REFHI 0x0004
- #define IMAGE_REL_MIPS_REFLO 0x0005
- #define IMAGE_REL_MIPS_GPREL 0x0006
- #define IMAGE_REL_MIPS_LITERAL 0x0007
- #define IMAGE_REL_MIPS_SECTION 0x000A
- #define IMAGE_REL_MIPS_SECREL 0x000B
- #define IMAGE_REL_MIPS_SECRELLO 0x000C // Low 16-bit section relative referemce (used for >32k TLS)
- #define IMAGE_REL_MIPS_SECRELHI 0x000D // High 16-bit section relative reference (used for >32k TLS)
- #define IMAGE_REL_MIPS_TOKEN 0x000E // clr token
- #define IMAGE_REL_MIPS_JMPADDR16 0x0010
- #define IMAGE_REL_MIPS_REFWORDNB 0x0022
- #define IMAGE_REL_MIPS_PAIR 0x0025
- //
- // Alpha Relocation types.
- //
- #define IMAGE_REL_ALPHA_ABSOLUTE 0x0000
- #define IMAGE_REL_ALPHA_REFLONG 0x0001
- #define IMAGE_REL_ALPHA_REFQUAD 0x0002
- #define IMAGE_REL_ALPHA_GPREL32 0x0003
- #define IMAGE_REL_ALPHA_LITERAL 0x0004
- #define IMAGE_REL_ALPHA_LITUSE 0x0005
- #define IMAGE_REL_ALPHA_GPDISP 0x0006
- #define IMAGE_REL_ALPHA_BRADDR 0x0007
- #define IMAGE_REL_ALPHA_HINT 0x0008
- #define IMAGE_REL_ALPHA_INLINE_REFLONG 0x0009
- #define IMAGE_REL_ALPHA_REFHI 0x000A
- #define IMAGE_REL_ALPHA_REFLO 0x000B
- #define IMAGE_REL_ALPHA_PAIR 0x000C
- #define IMAGE_REL_ALPHA_MATCH 0x000D
- #define IMAGE_REL_ALPHA_SECTION 0x000E
- #define IMAGE_REL_ALPHA_SECREL 0x000F
- #define IMAGE_REL_ALPHA_REFLONGNB 0x0010
- #define IMAGE_REL_ALPHA_SECRELLO 0x0011 // Low 16-bit section relative reference
- #define IMAGE_REL_ALPHA_SECRELHI 0x0012 // High 16-bit section relative reference
- #define IMAGE_REL_ALPHA_REFQ3 0x0013 // High 16 bits of 48 bit reference
- #define IMAGE_REL_ALPHA_REFQ2 0x0014 // Middle 16 bits of 48 bit reference
- #define IMAGE_REL_ALPHA_REFQ1 0x0015 // Low 16 bits of 48 bit reference
- #define IMAGE_REL_ALPHA_GPRELLO 0x0016 // Low 16-bit GP relative reference
- #define IMAGE_REL_ALPHA_GPRELHI 0x0017 // High 16-bit GP relative reference
- //
- // IBM PowerPC relocation types.
- //
- #define IMAGE_REL_PPC_ABSOLUTE 0x0000 // NOP
- #define IMAGE_REL_PPC_ADDR64 0x0001 // 64-bit address
- #define IMAGE_REL_PPC_ADDR32 0x0002 // 32-bit address
- #define IMAGE_REL_PPC_ADDR24 0x0003 // 26-bit address, shifted left 2 (branch absolute)
- #define IMAGE_REL_PPC_ADDR16 0x0004 // 16-bit address
- #define IMAGE_REL_PPC_ADDR14 0x0005 // 16-bit address, shifted left 2 (load doubleword)
- #define IMAGE_REL_PPC_REL24 0x0006 // 26-bit PC-relative offset, shifted left 2 (branch relative)
- #define IMAGE_REL_PPC_REL14 0x0007 // 16-bit PC-relative offset, shifted left 2 (br cond relative)
- #define IMAGE_REL_PPC_TOCREL16 0x0008 // 16-bit offset from TOC base
- #define IMAGE_REL_PPC_TOCREL14 0x0009 // 16-bit offset from TOC base, shifted left 2 (load doubleword)
- #define IMAGE_REL_PPC_ADDR32NB 0x000A // 32-bit addr w/o image base
- #define IMAGE_REL_PPC_SECREL 0x000B // va of containing section (as in an image sectionhdr)
- #define IMAGE_REL_PPC_SECTION 0x000C // sectionheader number
- #define IMAGE_REL_PPC_IFGLUE 0x000D // substitute TOC restore instruction iff symbol is glue code
- #define IMAGE_REL_PPC_IMGLUE 0x000E // symbol is glue code; virtual address is TOC restore instruction
- #define IMAGE_REL_PPC_SECREL16 0x000F // va of containing section (limited to 16 bits)
- #define IMAGE_REL_PPC_REFHI 0x0010
- #define IMAGE_REL_PPC_REFLO 0x0011
- #define IMAGE_REL_PPC_PAIR 0x0012
- #define IMAGE_REL_PPC_SECRELLO 0x0013 // Low 16-bit section relative reference (used for >32k TLS)
- #define IMAGE_REL_PPC_SECRELHI 0x0014 // High 16-bit section relative reference (used for >32k TLS)
- #define IMAGE_REL_PPC_GPREL 0x0015
- #define IMAGE_REL_PPC_TOKEN 0x0016 // clr token
- #define IMAGE_REL_PPC_TYPEMASK 0x00FF // mask to isolate above values in IMAGE_RELOCATION.Type
- // Flag bits in IMAGE_RELOCATION.TYPE
- #define IMAGE_REL_PPC_NEG 0x0100 // subtract reloc value rather than adding it
- #define IMAGE_REL_PPC_BRTAKEN 0x0200 // fix branch prediction bit to predict branch taken
- #define IMAGE_REL_PPC_BRNTAKEN 0x0400 // fix branch prediction bit to predict branch not taken
- #define IMAGE_REL_PPC_TOCDEFN 0x0800 // toc slot defined in file (or, data in toc)
- //
- // Hitachi SH3 relocation types.
- //
- #define IMAGE_REL_SH3_ABSOLUTE 0x0000 // No relocation
- #define IMAGE_REL_SH3_DIRECT16 0x0001 // 16 bit direct
- #define IMAGE_REL_SH3_DIRECT32 0x0002 // 32 bit direct
- #define IMAGE_REL_SH3_DIRECT8 0x0003 // 8 bit direct, -128..255
- #define IMAGE_REL_SH3_DIRECT8_WORD 0x0004 // 8 bit direct .W (0 ext.)
- #define IMAGE_REL_SH3_DIRECT8_LONG 0x0005 // 8 bit direct .L (0 ext.)
- #define IMAGE_REL_SH3_DIRECT4 0x0006 // 4 bit direct (0 ext.)
- #define IMAGE_REL_SH3_DIRECT4_WORD 0x0007 // 4 bit direct .W (0 ext.)
- #define IMAGE_REL_SH3_DIRECT4_LONG 0x0008 // 4 bit direct .L (0 ext.)
- #define IMAGE_REL_SH3_PCREL8_WORD 0x0009 // 8 bit PC relative .W
- #define IMAGE_REL_SH3_PCREL8_LONG 0x000A // 8 bit PC relative .L
- #define IMAGE_REL_SH3_PCREL12_WORD 0x000B // 12 LSB PC relative .W
- #define IMAGE_REL_SH3_STARTOF_SECTION 0x000C // Start of EXE section
- #define IMAGE_REL_SH3_SIZEOF_SECTION 0x000D // Size of EXE section
- #define IMAGE_REL_SH3_SECTION 0x000E // Section table index
- #define IMAGE_REL_SH3_SECREL 0x000F // Offset within section
- #define IMAGE_REL_SH3_DIRECT32_NB 0x0010 // 32 bit direct not based
- #define IMAGE_REL_SH3_GPREL4_LONG 0x0011 // GP-relative addressing
- #define IMAGE_REL_SH3_TOKEN 0x0012 // clr token
- #define IMAGE_REL_ARM_ABSOLUTE 0x0000 // No relocation required
- #define IMAGE_REL_ARM_ADDR32 0x0001 // 32 bit address
- #define IMAGE_REL_ARM_ADDR32NB 0x0002 // 32 bit address w/o image base
- #define IMAGE_REL_ARM_BRANCH24 0x0003 // 24 bit offset << 2 & sign ext.
- #define IMAGE_REL_ARM_BRANCH11 0x0004 // Thumb: 2 11 bit offsets
- #define IMAGE_REL_ARM_TOKEN 0x0005 // clr token
- #define IMAGE_REL_ARM_GPREL12 0x0006 // GP-relative addressing (ARM)
- #define IMAGE_REL_ARM_GPREL7 0x0007 // GP-relative addressing (Thumb)
- #define IMAGE_REL_ARM_BLX24 0x0008
- #define IMAGE_REL_ARM_BLX11 0x0009
- #define IMAGE_REL_ARM_SECTION 0x000E // Section table index
- #define IMAGE_REL_ARM_SECREL 0x000F // Offset within section
- #define IMAGE_REL_AM_ABSOLUTE 0x0000
- #define IMAGE_REL_AM_ADDR32 0x0001
- #define IMAGE_REL_AM_ADDR32NB 0x0002
- #define IMAGE_REL_AM_CALL32 0x0003
- #define IMAGE_REL_AM_FUNCINFO 0x0004
- #define IMAGE_REL_AM_REL32_1 0x0005
- #define IMAGE_REL_AM_REL32_2 0x0006
- #define IMAGE_REL_AM_SECREL 0x0007
- #define IMAGE_REL_AM_SECTION 0x0008
- #define IMAGE_REL_AM_TOKEN 0x0009
- //
- // X86-64 relocations
- //
- #define IMAGE_REL_AMD64_ABSOLUTE 0x0000 // Reference is absolute, no relocation is necessary
- #define IMAGE_REL_AMD64_ADDR64 0x0001 // 64-bit address (VA).
- #define IMAGE_REL_AMD64_ADDR32 0x0002 // 32-bit address (VA).
- #define IMAGE_REL_AMD64_ADDR32NB 0x0003 // 32-bit address w/o image base (RVA).
- #define IMAGE_REL_AMD64_REL32 0x0004 // 32-bit relative address from byte following reloc
- #define IMAGE_REL_AMD64_REL32_1 0x0005 // 32-bit relative address from byte distance 1 from reloc
- #define IMAGE_REL_AMD64_REL32_2 0x0006 // 32-bit relative address from byte distance 2 from reloc
- #define IMAGE_REL_AMD64_REL32_3 0x0007 // 32-bit relative address from byte distance 3 from reloc
- #define IMAGE_REL_AMD64_REL32_4 0x0008 // 32-bit relative address from byte distance 4 from reloc
- #define IMAGE_REL_AMD64_REL32_5 0x0009 // 32-bit relative address from byte distance 5 from reloc
- #define IMAGE_REL_AMD64_SECTION 0x000A // Section index
- #define IMAGE_REL_AMD64_SECREL 0x000B // 32 bit offset from base of section containing target
- #define IMAGE_REL_AMD64_SECREL7 0x000C // 7 bit unsigned offset from base of section containing target
- #define IMAGE_REL_AMD64_TOKEN 0x000D // 32 bit metadata token
- //
- // IA64 relocation types.
- //
- #define IMAGE_REL_IA64_ABSOLUTE 0x0000
- #define IMAGE_REL_IA64_IMM14 0x0001
- #define IMAGE_REL_IA64_IMM22 0x0002
- #define IMAGE_REL_IA64_IMM64 0x0003
- #define IMAGE_REL_IA64_DIR32 0x0004
- #define IMAGE_REL_IA64_DIR64 0x0005
- #define IMAGE_REL_IA64_PCREL21B 0x0006
- #define IMAGE_REL_IA64_PCREL21M 0x0007
- #define IMAGE_REL_IA64_PCREL21F 0x0008
- #define IMAGE_REL_IA64_GPREL22 0x0009
- #define IMAGE_REL_IA64_LTOFF22 0x000A
- #define IMAGE_REL_IA64_SECTION 0x000B
- #define IMAGE_REL_IA64_SECREL22 0x000C
- #define IMAGE_REL_IA64_SECREL64I 0x000D
- #define IMAGE_REL_IA64_SECREL32 0x000E
- //
- #define IMAGE_REL_IA64_DIR32NB 0x0010
- #define IMAGE_REL_IA64_SREL14 0x0011
- #define IMAGE_REL_IA64_SREL22 0x0012
- #define IMAGE_REL_IA64_SREL32 0x0013
- #define IMAGE_REL_IA64_UREL32 0x0014
- #define IMAGE_REL_IA64_PCREL60X 0x0015 // This is always a BRL and never converted
- #define IMAGE_REL_IA64_PCREL60B 0x0016 // If possible, convert to MBB bundle with NOP.B in slot 1
- #define IMAGE_REL_IA64_PCREL60F 0x0017 // If possible, convert to MFB bundle with NOP.F in slot 1
- #define IMAGE_REL_IA64_PCREL60I 0x0018 // If possible, convert to MIB bundle with NOP.I in slot 1
- #define IMAGE_REL_IA64_PCREL60M 0x0019 // If possible, convert to MMB bundle with NOP.M in slot 1
- #define IMAGE_REL_IA64_IMMGPREL64 0x001A
- #define IMAGE_REL_IA64_TOKEN 0x001B // clr token
- #define IMAGE_REL_IA64_GPREL32 0x001C
- #define IMAGE_REL_IA64_ADDEND 0x001F
- //
- // CEF relocation types.
- //
- #define IMAGE_REL_CEF_ABSOLUTE 0x0000 // Reference is absolute, no relocation is necessary
- #define IMAGE_REL_CEF_ADDR32 0x0001 // 32-bit address (VA).
- #define IMAGE_REL_CEF_ADDR64 0x0002 // 64-bit address (VA).
- #define IMAGE_REL_CEF_ADDR32NB 0x0003 // 32-bit address w/o image base (RVA).
- #define IMAGE_REL_CEF_SECTION 0x0004 // Section index
- #define IMAGE_REL_CEF_SECREL 0x0005 // 32 bit offset from base of section containing target
- #define IMAGE_REL_CEF_TOKEN 0x0006 // 32 bit metadata token
- //
- // clr relocation types.
- //
- #define IMAGE_REL_CEE_ABSOLUTE 0x0000 // Reference is absolute, no relocation is necessary
- #define IMAGE_REL_CEE_ADDR32 0x0001 // 32-bit address (VA).
- #define IMAGE_REL_CEE_ADDR64 0x0002 // 64-bit address (VA).
- #define IMAGE_REL_CEE_ADDR32NB 0x0003 // 32-bit address w/o image base (RVA).
- #define IMAGE_REL_CEE_SECTION 0x0004 // Section index
- #define IMAGE_REL_CEE_SECREL 0x0005 // 32 bit offset from base of section containing target
- #define IMAGE_REL_CEE_TOKEN 0x0006 // 32 bit metadata token
- #define IMAGE_REL_M32R_ABSOLUTE 0x0000 // No relocation required
- #define IMAGE_REL_M32R_ADDR32 0x0001 // 32 bit address
- #define IMAGE_REL_M32R_ADDR32NB 0x0002 // 32 bit address w/o image base
- #define IMAGE_REL_M32R_ADDR24 0x0003 // 24 bit address
- #define IMAGE_REL_M32R_GPREL16 0x0004 // GP relative addressing
- #define IMAGE_REL_M32R_PCREL24 0x0005 // 24 bit offset << 2 & sign ext.
- #define IMAGE_REL_M32R_PCREL16 0x0006 // 16 bit offset << 2 & sign ext.
- #define IMAGE_REL_M32R_PCREL8 0x0007 // 8 bit offset << 2 & sign ext.
- #define IMAGE_REL_M32R_REFHALF 0x0008 // 16 MSBs
- #define IMAGE_REL_M32R_REFHI 0x0009 // 16 MSBs; adj for LSB sign ext.
- #define IMAGE_REL_M32R_REFLO 0x000A // 16 LSBs
- #define IMAGE_REL_M32R_PAIR 0x000B // Link HI and LO
- #define IMAGE_REL_M32R_SECTION 0x000C // Section table index
- #define IMAGE_REL_M32R_SECREL32 0x000D // 32 bit section relative reference
- #define IMAGE_REL_M32R_TOKEN 0x000E // clr token
- #define EXT_IMM64(Value, Address, Size, InstPos, ValPos) /* Intel-IA64-Filler */
- Value |= (((ULONGLONG)((*(Address) >> InstPos) & (((ULONGLONG)1 << Size) - 1))) << ValPos) // Intel-IA64-Filler
- #define INS_IMM64(Value, Address, Size, InstPos, ValPos) /* Intel-IA64-Filler */
- *(PDWORD)Address = (*(PDWORD)Address & ~(((1 << Size) - 1) << InstPos)) | /* Intel-IA64-Filler */
- ((DWORD)((((ULONGLONG)Value >> ValPos) & (((ULONGLONG)1 << Size) - 1))) << InstPos) // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM7B_INST_WORD_X 3 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM7B_SIZE_X 7 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM7B_INST_WORD_POS_X 4 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM7B_VAL_POS_X 0 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM9D_INST_WORD_X 3 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM9D_SIZE_X 9 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM9D_INST_WORD_POS_X 18 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM9D_VAL_POS_X 7 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM5C_INST_WORD_X 3 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM5C_SIZE_X 5 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM5C_INST_WORD_POS_X 13 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM5C_VAL_POS_X 16 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IC_INST_WORD_X 3 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IC_SIZE_X 1 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IC_INST_WORD_POS_X 12 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IC_VAL_POS_X 21 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41a_INST_WORD_X 1 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41a_SIZE_X 10 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41a_INST_WORD_POS_X 14 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41a_VAL_POS_X 22 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41b_INST_WORD_X 1 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41b_SIZE_X 8 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41b_INST_WORD_POS_X 24 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41b_VAL_POS_X 32 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41c_INST_WORD_X 2 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41c_SIZE_X 23 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41c_INST_WORD_POS_X 0 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_IMM41c_VAL_POS_X 40 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_SIGN_INST_WORD_X 3 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_SIGN_SIZE_X 1 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_SIGN_INST_WORD_POS_X 27 // Intel-IA64-Filler
- #define EMARCH_ENC_I17_SIGN_VAL_POS_X 63 // Intel-IA64-Filler
- //
- // Line number format.
- //
- typedef struct _IMAGE_LINENUMBER {
- union {
- DWORD SymbolTableIndex; // Symbol table index of function name if Linenumber is 0.
- DWORD VirtualAddress; // Virtual address of line number.
- } Type;
- WORD Linenumber; // Line number.
- } IMAGE_LINENUMBER;
- typedef IMAGE_LINENUMBER UNALIGNED *PIMAGE_LINENUMBER;
- #define IMAGE_SIZEOF_LINENUMBER 6
- #ifndef _MAC
- #include "poppack.h" // Back to 4 byte packing
- #endif
- //
- // Based relocation format.
- //
- typedef struct _IMAGE_BASE_RELOCATION {
- DWORD VirtualAddress;
- DWORD SizeOfBlock;
- // WORD TypeOffset[1];
- } IMAGE_BASE_RELOCATION;
- typedef IMAGE_BASE_RELOCATION UNALIGNED * PIMAGE_BASE_RELOCATION;
- #define IMAGE_SIZEOF_BASE_RELOCATION 8
- //
- // Based relocation types.
- //
- #define IMAGE_REL_BASED_ABSOLUTE 0
- #define IMAGE_REL_BASED_HIGH 1
- #define IMAGE_REL_BASED_LOW 2
- #define IMAGE_REL_BASED_HIGHLOW 3
- #define IMAGE_REL_BASED_HIGHADJ 4
- #define IMAGE_REL_BASED_MIPS_JMPADDR 5
- #define IMAGE_REL_BASED_MIPS_JMPADDR16 9
- #define IMAGE_REL_BASED_IA64_IMM64 9
- #define IMAGE_REL_BASED_DIR64 10
- //
- // Archive format.
- //
- #define IMAGE_ARCHIVE_START_SIZE 8
- #define IMAGE_ARCHIVE_START "!<arch>n"
- #define IMAGE_ARCHIVE_END "`n"
- #define IMAGE_ARCHIVE_PAD "n"
- #define IMAGE_ARCHIVE_LINKER_MEMBER "/ "
- #define IMAGE_ARCHIVE_LONGNAMES_MEMBER "// "
- typedef struct _IMAGE_ARCHIVE_MEMBER_HEADER {
- BYTE Name[16]; // File member name - `/' terminated.
- BYTE Date[12]; // File member date - decimal.
- BYTE UserID[6]; // File member user id - decimal.
- BYTE GroupID[6]; // File member group id - decimal.
- BYTE Mode[8]; // File member mode - octal.
- BYTE Size[10]; // File member size - decimal.
- BYTE EndHeader[2]; // String to end header.
- } IMAGE_ARCHIVE_MEMBER_HEADER, *PIMAGE_ARCHIVE_MEMBER_HEADER;
- #define IMAGE_SIZEOF_ARCHIVE_MEMBER_HDR 60
- //
- // DLL support.
- //
- //
- // Export Format
- //
- typedef struct _IMAGE_EXPORT_DIRECTORY {
- DWORD Characteristics;
- DWORD TimeDateStamp;
- WORD MajorVersion;
- WORD MinorVersion;
- DWORD Name;
- DWORD Base;
- DWORD NumberOfFunctions;
- DWORD NumberOfNames;
- DWORD AddressOfFunctions; // RVA from base of image
- DWORD AddressOfNames; // RVA from base of image
- DWORD AddressOfNameOrdinals; // RVA from base of image
- } IMAGE_EXPORT_DIRECTORY, *PIMAGE_EXPORT_DIRECTORY;
- //
- // Import Format
- //
- typedef struct _IMAGE_IMPORT_BY_NAME {
- WORD Hint;
- BYTE Name[1];
- } IMAGE_IMPORT_BY_NAME, *PIMAGE_IMPORT_BY_NAME;
- #include "pshpack8.h" // Use align 8 for the 64-bit IAT.
- typedef struct _IMAGE_THUNK_DATA64 {
- union {
- ULONGLONG ForwarderString; // PBYTE
- ULONGLONG Function; // PDWORD
- ULONGLONG Ordinal;
- ULONGLONG AddressOfData; // PIMAGE_IMPORT_BY_NAME
- } u1;
- } IMAGE_THUNK_DATA64;
- typedef IMAGE_THUNK_DATA64 * PIMAGE_THUNK_DATA64;
- #include "poppack.h" // Back to 4 byte packing
- typedef struct _IMAGE_THUNK_DATA32 {
- union {
- DWORD ForwarderString; // PBYTE
- DWORD Function; // PDWORD
- DWORD Ordinal;
- DWORD AddressOfData; // PIMAGE_IMPORT_BY_NAME
- } u1;
- } IMAGE_THUNK_DATA32;
- typedef IMAGE_THUNK_DATA32 * PIMAGE_THUNK_DATA32;
- #define IMAGE_ORDINAL_FLAG64 0x8000000000000000
- #define IMAGE_ORDINAL_FLAG32 0x80000000
- #define IMAGE_ORDINAL64(Ordinal) (Ordinal & 0xffff)
- #define IMAGE_ORDINAL32(Ordinal) (Ordinal & 0xffff)
- #define IMAGE_SNAP_BY_ORDINAL64(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG64) != 0)
- #define IMAGE_SNAP_BY_ORDINAL32(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG32) != 0)
- //
- // Thread Local Storage
- //
- typedef VOID
- (NTAPI *PIMAGE_TLS_CALLBACK) (
- PVOID DllHandle,
- DWORD Reason,
- PVOID Reserved
- );
- typedef struct _IMAGE_TLS_DIRECTORY64 {
- ULONGLONG StartAddressOfRawData;
- ULONGLONG EndAddressOfRawData;
- ULONGLONG AddressOfIndex; // PDWORD
- ULONGLONG AddressOfCallBacks; // PIMAGE_TLS_CALLBACK *;
- DWORD SizeOfZeroFill;
- DWORD Characteristics;
- } IMAGE_TLS_DIRECTORY64;
- typedef IMAGE_TLS_DIRECTORY64 * PIMAGE_TLS_DIRECTORY64;
- typedef struct _IMAGE_TLS_DIRECTORY32 {
- DWORD StartAddressOfRawData;
- DWORD EndAddressOfRawData;
- DWORD AddressOfIndex; // PDWORD
- DWORD AddressOfCallBacks; // PIMAGE_TLS_CALLBACK *
- DWORD SizeOfZeroFill;
- DWORD Characteristics;
- } IMAGE_TLS_DIRECTORY32;
- typedef IMAGE_TLS_DIRECTORY32 * PIMAGE_TLS_DIRECTORY32;
- #ifdef _WIN64
- #define IMAGE_ORDINAL_FLAG IMAGE_ORDINAL_FLAG64
- #define IMAGE_ORDINAL(Ordinal) IMAGE_ORDINAL64(Ordinal)
- typedef IMAGE_THUNK_DATA64 IMAGE_THUNK_DATA;
- typedef PIMAGE_THUNK_DATA64 PIMAGE_THUNK_DATA;
- #define IMAGE_SNAP_BY_ORDINAL(Ordinal) IMAGE_SNAP_BY_ORDINAL64(Ordinal)
- typedef IMAGE_TLS_DIRECTORY64 IMAGE_TLS_DIRECTORY;
- typedef PIMAGE_TLS_DIRECTORY64 PIMAGE_TLS_DIRECTORY;
- #else
- #define IMAGE_ORDINAL_FLAG IMAGE_ORDINAL_FLAG32
- #define IMAGE_ORDINAL(Ordinal) IMAGE_ORDINAL32(Ordinal)
- typedef IMAGE_THUNK_DATA32 IMAGE_THUNK_DATA;
- typedef PIMAGE_THUNK_DATA32 PIMAGE_THUNK_DATA;
- #define IMAGE_SNAP_BY_ORDINAL(Ordinal) IMAGE_SNAP_BY_ORDINAL32(Ordinal)
- typedef IMAGE_TLS_DIRECTORY32 IMAGE_TLS_DIRECTORY;
- typedef PIMAGE_TLS_DIRECTORY32 PIMAGE_TLS_DIRECTORY;
- #endif
- typedef struct _IMAGE_IMPORT_DESCRIPTOR {
- union {
- DWORD Characteristics; // 0 for terminating null import descriptor
- DWORD OriginalFirstThunk; // RVA to original unbound IAT (PIMAGE_THUNK_DATA)
- };
- DWORD TimeDateStamp; // 0 if not bound,
- // -1 if bound, and real datetime stamp
- // in IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT (new BIND)
- // O.W. date/time stamp of DLL bound to (Old BIND)
- DWORD ForwarderChain; // -1 if no forwarders
- DWORD Name;
- DWORD FirstThunk; // RVA to IAT (if bound this IAT has actual addresses)
- } IMAGE_IMPORT_DESCRIPTOR;
- typedef IMAGE_IMPORT_DESCRIPTOR UNALIGNED *PIMAGE_IMPORT_DESCRIPTOR;
- //
- // New format import descriptors pointed to by DataDirectory[ IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT ]
- //
- typedef struct _IMAGE_BOUND_IMPORT_DESCRIPTOR {
- DWORD TimeDateStamp;
- WORD OffsetModuleName;
- WORD NumberOfModuleForwarderRefs;
- // Array of zero or more IMAGE_BOUND_FORWARDER_REF follows
- } IMAGE_BOUND_IMPORT_DESCRIPTOR, *PIMAGE_BOUND_IMPORT_DESCRIPTOR;
- typedef struct _IMAGE_BOUND_FORWARDER_REF {
- DWORD TimeDateStamp;
- WORD OffsetModuleName;
- WORD Reserved;
- } IMAGE_BOUND_FORWARDER_REF, *PIMAGE_BOUND_FORWARDER_REF;
- //
- // Resource Format.
- //
- //
- // Resource directory consists of two counts, following by a variable length
- // array of directory entries. The first count is the number of entries at
- // beginning of the array that have actual names associated with each entry.
- // The entries are in ascending order, case insensitive strings. The second
- // count is the number of entries that immediately follow the named entries.
- // This second count identifies the number of entries that have 16-bit integer
- // Ids as their name. These entries are also sorted in ascending order.
- //
- // This structure allows fast lookup by either name or number, but for any
- // given resource entry only one form of lookup is supported, not both.
- // This is consistant with the syntax of the .RC file and the .RES file.
- //
- typedef struct _IMAGE_RESOURCE_DIRECTORY {
- DWORD Characteristics;
- DWORD TimeDateStamp;
- WORD MajorVersion;
- WORD MinorVersion;
- WORD NumberOfNamedEntries;
- WORD NumberOfIdEntries;
- // IMAGE_RESOURCE_DIRECTORY_ENTRY DirectoryEntries[];
- } IMAGE_RESOURCE_DIRECTORY, *PIMAGE_RESOURCE_DIRECTORY;
- #define IMAGE_RESOURCE_NAME_IS_STRING 0x80000000
- #define IMAGE_RESOURCE_DATA_IS_DIRECTORY 0x80000000
- //
- // Each directory contains the 32-bit Name of the entry and an offset,
- // relative to the beginning of the resource directory of the data associated
- // with this directory entry. If the name of the entry is an actual text
- // string instead of an integer Id, then the high order bit of the name field
- // is set to one and the low order 31-bits are an offset, relative to the
- // beginning of the resource directory of the string, which is of type
- // IMAGE_RESOURCE_DIRECTORY_STRING. Otherwise the high bit is clear and the
- // low-order 16-bits are the integer Id that identify this resource directory
- // entry. If the directory entry is yet another resource directory (i.e. a
- // subdirectory), then the high order bit of the offset field will be
- // set to indicate this. Otherwise the high bit is clear and the offset
- // field points to a resource data entry.
- //
- typedef struct _IMAGE_RESOURCE_DIRECTORY_ENTRY {
- union {
- struct {
- DWORD NameOffset:31;
- DWORD NameIsString:1;
- };
- DWORD Name;
- WORD Id;
- };
- union {
- DWORD OffsetToData;
- struct {
- DWORD OffsetToDirectory:31;
- DWORD DataIsDirectory:1;
- };
- };
- } IMAGE_RESOURCE_DIRECTORY_ENTRY, *PIMAGE_RESOURCE_DIRECTORY_ENTRY;
- //
- // For resource directory entries that have actual string names, the Name
- // field of the directory entry points to an object of the following type.
- // All of these string objects are stored together after the last resource
- // directory entry and before the first resource data object. This minimizes
- // the impact of these variable length objects on the alignment of the fixed
- // size directory entry objects.
- //
- typedef struct _IMAGE_RESOURCE_DIRECTORY_STRING {
- WORD Length;
- CHAR NameString[ 1 ];
- } IMAGE_RESOURCE_DIRECTORY_STRING, *PIMAGE_RESOURCE_DIRECTORY_STRING;
- typedef struct _IMAGE_RESOURCE_DIR_STRING_U {
- WORD Length;
- WCHAR NameString[ 1 ];
- } IMAGE_RESOURCE_DIR_STRING_U, *PIMAGE_RESOURCE_DIR_STRING_U;
- //
- // Each resource data entry describes a leaf node in the resource directory
- // tree. It contains an offset, relative to the beginning of the resource
- // directory of the data for the resource, a size field that gives the number
- // of bytes of data at that offset, a CodePage that should be used when
- // decoding code point values within the resource data. Typically for new
- // applications the code page would be the unicode code page.
- //
- typedef struct _IMAGE_RESOURCE_DATA_ENTRY {
- DWORD OffsetToData;
- DWORD Size;
- DWORD CodePage;
- DWORD Reserved;
- } IMAGE_RESOURCE_DATA_ENTRY, *PIMAGE_RESOURCE_DATA_ENTRY;
- //
- // Load Configuration Directory Entry
- //
- typedef struct {
- DWORD Characteristics;
- DWORD TimeDateStamp;
- WORD MajorVersion;
- WORD MinorVersion;
- DWORD GlobalFlagsClear;
- DWORD GlobalFlagsSet;
- DWORD CriticalSectionDefaultTimeout;
- DWORD DeCommitFreeBlockThreshold;
- DWORD DeCommitTotalFreeThreshold;
- DWORD LockPrefixTable; // VA
- DWORD MaximumAllocationSize;
- DWORD VirtualMemoryThreshold;
- DWORD ProcessHeapFlags;
- DWORD ProcessAffinityMask;
- WORD CSDVersion;
- WORD Reserved1;
- DWORD EditList; // VA
- DWORD Reserved[ 1 ];
- } IMAGE_LOAD_CONFIG_DIRECTORY32, *PIMAGE_LOAD_CONFIG_DIRECTORY32;
- typedef struct {
- DWORD Characteristics;
- DWORD TimeDateStamp;
- WORD MajorVersion;
- WORD MinorVersion;
- DWORD GlobalFlagsClear;
- DWORD GlobalFlagsSet;
- DWORD CriticalSectionDefaultTimeout;
- ULONGLONG DeCommitFreeBlockThreshold;
- ULONGLONG DeCommitTotalFreeThreshold;
- ULONGLONG LockPrefixTable; // VA
- ULONGLONG MaximumAllocationSize;
- ULONGLONG VirtualMemoryThreshold;
- ULONGLONG ProcessAffinityMask;
- DWORD ProcessHeapFlags;
- WORD CSDVersion;
- WORD Reserved1;
- ULONGLONG EditList; // VA
- DWORD Reserved[ 2 ];
- } IMAGE_LOAD_CONFIG_DIRECTORY64, *PIMAGE_LOAD_CONFIG_DIRECTORY64;
- #ifdef _WIN64
- typedef IMAGE_LOAD_CONFIG_DIRECTORY64 IMAGE_LOAD_CONFIG_DIRECTORY;
- typedef PIMAGE_LOAD_CONFIG_DIRECTORY64 PIMAGE_LOAD_CONFIG_DIRECTORY;
- #else
- typedef IMAGE_LOAD_CONFIG_DIRECTORY32 IMAGE_LOAD_CONFIG_DIRECTORY;
- typedef PIMAGE_LOAD_CONFIG_DIRECTORY32 PIMAGE_LOAD_CONFIG_DIRECTORY;
- #endif
- //
- // WIN CE Exception table format
- //
- //
- // Function table entry format. Function table is pointed to by the
- // IMAGE_DIRECTORY_ENTRY_EXCEPTION directory entry.
- //
- typedef struct _IMAGE_CE_RUNTIME_FUNCTION_ENTRY {
- DWORD FuncStart;
- DWORD PrologLen : 8;
- DWORD FuncLen : 22;
- DWORD ThirtyTwoBit : 1;
- DWORD ExceptionFlag : 1;
- } IMAGE_CE_RUNTIME_FUNCTION_ENTRY, * PIMAGE_CE_RUNTIME_FUNCTION_ENTRY;
- typedef struct _IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY {
- ULONGLONG BeginAddress;
- ULONGLONG EndAddress;
- ULONGLONG ExceptionHandler;
- ULONGLONG HandlerData;
- ULONGLONG PrologEndAddress;
- } IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY, *PIMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY;
- typedef struct _IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY {
- DWORD BeginAddress;
- DWORD EndAddress;
- DWORD ExceptionHandler;
- DWORD HandlerData;
- DWORD PrologEndAddress;
- } IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY, *PIMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY;
- typedef struct _IMAGE_RUNTIME_FUNCTION_ENTRY {
- DWORD BeginAddress;
- DWORD EndAddress;
- DWORD UnwindInfoAddress;
- } _IMAGE_RUNTIME_FUNCTION_ENTRY, *_PIMAGE_RUNTIME_FUNCTION_ENTRY;
- typedef _IMAGE_RUNTIME_FUNCTION_ENTRY IMAGE_IA64_RUNTIME_FUNCTION_ENTRY;
- typedef _PIMAGE_RUNTIME_FUNCTION_ENTRY PIMAGE_IA64_RUNTIME_FUNCTION_ENTRY;
- #if defined(_AXP64_)
- typedef IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY IMAGE_AXP64_RUNTIME_FUNCTION_ENTRY;
- typedef PIMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY PIMAGE_AXP64_RUNTIME_FUNCTION_ENTRY;
- typedef IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY IMAGE_RUNTIME_FUNCTION_ENTRY;
- typedef PIMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY PIMAGE_RUNTIME_FUNCTION_ENTRY;
- #elif defined(_ALPHA_)
- typedef IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY IMAGE_RUNTIME_FUNCTION_ENTRY;
- typedef PIMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY PIMAGE_RUNTIME_FUNCTION_ENTRY;
- #else
- typedef _IMAGE_RUNTIME_FUNCTION_ENTRY IMAGE_RUNTIME_FUNCTION_ENTRY;
- typedef _PIMAGE_RUNTIME_FUNCTION_ENTRY PIMAGE_RUNTIME_FUNCTION_ENTRY;
- #endif
- //
- // Debug Format
- //
- typedef struct _IMAGE_DEBUG_DIRECTORY {
- DWORD Characteristics;
- DWORD TimeDateStamp;
- WORD MajorVersion;
- WORD MinorVersion;
- DWORD Type;
- DWORD SizeOfData;
- DWORD AddressOfRawData;
- DWORD PointerToRawData;
- } IMAGE_DEBUG_DIRECTORY, *PIMAGE_DEBUG_DIRECTORY;
- #define IMAGE_DEBUG_TYPE_UNKNOWN 0
- #define IMAGE_DEBUG_TYPE_COFF 1
- #define IMAGE_DEBUG_TYPE_CODEVIEW 2
- #define IMAGE_DEBUG_TYPE_FPO 3
- #define IMAGE_DEBUG_TYPE_MISC 4
- #define IMAGE_DEBUG_TYPE_EXCEPTION 5
- #define IMAGE_DEBUG_TYPE_FIXUP 6
- #define IMAGE_DEBUG_TYPE_OMAP_TO_SRC 7
- #define IMAGE_DEBUG_TYPE_OMAP_FROM_SRC 8
- #define IMAGE_DEBUG_TYPE_BORLAND 9
- #define IMAGE_DEBUG_TYPE_RESERVED10 10
- #define IMAGE_DEBUG_TYPE_CLSID 11
- typedef struct _IMAGE_COFF_SYMBOLS_HEADER {
- DWORD NumberOfSymbols;
- DWORD LvaToFirstSymbol;
- DWORD NumberOfLinenumbers;
- DWORD LvaToFirstLinenumber;
- DWORD RvaToFirstByteOfCode;
- DWORD RvaToLastByteOfCode;
- DWORD RvaToFirstByteOfData;
- DWORD RvaToLastByteOfData;
- } IMAGE_COFF_SYMBOLS_HEADER, *PIMAGE_COFF_SYMBOLS_HEADER;
- #define FRAME_FPO 0
- #define FRAME_TRAP 1
- #define FRAME_TSS 2
- #define FRAME_NONFPO 3
- typedef struct _FPO_DATA {
- DWORD ulOffStart; // offset 1st byte of function code
- DWORD cbProcSize; // # bytes in function
- DWORD cdwLocals; // # bytes in locals/4
- WORD cdwParams; // # bytes in params/4
- WORD cbProlog : 8; // # bytes in prolog
- WORD cbRegs : 3; // # regs saved
- WORD fHasSEH : 1; // TRUE if SEH in func
- WORD fUseBP : 1; // TRUE if EBP has been allocated
- WORD reserved : 1; // reserved for future use
- WORD cbFrame : 2; // frame type
- } FPO_DATA, *PFPO_DATA;
- #define SIZEOF_RFPO_DATA 16
- #define IMAGE_DEBUG_MISC_EXENAME 1
- typedef struct _IMAGE_DEBUG_MISC {
- DWORD DataType; // type of misc data, see defines
- DWORD Length; // total length of record, rounded to four
- // byte multiple.
- BOOLEAN Unicode; // TRUE if data is unicode string
- BYTE Reserved[ 3 ];
- BYTE Data[ 1 ]; // Actual data
- } IMAGE_DEBUG_MISC, *PIMAGE_DEBUG_MISC;
- //
- // Function table extracted from MIPS/ALPHA/IA64 images. Does not contain
- // information needed only for runtime support. Just those fields for
- // each entry needed by a debugger.
- //
- typedef struct _IMAGE_FUNCTION_ENTRY {
- DWORD StartingAddress;
- DWORD EndingAddress;
- DWORD EndOfPrologue;
- } IMAGE_FUNCTION_ENTRY, *PIMAGE_FUNCTION_ENTRY;
- typedef struct _IMAGE_FUNCTION_ENTRY64 {
- ULONGLONG StartingAddress;
- ULONGLONG EndingAddress;
- union {
- ULONGLONG EndOfPrologue;
- ULONGLONG UnwindInfoAddress;
- };
- } IMAGE_FUNCTION_ENTRY64, *PIMAGE_FUNCTION_ENTRY64;
- //
- // Debugging information can be stripped from an image file and placed
- // in a separate .DBG file, whose file name part is the same as the
- // image file name part (e.g. symbols for CMD.EXE could be stripped
- // and placed in CMD.DBG). This is indicated by the IMAGE_FILE_DEBUG_STRIPPED
- // flag in the Characteristics field of the file header. The beginning of
- // the .DBG file contains the following structure which captures certain
- // information from the image file. This allows a debug to proceed even if
- // the original image file is not accessable. This header is followed by
- // zero of more IMAGE_SECTION_HEADER structures, followed by zero or more
- // IMAGE_DEBUG_DIRECTORY structures. The latter structures and those in
- // the image file contain file offsets relative to the beginning of the
- // .DBG file.
- //
- // If symbols have been stripped from an image, the IMAGE_DEBUG_MISC structure
- // is left in the image file, but not mapped. This allows a debugger to
- // compute the name of the .DBG file, from the name of the image in the
- // IMAGE_DEBUG_MISC structure.
- //
- typedef struct _IMAGE_SEPARATE_DEBUG_HEADER {
- WORD Signature;
- WORD Flags;
- WORD Machine;
- WORD Characteristics;
- DWORD TimeDateStamp;
- DWORD CheckSum;
- DWORD ImageBase;
- DWORD SizeOfImage;
- DWORD NumberOfSections;
- DWORD ExportedNamesSize;
- DWORD DebugDirectorySize;
- DWORD SectionAlignment;
- DWORD Reserved[2];
- } IMAGE_SEPARATE_DEBUG_HEADER, *PIMAGE_SEPARATE_DEBUG_HEADER;
- typedef struct _NON_PAGED_DEBUG_INFO {
- WORD Signature;
- WORD Flags;
- DWORD Size;
- WORD Machine;
- WORD Characteristics;
- DWORD TimeDateStamp;
- DWORD CheckSum;
- DWORD SizeOfImage;
- ULONGLONG ImageBase;
- //DebugDirectorySize
- //IMAGE_DEBUG_DIRECTORY
- } NON_PAGED_DEBUG_INFO, *PNON_PAGED_DEBUG_INFO;
- #ifndef _MAC
- #define IMAGE_SEPARATE_DEBUG_SIGNATURE 0x4944
- #define NON_PAGED_DEBUG_SIGNATURE 0x494E
- #else
- #define IMAGE_SEPARATE_DEBUG_SIGNATURE 0x4449 // DI
- #define NON_PAGED_DEBUG_SIGNATURE 0x4E49 // NI
- #endif
- #define IMAGE_SEPARATE_DEBUG_FLAGS_MASK 0x8000
- #define IMAGE_SEPARATE_DEBUG_MISMATCH 0x8000 // when DBG was updated, the
- // old checksum didn't match.
- //
- // The .arch section is made up of headers, each describing an amask position/value
- // pointing to an array of IMAGE_ARCHITECTURE_ENTRY's. Each "array" (both the header
- // and entry arrays) are terminiated by a quadword of 0xffffffffL.
- //
- // NOTE: There may be quadwords of 0 sprinkled around and must be skipped.
- //
- typedef struct _ImageArchitectureHeader {
- unsigned int AmaskValue: 1; // 1 -> code section depends on mask bit
- // 0 -> new instruction depends on mask bit
- int :7; // MBZ
- unsigned int AmaskShift: 8; // Amask bit in question for this fixup
- int :16; // MBZ
- DWORD FirstEntryRVA; // RVA into .arch section to array of ARCHITECTURE_ENTRY's
- } IMAGE_ARCHITECTURE_HEADER, *PIMAGE_ARCHITECTURE_HEADER;
- typedef struct _ImageArchitectureEntry {
- DWORD FixupInstRVA; // RVA of instruction to fixup
- DWORD NewInst; // fixup instruction (see alphaops.h)
- } IMAGE_ARCHITECTURE_ENTRY, *PIMAGE_ARCHITECTURE_ENTRY;
- #include "poppack.h" // Back to the initial value
- // The following structure defines the new import object. Note the values of the first two fields,
- // which must be set as stated in order to differentiate old and new import members.
- // Following this structure, the linker emits two null-terminated strings used to recreate the
- // import at the time of use. The first string is the import's name, the second is the dll's name.
- #define IMPORT_OBJECT_HDR_SIG2 0xffff
- typedef struct IMPORT_OBJECT_HEADER {
- WORD Sig1; // Must be IMAGE_FILE_MACHINE_UNKNOWN
- WORD Sig2; // Must be IMPORT_OBJECT_HDR_SIG2.
- WORD Version;
- WORD Machine;
- DWORD TimeDateStamp; // Time/date stamp
- DWORD SizeOfData; // particularly useful for incremental links
- union {
- WORD Ordinal; // if grf & IMPORT_OBJECT_ORDINAL
- WORD Hint;
- };
- WORD Type : 2; // IMPORT_TYPE
- WORD NameType : 3; // IMPORT_NAME_TYPE
- WORD Reserved : 11; // Reserved. Must be zero.
- } IMPORT_OBJECT_HEADER;
- typedef enum IMPORT_OBJECT_TYPE
- {
- IMPORT_OBJECT_CODE = 0,
- IMPORT_OBJECT_DATA = 1,
- IMPORT_OBJECT_CONST = 2,
- } IMPORT_OBJECT_TYPE;
- typedef enum IMPORT_OBJECT_NAME_TYPE
- {
- IMPORT_OBJECT_ORDINAL = 0, // Import by ordinal
- IMPORT_OBJECT_NAME = 1, // Import name == public symbol name.
- IMPORT_OBJECT_NAME_NO_PREFIX = 2, // Import name == public symbol name skipping leading ?, @, or optionally _.
- IMPORT_OBJECT_NAME_UNDECORATE = 3, // Import name == public symbol name skipping leading ?, @, or optionally _
- // and truncating at first @
- } IMPORT_OBJECT_NAME_TYPE;
- #ifndef __IMAGE_COR20_HEADER_DEFINED__
- #define __IMAGE_COR20_HEADER_DEFINED__
- typedef enum ReplacesCorHdrNumericDefines
- {
- // COM+ Header entry point flags.
- COMIMAGE_FLAGS_ILONLY =0x00000001,
- COMIMAGE_FLAGS_32BITREQUIRED =0x00000002,
- COMIMAGE_FLAGS_IL_LIBRARY =0x00000004,
- COMIMAGE_FLAGS_TRACKDEBUGDATA =0x00010000,
- // Version flags for image.
- COR_VERSION_MAJOR_V2 =2,
- COR_VERSION_MAJOR =COR_VERSION_MAJOR_V2,
- COR_VERSION_MINOR =0,
- COR_DELETED_NAME_LENGTH =8,
- COR_VTABLEGAP_NAME_LENGTH =8,
- // Maximum size of a NativeType descriptor.
- NATIVE_TYPE_MAX_CB =1,
- COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE=0xFF,
- // #defines for the MIH FLAGS
- IMAGE_COR_MIH_METHODRVA =0x01,
- IMAGE_COR_MIH_EHRVA =0x02,
- IMAGE_COR_MIH_BASICBLOCK =0x08,
- // V-table constants
- COR_VTABLE_32BIT =0x01, // V-table slots are 32-bits in size.
- COR_VTABLE_64BIT =0x02, // V-table slots are 64-bits in size.
- COR_VTABLE_FROM_UNMANAGED =0x04, // If set, transition from unmanaged.
- COR_VTABLE_CALL_MOST_DERIVED =0x10, // Call most derived method described by
- // EATJ constants
- IMAGE_COR_EATJ_THUNK_SIZE =32, // Size of a jump thunk reserved range.
- // Max name lengths
- //@todo: Change to unlimited name lengths.
- MAX_CLASS_NAME =1024,
- MAX_PACKAGE_NAME =1024,
- } ReplacesCorHdrNumericDefines;
- // COM+ 2.0 header structure.
- typedef struct IMAGE_COR20_HEADER
- {
- // Header versioning
- DWORD cb;
- WORD MajorRuntimeVersion;
- WORD MinorRuntimeVersion;
-
- // Symbol table and startup information
- IMAGE_DATA_DIRECTORY MetaData;
- DWORD Flags;
- DWORD EntryPointToken;
-
- // Binding information
- IMAGE_DATA_DIRECTORY Resources;
- IMAGE_DATA_DIRECTORY StrongNameSignature;
- // Regular fixup and binding information
- IMAGE_DATA_DIRECTORY CodeManagerTable;
- IMAGE_DATA_DIRECTORY VTableFixups;
- IMAGE_DATA_DIRECTORY ExportAddressTableJumps;
- // Precompiled image info (internal use only - set to zero)
- IMAGE_DATA_DIRECTORY ManagedNativeHeader;
-
- } IMAGE_COR20_HEADER, *PIMAGE_COR20_HEADER;
- #endif // __IMAGE_COR20_HEADER_DEFINED__
- //
- // End Image Format
- //
- //
- // for move macros
- //
- #ifdef _MAC
- #ifndef _INC_STRING
- #include <string.h>
- #endif /* _INC_STRING */
- #else
- #include <string.h>
- #endif // _MAC
- #ifndef _SLIST_HEADER_
- #define _SLIST_HEADER_
- #define SLIST_ENTRY SINGLE_LIST_ENTRY
- #define _SLIST_ENTRY _SINGLE_LIST_ENTRY
- #define PSLIST_ENTRY PSINGLE_LIST_ENTRY
- #if defined(_WIN64)
- typedef struct DECLSPEC_ALIGN(16) _SLIST_HEADER {
- ULONGLONG Alignment;
- ULONGLONG Region;
- } SLIST_HEADER;
- typedef struct _SLIST_HEADER *PSLIST_HEADER;
- #else
- typedef union _SLIST_HEADER {
- ULONGLONG Alignment;
- struct {
- SLIST_ENTRY Next;
- WORD Depth;
- WORD Sequence;
- };
- } SLIST_HEADER, *PSLIST_HEADER;
- #endif
- #endif
- NTSYSAPI
- VOID
- NTAPI
- RtlInitializeSListHead (
- IN PSLIST_HEADER ListHead
- );
- NTSYSAPI
- PSLIST_ENTRY
- RtlFirstEntrySList (
- IN const SLIST_HEADER *ListHead
- );
- NTSYSAPI
- PSLIST_ENTRY
- NTAPI
- RtlInterlockedPopEntrySList (
- IN PSLIST_HEADER ListHead
- );
- NTSYSAPI
- PSLIST_ENTRY
- NTAPI
- RtlInterlockedPushEntrySList (
- IN PSLIST_HEADER ListHead,
- IN PSLIST_ENTRY ListEntry
- );
- NTSYSAPI
- PSLIST_ENTRY
- NTAPI
- RtlInterlockedFlushSList (
- IN PSLIST_HEADER ListHead
- );
- NTSYSAPI
- WORD
- NTAPI
- RtlQueryDepthSList (
- IN PSLIST_HEADER ListHead
- );
- #define HEAP_NO_SERIALIZE 0x00000001
- #define HEAP_GROWABLE 0x00000002
- #define HEAP_GENERATE_EXCEPTIONS 0x00000004
- #define HEAP_ZERO_MEMORY 0x00000008
- #define HEAP_REALLOC_IN_PLACE_ONLY 0x00000010
- #define HEAP_TAIL_CHECKING_ENABLED 0x00000020
- #define HEAP_FREE_CHECKING_ENABLED 0x00000040
- #define HEAP_DISABLE_COALESCE_ON_FREE 0x00000080
- #define HEAP_CREATE_ALIGN_16 0x00010000
- #define HEAP_CREATE_ENABLE_TRACING 0x00020000
- #define HEAP_MAXIMUM_TAG 0x0FFF
- #define HEAP_PSEUDO_TAG_FLAG 0x8000
- #define HEAP_TAG_SHIFT 18
- #define HEAP_MAKE_TAG_FLAGS( b, o ) ((DWORD)((b) + ((o) << 18)))
- #define IS_TEXT_UNICODE_ASCII16 0x0001
- #define IS_TEXT_UNICODE_REVERSE_ASCII16 0x0010
- #define IS_TEXT_UNICODE_STATISTICS 0x0002
- #define IS_TEXT_UNICODE_REVERSE_STATISTICS 0x0020
- #define IS_TEXT_UNICODE_CONTROLS 0x0004
- #define IS_TEXT_UNICODE_REVERSE_CONTROLS 0x0040
- #define IS_TEXT_UNICODE_SIGNATURE 0x0008
- #define IS_TEXT_UNICODE_REVERSE_SIGNATURE 0x0080
- #define IS_TEXT_UNICODE_ILLEGAL_CHARS 0x0100
- #define IS_TEXT_UNICODE_ODD_LENGTH 0x0200
- #define IS_TEXT_UNICODE_DBCS_LEADBYTE 0x0400
- #define IS_TEXT_UNICODE_NULL_BYTES 0x1000
- #define IS_TEXT_UNICODE_UNICODE_MASK 0x000F
- #define IS_TEXT_UNICODE_REVERSE_MASK 0x00F0
- #define IS_TEXT_UNICODE_NOT_UNICODE_MASK 0x0F00
- #define IS_TEXT_UNICODE_NOT_ASCII_MASK 0xF000
- #define COMPRESSION_FORMAT_NONE (0x0000)
- #define COMPRESSION_FORMAT_DEFAULT (0x0001)
- #define COMPRESSION_FORMAT_LZNT1 (0x0002)
- #define COMPRESSION_ENGINE_STANDARD (0x0000)
- #define COMPRESSION_ENGINE_MAXIMUM (0x0100)
- #define COMPRESSION_ENGINE_HIBER (0x0200)
- NTSYSAPI
- SIZE_T
- NTAPI
- RtlCompareMemory (
- const VOID *Source1,
- const VOID *Source2,
- SIZE_T Length
- );
- #if defined(_M_AMD64) || defined(_M_IA64)
- #define RtlEqualMemory(Source1, Source2, Length)
- ((Length) == RtlCompareMemory(Source1, Source2, Length))
- NTSYSAPI
- VOID
- NTAPI
- RtlCopyMemory (
- VOID UNALIGNED *Destination,
- CONST VOID UNALIGNED *Source,
- SIZE_T Length
- );
- #if !defined(_M_AMD64)
- NTSYSAPI
- VOID
- NTAPI
- RtlCopyMemory32 (
- VOID UNALIGNED *Destination,
- CONST VOID UNALIGNED *Source,
- DWORD Length
- );
- #endif
- NTSYSAPI
- VOID
- NTAPI
- RtlMoveMemory (
- VOID UNALIGNED *Destination,
- CONST VOID UNALIGNED *Source,
- SIZE_T Length
- );
- NTSYSAPI
- VOID
- NTAPI
- RtlFillMemory (
- VOID UNALIGNED *Destination,
- SIZE_T Length,
- BYTE Fill
- );
- NTSYSAPI
- VOID
- NTAPI
- RtlZeroMemory (
- VOID UNALIGNED *Destination,
- SIZE_T Length
- );
- #else
- #define RtlEqualMemory(Destination,Source,Length) (!memcmp((Destination),(Source),(Length)))
- #define RtlMoveMemory(Destination,Source,Length) memmove((Destination),(Source),(Length))
- #define RtlCopyMemory(Destination,Source,Length) memcpy((Destination),(Source),(Length))
- #define RtlFillMemory(Destination,Length,Fill) memset((Destination),(Fill),(Length))
- #define RtlZeroMemory(Destination,Length) memset((Destination),0,(Length))
- #endif
- typedef struct _MESSAGE_RESOURCE_ENTRY {
- WORD Length;
- WORD Flags;
- BYTE Text[ 1 ];
- } MESSAGE_RESOURCE_ENTRY, *PMESSAGE_RESOURCE_ENTRY;
- #define MESSAGE_RESOURCE_UNICODE 0x0001
- typedef struct _MESSAGE_RESOURCE_BLOCK {
- DWORD LowId;
- DWORD HighId;
- DWORD OffsetToEntries;
- } MESSAGE_RESOURCE_BLOCK, *PMESSAGE_RESOURCE_BLOCK;
- typedef struct _MESSAGE_RESOURCE_DATA {
- DWORD NumberOfBlocks;
- MESSAGE_RESOURCE_BLOCK Blocks[ 1 ];
- } MESSAGE_RESOURCE_DATA, *PMESSAGE_RESOURCE_DATA;
- typedef struct _OSVERSIONINFOA {
- DWORD dwOSVersionInfoSize;
- DWORD dwMajorVersion;
- DWORD dwMinorVersion;
- DWORD dwBuildNumber;
- DWORD dwPlatformId;
- CHAR szCSDVersion[ 128 ]; // Maintenance string for PSS usage
- } OSVERSIONINFOA, *POSVERSIONINFOA, *LPOSVERSIONINFOA;
- typedef struct _OSVERSIONINFOW {
- DWORD dwOSVersionInfoSize;
- DWORD dwMajorVersion;
- DWORD dwMinorVersion;
- DWORD dwBuildNumber;
- DWORD dwPlatformId;
- WCHAR szCSDVersion[ 128 ]; // Maintenance string for PSS usage
- } OSVERSIONINFOW, *POSVERSIONINFOW, *LPOSVERSIONINFOW, RTL_OSVERSIONINFOW, *PRTL_OSVERSIONINFOW;
- #ifdef UNICODE
- typedef OSVERSIONINFOW OSVERSIONINFO;
- typedef POSVERSIONINFOW POSVERSIONINFO;
- typedef LPOSVERSIONINFOW LPOSVERSIONINFO;
- #else
- typedef OSVERSIONINFOA OSVERSIONINFO;
- typedef POSVERSIONINFOA POSVERSIONINFO;
- typedef LPOSVERSIONINFOA LPOSVERSIONINFO;
- #endif // UNICODE
- typedef struct _OSVERSIONINFOEXA {
- DWORD dwOSVersionInfoSize;
- DWORD dwMajorVersion;
- DWORD dwMinorVersion;
- DWORD dwBuildNumber;
- DWORD dwPlatformId;
- CHAR szCSDVersion[ 128 ]; // Maintenance string for PSS usage
- WORD wServicePackMajor;
- WORD wServicePackMinor;
- WORD wSuiteMask;
- BYTE wProductType;
- BYTE wReserved;
- } OSVERSIONINFOEXA, *POSVERSIONINFOEXA, *LPOSVERSIONINFOEXA;
- typedef struct _OSVERSIONINFOEXW {
- DWORD dwOSVersionInfoSize;
- DWORD dwMajorVersion;
- DWORD dwMinorVersion;
- DWORD dwBuildNumber;
- DWORD dwPlatformId;
- WCHAR szCSDVersion[ 128 ]; // Maintenance string for PSS usage
- WORD wServicePackMajor;
- WORD wServicePackMinor;
- WORD wSuiteMask;
- BYTE wProductType;
- BYTE wReserved;
- } OSVERSIONINFOEXW, *POSVERSIONINFOEXW, *LPOSVERSIONINFOEXW, RTL_OSVERSIONINFOEXW, *PRTL_OSVERSIONINFOEXW;
- #ifdef UNICODE
- typedef OSVERSIONINFOEXW OSVERSIONINFOEX;
- typedef POSVERSIONINFOEXW POSVERSIONINFOEX;
- typedef LPOSVERSIONINFOEXW LPOSVERSIONINFOEX;
- #else
- typedef OSVERSIONINFOEXA OSVERSIONINFOEX;
- typedef POSVERSIONINFOEXA POSVERSIONINFOEX;
- typedef LPOSVERSIONINFOEXA LPOSVERSIONINFOEX;
- #endif // UNICODE
- //
- // RtlVerifyVersionInfo() conditions
- //
- #define VER_EQUAL 1
- #define VER_GREATER 2
- #define VER_GREATER_EQUAL 3
- #define VER_LESS 4
- #define VER_LESS_EQUAL 5
- #define VER_AND 6
- #define VER_OR 7
- #define VER_CONDITION_MASK 7
- #define VER_NUM_BITS_PER_CONDITION_MASK 3
- //
- // RtlVerifyVersionInfo() type mask bits
- //
- #define VER_MINORVERSION 0x0000001
- #define VER_MAJORVERSION 0x0000002
- #define VER_BUILDNUMBER 0x0000004
- #define VER_PLATFORMID 0x0000008
- #define VER_SERVICEPACKMINOR 0x0000010
- #define VER_SERVICEPACKMAJOR 0x0000020
- #define VER_SUITENAME 0x0000040
- #define VER_PRODUCT_TYPE 0x0000080
- //
- // RtlVerifyVersionInfo() os product type values
- //
- #define VER_NT_WORKSTATION 0x0000001
- #define VER_NT_DOMAIN_CONTROLLER 0x0000002
- #define VER_NT_SERVER 0x0000003
- //
- // dwPlatformId defines:
- //
- #define VER_PLATFORM_WIN32s 0
- #define VER_PLATFORM_WIN32_WINDOWS 1
- #define VER_PLATFORM_WIN32_NT 2
- //
- //
- // VerifyVersionInfo() macro to set the condition mask
- //
- // For documentation sakes here's the old version of the macro that got
- // changed to call an API
- // #define VER_SET_CONDITION(_m_,_t_,_c_) _m_=(_m_|(_c_<<(1<<_t_)))
- //
- #define VER_SET_CONDITION(_m_,_t_,_c_)
- ((_m_)=VerSetConditionMask((_m_),(_t_),(_c_)))
- ULONGLONG
- NTAPI
- VerSetConditionMask(
- IN ULONGLONG ConditionMask,
- IN DWORD TypeMask,
- IN BYTE Condition
- );
- //
- typedef struct _RTL_CRITICAL_SECTION_DEBUG {
- WORD Type;
- WORD CreatorBackTraceIndex;
- struct _RTL_CRITICAL_SECTION *CriticalSection;
- LIST_ENTRY ProcessLocksList;
- DWORD EntryCount;
- DWORD ContentionCount;
- DWORD Spare[ 2 ];
- } RTL_CRITICAL_SECTION_DEBUG, *PRTL_CRITICAL_SECTION_DEBUG, RTL_RESOURCE_DEBUG, *PRTL_RESOURCE_DEBUG;
- #define RTL_CRITSECT_TYPE 0
- #define RTL_RESOURCE_TYPE 1
- typedef struct _RTL_CRITICAL_SECTION {
- PRTL_CRITICAL_SECTION_DEBUG DebugInfo;
- //
- // The following three fields control entering and exiting the critical
- // section for the resource
- //
- LONG LockCount;
- LONG RecursionCount;
- HANDLE OwningThread; // from the thread's ClientId->UniqueThread
- HANDLE LockSemaphore;
- ULONG_PTR SpinCount; // force size on 64-bit systems when packed
- } RTL_CRITICAL_SECTION, *PRTL_CRITICAL_SECTION;
- typedef VOID (* RTL_VERIFIER_DLL_LOAD_CALLBACK) (
- PWSTR DllName,
- PVOID DllBase,
- SIZE_T DllSize,
- PVOID Reserved
- );
- typedef VOID (* RTL_VERIFIER_DLL_UNLOAD_CALLBACK) (
- PWSTR DllName,
- PVOID DllBase,
- SIZE_T DllSize,
- PVOID Reserved
- );
- typedef struct _RTL_VERIFIER_THUNK_DESCRIPTOR {
- PCHAR ThunkName;
- PVOID ThunkOldAddress;
- PVOID ThunkNewAddress;
- } RTL_VERIFIER_THUNK_DESCRIPTOR, *PRTL_VERIFIER_THUNK_DESCRIPTOR;
- typedef struct _RTL_VERIFIER_DLL_DESCRIPTOR {
- PWCHAR DllName;
- DWORD DllFlags;
- PVOID DllAddress;
- PRTL_VERIFIER_THUNK_DESCRIPTOR DllThunks;
- } RTL_VERIFIER_DLL_DESCRIPTOR, *PRTL_VERIFIER_DLL_DESCRIPTOR;
- typedef struct _RTL_VERIFIER_PROVIDER_DESCRIPTOR {
- //
- // Filled by verifier provider DLL
- //
- DWORD Length;
- PRTL_VERIFIER_DLL_DESCRIPTOR ProviderDlls;
- RTL_VERIFIER_DLL_LOAD_CALLBACK ProviderDllLoadCallback;
- RTL_VERIFIER_DLL_UNLOAD_CALLBACK ProviderDllUnloadCallback;
-
- //
- // Filled by verifier engine
- //
-
- PWSTR VerifierImage;
- DWORD VerifierFlags;
- DWORD VerifierDebug;
- } RTL_VERIFIER_PROVIDER_DESCRIPTOR, *PRTL_VERIFIER_PROVIDER_DESCRIPTOR;
- //
- // Application verifier standard flags
- //
- #define RTL_VRF_FLG_FULL_PAGE_HEAP 0x0001
- #define RTL_VRF_FLG_LOCK_CHECKS 0x0002
- #define RTL_VRF_FLG_HANDLE_CHECKS 0x0004
- #define RTL_VRF_FLG_STACK_CHECKS 0x0008
- #define RTL_VRF_FLG_APPCOMPAT_CHECKS 0x0010
- //
- // Application verifier standard stop codes
- //
- #define APPLICATION_VERIFIER_INTERNAL_ERROR 0x80000000
- #define APPLICATION_VERIFIER_INTERNAL_WARNING 0x40000000
- #define APPLICATION_VERIFIER_NO_BREAK 0x20000000
- #define APPLICATION_VERIFIER_RESERVED_BIT_28 0x10000000
- #define APPLICATION_VERIFIER_UNKNOWN_ERROR 0x0001
- #define APPLICATION_VERIFIER_ACCESS_VIOLATION 0x0002
- #define APPLICATION_VERIFIER_UNSYNCHRONIZED_ACCESS 0x0003
- #define APPLICATION_VERIFIER_EXTREME_SIZE_REQUEST 0x0004
- #define APPLICATION_VERIFIER_BAD_HEAP_HANDLE 0x0005
- #define APPLICATION_VERIFIER_SWITCHED_HEAP_HANDLE 0x0006
- #define APPLICATION_VERIFIER_DOUBLE_FREE 0x0007
- #define APPLICATION_VERIFIER_CORRUPTED_HEAP_BLOCK 0x0008
- #define APPLICATION_VERIFIER_DESTROY_PROCESS_HEAP 0x0009
- #define APPLICATION_VERIFIER_UNEXPECTED_EXCEPTION 0x000A
- #define APPLICATION_VERIFIER_STACK_OVERFLOW 0x000B
- #define APPLICATION_VERIFIER_TERMINATE_THREAD_CALL 0x0100
- #define APPLICATION_VERIFIER_EXIT_THREAD_OWNS_LOCK 0x0200
- #define APPLICATION_VERIFIER_LOCK_IN_UNLOADED_DLL 0x0201
- #define APPLICATION_VERIFIER_LOCK_IN_FREED_HEAP 0x0202
- #define APPLICATION_VERIFIER_LOCK_DOUBLE_INITIALIZE 0x0203
- #define APPLICATION_VERIFIER_LOCK_IN_FREED_MEMORY 0x0204
- #define APPLICATION_VERIFIER_LOCK_CORRUPTED 0x0205
- #define APPLICATION_VERIFIER_LOCK_INVALID_OWNER 0x0206
- #define APPLICATION_VERIFIER_LOCK_INVALID_RECURSION_COUNT 0x0207
- #define APPLICATION_VERIFIER_LOCK_INVALID_LOCK_COUNT 0x0208
- #define APPLICATION_VERIFIER_LOCK_OVER_RELEASED 0x0209
- #define APPLICATION_VERIFIER_LOCK_NOT_INITIALIZED 0x0210
- #define APPLICATION_VERIFIER_INVALID_HANDLE 0x0300
- #define VERIFIER_STOP(Code, Msg, P1, S1, P2, S2, P3, S3, P4, S4) {
- RtlApplicationVerifierStop ((Code),
- (Msg),
- (ULONG_PTR)(P1),(S1),
- (ULONG_PTR)(P2),(S2),
- (ULONG_PTR)(P3),(S3),
- (ULONG_PTR)(P4),(S4));
- }
- VOID
- RtlApplicationVerifierStop (
- ULONG_PTR Code,
- PCHAR Message,
- ULONG_PTR Param1, PCHAR Description1,
- ULONG_PTR Param2, PCHAR Description2,
- ULONG_PTR Param3, PCHAR Description3,
- ULONG_PTR Param4, PCHAR Description4
- );
- typedef LONG (NTAPI *PVECTORED_EXCEPTION_HANDLER)(
- struct _EXCEPTION_POINTERS *ExceptionInfo
- );
- #define SEF_DACL_AUTO_INHERIT 0x01
- #define SEF_SACL_AUTO_INHERIT 0x02
- #define SEF_DEFAULT_DESCRIPTOR_FOR_OBJECT 0x04
- #define SEF_AVOID_PRIVILEGE_CHECK 0x08
- #define SEF_AVOID_OWNER_CHECK 0x10
- #define SEF_DEFAULT_OWNER_FROM_PARENT 0x20
- #define SEF_DEFAULT_GROUP_FROM_PARENT 0x40
- typedef enum _HEAP_INFORMATION_CLASS {
- HeapCompatibilityInformation
- } HEAP_INFORMATION_CLASS;
- DWORD
- RtlSetHeapInformation (
- IN PVOID HeapHandle,
- IN HEAP_INFORMATION_CLASS HeapInformationClass,
- IN PVOID HeapInformation OPTIONAL,
- IN SIZE_T HeapInformationLength OPTIONAL
- );
- DWORD
- RtlQueryHeapInformation (
- IN PVOID HeapHandle,
- IN HEAP_INFORMATION_CLASS HeapInformationClass,
- OUT PVOID HeapInformation OPTIONAL,
- IN SIZE_T HeapInformationLength OPTIONAL,
- OUT PSIZE_T ReturnLength OPTIONAL
- );
- #define WT_EXECUTEDEFAULT 0x00000000
- #define WT_EXECUTEINIOTHREAD 0x00000001
- #define WT_EXECUTEINUITHREAD 0x00000002
- #define WT_EXECUTEINWAITTHREAD 0x00000004
- #define WT_EXECUTEONLYONCE 0x00000008
- #define WT_EXECUTEINTIMERTHREAD 0x00000020
- #define WT_EXECUTELONGFUNCTION 0x00000010
- #define WT_EXECUTEINPERSISTENTIOTHREAD 0x00000040
- #define WT_EXECUTEINPERSISTENTTHREAD 0x00000080
- #define WT_SET_MAX_THREADPOOL_THREADS(Flags, Limit) ((Flags) |= (Limit)<<16)
- typedef VOID (NTAPI * WAITORTIMERCALLBACKFUNC) (PVOID, BOOLEAN );
- typedef VOID (NTAPI * WORKERCALLBACKFUNC) (PVOID );
- typedef VOID (NTAPI * APC_CALLBACK_FUNCTION) (DWORD , PVOID, PVOID);
- #define WT_EXECUTEINLONGTHREAD 0x00000010
- #define WT_EXECUTEDELETEWAIT 0x00000008
- typedef enum _ACTIVATION_CONTEXT_INFO_CLASS {
- ActivationContextBasicInformation = 1,
- ActivationContextDetailedInformation = 2,
- AssemblyDetailedInformationInActivationContext = 3,
- FileInformationInAssemblyOfAssemblyInActivationContext = 4,
- MaxActivationContextInfoClass,
- //
- // compatibility with old names
- //
- AssemblyDetailedInformationInActivationContxt = 3,
- FileInformationInAssemblyOfAssemblyInActivationContxt = 4
- } ACTIVATION_CONTEXT_INFO_CLASS;
- #define ACTIVATIONCONTEXTINFOCLASS ACTIVATION_CONTEXT_INFO_CLASS
- typedef struct _ACTIVATION_CONTEXT_QUERY_INDEX {
- DWORD ulAssemblyIndex;
- DWORD ulFileIndexInAssembly;
- } ACTIVATION_CONTEXT_QUERY_INDEX, * PACTIVATION_CONTEXT_QUERY_INDEX;
- typedef const struct _ACTIVATION_CONTEXT_QUERY_INDEX * PCACTIVATION_CONTEXT_QUERY_INDEX;
- #define ACTIVATION_CONTEXT_PATH_TYPE_NONE (1)
- #define ACTIVATION_CONTEXT_PATH_TYPE_WIN32_FILE (2)
- #define ACTIVATION_CONTEXT_PATH_TYPE_URL (3)
- #define ACTIVATION_CONTEXT_PATH_TYPE_ASSEMBLYREF (4)
- typedef struct _ASSEMBLY_FILE_DETAILED_INFORMATION {
- DWORD ulFlags;
- DWORD ulFilenameLength;
- DWORD ulPathLength;
- PCWSTR lpFileName;
- PCWSTR lpFilePath;
- } ASSEMBLY_FILE_DETAILED_INFORMATION, *PASSEMBLY_FILE_DETAILED_INFORMATION;
- typedef const ASSEMBLY_FILE_DETAILED_INFORMATION *PCASSEMBLY_FILE_DETAILED_INFORMATION;
- //
- // compatibility with old names
- // The new names use "file" consistently.
- //
- #define _ASSEMBLY_DLL_REDIRECTION_DETAILED_INFORMATION _ASSEMBLY_FILE_DETAILED_INFORMATION
- #define ASSEMBLY_DLL_REDIRECTION_DETAILED_INFORMATION ASSEMBLY_FILE_DETAILED_INFORMATION
- #define PASSEMBLY_DLL_REDIRECTION_DETAILED_INFORMATION PASSEMBLY_FILE_DETAILED_INFORMATION
- #define PCASSEMBLY_DLL_REDIRECTION_DETAILED_INFORMATION PCASSEMBLY_FILE_DETAILED_INFORMATION
- typedef struct _ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION {
- DWORD ulFlags;
- DWORD ulEncodedAssemblyIdentityLength; // in bytes
- DWORD ulManifestPathType; // ACTIVATION_CONTEXT_PATH_TYPE_*
- DWORD ulManifestPathLength; // in bytes
- LARGE_INTEGER liManifestLastWriteTime; // FILETIME
- DWORD ulPolicyPathType; // ACTIVATION_CONTEXT_PATH_TYPE_*
- DWORD ulPolicyPathLength; // in bytes
- LARGE_INTEGER liPolicyLastWriteTime; // FILETIME
- DWORD ulMetadataSatelliteRosterIndex;
-
- DWORD ulManifestVersionMajor; // 1
- DWORD ulManifestVersionMinor; // 0
- DWORD ulPolicyVersionMajor; // 0
- DWORD ulPolicyVersionMinor; // 0
- DWORD ulAssemblyDirectoryNameLength; // in bytes
- PCWSTR lpAssemblyEncodedAssemblyIdentity;
- PCWSTR lpAssemblyManifestPath;
- PCWSTR lpAssemblyPolicyPath;
- PCWSTR lpAssemblyDirectoryName;
- DWORD ulFileCount;
- } ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION, * PACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION;
- typedef const struct _ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION * PCACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION ;
- typedef struct _ACTIVATION_CONTEXT_DETAILED_INFORMATION {
- DWORD dwFlags;
- DWORD ulFormatVersion;
- DWORD ulAssemblyCount;
- DWORD ulRootManifestPathType;
- DWORD ulRootManifestPathChars;
- DWORD ulRootConfigurationPathType;
- DWORD ulRootConfigurationPathChars;
- DWORD ulAppDirPathType;
- DWORD ulAppDirPathChars;
- PCWSTR lpRootManifestPath;
- PCWSTR lpRootConfigurationPath;
- PCWSTR lpAppDirPath;
- } ACTIVATION_CONTEXT_DETAILED_INFORMATION, *PACTIVATION_CONTEXT_DETAILED_INFORMATION;
- typedef const struct _ACTIVATION_CONTEXT_DETAILED_INFORMATION *PCACTIVATION_CONTEXT_DETAILED_INFORMATION;
- #define DLL_PROCESS_ATTACH 1
- #define DLL_THREAD_ATTACH 2
- #define DLL_THREAD_DETACH 3
- #define DLL_PROCESS_DETACH 0
- #define DLL_PROCESS_VERIFIER 4
- //
- // Defines for the READ flags for Eventlogging
- //
- #define EVENTLOG_SEQUENTIAL_READ 0x0001
- #define EVENTLOG_SEEK_READ 0x0002
- #define EVENTLOG_FORWARDS_READ 0x0004
- #define EVENTLOG_BACKWARDS_READ 0x0008
- //
- // The types of events that can be logged.
- //
- #define EVENTLOG_SUCCESS 0x0000
- #define EVENTLOG_ERROR_TYPE 0x0001
- #define EVENTLOG_WARNING_TYPE 0x0002
- #define EVENTLOG_INFORMATION_TYPE 0x0004
- #define EVENTLOG_AUDIT_SUCCESS 0x0008
- #define EVENTLOG_AUDIT_FAILURE 0x0010
- //
- // Defines for the WRITE flags used by Auditing for paired events
- // These are not implemented in Product 1
- //
- #define EVENTLOG_START_PAIRED_EVENT 0x0001
- #define EVENTLOG_END_PAIRED_EVENT 0x0002
- #define EVENTLOG_END_ALL_PAIRED_EVENTS 0x0004
- #define EVENTLOG_PAIRED_EVENT_ACTIVE 0x0008
- #define EVENTLOG_PAIRED_EVENT_INACTIVE 0x0010
- //
- // Structure that defines the header of the Eventlog record. This is the
- // fixed-sized portion before all the variable-length strings, binary
- // data and pad bytes.
- //
- // TimeGenerated is the time it was generated at the client.
- // TimeWritten is the time it was put into the log at the server end.
- //
- typedef struct _EVENTLOGRECORD {
- DWORD Length; // Length of full record
- DWORD Reserved; // Used by the service
- DWORD RecordNumber; // Absolute record number
- DWORD TimeGenerated; // Seconds since 1-1-1970
- DWORD TimeWritten; // Seconds since 1-1-1970
- DWORD EventID;
- WORD EventType;
- WORD NumStrings;
- WORD EventCategory;
- WORD ReservedFlags; // For use with paired events (auditing)
- DWORD ClosingRecordNumber; // For use with paired events (auditing)
- DWORD StringOffset; // Offset from beginning of record
- DWORD UserSidLength;
- DWORD UserSidOffset;
- DWORD DataLength;
- DWORD DataOffset; // Offset from beginning of record
- //
- // Then follow:
- //
- // WCHAR SourceName[]
- // WCHAR Computername[]
- // SID UserSid
- // WCHAR Strings[]
- // BYTE Data[]
- // CHAR Pad[]
- // DWORD Length;
- //
- } EVENTLOGRECORD, *PEVENTLOGRECORD;
- //SS: start of changes to support clustering
- //SS: ideally the
- #define MAXLOGICALLOGNAMESIZE 256
- #if _MSC_VER >= 1200
- #pragma warning(push)
- #endif
- #pragma warning(disable : 4200)
- typedef struct _EVENTSFORLOGFILE{
- DWORD ulSize;
- WCHAR szLogicalLogFile[MAXLOGICALLOGNAMESIZE]; //name of the logical file-security/application/system
- DWORD ulNumRecords;
- EVENTLOGRECORD pEventLogRecords[];
- }EVENTSFORLOGFILE, *PEVENTSFORLOGFILE;
- typedef struct _PACKEDEVENTINFO{
- DWORD ulSize; //total size of the structure
- DWORD ulNumEventsForLogFile; //number of EventsForLogFile structure that follow
- DWORD ulOffsets[]; //the offsets from the start of this structure to the EVENTSFORLOGFILE structure
- }PACKEDEVENTINFO, *PPACKEDEVENTINFO;
- #if _MSC_VER >= 1200
- #pragma warning(pop)
- #else
- #pragma warning(default : 4200)
- #endif
- //SS: end of changes to support clustering
- //
- // begin_ntddk begin_wdm begin_nthal
- //
- // Registry Specific Access Rights.
- //
- #define KEY_QUERY_VALUE (0x0001)
- #define KEY_SET_VALUE (0x0002)
- #define KEY_CREATE_SUB_KEY (0x0004)
- #define KEY_ENUMERATE_SUB_KEYS (0x0008)
- #define KEY_NOTIFY (0x0010)
- #define KEY_CREATE_LINK (0x0020)
- #define KEY_WOW64_32KEY (0x0200)
- #define KEY_WOW64_64KEY (0x0100)
- #define KEY_WOW64_RES (0x0300)
- #define KEY_READ ((STANDARD_RIGHTS_READ |
- KEY_QUERY_VALUE |
- KEY_ENUMERATE_SUB_KEYS |
- KEY_NOTIFY)
- &
- (~SYNCHRONIZE))
- #define KEY_WRITE ((STANDARD_RIGHTS_WRITE |
- KEY_SET_VALUE |
- KEY_CREATE_SUB_KEY)
- &
- (~SYNCHRONIZE))
- #define KEY_EXECUTE ((KEY_READ)
- &
- (~SYNCHRONIZE))
- #define KEY_ALL_ACCESS ((STANDARD_RIGHTS_ALL |
- KEY_QUERY_VALUE |
- KEY_SET_VALUE |
- KEY_CREATE_SUB_KEY |
- KEY_ENUMERATE_SUB_KEYS |
- KEY_NOTIFY |
- KEY_CREATE_LINK)
- &
- (~SYNCHRONIZE))
- //
- // Open/Create Options
- //
- #define REG_OPTION_RESERVED (0x00000000L) // Parameter is reserved
- #define REG_OPTION_NON_VOLATILE (0x00000000L) // Key is preserved
- // when system is rebooted
- #define REG_OPTION_VOLATILE (0x00000001L) // Key is not preserved
- // when system is rebooted
- #define REG_OPTION_CREATE_LINK (0x00000002L) // Created key is a
- // symbolic link
- #define REG_OPTION_BACKUP_RESTORE (0x00000004L) // open for backup or restore
- // special access rules
- // privilege required
- #define REG_OPTION_OPEN_LINK (0x00000008L) // Open symbolic link
- #define REG_LEGAL_OPTION
- (REG_OPTION_RESERVED |
- REG_OPTION_NON_VOLATILE |
- REG_OPTION_VOLATILE |
- REG_OPTION_CREATE_LINK |
- REG_OPTION_BACKUP_RESTORE |
- REG_OPTION_OPEN_LINK)
- //
- // Key creation/open disposition
- //
- #define REG_CREATED_NEW_KEY (0x00000001L) // New Registry Key created
- #define REG_OPENED_EXISTING_KEY (0x00000002L) // Existing Key opened
- //
- // hive format to be used by Reg(Nt)SaveKeyEx
- //
- #define REG_STANDARD_FORMAT 1
- #define REG_LATEST_FORMAT 2
- #define REG_NO_COMPRESSION 4
- //
- // Key restore flags
- //
- #define REG_WHOLE_HIVE_VOLATILE (0x00000001L) // Restore whole hive volatile
- #define REG_REFRESH_HIVE (0x00000002L) // Unwind changes to last flush
- #define REG_NO_LAZY_FLUSH (0x00000004L) // Never lazy flush this hive
- #define REG_FORCE_RESTORE (0x00000008L) // Force the restore process even when we have open handles on subkeys
- // end_ntddk end_wdm end_nthal
- //
- // Notify filter values
- //
- #define REG_NOTIFY_CHANGE_NAME (0x00000001L) // Create or delete (child)
- #define REG_NOTIFY_CHANGE_ATTRIBUTES (0x00000002L)
- #define REG_NOTIFY_CHANGE_LAST_SET (0x00000004L) // time stamp
- #define REG_NOTIFY_CHANGE_SECURITY (0x00000008L)
- #define REG_LEGAL_CHANGE_FILTER
- (REG_NOTIFY_CHANGE_NAME |
- REG_NOTIFY_CHANGE_ATTRIBUTES |
- REG_NOTIFY_CHANGE_LAST_SET |
- REG_NOTIFY_CHANGE_SECURITY)
- //
- //
- // Predefined Value Types.
- //
- #define REG_NONE ( 0 ) // No value type
- #define REG_SZ ( 1 ) // Unicode nul terminated string
- #define REG_EXPAND_SZ ( 2 ) // Unicode nul terminated string
- // (with environment variable references)
- #define REG_BINARY ( 3 ) // Free form binary
- #define REG_DWORD ( 4 ) // 32-bit number
- #define REG_DWORD_LITTLE_ENDIAN ( 4 ) // 32-bit number (same as REG_DWORD)
- #define REG_DWORD_BIG_ENDIAN ( 5 ) // 32-bit number
- #define REG_LINK ( 6 ) // Symbolic Link (unicode)
- #define REG_MULTI_SZ ( 7 ) // Multiple Unicode strings
- #define REG_RESOURCE_LIST ( 8 ) // Resource list in the resource map
- #define REG_FULL_RESOURCE_DESCRIPTOR ( 9 ) // Resource list in the hardware description
- #define REG_RESOURCE_REQUIREMENTS_LIST ( 10 )
- #define REG_QWORD ( 11 ) // 64-bit number
- #define REG_QWORD_LITTLE_ENDIAN ( 11 ) // 64-bit number (same as REG_QWORD)
- // end_ntddk end_wdm end_nthal
- // begin_ntddk begin_wdm begin_nthal
- //
- // Service Types (Bit Mask)
- //
- #define SERVICE_KERNEL_DRIVER 0x00000001
- #define SERVICE_FILE_SYSTEM_DRIVER 0x00000002
- #define SERVICE_ADAPTER 0x00000004
- #define SERVICE_RECOGNIZER_DRIVER 0x00000008
- #define SERVICE_DRIVER (SERVICE_KERNEL_DRIVER |
- SERVICE_FILE_SYSTEM_DRIVER |
- SERVICE_RECOGNIZER_DRIVER)
- #define SERVICE_WIN32_OWN_PROCESS 0x00000010
- #define SERVICE_WIN32_SHARE_PROCESS 0x00000020
- #define SERVICE_WIN32 (SERVICE_WIN32_OWN_PROCESS |
- SERVICE_WIN32_SHARE_PROCESS)
- #define SERVICE_INTERACTIVE_PROCESS 0x00000100
- #define SERVICE_TYPE_ALL (SERVICE_WIN32 |
- SERVICE_ADAPTER |
- SERVICE_DRIVER |
- SERVICE_INTERACTIVE_PROCESS)
- //
- // Start Type
- //
- #define SERVICE_BOOT_START 0x00000000
- #define SERVICE_SYSTEM_START 0x00000001
- #define SERVICE_AUTO_START 0x00000002
- #define SERVICE_DEMAND_START 0x00000003
- #define SERVICE_DISABLED 0x00000004
- //
- // Error control type
- //
- #define SERVICE_ERROR_IGNORE 0x00000000
- #define SERVICE_ERROR_NORMAL 0x00000001
- #define SERVICE_ERROR_SEVERE 0x00000002
- #define SERVICE_ERROR_CRITICAL 0x00000003
- //
- //
- // Define the registry driver node enumerations
- //
- typedef enum _CM_SERVICE_NODE_TYPE {
- DriverType = SERVICE_KERNEL_DRIVER,
- FileSystemType = SERVICE_FILE_SYSTEM_DRIVER,
- Win32ServiceOwnProcess = SERVICE_WIN32_OWN_PROCESS,
- Win32ServiceShareProcess = SERVICE_WIN32_SHARE_PROCESS,
- AdapterType = SERVICE_ADAPTER,
- RecognizerType = SERVICE_RECOGNIZER_DRIVER
- } SERVICE_NODE_TYPE;
- typedef enum _CM_SERVICE_LOAD_TYPE {
- BootLoad = SERVICE_BOOT_START,
- SystemLoad = SERVICE_SYSTEM_START,
- AutoLoad = SERVICE_AUTO_START,
- DemandLoad = SERVICE_DEMAND_START,
- DisableLoad = SERVICE_DISABLED
- } SERVICE_LOAD_TYPE;
- typedef enum _CM_ERROR_CONTROL_TYPE {
- IgnoreError = SERVICE_ERROR_IGNORE,
- NormalError = SERVICE_ERROR_NORMAL,
- SevereError = SERVICE_ERROR_SEVERE,
- CriticalError = SERVICE_ERROR_CRITICAL
- } SERVICE_ERROR_TYPE;
- //
- // IOCTL_TAPE_ERASE definitions
- //
- #define TAPE_ERASE_SHORT 0L
- #define TAPE_ERASE_LONG 1L
- typedef struct _TAPE_ERASE {
- DWORD Type;
- BOOLEAN Immediate;
- } TAPE_ERASE, *PTAPE_ERASE;
- //
- // IOCTL_TAPE_PREPARE definitions
- //
- #define TAPE_LOAD 0L
- #define TAPE_UNLOAD 1L
- #define TAPE_TENSION 2L
- #define TAPE_LOCK 3L
- #define TAPE_UNLOCK 4L
- #define TAPE_FORMAT 5L
- typedef struct _TAPE_PREPARE {
- DWORD Operation;
- BOOLEAN Immediate;
- } TAPE_PREPARE, *PTAPE_PREPARE;
- //
- // IOCTL_TAPE_WRITE_MARKS definitions
- //
- #define TAPE_SETMARKS 0L
- #define TAPE_FILEMARKS 1L
- #define TAPE_SHORT_FILEMARKS 2L
- #define TAPE_LONG_FILEMARKS 3L
- typedef struct _TAPE_WRITE_MARKS {
- DWORD Type;
- DWORD Count;
- BOOLEAN Immediate;
- } TAPE_WRITE_MARKS, *PTAPE_WRITE_MARKS;
- //
- // IOCTL_TAPE_GET_POSITION definitions
- //
- #define TAPE_ABSOLUTE_POSITION 0L
- #define TAPE_LOGICAL_POSITION 1L
- #define TAPE_PSEUDO_LOGICAL_POSITION 2L
- typedef struct _TAPE_GET_POSITION {
- DWORD Type;
- DWORD Partition;
- LARGE_INTEGER Offset;
- } TAPE_GET_POSITION, *PTAPE_GET_POSITION;
- //
- // IOCTL_TAPE_SET_POSITION definitions
- //
- #define TAPE_REWIND 0L
- #define TAPE_ABSOLUTE_BLOCK 1L
- #define TAPE_LOGICAL_BLOCK 2L
- #define TAPE_PSEUDO_LOGICAL_BLOCK 3L
- #define TAPE_SPACE_END_OF_DATA 4L
- #define TAPE_SPACE_RELATIVE_BLOCKS 5L
- #define TAPE_SPACE_FILEMARKS 6L
- #define TAPE_SPACE_SEQUENTIAL_FMKS 7L
- #define TAPE_SPACE_SETMARKS 8L
- #define TAPE_SPACE_SEQUENTIAL_SMKS 9L
- typedef struct _TAPE_SET_POSITION {
- DWORD Method;
- DWORD Partition;
- LARGE_INTEGER Offset;
- BOOLEAN Immediate;
- } TAPE_SET_POSITION, *PTAPE_SET_POSITION;
- //
- // IOCTL_TAPE_GET_DRIVE_PARAMS definitions
- //
- //
- // Definitions for FeaturesLow parameter
- //
- #define TAPE_DRIVE_FIXED 0x00000001
- #define TAPE_DRIVE_SELECT 0x00000002
- #define TAPE_DRIVE_INITIATOR 0x00000004
- #define TAPE_DRIVE_ERASE_SHORT 0x00000010
- #define TAPE_DRIVE_ERASE_LONG 0x00000020
- #define TAPE_DRIVE_ERASE_BOP_ONLY 0x00000040
- #define TAPE_DRIVE_ERASE_IMMEDIATE 0x00000080
- #define TAPE_DRIVE_TAPE_CAPACITY 0x00000100
- #define TAPE_DRIVE_TAPE_REMAINING 0x00000200
- #define TAPE_DRIVE_FIXED_BLOCK 0x00000400
- #define TAPE_DRIVE_VARIABLE_BLOCK 0x00000800
- #define TAPE_DRIVE_WRITE_PROTECT 0x00001000
- #define TAPE_DRIVE_EOT_WZ_SIZE 0x00002000
- #define TAPE_DRIVE_ECC 0x00010000
- #define TAPE_DRIVE_COMPRESSION 0x00020000
- #define TAPE_DRIVE_PADDING 0x00040000
- #define TAPE_DRIVE_REPORT_SMKS 0x00080000
- #define TAPE_DRIVE_GET_ABSOLUTE_BLK 0x00100000
- #define TAPE_DRIVE_GET_LOGICAL_BLK 0x00200000
- #define TAPE_DRIVE_SET_EOT_WZ_SIZE 0x00400000
- #define TAPE_DRIVE_EJECT_MEDIA 0x01000000
- #define TAPE_DRIVE_CLEAN_REQUESTS 0x02000000
- #define TAPE_DRIVE_SET_CMP_BOP_ONLY 0x04000000
- #define TAPE_DRIVE_RESERVED_BIT 0x80000000 //don't use this bit!
- // //can't be a low features bit!
- // //reserved; high features only
- //
- // Definitions for FeaturesHigh parameter
- //
- #define TAPE_DRIVE_LOAD_UNLOAD 0x80000001
- #define TAPE_DRIVE_TENSION 0x80000002
- #define TAPE_DRIVE_LOCK_UNLOCK 0x80000004
- #define TAPE_DRIVE_REWIND_IMMEDIATE 0x80000008
- #define TAPE_DRIVE_SET_BLOCK_SIZE 0x80000010
- #define TAPE_DRIVE_LOAD_UNLD_IMMED 0x80000020
- #define TAPE_DRIVE_TENSION_IMMED 0x80000040
- #define TAPE_DRIVE_LOCK_UNLK_IMMED 0x80000080
- #define TAPE_DRIVE_SET_ECC 0x80000100
- #define TAPE_DRIVE_SET_COMPRESSION 0x80000200
- #define TAPE_DRIVE_SET_PADDING 0x80000400
- #define TAPE_DRIVE_SET_REPORT_SMKS 0x80000800
- #define TAPE_DRIVE_ABSOLUTE_BLK 0x80001000
- #define TAPE_DRIVE_ABS_BLK_IMMED 0x80002000
- #define TAPE_DRIVE_LOGICAL_BLK 0x80004000
- #define TAPE_DRIVE_LOG_BLK_IMMED 0x80008000
- #define TAPE_DRIVE_END_OF_DATA 0x80010000
- #define TAPE_DRIVE_RELATIVE_BLKS 0x80020000
- #define TAPE_DRIVE_FILEMARKS 0x80040000
- #define TAPE_DRIVE_SEQUENTIAL_FMKS 0x80080000
- #define TAPE_DRIVE_SETMARKS 0x80100000
- #define TAPE_DRIVE_SEQUENTIAL_SMKS 0x80200000
- #define TAPE_DRIVE_REVERSE_POSITION 0x80400000
- #define TAPE_DRIVE_SPACE_IMMEDIATE 0x80800000
- #define TAPE_DRIVE_WRITE_SETMARKS 0x81000000
- #define TAPE_DRIVE_WRITE_FILEMARKS 0x82000000
- #define TAPE_DRIVE_WRITE_SHORT_FMKS 0x84000000
- #define TAPE_DRIVE_WRITE_LONG_FMKS 0x88000000
- #define TAPE_DRIVE_WRITE_MARK_IMMED 0x90000000
- #define TAPE_DRIVE_FORMAT 0xA0000000
- #define TAPE_DRIVE_FORMAT_IMMEDIATE 0xC0000000
- #define TAPE_DRIVE_HIGH_FEATURES 0x80000000 //mask for high features flag
- typedef struct _TAPE_GET_DRIVE_PARAMETERS {
- BOOLEAN ECC;
- BOOLEAN Compression;
- BOOLEAN DataPadding;
- BOOLEAN ReportSetmarks;
- DWORD DefaultBlockSize;
- DWORD MaximumBlockSize;
- DWORD MinimumBlockSize;
- DWORD MaximumPartitionCount;
- DWORD FeaturesLow;
- DWORD FeaturesHigh;
- DWORD EOTWarningZoneSize;
- } TAPE_GET_DRIVE_PARAMETERS, *PTAPE_GET_DRIVE_PARAMETERS;
- //
- // IOCTL_TAPE_SET_DRIVE_PARAMETERS definitions
- //
- typedef struct _TAPE_SET_DRIVE_PARAMETERS {
- BOOLEAN ECC;
- BOOLEAN Compression;
- BOOLEAN DataPadding;
- BOOLEAN ReportSetmarks;
- DWORD EOTWarningZoneSize;
- } TAPE_SET_DRIVE_PARAMETERS, *PTAPE_SET_DRIVE_PARAMETERS;
- //
- // IOCTL_TAPE_GET_MEDIA_PARAMETERS definitions
- //
- typedef struct _TAPE_GET_MEDIA_PARAMETERS {
- LARGE_INTEGER Capacity;
- LARGE_INTEGER Remaining;
- DWORD BlockSize;
- DWORD PartitionCount;
- BOOLEAN WriteProtected;
- } TAPE_GET_MEDIA_PARAMETERS, *PTAPE_GET_MEDIA_PARAMETERS;
- //
- // IOCTL_TAPE_SET_MEDIA_PARAMETERS definitions
- //
- typedef struct _TAPE_SET_MEDIA_PARAMETERS {
- DWORD BlockSize;
- } TAPE_SET_MEDIA_PARAMETERS, *PTAPE_SET_MEDIA_PARAMETERS;
- //
- // IOCTL_TAPE_CREATE_PARTITION definitions
- //
- #define TAPE_FIXED_PARTITIONS 0L
- #define TAPE_SELECT_PARTITIONS 1L
- #define TAPE_INITIATOR_PARTITIONS 2L
- typedef struct _TAPE_CREATE_PARTITION {
- DWORD Method;
- DWORD Count;
- DWORD Size;
- } TAPE_CREATE_PARTITION, *PTAPE_CREATE_PARTITION;
- //
- // WMI Methods
- //
- #define TAPE_QUERY_DRIVE_PARAMETERS 0L
- #define TAPE_QUERY_MEDIA_CAPACITY 1L
- #define TAPE_CHECK_FOR_DRIVE_PROBLEM 2L
- #define TAPE_QUERY_IO_ERROR_DATA 3L
- #define TAPE_QUERY_DEVICE_ERROR_DATA 4L
- typedef struct _TAPE_WMI_OPERATIONS {
- DWORD Method;
- DWORD DataBufferSize;
- PVOID DataBuffer;
- } TAPE_WMI_OPERATIONS, *PTAPE_WMI_OPERATIONS;
- //
- // Type of drive errors
- //
- typedef enum _TAPE_DRIVE_PROBLEM_TYPE {
- TapeDriveProblemNone, TapeDriveReadWriteWarning,
- TapeDriveReadWriteError, TapeDriveReadWarning,
- TapeDriveWriteWarning, TapeDriveReadError,
- TapeDriveWriteError, TapeDriveHardwareError,
- TapeDriveUnsupportedMedia, TapeDriveScsiConnectionError,
- TapeDriveTimetoClean, TapeDriveCleanDriveNow,
- TapeDriveMediaLifeExpired, TapeDriveSnappedTape
- } TAPE_DRIVE_PROBLEM_TYPE;
- #if defined(_M_AMD64) && !defined(__midl)
- __forceinline
- PVOID
- GetCurrentFiber (
- VOID
- )
- {
- return (PVOID)__readgsqword(FIELD_OFFSET(NT_TIB, FiberData));
- }
- __forceinline
- PVOID
- GetFiberData (
- VOID
- )
- {
- return *(PVOID *)GetCurrentFiber();
- }
- #endif // _M_AMD64 && !defined(__midl)
- #if (_WIN32_WINNT > 0x0500) || (_WIN32_FUSION >= 0x0100) || ISOLATION_AWARE_ENABLED // winnt_only
- #define ACTIVATION_CONTEXT_SECTION_ASSEMBLY_INFORMATION (1)
- #define ACTIVATION_CONTEXT_SECTION_DLL_REDIRECTION (2)
- #define ACTIVATION_CONTEXT_SECTION_WINDOW_CLASS_REDIRECTION (3)
- #define ACTIVATION_CONTEXT_SECTION_COM_SERVER_REDIRECTION (4)
- #define ACTIVATION_CONTEXT_SECTION_COM_INTERFACE_REDIRECTION (5)
- #define ACTIVATION_CONTEXT_SECTION_COM_TYPE_LIBRARY_REDIRECTION (6)
- #define ACTIVATION_CONTEXT_SECTION_COM_PROGID_REDIRECTION (7)
- #define ACTIVATION_CONTEXT_SECTION_GLOBAL_OBJECT_RENAME_TABLE (8)
- #endif // winnt_only
- #ifdef __cplusplus
- }
- #endif
- #endif /* _WINNT_ */