vendor/object-0.30.3/src/pe.rs

   1 //! PE/COFF definitions.
   2 //!
   3 //! These definitions are independent of read/write support, although we do implement
   4 //! some traits useful for those.
   5 //!
   6 //! This module is based heavily on "winnt.h" (10.0.17763.0).
   7
   8 #![allow(missing_docs)]
   9
  10 use crate::endian::{LittleEndian as LE, U16Bytes, U32Bytes, I32, U16, U32, U64};
  11 use crate::pod::Pod;
  12
  13 /// MZ
  14 pub const IMAGE_DOS_SIGNATURE: u16 = 0x5A4D;
  15 /// NE
  16 pub const IMAGE_OS2_SIGNATURE: u16 = 0x454E;
  17 /// LE
  18 pub const IMAGE_OS2_SIGNATURE_LE: u16 = 0x454C;
  19 /// LE
  20 pub const IMAGE_VXD_SIGNATURE: u16 = 0x454C;
  21 /// PE00
  22 pub const IMAGE_NT_SIGNATURE: u32 = 0x0000_4550;
  23
  24 /// DOS .EXE header
  25 #[derive(Debug, Clone, Copy)]
  26 #[repr(C)]
  27 pub struct ImageDosHeader {
  28     /// Magic number
  29     pub e_magic: U16<LE>,
  30     /// Bytes on last page of file
  31     pub e_cblp: U16<LE>,
  32     /// Pages in file
  33     pub e_cp: U16<LE>,
  34     /// Relocations
  35     pub e_crlc: U16<LE>,
  36     /// Size of header in paragraphs
  37     pub e_cparhdr: U16<LE>,
  38     /// Minimum extra paragraphs needed
  39     pub e_minalloc: U16<LE>,
  40     /// Maximum extra paragraphs needed
  41     pub e_maxalloc: U16<LE>,
  42     /// Initial (relative) SS value
  43     pub e_ss: U16<LE>,
  44     /// Initial SP value
  45     pub e_sp: U16<LE>,
  46     /// Checksum
  47     pub e_csum: U16<LE>,
  48     /// Initial IP value
  49     pub e_ip: U16<LE>,
  50     /// Initial (relative) CS value
  51     pub e_cs: U16<LE>,
  52     /// File address of relocation table
  53     pub e_lfarlc: U16<LE>,
  54     /// Overlay number
  55     pub e_ovno: U16<LE>,
  56     /// Reserved words
  57     pub e_res: [U16<LE>; 4],
  58     /// OEM identifier (for e_oeminfo)
  59     pub e_oemid: U16<LE>,
  60     /// OEM information; e_oemid specific
  61     pub e_oeminfo: U16<LE>,
  62     /// Reserved words
  63     pub e_res2: [U16<LE>; 10],
  64     /// File address of new exe header
  65     pub e_lfanew: U32<LE>,
  66 }
  67
  68 /// OS/2 .EXE header
  69 #[derive(Debug, Clone, Copy)]
  70 #[repr(C)]
  71 pub struct ImageOs2Header {
  72     /// Magic number
  73     pub ne_magic: U16<LE>,
  74     /// Version number
  75     pub ne_ver: i8,
  76     /// Revision number
  77     pub ne_rev: i8,
  78     /// Offset of Entry Table
  79     pub ne_enttab: U16<LE>,
  80     /// Number of bytes in Entry Table
  81     pub ne_cbenttab: U16<LE>,
  82     /// Checksum of whole file
  83     pub ne_crc: I32<LE>,
  84     /// Flag word
  85     pub ne_flags: U16<LE>,
  86     /// Automatic data segment number
  87     pub ne_autodata: U16<LE>,
  88     /// Initial heap allocation
  89     pub ne_heap: U16<LE>,
  90     /// Initial stack allocation
  91     pub ne_stack: U16<LE>,
  92     /// Initial CS:IP setting
  93     pub ne_csip: I32<LE>,
  94     /// Initial SS:SP setting
  95     pub ne_sssp: I32<LE>,
  96     /// Count of file segments
  97     pub ne_cseg: U16<LE>,
  98     /// Entries in Module Reference Table
  99     pub ne_cmod: U16<LE>,
 100     /// Size of non-resident name table
 101     pub ne_cbnrestab: U16<LE>,
 102     /// Offset of Segment Table
 103     pub ne_segtab: U16<LE>,
 104     /// Offset of Resource Table
 105     pub ne_rsrctab: U16<LE>,
 106     /// Offset of resident name table
 107     pub ne_restab: U16<LE>,
 108     /// Offset of Module Reference Table
 109     pub ne_modtab: U16<LE>,
 110     /// Offset of Imported Names Table
 111     pub ne_imptab: U16<LE>,
 112     /// Offset of Non-resident Names Table
 113     pub ne_nrestab: I32<LE>,
 114     /// Count of movable entries
 115     pub ne_cmovent: U16<LE>,
 116     /// Segment alignment shift count
 117     pub ne_align: U16<LE>,
 118     /// Count of resource segments
 119     pub ne_cres: U16<LE>,
 120     /// Target Operating system
 121     pub ne_exetyp: u8,
 122     /// Other .EXE flags
 123     pub ne_flagsothers: u8,
 124     /// offset to return thunks
 125     pub ne_pretthunks: U16<LE>,
 126     /// offset to segment ref. bytes
 127     pub ne_psegrefbytes: U16<LE>,
 128     /// Minimum code swap area size
 129     pub ne_swaparea: U16<LE>,
 130     /// Expected Windows version number
 131     pub ne_expver: U16<LE>,
 132 }
 133
 134 /// Windows VXD header
 135 #[derive(Debug, Clone, Copy)]
 136 #[repr(C)]
 137 pub struct ImageVxdHeader {
 138     /// Magic number
 139     pub e32_magic: U16<LE>,
 140     /// The byte ordering for the VXD
 141     pub e32_border: u8,
 142     /// The word ordering for the VXD
 143     pub e32_worder: u8,
 144     /// The EXE format level for now = 0
 145     pub e32_level: U32<LE>,
 146     /// The CPU type
 147     pub e32_cpu: U16<LE>,
 148     /// The OS type
 149     pub e32_os: U16<LE>,
 150     /// Module version
 151     pub e32_ver: U32<LE>,
 152     /// Module flags
 153     pub e32_mflags: U32<LE>,
 154     /// Module # pages
 155     pub e32_mpages: U32<LE>,
 156     /// Object # for instruction pointer
 157     pub e32_startobj: U32<LE>,
 158     /// Extended instruction pointer
 159     pub e32_eip: U32<LE>,
 160     /// Object # for stack pointer
 161     pub e32_stackobj: U32<LE>,
 162     /// Extended stack pointer
 163     pub e32_esp: U32<LE>,
 164     /// VXD page size
 165     pub e32_pagesize: U32<LE>,
 166     /// Last page size in VXD
 167     pub e32_lastpagesize: U32<LE>,
 168     /// Fixup section size
 169     pub e32_fixupsize: U32<LE>,
 170     /// Fixup section checksum
 171     pub e32_fixupsum: U32<LE>,
 172     /// Loader section size
 173     pub e32_ldrsize: U32<LE>,
 174     /// Loader section checksum
 175     pub e32_ldrsum: U32<LE>,
 176     /// Object table offset
 177     pub e32_objtab: U32<LE>,
 178     /// Number of objects in module
 179     pub e32_objcnt: U32<LE>,
 180     /// Object page map offset
 181     pub e32_objmap: U32<LE>,
 182     /// Object iterated data map offset
 183     pub e32_itermap: U32<LE>,
 184     /// Offset of Resource Table
 185     pub e32_rsrctab: U32<LE>,
 186     /// Number of resource entries
 187     pub e32_rsrccnt: U32<LE>,
 188     /// Offset of resident name table
 189     pub e32_restab: U32<LE>,
 190     /// Offset of Entry Table
 191     pub e32_enttab: U32<LE>,
 192     /// Offset of Module Directive Table
 193     pub e32_dirtab: U32<LE>,
 194     /// Number of module directives
 195     pub e32_dircnt: U32<LE>,
 196     /// Offset of Fixup Page Table
 197     pub e32_fpagetab: U32<LE>,
 198     /// Offset of Fixup Record Table
 199     pub e32_frectab: U32<LE>,
 200     /// Offset of Import Module Name Table
 201     pub e32_impmod: U32<LE>,
 202     /// Number of entries in Import Module Name Table
 203     pub e32_impmodcnt: U32<LE>,
 204     /// Offset of Import Procedure Name Table
 205     pub e32_impproc: U32<LE>,
 206     /// Offset of Per-Page Checksum Table
 207     pub e32_pagesum: U32<LE>,
 208     /// Offset of Enumerated Data Pages
 209     pub e32_datapage: U32<LE>,
 210     /// Number of preload pages
 211     pub e32_preload: U32<LE>,
 212     /// Offset of Non-resident Names Table
 213     pub e32_nrestab: U32<LE>,
 214     /// Size of Non-resident Name Table
 215     pub e32_cbnrestab: U32<LE>,
 216     /// Non-resident Name Table Checksum
 217     pub e32_nressum: U32<LE>,
 218     /// Object # for automatic data object
 219     pub e32_autodata: U32<LE>,
 220     /// Offset of the debugging information
 221     pub e32_debuginfo: U32<LE>,
 222     /// The length of the debugging info. in bytes
 223     pub e32_debuglen: U32<LE>,
 224     /// Number of instance pages in preload section of VXD file
 225     pub e32_instpreload: U32<LE>,
 226     /// Number of instance pages in demand load section of VXD file
 227     pub e32_instdemand: U32<LE>,
 228     /// Size of heap - for 16-bit apps
 229     pub e32_heapsize: U32<LE>,
 230     /// Reserved words
 231     pub e32_res3: [u8; 12],
 232     pub e32_winresoff: U32<LE>,
 233     pub e32_winreslen: U32<LE>,
 234     /// Device ID for VxD
 235     pub e32_devid: U16<LE>,
 236     /// DDK version for VxD
 237     pub e32_ddkver: U16<LE>,
 238 }
 239
 240 /// A PE rich header entry.
 241 ///
 242 /// Rich headers have no official documentation, but have been heavily
 243 /// reversed-engineered and documented in the wild, e.g.:
 244 /// * `http://www.ntcore.com/files/richsign.htm`
 245 /// * `https://www.researchgate.net/figure/Structure-of-the-Rich-Header_fig1_318145388`
 246 ///
 247 /// This data is "masked", i.e. XORed with a checksum derived from the file data.
 248 #[derive(Debug, Clone, Copy)]
 249 #[repr(C)]
 250 pub struct MaskedRichHeaderEntry {
 251     pub masked_comp_id: U32<LE>,
 252     pub masked_count: U32<LE>,
 253 }
 254
 255 //
 256 // File header format.
 257 //
 258
 259 #[derive(Debug, Clone, Copy)]
 260 #[repr(C)]
 261 pub struct ImageFileHeader {
 262     pub machine: U16<LE>,
 263     pub number_of_sections: U16<LE>,
 264     pub time_date_stamp: U32<LE>,
 265     pub pointer_to_symbol_table: U32<LE>,
 266     pub number_of_symbols: U32<LE>,
 267     pub size_of_optional_header: U16<LE>,
 268     pub characteristics: U16<LE>,
 269 }
 270
 271 pub const IMAGE_SIZEOF_FILE_HEADER: usize = 20;
 272
 273 /// Relocation info stripped from file.
 274 pub const IMAGE_FILE_RELOCS_STRIPPED: u16 = 0x0001;
 275 /// File is executable  (i.e. no unresolved external references).
 276 pub const IMAGE_FILE_EXECUTABLE_IMAGE: u16 = 0x0002;
 277 /// Line nunbers stripped from file.
 278 pub const IMAGE_FILE_LINE_NUMS_STRIPPED: u16 = 0x0004;
 279 /// Local symbols stripped from file.
 280 pub const IMAGE_FILE_LOCAL_SYMS_STRIPPED: u16 = 0x0008;
 281 /// Aggressively trim working set
 282 pub const IMAGE_FILE_AGGRESIVE_WS_TRIM: u16 = 0x0010;
 283 /// App can handle >2gb addresses
 284 pub const IMAGE_FILE_LARGE_ADDRESS_AWARE: u16 = 0x0020;
 285 /// Bytes of machine word are reversed.
 286 pub const IMAGE_FILE_BYTES_REVERSED_LO: u16 = 0x0080;
 287 /// 32 bit word machine.
 288 pub const IMAGE_FILE_32BIT_MACHINE: u16 = 0x0100;
 289 /// Debugging info stripped from file in .DBG file
 290 pub const IMAGE_FILE_DEBUG_STRIPPED: u16 = 0x0200;
 291 /// If Image is on removable media, copy and run from the swap file.
 292 pub const IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP: u16 = 0x0400;
 293 /// If Image is on Net, copy and run from the swap file.
 294 pub const IMAGE_FILE_NET_RUN_FROM_SWAP: u16 = 0x0800;
 295 /// System File.
 296 pub const IMAGE_FILE_SYSTEM: u16 = 0x1000;
 297 /// File is a DLL.
 298 pub const IMAGE_FILE_DLL: u16 = 0x2000;
 299 /// File should only be run on a UP machine
 300 pub const IMAGE_FILE_UP_SYSTEM_ONLY: u16 = 0x4000;
 301 /// Bytes of machine word are reversed.
 302 pub const IMAGE_FILE_BYTES_REVERSED_HI: u16 = 0x8000;
 303
 304 pub const IMAGE_FILE_MACHINE_UNKNOWN: u16 = 0;
 305 /// Useful for indicating we want to interact with the host and not a WoW guest.
 306 pub const IMAGE_FILE_MACHINE_TARGET_HOST: u16 = 0x0001;
 307 /// Intel 386.
 308 pub const IMAGE_FILE_MACHINE_I386: u16 = 0x014c;
 309 /// MIPS little-endian, 0x160 big-endian
 310 pub const IMAGE_FILE_MACHINE_R3000: u16 = 0x0162;
 311 /// MIPS little-endian
 312 pub const IMAGE_FILE_MACHINE_R4000: u16 = 0x0166;
 313 /// MIPS little-endian
 314 pub const IMAGE_FILE_MACHINE_R10000: u16 = 0x0168;
 315 /// MIPS little-endian WCE v2
 316 pub const IMAGE_FILE_MACHINE_WCEMIPSV2: u16 = 0x0169;
 317 /// Alpha_AXP
 318 pub const IMAGE_FILE_MACHINE_ALPHA: u16 = 0x0184;
 319 /// SH3 little-endian
 320 pub const IMAGE_FILE_MACHINE_SH3: u16 = 0x01a2;
 321 pub const IMAGE_FILE_MACHINE_SH3DSP: u16 = 0x01a3;
 322 /// SH3E little-endian
 323 pub const IMAGE_FILE_MACHINE_SH3E: u16 = 0x01a4;
 324 /// SH4 little-endian
 325 pub const IMAGE_FILE_MACHINE_SH4: u16 = 0x01a6;
 326 /// SH5
 327 pub const IMAGE_FILE_MACHINE_SH5: u16 = 0x01a8;
 328 /// ARM Little-Endian
 329 pub const IMAGE_FILE_MACHINE_ARM: u16 = 0x01c0;
 330 /// ARM Thumb/Thumb-2 Little-Endian
 331 pub const IMAGE_FILE_MACHINE_THUMB: u16 = 0x01c2;
 332 /// ARM Thumb-2 Little-Endian
 333 pub const IMAGE_FILE_MACHINE_ARMNT: u16 = 0x01c4;
 334 pub const IMAGE_FILE_MACHINE_AM33: u16 = 0x01d3;
 335 /// IBM PowerPC Little-Endian
 336 pub const IMAGE_FILE_MACHINE_POWERPC: u16 = 0x01F0;
 337 pub const IMAGE_FILE_MACHINE_POWERPCFP: u16 = 0x01f1;
 338 /// Intel 64
 339 pub const IMAGE_FILE_MACHINE_IA64: u16 = 0x0200;
 340 /// MIPS
 341 pub const IMAGE_FILE_MACHINE_MIPS16: u16 = 0x0266;
 342 /// ALPHA64
 343 pub const IMAGE_FILE_MACHINE_ALPHA64: u16 = 0x0284;
 344 /// MIPS
 345 pub const IMAGE_FILE_MACHINE_MIPSFPU: u16 = 0x0366;
 346 /// MIPS
 347 pub const IMAGE_FILE_MACHINE_MIPSFPU16: u16 = 0x0466;
 348 pub const IMAGE_FILE_MACHINE_AXP64: u16 = IMAGE_FILE_MACHINE_ALPHA64;
 349 /// Infineon
 350 pub const IMAGE_FILE_MACHINE_TRICORE: u16 = 0x0520;
 351 pub const IMAGE_FILE_MACHINE_CEF: u16 = 0x0CEF;
 352 /// EFI Byte Code
 353 pub const IMAGE_FILE_MACHINE_EBC: u16 = 0x0EBC;
 354 /// AMD64 (K8)
 355 pub const IMAGE_FILE_MACHINE_AMD64: u16 = 0x8664;
 356 /// M32R little-endian
 357 pub const IMAGE_FILE_MACHINE_M32R: u16 = 0x9041;
 358 /// ARM64 Little-Endian
 359 pub const IMAGE_FILE_MACHINE_ARM64: u16 = 0xAA64;
 360 pub const IMAGE_FILE_MACHINE_CEE: u16 = 0xC0EE;
 361 /// RISCV32
 362 pub const IMAGE_FILE_MACHINE_RISCV32: u16 = 0x5032;
 363 /// RISCV64
 364 pub const IMAGE_FILE_MACHINE_RISCV64: u16 = 0x5064;
 365 /// RISCV128
 366 pub const IMAGE_FILE_MACHINE_RISCV128: u16 = 0x5128;
 367
 368 //
 369 // Directory format.
 370 //
 371
 372 #[derive(Debug, Clone, Copy)]
 373 #[repr(C)]
 374 pub struct ImageDataDirectory {
 375     pub virtual_address: U32<LE>,
 376     pub size: U32<LE>,
 377 }
 378
 379 pub const IMAGE_NUMBEROF_DIRECTORY_ENTRIES: usize = 16;
 380
 381 //
 382 // Optional header format.
 383 //
 384
 385 #[derive(Debug, Clone, Copy)]
 386 #[repr(C)]
 387 pub struct ImageOptionalHeader32 {
 388     // Standard fields.
 389     pub magic: U16<LE>,
 390     pub major_linker_version: u8,
 391     pub minor_linker_version: u8,
 392     pub size_of_code: U32<LE>,
 393     pub size_of_initialized_data: U32<LE>,
 394     pub size_of_uninitialized_data: U32<LE>,
 395     pub address_of_entry_point: U32<LE>,
 396     pub base_of_code: U32<LE>,
 397     pub base_of_data: U32<LE>,
 398
 399     // NT additional fields.
 400     pub image_base: U32<LE>,
 401     pub section_alignment: U32<LE>,
 402     pub file_alignment: U32<LE>,
 403     pub major_operating_system_version: U16<LE>,
 404     pub minor_operating_system_version: U16<LE>,
 405     pub major_image_version: U16<LE>,
 406     pub minor_image_version: U16<LE>,
 407     pub major_subsystem_version: U16<LE>,
 408     pub minor_subsystem_version: U16<LE>,
 409     pub win32_version_value: U32<LE>,
 410     pub size_of_image: U32<LE>,
 411     pub size_of_headers: U32<LE>,
 412     pub check_sum: U32<LE>,
 413     pub subsystem: U16<LE>,
 414     pub dll_characteristics: U16<LE>,
 415     pub size_of_stack_reserve: U32<LE>,
 416     pub size_of_stack_commit: U32<LE>,
 417     pub size_of_heap_reserve: U32<LE>,
 418     pub size_of_heap_commit: U32<LE>,
 419     pub loader_flags: U32<LE>,
 420     pub number_of_rva_and_sizes: U32<LE>,
 421     //pub data_directory: [ImageDataDirectory; IMAGE_NUMBEROF_DIRECTORY_ENTRIES],
 422 }
 423
 424 #[derive(Debug, Clone, Copy)]
 425 #[repr(C)]
 426 pub struct ImageRomOptionalHeader {
 427     pub magic: U16<LE>,
 428     pub major_linker_version: u8,
 429     pub minor_linker_version: u8,
 430     pub size_of_code: U32<LE>,
 431     pub size_of_initialized_data: U32<LE>,
 432     pub size_of_uninitialized_data: U32<LE>,
 433     pub address_of_entry_point: U32<LE>,
 434     pub base_of_code: U32<LE>,
 435     pub base_of_data: U32<LE>,
 436     pub base_of_bss: U32<LE>,
 437     pub gpr_mask: U32<LE>,
 438     pub cpr_mask: [U32<LE>; 4],
 439     pub gp_value: U32<LE>,
 440 }
 441
 442 #[derive(Debug, Clone, Copy)]
 443 #[repr(C)]
 444 pub struct ImageOptionalHeader64 {
 445     pub magic: U16<LE>,
 446     pub major_linker_version: u8,
 447     pub minor_linker_version: u8,
 448     pub size_of_code: U32<LE>,
 449     pub size_of_initialized_data: U32<LE>,
 450     pub size_of_uninitialized_data: U32<LE>,
 451     pub address_of_entry_point: U32<LE>,
 452     pub base_of_code: U32<LE>,
 453     pub image_base: U64<LE>,
 454     pub section_alignment: U32<LE>,
 455     pub file_alignment: U32<LE>,
 456     pub major_operating_system_version: U16<LE>,
 457     pub minor_operating_system_version: U16<LE>,
 458     pub major_image_version: U16<LE>,
 459     pub minor_image_version: U16<LE>,
 460     pub major_subsystem_version: U16<LE>,
 461     pub minor_subsystem_version: U16<LE>,
 462     pub win32_version_value: U32<LE>,
 463     pub size_of_image: U32<LE>,
 464     pub size_of_headers: U32<LE>,
 465     pub check_sum: U32<LE>,
 466     pub subsystem: U16<LE>,
 467     pub dll_characteristics: U16<LE>,
 468     pub size_of_stack_reserve: U64<LE>,
 469     pub size_of_stack_commit: U64<LE>,
 470     pub size_of_heap_reserve: U64<LE>,
 471     pub size_of_heap_commit: U64<LE>,
 472     pub loader_flags: U32<LE>,
 473     pub number_of_rva_and_sizes: U32<LE>,
 474     //pub data_directory: [ImageDataDirectory; IMAGE_NUMBEROF_DIRECTORY_ENTRIES],
 475 }
 476
 477 pub const IMAGE_NT_OPTIONAL_HDR32_MAGIC: u16 = 0x10b;
 478 pub const IMAGE_NT_OPTIONAL_HDR64_MAGIC: u16 = 0x20b;
 479 pub const IMAGE_ROM_OPTIONAL_HDR_MAGIC: u16 = 0x107;
 480
 481 #[derive(Debug, Clone, Copy)]
 482 #[repr(C)]
 483 pub struct ImageNtHeaders64 {
 484     pub signature: U32<LE>,
 485     pub file_header: ImageFileHeader,
 486     pub optional_header: ImageOptionalHeader64,
 487 }
 488
 489 #[derive(Debug, Clone, Copy)]
 490 #[repr(C)]
 491 pub struct ImageNtHeaders32 {
 492     pub signature: U32<LE>,
 493     pub file_header: ImageFileHeader,
 494     pub optional_header: ImageOptionalHeader32,
 495 }
 496
 497 #[derive(Debug, Clone, Copy)]
 498 #[repr(C)]
 499 pub struct ImageRomHeaders {
 500     pub file_header: ImageFileHeader,
 501     pub optional_header: ImageRomOptionalHeader,
 502 }
 503
 504 // Values for `ImageOptionalHeader*::subsystem`.
 505
 506 /// Unknown subsystem.
 507 pub const IMAGE_SUBSYSTEM_UNKNOWN: u16 = 0;
 508 /// Image doesn't require a subsystem.
 509 pub const IMAGE_SUBSYSTEM_NATIVE: u16 = 1;
 510 /// Image runs in the Windows GUI subsystem.
 511 pub const IMAGE_SUBSYSTEM_WINDOWS_GUI: u16 = 2;
 512 /// Image runs in the Windows character subsystem.
 513 pub const IMAGE_SUBSYSTEM_WINDOWS_CUI: u16 = 3;
 514 /// image runs in the OS/2 character subsystem.
 515 pub const IMAGE_SUBSYSTEM_OS2_CUI: u16 = 5;
 516 /// image runs in the Posix character subsystem.
 517 pub const IMAGE_SUBSYSTEM_POSIX_CUI: u16 = 7;
 518 /// image is a native Win9x driver.
 519 pub const IMAGE_SUBSYSTEM_NATIVE_WINDOWS: u16 = 8;
 520 /// Image runs in the Windows CE subsystem.
 521 pub const IMAGE_SUBSYSTEM_WINDOWS_CE_GUI: u16 = 9;
 522 pub const IMAGE_SUBSYSTEM_EFI_APPLICATION: u16 = 10;
 523 pub const IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER: u16 = 11;
 524 pub const IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER: u16 = 12;
 525 pub const IMAGE_SUBSYSTEM_EFI_ROM: u16 = 13;
 526 pub const IMAGE_SUBSYSTEM_XBOX: u16 = 14;
 527 pub const IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION: u16 = 16;
 528 pub const IMAGE_SUBSYSTEM_XBOX_CODE_CATALOG: u16 = 17;
 529
 530 // Values for `ImageOptionalHeader*::dll_characteristics`.
 531
 532 //      IMAGE_LIBRARY_PROCESS_INIT            0x0001     // Reserved.
 533 //      IMAGE_LIBRARY_PROCESS_TERM            0x0002     // Reserved.
 534 //      IMAGE_LIBRARY_THREAD_INIT             0x0004     // Reserved.
 535 //      IMAGE_LIBRARY_THREAD_TERM             0x0008     // Reserved.
 536 /// Image can handle a high entropy 64-bit virtual address space.
 537 pub const IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA: u16 = 0x0020;
 538 /// DLL can move.
 539 pub const IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE: u16 = 0x0040;
 540 /// Code Integrity Image
 541 pub const IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY: u16 = 0x0080;
 542 /// Image is NX compatible
 543 pub const IMAGE_DLLCHARACTERISTICS_NX_COMPAT: u16 = 0x0100;
 544 /// Image understands isolation and doesn't want it
 545 pub const IMAGE_DLLCHARACTERISTICS_NO_ISOLATION: u16 = 0x0200;
 546 /// Image does not use SEH.  No SE handler may reside in this image
 547 pub const IMAGE_DLLCHARACTERISTICS_NO_SEH: u16 = 0x0400;
 548 /// Do not bind this image.
 549 pub const IMAGE_DLLCHARACTERISTICS_NO_BIND: u16 = 0x0800;
 550 /// Image should execute in an AppContainer
 551 pub const IMAGE_DLLCHARACTERISTICS_APPCONTAINER: u16 = 0x1000;
 552 /// Driver uses WDM model
 553 pub const IMAGE_DLLCHARACTERISTICS_WDM_DRIVER: u16 = 0x2000;
 554 /// Image supports Control Flow Guard.
 555 pub const IMAGE_DLLCHARACTERISTICS_GUARD_CF: u16 = 0x4000;
 556 pub const IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE: u16 = 0x8000;
 557
 558 // Indices for `ImageOptionalHeader*::data_directory`.
 559
 560 /// Export Directory
 561 pub const IMAGE_DIRECTORY_ENTRY_EXPORT: usize = 0;
 562 /// Import Directory
 563 pub const IMAGE_DIRECTORY_ENTRY_IMPORT: usize = 1;
 564 /// Resource Directory
 565 pub const IMAGE_DIRECTORY_ENTRY_RESOURCE: usize = 2;
 566 /// Exception Directory
 567 pub const IMAGE_DIRECTORY_ENTRY_EXCEPTION: usize = 3;
 568 /// Security Directory
 569 pub const IMAGE_DIRECTORY_ENTRY_SECURITY: usize = 4;
 570 /// Base Relocation Table
 571 pub const IMAGE_DIRECTORY_ENTRY_BASERELOC: usize = 5;
 572 /// Debug Directory
 573 pub const IMAGE_DIRECTORY_ENTRY_DEBUG: usize = 6;
 574 //      IMAGE_DIRECTORY_ENTRY_COPYRIGHT       7   // (X86 usage)
 575 /// Architecture Specific Data
 576 pub const IMAGE_DIRECTORY_ENTRY_ARCHITECTURE: usize = 7;
 577 /// RVA of GP
 578 pub const IMAGE_DIRECTORY_ENTRY_GLOBALPTR: usize = 8;
 579 /// TLS Directory
 580 pub const IMAGE_DIRECTORY_ENTRY_TLS: usize = 9;
 581 /// Load Configuration Directory
 582 pub const IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG: usize = 10;
 583 /// Bound Import Directory in headers
 584 pub const IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT: usize = 11;
 585 /// Import Address Table
 586 pub const IMAGE_DIRECTORY_ENTRY_IAT: usize = 12;
 587 /// Delay Load Import Descriptors
 588 pub const IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT: usize = 13;
 589 /// COM Runtime descriptor
 590 pub const IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR: usize = 14;
 591
 592 #[derive(Debug, Clone, Copy)]
 593 #[repr(C)]
 594 pub struct Guid {
 595     pub data1: U32<LE>,
 596     pub data2: U16<LE>,
 597     pub data3: U16<LE>,
 598     pub data4: [u8; 8],
 599 }
 600
 601 pub type ClsId = Guid;
 602
 603 /// Non-COFF Object file header
 604 #[derive(Debug, Clone, Copy)]
 605 #[repr(C)]
 606 pub struct AnonObjectHeader {
 607     /// Must be IMAGE_FILE_MACHINE_UNKNOWN
 608     pub sig1: U16<LE>,
 609     /// Must be 0xffff
 610     pub sig2: U16<LE>,
 611     /// >= 1 (implies the ClsId field is present)
 612     pub version: U16<LE>,
 613     pub machine: U16<LE>,
 614     pub time_date_stamp: U32<LE>,
 615     /// Used to invoke CoCreateInstance
 616     pub class_id: ClsId,
 617     /// Size of data that follows the header
 618     pub size_of_data: U32<LE>,
 619 }
 620
 621 #[derive(Debug, Clone, Copy)]
 622 #[repr(C)]
 623 pub struct AnonObjectHeaderV2 {
 624     /// Must be IMAGE_FILE_MACHINE_UNKNOWN
 625     pub sig1: U16<LE>,
 626     /// Must be 0xffff
 627     pub sig2: U16<LE>,
 628     /// >= 2 (implies the Flags field is present - otherwise V1)
 629     pub version: U16<LE>,
 630     pub machine: U16<LE>,
 631     pub time_date_stamp: U32<LE>,
 632     /// Used to invoke CoCreateInstance
 633     pub class_id: ClsId,
 634     /// Size of data that follows the header
 635     pub size_of_data: U32<LE>,
 636     /// 0x1 -> contains metadata
 637     pub flags: U32<LE>,
 638     /// Size of CLR metadata
 639     pub meta_data_size: U32<LE>,
 640     /// Offset of CLR metadata
 641     pub meta_data_offset: U32<LE>,
 642 }
 643
 644 #[derive(Debug, Clone, Copy)]
 645 #[repr(C)]
 646 pub struct AnonObjectHeaderBigobj {
 647     /* same as ANON_OBJECT_HEADER_V2 */
 648     /// Must be IMAGE_FILE_MACHINE_UNKNOWN
 649     pub sig1: U16<LE>,
 650     /// Must be 0xffff
 651     pub sig2: U16<LE>,
 652     /// >= 2 (implies the Flags field is present)
 653     pub version: U16<LE>,
 654     /// Actual machine - IMAGE_FILE_MACHINE_xxx
 655     pub machine: U16<LE>,
 656     pub time_date_stamp: U32<LE>,
 657     /// {D1BAA1C7-BAEE-4ba9-AF20-FAF66AA4DCB8}
 658     pub class_id: ClsId,
 659     /// Size of data that follows the header
 660     pub size_of_data: U32<LE>,
 661     /// 0x1 -> contains metadata
 662     pub flags: U32<LE>,
 663     /// Size of CLR metadata
 664     pub meta_data_size: U32<LE>,
 665     /// Offset of CLR metadata
 666     pub meta_data_offset: U32<LE>,
 667
 668     /* bigobj specifics */
 669     /// extended from WORD
 670     pub number_of_sections: U32<LE>,
 671     pub pointer_to_symbol_table: U32<LE>,
 672     pub number_of_symbols: U32<LE>,
 673 }
 674
 675 pub const IMAGE_SIZEOF_SHORT_NAME: usize = 8;
 676
 677 //
 678 // Section header format.
 679 //
 680
 681 #[derive(Debug, Default, Clone, Copy)]
 682 #[repr(C)]
 683 pub struct ImageSectionHeader {
 684     pub name: [u8; IMAGE_SIZEOF_SHORT_NAME],
 685     pub virtual_size: U32<LE>,
 686     pub virtual_address: U32<LE>,
 687     pub size_of_raw_data: U32<LE>,
 688     pub pointer_to_raw_data: U32<LE>,
 689     pub pointer_to_relocations: U32<LE>,
 690     pub pointer_to_linenumbers: U32<LE>,
 691     pub number_of_relocations: U16<LE>,
 692     pub number_of_linenumbers: U16<LE>,
 693     pub characteristics: U32<LE>,
 694 }
 695
 696 pub const IMAGE_SIZEOF_SECTION_HEADER: usize = 40;
 697
 698 // Values for `ImageSectionHeader::characteristics`.
 699
 700 //      IMAGE_SCN_TYPE_REG                   0x00000000  // Reserved.
 701 //      IMAGE_SCN_TYPE_DSECT                 0x00000001  // Reserved.
 702 //      IMAGE_SCN_TYPE_NOLOAD                0x00000002  // Reserved.
 703 //      IMAGE_SCN_TYPE_GROUP                 0x00000004  // Reserved.
 704 /// Reserved.
 705 pub const IMAGE_SCN_TYPE_NO_PAD: u32 = 0x0000_0008;
 706 //      IMAGE_SCN_TYPE_COPY                  0x00000010  // Reserved.
 707
 708 /// Section contains code.
 709 pub const IMAGE_SCN_CNT_CODE: u32 = 0x0000_0020;
 710 /// Section contains initialized data.
 711 pub const IMAGE_SCN_CNT_INITIALIZED_DATA: u32 = 0x0000_0040;
 712 /// Section contains uninitialized data.
 713 pub const IMAGE_SCN_CNT_UNINITIALIZED_DATA: u32 = 0x0000_0080;
 714
 715 /// Reserved.
 716 pub const IMAGE_SCN_LNK_OTHER: u32 = 0x0000_0100;
 717 /// Section contains comments or some other type of information.
 718 pub const IMAGE_SCN_LNK_INFO: u32 = 0x0000_0200;
 719 //      IMAGE_SCN_TYPE_OVER                  0x00000400  // Reserved.
 720 /// Section contents will not become part of image.
 721 pub const IMAGE_SCN_LNK_REMOVE: u32 = 0x0000_0800;
 722 /// Section contents comdat.
 723 pub const IMAGE_SCN_LNK_COMDAT: u32 = 0x0000_1000;
 724 //                                           0x00002000  // Reserved.
 725 //      IMAGE_SCN_MEM_PROTECTED - Obsolete   0x00004000
 726 /// Reset speculative exceptions handling bits in the TLB entries for this section.
 727 pub const IMAGE_SCN_NO_DEFER_SPEC_EXC: u32 = 0x0000_4000;
 728 /// Section content can be accessed relative to GP
 729 pub const IMAGE_SCN_GPREL: u32 = 0x0000_8000;
 730 pub const IMAGE_SCN_MEM_FARDATA: u32 = 0x0000_8000;
 731 //      IMAGE_SCN_MEM_SYSHEAP  - Obsolete    0x00010000
 732 pub const IMAGE_SCN_MEM_PURGEABLE: u32 = 0x0002_0000;
 733 pub const IMAGE_SCN_MEM_16BIT: u32 = 0x0002_0000;
 734 pub const IMAGE_SCN_MEM_LOCKED: u32 = 0x0004_0000;
 735 pub const IMAGE_SCN_MEM_PRELOAD: u32 = 0x0008_0000;
 736
 737 pub const IMAGE_SCN_ALIGN_1BYTES: u32 = 0x0010_0000;
 738 pub const IMAGE_SCN_ALIGN_2BYTES: u32 = 0x0020_0000;
 739 pub const IMAGE_SCN_ALIGN_4BYTES: u32 = 0x0030_0000;
 740 pub const IMAGE_SCN_ALIGN_8BYTES: u32 = 0x0040_0000;
 741 /// Default alignment if no others are specified.
 742 pub const IMAGE_SCN_ALIGN_16BYTES: u32 = 0x0050_0000;
 743 pub const IMAGE_SCN_ALIGN_32BYTES: u32 = 0x0060_0000;
 744 pub const IMAGE_SCN_ALIGN_64BYTES: u32 = 0x0070_0000;
 745 pub const IMAGE_SCN_ALIGN_128BYTES: u32 = 0x0080_0000;
 746 pub const IMAGE_SCN_ALIGN_256BYTES: u32 = 0x0090_0000;
 747 pub const IMAGE_SCN_ALIGN_512BYTES: u32 = 0x00A0_0000;
 748 pub const IMAGE_SCN_ALIGN_1024BYTES: u32 = 0x00B0_0000;
 749 pub const IMAGE_SCN_ALIGN_2048BYTES: u32 = 0x00C0_0000;
 750 pub const IMAGE_SCN_ALIGN_4096BYTES: u32 = 0x00D0_0000;
 751 pub const IMAGE_SCN_ALIGN_8192BYTES: u32 = 0x00E0_0000;
 752 // Unused                                    0x00F0_0000
 753 pub const IMAGE_SCN_ALIGN_MASK: u32 = 0x00F0_0000;
 754
 755 /// Section contains extended relocations.
 756 pub const IMAGE_SCN_LNK_NRELOC_OVFL: u32 = 0x0100_0000;
 757 /// Section can be discarded.
 758 pub const IMAGE_SCN_MEM_DISCARDABLE: u32 = 0x0200_0000;
 759 /// Section is not cachable.
 760 pub const IMAGE_SCN_MEM_NOT_CACHED: u32 = 0x0400_0000;
 761 /// Section is not pageable.
 762 pub const IMAGE_SCN_MEM_NOT_PAGED: u32 = 0x0800_0000;
 763 /// Section is shareable.
 764 pub const IMAGE_SCN_MEM_SHARED: u32 = 0x1000_0000;
 765 /// Section is executable.
 766 pub const IMAGE_SCN_MEM_EXECUTE: u32 = 0x2000_0000;
 767 /// Section is readable.
 768 pub const IMAGE_SCN_MEM_READ: u32 = 0x4000_0000;
 769 /// Section is writeable.
 770 pub const IMAGE_SCN_MEM_WRITE: u32 = 0x8000_0000;
 771
 772 //
 773 // TLS Characteristic Flags
 774 //
 775 /// Tls index is scaled
 776 pub const IMAGE_SCN_SCALE_INDEX: u32 = 0x0000_0001;
 777
 778 //
 779 // Symbol format.
 780 //
 781
 782 // This struct has alignment 1.
 783 #[derive(Debug, Clone, Copy)]
 784 #[repr(C)]
 785 pub struct ImageSymbol {
 786     /// If first 4 bytes are 0, then second 4 bytes are offset into string table.
 787     pub name: [u8; 8],
 788     pub value: U32Bytes<LE>,
 789     pub section_number: U16Bytes<LE>,
 790     pub typ: U16Bytes<LE>,
 791     pub storage_class: u8,
 792     pub number_of_aux_symbols: u8,
 793 }
 794
 795 pub const IMAGE_SIZEOF_SYMBOL: usize = 18;
 796
 797 #[derive(Debug, Clone, Copy)]
 798 #[repr(C)]
 799 pub struct ImageSymbolBytes(pub [u8; IMAGE_SIZEOF_SYMBOL]);
 800
 801 // This struct has alignment 1.
 802 #[derive(Debug, Clone, Copy)]
 803 #[repr(C)]
 804 pub struct ImageSymbolEx {
 805     /// If first 4 bytes are 0, then second 4 bytes are offset into string table.
 806     pub name: [u8; 8],
 807     pub value: U32Bytes<LE>,
 808     pub section_number: U32Bytes<LE>,
 809     pub typ: U16Bytes<LE>,
 810     pub storage_class: u8,
 811     pub number_of_aux_symbols: u8,
 812 }
 813
 814 pub const IMAGE_SIZEOF_SYMBOL_EX: usize = 20;
 815
 816 #[derive(Debug, Clone, Copy)]
 817 #[repr(C)]
 818 pub struct ImageSymbolExBytes(pub [u8; IMAGE_SIZEOF_SYMBOL_EX]);
 819
 820 // Values for `ImageSymbol::section_number`.
 821 //
 822 // Symbols have a section number of the section in which they are
 823 // defined. Otherwise, section numbers have the following meanings:
 824
 825 /// Symbol is undefined or is common.
 826 pub const IMAGE_SYM_UNDEFINED: u16 = 0;
 827 /// Symbol is an absolute value.
 828 pub const IMAGE_SYM_ABSOLUTE: u16 = 0xffff;
 829 /// Symbol is a special debug item.
 830 pub const IMAGE_SYM_DEBUG: u16 = 0xfffe;
 831 /// Values 0xFF00-0xFFFF are special
 832 pub const IMAGE_SYM_SECTION_MAX: u16 = 0xFEFF;
 833 pub const IMAGE_SYM_SECTION_MAX_EX: u32 = 0x7fff_ffff;
 834
 835 // Values for `ImageSymbol::typ` (basic component).
 836
 837 /// no type.
 838 pub const IMAGE_SYM_TYPE_NULL: u16 = 0x0000;
 839 pub const IMAGE_SYM_TYPE_VOID: u16 = 0x0001;
 840 /// type character.
 841 pub const IMAGE_SYM_TYPE_CHAR: u16 = 0x0002;
 842 /// type short integer.
 843 pub const IMAGE_SYM_TYPE_SHORT: u16 = 0x0003;
 844 pub const IMAGE_SYM_TYPE_INT: u16 = 0x0004;
 845 pub const IMAGE_SYM_TYPE_LONG: u16 = 0x0005;
 846 pub const IMAGE_SYM_TYPE_FLOAT: u16 = 0x0006;
 847 pub const IMAGE_SYM_TYPE_DOUBLE: u16 = 0x0007;
 848 pub const IMAGE_SYM_TYPE_STRUCT: u16 = 0x0008;
 849 pub const IMAGE_SYM_TYPE_UNION: u16 = 0x0009;
 850 /// enumeration.
 851 pub const IMAGE_SYM_TYPE_ENUM: u16 = 0x000A;
 852 /// member of enumeration.
 853 pub const IMAGE_SYM_TYPE_MOE: u16 = 0x000B;
 854 pub const IMAGE_SYM_TYPE_BYTE: u16 = 0x000C;
 855 pub const IMAGE_SYM_TYPE_WORD: u16 = 0x000D;
 856 pub const IMAGE_SYM_TYPE_UINT: u16 = 0x000E;
 857 pub const IMAGE_SYM_TYPE_DWORD: u16 = 0x000F;
 858 pub const IMAGE_SYM_TYPE_PCODE: u16 = 0x8000;
 859
 860 // Values for `ImageSymbol::typ` (derived component).
 861
 862 /// no derived type.
 863 pub const IMAGE_SYM_DTYPE_NULL: u16 = 0;
 864 /// pointer.
 865 pub const IMAGE_SYM_DTYPE_POINTER: u16 = 1;
 866 /// function.
 867 pub const IMAGE_SYM_DTYPE_FUNCTION: u16 = 2;
 868 /// array.
 869 pub const IMAGE_SYM_DTYPE_ARRAY: u16 = 3;
 870
 871 // Values for `ImageSymbol::storage_class`.
 872 pub const IMAGE_SYM_CLASS_END_OF_FUNCTION: u8 = 0xff;
 873 pub const IMAGE_SYM_CLASS_NULL: u8 = 0x00;
 874 pub const IMAGE_SYM_CLASS_AUTOMATIC: u8 = 0x01;
 875 pub const IMAGE_SYM_CLASS_EXTERNAL: u8 = 0x02;
 876 pub const IMAGE_SYM_CLASS_STATIC: u8 = 0x03;
 877 pub const IMAGE_SYM_CLASS_REGISTER: u8 = 0x04;
 878 pub const IMAGE_SYM_CLASS_EXTERNAL_DEF: u8 = 0x05;
 879 pub const IMAGE_SYM_CLASS_LABEL: u8 = 0x06;
 880 pub const IMAGE_SYM_CLASS_UNDEFINED_LABEL: u8 = 0x07;
 881 pub const IMAGE_SYM_CLASS_MEMBER_OF_STRUCT: u8 = 0x08;
 882 pub const IMAGE_SYM_CLASS_ARGUMENT: u8 = 0x09;
 883 pub const IMAGE_SYM_CLASS_STRUCT_TAG: u8 = 0x0A;
 884 pub const IMAGE_SYM_CLASS_MEMBER_OF_UNION: u8 = 0x0B;
 885 pub const IMAGE_SYM_CLASS_UNION_TAG: u8 = 0x0C;
 886 pub const IMAGE_SYM_CLASS_TYPE_DEFINITION: u8 = 0x0D;
 887 pub const IMAGE_SYM_CLASS_UNDEFINED_STATIC: u8 = 0x0E;
 888 pub const IMAGE_SYM_CLASS_ENUM_TAG: u8 = 0x0F;
 889 pub const IMAGE_SYM_CLASS_MEMBER_OF_ENUM: u8 = 0x10;
 890 pub const IMAGE_SYM_CLASS_REGISTER_PARAM: u8 = 0x11;
 891 pub const IMAGE_SYM_CLASS_BIT_FIELD: u8 = 0x12;
 892
 893 pub const IMAGE_SYM_CLASS_FAR_EXTERNAL: u8 = 0x44;
 894
 895 pub const IMAGE_SYM_CLASS_BLOCK: u8 = 0x64;
 896 pub const IMAGE_SYM_CLASS_FUNCTION: u8 = 0x65;
 897 pub const IMAGE_SYM_CLASS_END_OF_STRUCT: u8 = 0x66;
 898 pub const IMAGE_SYM_CLASS_FILE: u8 = 0x67;
 899 // new
 900 pub const IMAGE_SYM_CLASS_SECTION: u8 = 0x68;
 901 pub const IMAGE_SYM_CLASS_WEAK_EXTERNAL: u8 = 0x69;
 902
 903 pub const IMAGE_SYM_CLASS_CLR_TOKEN: u8 = 0x6B;
 904
 905 // type packing constants
 906
 907 pub const N_BTMASK: u16 = 0x000F;
 908 pub const N_TMASK: u16 = 0x0030;
 909 pub const N_TMASK1: u16 = 0x00C0;
 910 pub const N_TMASK2: u16 = 0x00F0;
 911 pub const N_BTSHFT: usize = 4;
 912 pub const N_TSHIFT: usize = 2;
 913
 914 pub const IMAGE_SYM_DTYPE_SHIFT: usize = N_BTSHFT;
 915
 916 impl ImageSymbol {
 917     #[inline]
 918     pub fn base_type(&self) -> u16 {
 919         self.typ.get(LE) & N_BTMASK
 920     }
 921
 922     #[inline]
 923     pub fn derived_type(&self) -> u16 {
 924         (self.typ.get(LE) & N_TMASK) >> N_BTSHFT
 925     }
 926 }
 927
 928 impl ImageSymbolEx {
 929     #[inline]
 930     pub fn base_type(&self) -> u16 {
 931         self.typ.get(LE) & N_BTMASK
 932     }
 933
 934     #[inline]
 935     pub fn derived_type(&self) -> u16 {
 936         (self.typ.get(LE) & N_TMASK) >> N_BTSHFT
 937     }
 938 }
 939
 940 //
 941 // Auxiliary entry format.
 942 //
 943
 944 // Used for both ImageSymbol and ImageSymbolEx (with padding).
 945 // This struct has alignment 1.
 946 #[derive(Debug, Clone, Copy)]
 947 #[repr(C)]
 948 pub struct ImageAuxSymbolTokenDef {
 949     /// IMAGE_AUX_SYMBOL_TYPE
 950     pub aux_type: u8,
 951     /// Must be 0
 952     pub reserved1: u8,
 953     pub symbol_table_index: U32Bytes<LE>,
 954     /// Must be 0
 955     pub reserved2: [u8; 12],
 956 }
 957
 958 pub const IMAGE_AUX_SYMBOL_TYPE_TOKEN_DEF: u16 = 1;
 959
 960 /// Auxiliary symbol format 1: function definitions.
 961 // This struct has alignment 1.
 962 #[derive(Debug, Clone, Copy)]
 963 #[repr(C)]
 964 pub struct ImageAuxSymbolFunction {
 965     pub tag_index: U32Bytes<LE>,
 966     pub total_size: U32Bytes<LE>,
 967     pub pointer_to_linenumber: U32Bytes<LE>,
 968     pub pointer_to_next_function: U32Bytes<LE>,
 969     pub unused: [u8; 2],
 970 }
 971
 972 /// Auxiliary symbol format 2: .bf and .ef symbols.
 973 // This struct has alignment 1.
 974 #[derive(Debug, Clone, Copy)]
 975 #[repr(C)]
 976 pub struct ImageAuxSymbolFunctionBeginEnd {
 977     pub unused1: [u8; 4],
 978     /// declaration line number
 979     pub linenumber: U16Bytes<LE>,
 980     pub unused2: [u8; 6],
 981     pub pointer_to_next_function: U32Bytes<LE>,
 982     pub unused3: [u8; 2],
 983 }
 984
 985 /// Auxiliary symbol format 3: weak externals.
 986 ///
 987 /// Used for both `ImageSymbol` and `ImageSymbolEx` (both with padding).
 988 // This struct has alignment 1.
 989 #[derive(Debug, Clone, Copy)]
 990 #[repr(C)]
 991 pub struct ImageAuxSymbolWeak {
 992     /// the weak extern default symbol index
 993     pub weak_default_sym_index: U32Bytes<LE>,
 994     pub weak_search_type: U32Bytes<LE>,
 995 }
 996
 997 /// Auxiliary symbol format 5: sections.
 998 ///
 999 /// Used for both `ImageSymbol` and `ImageSymbolEx` (with padding).
1000 // This struct has alignment 1.
1001 #[derive(Debug, Clone, Copy)]
1002 #[repr(C)]
1003 pub struct ImageAuxSymbolSection {
1004     /// section length
1005     pub length: U32Bytes<LE>,
1006     /// number of relocation entries
1007     pub number_of_relocations: U16Bytes<LE>,
1008     /// number of line numbers
1009     pub number_of_linenumbers: U16Bytes<LE>,
1010     /// checksum for communal
1011     pub check_sum: U32Bytes<LE>,
1012     /// section number to associate with
1013     pub number: U16Bytes<LE>,
1014     /// communal selection type
1015     pub selection: u8,
1016     pub reserved: u8,
1017     /// high bits of the section number
1018     pub high_number: U16Bytes<LE>,
1019 }
1020
1021 // Used for both ImageSymbol and ImageSymbolEx (both with padding).
1022 // This struct has alignment 1.
1023 #[derive(Debug, Clone, Copy)]
1024 #[repr(C)]
1025 pub struct ImageAuxSymbolCrc {
1026     pub crc: U32Bytes<LE>,
1027 }
1028
1029 //
1030 // Communal selection types.
1031 //
1032
1033 pub const IMAGE_COMDAT_SELECT_NODUPLICATES: u8 = 1;
1034 pub const IMAGE_COMDAT_SELECT_ANY: u8 = 2;
1035 pub const IMAGE_COMDAT_SELECT_SAME_SIZE: u8 = 3;
1036 pub const IMAGE_COMDAT_SELECT_EXACT_MATCH: u8 = 4;
1037 pub const IMAGE_COMDAT_SELECT_ASSOCIATIVE: u8 = 5;
1038 pub const IMAGE_COMDAT_SELECT_LARGEST: u8 = 6;
1039 pub const IMAGE_COMDAT_SELECT_NEWEST: u8 = 7;
1040
1041 pub const IMAGE_WEAK_EXTERN_SEARCH_NOLIBRARY: u16 = 1;
1042 pub const IMAGE_WEAK_EXTERN_SEARCH_LIBRARY: u16 = 2;
1043 pub const IMAGE_WEAK_EXTERN_SEARCH_ALIAS: u16 = 3;
1044 pub const IMAGE_WEAK_EXTERN_ANTI_DEPENDENCY: u16 = 4;
1045
1046 //
1047 // Relocation format.
1048 //
1049
1050 // This struct has alignment 1.
1051 #[derive(Debug, Clone, Copy)]
1052 #[repr(C)]
1053 pub struct ImageRelocation {
1054     /// Also `RelocCount` when IMAGE_SCN_LNK_NRELOC_OVFL is set
1055     pub virtual_address: U32Bytes<LE>,
1056     pub symbol_table_index: U32Bytes<LE>,
1057     pub typ: U16Bytes<LE>,
1058 }
1059
1060 //
1061 // I386 relocation types.
1062 //
1063 /// Reference is absolute, no relocation is necessary
1064 pub const IMAGE_REL_I386_ABSOLUTE: u16 = 0x0000;
1065 /// Direct 16-bit reference to the symbols virtual address
1066 pub const IMAGE_REL_I386_DIR16: u16 = 0x0001;
1067 /// PC-relative 16-bit reference to the symbols virtual address
1068 pub const IMAGE_REL_I386_REL16: u16 = 0x0002;
1069 /// Direct 32-bit reference to the symbols virtual address
1070 pub const IMAGE_REL_I386_DIR32: u16 = 0x0006;
1071 /// Direct 32-bit reference to the symbols virtual address, base not included
1072 pub const IMAGE_REL_I386_DIR32NB: u16 = 0x0007;
1073 /// Direct 16-bit reference to the segment-selector bits of a 32-bit virtual address
1074 pub const IMAGE_REL_I386_SEG12: u16 = 0x0009;
1075 pub const IMAGE_REL_I386_SECTION: u16 = 0x000A;
1076 pub const IMAGE_REL_I386_SECREL: u16 = 0x000B;
1077 /// clr token
1078 pub const IMAGE_REL_I386_TOKEN: u16 = 0x000C;
1079 /// 7 bit offset from base of section containing target
1080 pub const IMAGE_REL_I386_SECREL7: u16 = 0x000D;
1081 /// PC-relative 32-bit reference to the symbols virtual address
1082 pub const IMAGE_REL_I386_REL32: u16 = 0x0014;
1083
1084 //
1085 // MIPS relocation types.
1086 //
1087 /// Reference is absolute, no relocation is necessary
1088 pub const IMAGE_REL_MIPS_ABSOLUTE: u16 = 0x0000;
1089 pub const IMAGE_REL_MIPS_REFHALF: u16 = 0x0001;
1090 pub const IMAGE_REL_MIPS_REFWORD: u16 = 0x0002;
1091 pub const IMAGE_REL_MIPS_JMPADDR: u16 = 0x0003;
1092 pub const IMAGE_REL_MIPS_REFHI: u16 = 0x0004;
1093 pub const IMAGE_REL_MIPS_REFLO: u16 = 0x0005;
1094 pub const IMAGE_REL_MIPS_GPREL: u16 = 0x0006;
1095 pub const IMAGE_REL_MIPS_LITERAL: u16 = 0x0007;
1096 pub const IMAGE_REL_MIPS_SECTION: u16 = 0x000A;
1097 pub const IMAGE_REL_MIPS_SECREL: u16 = 0x000B;
1098 /// Low 16-bit section relative referemce (used for >32k TLS)
1099 pub const IMAGE_REL_MIPS_SECRELLO: u16 = 0x000C;
1100 /// High 16-bit section relative reference (used for >32k TLS)
1101 pub const IMAGE_REL_MIPS_SECRELHI: u16 = 0x000D;
1102 /// clr token
1103 pub const IMAGE_REL_MIPS_TOKEN: u16 = 0x000E;
1104 pub const IMAGE_REL_MIPS_JMPADDR16: u16 = 0x0010;
1105 pub const IMAGE_REL_MIPS_REFWORDNB: u16 = 0x0022;
1106 pub const IMAGE_REL_MIPS_PAIR: u16 = 0x0025;
1107
1108 //
1109 // Alpha Relocation types.
1110 //
1111 pub const IMAGE_REL_ALPHA_ABSOLUTE: u16 = 0x0000;
1112 pub const IMAGE_REL_ALPHA_REFLONG: u16 = 0x0001;
1113 pub const IMAGE_REL_ALPHA_REFQUAD: u16 = 0x0002;
1114 pub const IMAGE_REL_ALPHA_GPREL32: u16 = 0x0003;
1115 pub const IMAGE_REL_ALPHA_LITERAL: u16 = 0x0004;
1116 pub const IMAGE_REL_ALPHA_LITUSE: u16 = 0x0005;
1117 pub const IMAGE_REL_ALPHA_GPDISP: u16 = 0x0006;
1118 pub const IMAGE_REL_ALPHA_BRADDR: u16 = 0x0007;
1119 pub const IMAGE_REL_ALPHA_HINT: u16 = 0x0008;
1120 pub const IMAGE_REL_ALPHA_INLINE_REFLONG: u16 = 0x0009;
1121 pub const IMAGE_REL_ALPHA_REFHI: u16 = 0x000A;
1122 pub const IMAGE_REL_ALPHA_REFLO: u16 = 0x000B;
1123 pub const IMAGE_REL_ALPHA_PAIR: u16 = 0x000C;
1124 pub const IMAGE_REL_ALPHA_MATCH: u16 = 0x000D;
1125 pub const IMAGE_REL_ALPHA_SECTION: u16 = 0x000E;
1126 pub const IMAGE_REL_ALPHA_SECREL: u16 = 0x000F;
1127 pub const IMAGE_REL_ALPHA_REFLONGNB: u16 = 0x0010;
1128 /// Low 16-bit section relative reference
1129 pub const IMAGE_REL_ALPHA_SECRELLO: u16 = 0x0011;
1130 /// High 16-bit section relative reference
1131 pub const IMAGE_REL_ALPHA_SECRELHI: u16 = 0x0012;
1132 /// High 16 bits of 48 bit reference
1133 pub const IMAGE_REL_ALPHA_REFQ3: u16 = 0x0013;
1134 /// Middle 16 bits of 48 bit reference
1135 pub const IMAGE_REL_ALPHA_REFQ2: u16 = 0x0014;
1136 /// Low 16 bits of 48 bit reference
1137 pub const IMAGE_REL_ALPHA_REFQ1: u16 = 0x0015;
1138 /// Low 16-bit GP relative reference
1139 pub const IMAGE_REL_ALPHA_GPRELLO: u16 = 0x0016;
1140 /// High 16-bit GP relative reference
1141 pub const IMAGE_REL_ALPHA_GPRELHI: u16 = 0x0017;
1142
1143 //
1144 // IBM PowerPC relocation types.
1145 //
1146 /// NOP
1147 pub const IMAGE_REL_PPC_ABSOLUTE: u16 = 0x0000;
1148 /// 64-bit address
1149 pub const IMAGE_REL_PPC_ADDR64: u16 = 0x0001;
1150 /// 32-bit address
1151 pub const IMAGE_REL_PPC_ADDR32: u16 = 0x0002;
1152 /// 26-bit address, shifted left 2 (branch absolute)
1153 pub const IMAGE_REL_PPC_ADDR24: u16 = 0x0003;
1154 /// 16-bit address
1155 pub const IMAGE_REL_PPC_ADDR16: u16 = 0x0004;
1156 /// 16-bit address, shifted left 2 (load doubleword)
1157 pub const IMAGE_REL_PPC_ADDR14: u16 = 0x0005;
1158 /// 26-bit PC-relative offset, shifted left 2 (branch relative)
1159 pub const IMAGE_REL_PPC_REL24: u16 = 0x0006;
1160 /// 16-bit PC-relative offset, shifted left 2 (br cond relative)
1161 pub const IMAGE_REL_PPC_REL14: u16 = 0x0007;
1162 /// 16-bit offset from TOC base
1163 pub const IMAGE_REL_PPC_TOCREL16: u16 = 0x0008;
1164 /// 16-bit offset from TOC base, shifted left 2 (load doubleword)
1165 pub const IMAGE_REL_PPC_TOCREL14: u16 = 0x0009;
1166
1167 /// 32-bit addr w/o image base
1168 pub const IMAGE_REL_PPC_ADDR32NB: u16 = 0x000A;
1169 /// va of containing section (as in an image sectionhdr)
1170 pub const IMAGE_REL_PPC_SECREL: u16 = 0x000B;
1171 /// sectionheader number
1172 pub const IMAGE_REL_PPC_SECTION: u16 = 0x000C;
1173 /// substitute TOC restore instruction iff symbol is glue code
1174 pub const IMAGE_REL_PPC_IFGLUE: u16 = 0x000D;
1175 /// symbol is glue code; virtual address is TOC restore instruction
1176 pub const IMAGE_REL_PPC_IMGLUE: u16 = 0x000E;
1177 /// va of containing section (limited to 16 bits)
1178 pub const IMAGE_REL_PPC_SECREL16: u16 = 0x000F;
1179 pub const IMAGE_REL_PPC_REFHI: u16 = 0x0010;
1180 pub const IMAGE_REL_PPC_REFLO: u16 = 0x0011;
1181 pub const IMAGE_REL_PPC_PAIR: u16 = 0x0012;
1182 /// Low 16-bit section relative reference (used for >32k TLS)
1183 pub const IMAGE_REL_PPC_SECRELLO: u16 = 0x0013;
1184 /// High 16-bit section relative reference (used for >32k TLS)
1185 pub const IMAGE_REL_PPC_SECRELHI: u16 = 0x0014;
1186 pub const IMAGE_REL_PPC_GPREL: u16 = 0x0015;
1187 /// clr token
1188 pub const IMAGE_REL_PPC_TOKEN: u16 = 0x0016;
1189
1190 /// mask to isolate above values in IMAGE_RELOCATION.Type
1191 pub const IMAGE_REL_PPC_TYPEMASK: u16 = 0x00FF;
1192
1193 // Flag bits in `ImageRelocation::typ`.
1194
1195 /// subtract reloc value rather than adding it
1196 pub const IMAGE_REL_PPC_NEG: u16 = 0x0100;
1197 /// fix branch prediction bit to predict branch taken
1198 pub const IMAGE_REL_PPC_BRTAKEN: u16 = 0x0200;
1199 /// fix branch prediction bit to predict branch not taken
1200 pub const IMAGE_REL_PPC_BRNTAKEN: u16 = 0x0400;
1201 /// toc slot defined in file (or, data in toc)
1202 pub const IMAGE_REL_PPC_TOCDEFN: u16 = 0x0800;
1203
1204 //
1205 // Hitachi SH3 relocation types.
1206 //
1207 /// No relocation
1208 pub const IMAGE_REL_SH3_ABSOLUTE: u16 = 0x0000;
1209 /// 16 bit direct
1210 pub const IMAGE_REL_SH3_DIRECT16: u16 = 0x0001;
1211 /// 32 bit direct
1212 pub const IMAGE_REL_SH3_DIRECT32: u16 = 0x0002;
1213 /// 8 bit direct, -128..255
1214 pub const IMAGE_REL_SH3_DIRECT8: u16 = 0x0003;
1215 /// 8 bit direct .W (0 ext.)
1216 pub const IMAGE_REL_SH3_DIRECT8_WORD: u16 = 0x0004;
1217 /// 8 bit direct .L (0 ext.)
1218 pub const IMAGE_REL_SH3_DIRECT8_LONG: u16 = 0x0005;
1219 /// 4 bit direct (0 ext.)
1220 pub const IMAGE_REL_SH3_DIRECT4: u16 = 0x0006;
1221 /// 4 bit direct .W (0 ext.)
1222 pub const IMAGE_REL_SH3_DIRECT4_WORD: u16 = 0x0007;
1223 /// 4 bit direct .L (0 ext.)
1224 pub const IMAGE_REL_SH3_DIRECT4_LONG: u16 = 0x0008;
1225 /// 8 bit PC relative .W
1226 pub const IMAGE_REL_SH3_PCREL8_WORD: u16 = 0x0009;
1227 /// 8 bit PC relative .L
1228 pub const IMAGE_REL_SH3_PCREL8_LONG: u16 = 0x000A;
1229 /// 12 LSB PC relative .W
1230 pub const IMAGE_REL_SH3_PCREL12_WORD: u16 = 0x000B;
1231 /// Start of EXE section
1232 pub const IMAGE_REL_SH3_STARTOF_SECTION: u16 = 0x000C;
1233 /// Size of EXE section
1234 pub const IMAGE_REL_SH3_SIZEOF_SECTION: u16 = 0x000D;
1235 /// Section table index
1236 pub const IMAGE_REL_SH3_SECTION: u16 = 0x000E;
1237 /// Offset within section
1238 pub const IMAGE_REL_SH3_SECREL: u16 = 0x000F;
1239 /// 32 bit direct not based
1240 pub const IMAGE_REL_SH3_DIRECT32_NB: u16 = 0x0010;
1241 /// GP-relative addressing
1242 pub const IMAGE_REL_SH3_GPREL4_LONG: u16 = 0x0011;
1243 /// clr token
1244 pub const IMAGE_REL_SH3_TOKEN: u16 = 0x0012;
1245 /// Offset from current instruction in longwords
1246 /// if not NOMODE, insert the inverse of the low bit at bit 32 to select PTA/PTB
1247 pub const IMAGE_REL_SHM_PCRELPT: u16 = 0x0013;
1248 /// Low bits of 32-bit address
1249 pub const IMAGE_REL_SHM_REFLO: u16 = 0x0014;
1250 /// High bits of 32-bit address
1251 pub const IMAGE_REL_SHM_REFHALF: u16 = 0x0015;
1252 /// Low bits of relative reference
1253 pub const IMAGE_REL_SHM_RELLO: u16 = 0x0016;
1254 /// High bits of relative reference
1255 pub const IMAGE_REL_SHM_RELHALF: u16 = 0x0017;
1256 /// offset operand for relocation
1257 pub const IMAGE_REL_SHM_PAIR: u16 = 0x0018;
1258
1259 /// relocation ignores section mode
1260 pub const IMAGE_REL_SH_NOMODE: u16 = 0x8000;
1261
1262 /// No relocation required
1263 pub const IMAGE_REL_ARM_ABSOLUTE: u16 = 0x0000;
1264 /// 32 bit address
1265 pub const IMAGE_REL_ARM_ADDR32: u16 = 0x0001;
1266 /// 32 bit address w/o image base
1267 pub const IMAGE_REL_ARM_ADDR32NB: u16 = 0x0002;
1268 /// 24 bit offset << 2 & sign ext.
1269 pub const IMAGE_REL_ARM_BRANCH24: u16 = 0x0003;
1270 /// Thumb: 2 11 bit offsets
1271 pub const IMAGE_REL_ARM_BRANCH11: u16 = 0x0004;
1272 /// clr token
1273 pub const IMAGE_REL_ARM_TOKEN: u16 = 0x0005;
1274 /// GP-relative addressing (ARM)
1275 pub const IMAGE_REL_ARM_GPREL12: u16 = 0x0006;
1276 /// GP-relative addressing (Thumb)
1277 pub const IMAGE_REL_ARM_GPREL7: u16 = 0x0007;
1278 pub const IMAGE_REL_ARM_BLX24: u16 = 0x0008;
1279 pub const IMAGE_REL_ARM_BLX11: u16 = 0x0009;
1280 /// 32-bit relative address from byte following reloc
1281 pub const IMAGE_REL_ARM_REL32: u16 = 0x000A;
1282 /// Section table index
1283 pub const IMAGE_REL_ARM_SECTION: u16 = 0x000E;
1284 /// Offset within section
1285 pub const IMAGE_REL_ARM_SECREL: u16 = 0x000F;
1286 /// ARM: MOVW/MOVT
1287 pub const IMAGE_REL_ARM_MOV32A: u16 = 0x0010;
1288 /// ARM: MOVW/MOVT (deprecated)
1289 pub const IMAGE_REL_ARM_MOV32: u16 = 0x0010;
1290 /// Thumb: MOVW/MOVT
1291 pub const IMAGE_REL_ARM_MOV32T: u16 = 0x0011;
1292 /// Thumb: MOVW/MOVT (deprecated)
1293 pub const IMAGE_REL_THUMB_MOV32: u16 = 0x0011;
1294 /// Thumb: 32-bit conditional B
1295 pub const IMAGE_REL_ARM_BRANCH20T: u16 = 0x0012;
1296 /// Thumb: 32-bit conditional B (deprecated)
1297 pub const IMAGE_REL_THUMB_BRANCH20: u16 = 0x0012;
1298 /// Thumb: 32-bit B or BL
1299 pub const IMAGE_REL_ARM_BRANCH24T: u16 = 0x0014;
1300 /// Thumb: 32-bit B or BL (deprecated)
1301 pub const IMAGE_REL_THUMB_BRANCH24: u16 = 0x0014;
1302 /// Thumb: BLX immediate
1303 pub const IMAGE_REL_ARM_BLX23T: u16 = 0x0015;
1304 /// Thumb: BLX immediate (deprecated)
1305 pub const IMAGE_REL_THUMB_BLX23: u16 = 0x0015;
1306
1307 pub const IMAGE_REL_AM_ABSOLUTE: u16 = 0x0000;
1308 pub const IMAGE_REL_AM_ADDR32: u16 = 0x0001;
1309 pub const IMAGE_REL_AM_ADDR32NB: u16 = 0x0002;
1310 pub const IMAGE_REL_AM_CALL32: u16 = 0x0003;
1311 pub const IMAGE_REL_AM_FUNCINFO: u16 = 0x0004;
1312 pub const IMAGE_REL_AM_REL32_1: u16 = 0x0005;
1313 pub const IMAGE_REL_AM_REL32_2: u16 = 0x0006;
1314 pub const IMAGE_REL_AM_SECREL: u16 = 0x0007;
1315 pub const IMAGE_REL_AM_SECTION: u16 = 0x0008;
1316 pub const IMAGE_REL_AM_TOKEN: u16 = 0x0009;
1317
1318 //
1319 // ARM64 relocations types.
1320 //
1321
1322 /// No relocation required
1323 pub const IMAGE_REL_ARM64_ABSOLUTE: u16 = 0x0000;
1324 /// 32 bit address. Review! do we need it?
1325 pub const IMAGE_REL_ARM64_ADDR32: u16 = 0x0001;
1326 /// 32 bit address w/o image base (RVA: for Data/PData/XData)
1327 pub const IMAGE_REL_ARM64_ADDR32NB: u16 = 0x0002;
1328 /// 26 bit offset << 2 & sign ext. for B & BL
1329 pub const IMAGE_REL_ARM64_BRANCH26: u16 = 0x0003;
1330 /// ADRP
1331 pub const IMAGE_REL_ARM64_PAGEBASE_REL21: u16 = 0x0004;
1332 /// ADR
1333 pub const IMAGE_REL_ARM64_REL21: u16 = 0x0005;
1334 /// ADD/ADDS (immediate) with zero shift, for page offset
1335 pub const IMAGE_REL_ARM64_PAGEOFFSET_12A: u16 = 0x0006;
1336 /// LDR (indexed, unsigned immediate), for page offset
1337 pub const IMAGE_REL_ARM64_PAGEOFFSET_12L: u16 = 0x0007;
1338 /// Offset within section
1339 pub const IMAGE_REL_ARM64_SECREL: u16 = 0x0008;
1340 /// ADD/ADDS (immediate) with zero shift, for bit 0:11 of section offset
1341 pub const IMAGE_REL_ARM64_SECREL_LOW12A: u16 = 0x0009;
1342 /// ADD/ADDS (immediate) with zero shift, for bit 12:23 of section offset
1343 pub const IMAGE_REL_ARM64_SECREL_HIGH12A: u16 = 0x000A;
1344 /// LDR (indexed, unsigned immediate), for bit 0:11 of section offset
1345 pub const IMAGE_REL_ARM64_SECREL_LOW12L: u16 = 0x000B;
1346 pub const IMAGE_REL_ARM64_TOKEN: u16 = 0x000C;
1347 /// Section table index
1348 pub const IMAGE_REL_ARM64_SECTION: u16 = 0x000D;
1349 /// 64 bit address
1350 pub const IMAGE_REL_ARM64_ADDR64: u16 = 0x000E;
1351 /// 19 bit offset << 2 & sign ext. for conditional B
1352 pub const IMAGE_REL_ARM64_BRANCH19: u16 = 0x000F;
1353 /// TBZ/TBNZ
1354 pub const IMAGE_REL_ARM64_BRANCH14: u16 = 0x0010;
1355 /// 32-bit relative address from byte following reloc
1356 pub const IMAGE_REL_ARM64_REL32: u16 = 0x0011;
1357
1358 //
1359 // x64 relocations
1360 //
1361 /// Reference is absolute, no relocation is necessary
1362 pub const IMAGE_REL_AMD64_ABSOLUTE: u16 = 0x0000;
1363 /// 64-bit address (VA).
1364 pub const IMAGE_REL_AMD64_ADDR64: u16 = 0x0001;
1365 /// 32-bit address (VA).
1366 pub const IMAGE_REL_AMD64_ADDR32: u16 = 0x0002;
1367 /// 32-bit address w/o image base (RVA).
1368 pub const IMAGE_REL_AMD64_ADDR32NB: u16 = 0x0003;
1369 /// 32-bit relative address from byte following reloc
1370 pub const IMAGE_REL_AMD64_REL32: u16 = 0x0004;
1371 /// 32-bit relative address from byte distance 1 from reloc
1372 pub const IMAGE_REL_AMD64_REL32_1: u16 = 0x0005;
1373 /// 32-bit relative address from byte distance 2 from reloc
1374 pub const IMAGE_REL_AMD64_REL32_2: u16 = 0x0006;
1375 /// 32-bit relative address from byte distance 3 from reloc
1376 pub const IMAGE_REL_AMD64_REL32_3: u16 = 0x0007;
1377 /// 32-bit relative address from byte distance 4 from reloc
1378 pub const IMAGE_REL_AMD64_REL32_4: u16 = 0x0008;
1379 /// 32-bit relative address from byte distance 5 from reloc
1380 pub const IMAGE_REL_AMD64_REL32_5: u16 = 0x0009;
1381 /// Section index
1382 pub const IMAGE_REL_AMD64_SECTION: u16 = 0x000A;
1383 /// 32 bit offset from base of section containing target
1384 pub const IMAGE_REL_AMD64_SECREL: u16 = 0x000B;
1385 /// 7 bit unsigned offset from base of section containing target
1386 pub const IMAGE_REL_AMD64_SECREL7: u16 = 0x000C;
1387 /// 32 bit metadata token
1388 pub const IMAGE_REL_AMD64_TOKEN: u16 = 0x000D;
1389 /// 32 bit signed span-dependent value emitted into object
1390 pub const IMAGE_REL_AMD64_SREL32: u16 = 0x000E;
1391 pub const IMAGE_REL_AMD64_PAIR: u16 = 0x000F;
1392 /// 32 bit signed span-dependent value applied at link time
1393 pub const IMAGE_REL_AMD64_SSPAN32: u16 = 0x0010;
1394 pub const IMAGE_REL_AMD64_EHANDLER: u16 = 0x0011;
1395 /// Indirect branch to an import
1396 pub const IMAGE_REL_AMD64_IMPORT_BR: u16 = 0x0012;
1397 /// Indirect call to an import
1398 pub const IMAGE_REL_AMD64_IMPORT_CALL: u16 = 0x0013;
1399 /// Indirect branch to a CFG check
1400 pub const IMAGE_REL_AMD64_CFG_BR: u16 = 0x0014;
1401 /// Indirect branch to a CFG check, with REX.W prefix
1402 pub const IMAGE_REL_AMD64_CFG_BR_REX: u16 = 0x0015;
1403 /// Indirect call to a CFG check
1404 pub const IMAGE_REL_AMD64_CFG_CALL: u16 = 0x0016;
1405 /// Indirect branch to a target in RAX (no CFG)
1406 pub const IMAGE_REL_AMD64_INDIR_BR: u16 = 0x0017;
1407 /// Indirect branch to a target in RAX, with REX.W prefix (no CFG)
1408 pub const IMAGE_REL_AMD64_INDIR_BR_REX: u16 = 0x0018;
1409 /// Indirect call to a target in RAX (no CFG)
1410 pub const IMAGE_REL_AMD64_INDIR_CALL: u16 = 0x0019;
1411 /// Indirect branch for a switch table using Reg 0 (RAX)
1412 pub const IMAGE_REL_AMD64_INDIR_BR_SWITCHTABLE_FIRST: u16 = 0x0020;
1413 /// Indirect branch for a switch table using Reg 15 (R15)
1414 pub const IMAGE_REL_AMD64_INDIR_BR_SWITCHTABLE_LAST: u16 = 0x002F;
1415
1416 //
1417 // IA64 relocation types.
1418 //
1419 pub const IMAGE_REL_IA64_ABSOLUTE: u16 = 0x0000;
1420 pub const IMAGE_REL_IA64_IMM14: u16 = 0x0001;
1421 pub const IMAGE_REL_IA64_IMM22: u16 = 0x0002;
1422 pub const IMAGE_REL_IA64_IMM64: u16 = 0x0003;
1423 pub const IMAGE_REL_IA64_DIR32: u16 = 0x0004;
1424 pub const IMAGE_REL_IA64_DIR64: u16 = 0x0005;
1425 pub const IMAGE_REL_IA64_PCREL21B: u16 = 0x0006;
1426 pub const IMAGE_REL_IA64_PCREL21M: u16 = 0x0007;
1427 pub const IMAGE_REL_IA64_PCREL21F: u16 = 0x0008;
1428 pub const IMAGE_REL_IA64_GPREL22: u16 = 0x0009;
1429 pub const IMAGE_REL_IA64_LTOFF22: u16 = 0x000A;
1430 pub const IMAGE_REL_IA64_SECTION: u16 = 0x000B;
1431 pub const IMAGE_REL_IA64_SECREL22: u16 = 0x000C;
1432 pub const IMAGE_REL_IA64_SECREL64I: u16 = 0x000D;
1433 pub const IMAGE_REL_IA64_SECREL32: u16 = 0x000E;
1434 //
1435 pub const IMAGE_REL_IA64_DIR32NB: u16 = 0x0010;
1436 pub const IMAGE_REL_IA64_SREL14: u16 = 0x0011;
1437 pub const IMAGE_REL_IA64_SREL22: u16 = 0x0012;
1438 pub const IMAGE_REL_IA64_SREL32: u16 = 0x0013;
1439 pub const IMAGE_REL_IA64_UREL32: u16 = 0x0014;
1440 /// This is always a BRL and never converted
1441 pub const IMAGE_REL_IA64_PCREL60X: u16 = 0x0015;
1442 /// If possible, convert to MBB bundle with NOP.B in slot 1
1443 pub const IMAGE_REL_IA64_PCREL60B: u16 = 0x0016;
1444 /// If possible, convert to MFB bundle with NOP.F in slot 1
1445 pub const IMAGE_REL_IA64_PCREL60F: u16 = 0x0017;
1446 /// If possible, convert to MIB bundle with NOP.I in slot 1
1447 pub const IMAGE_REL_IA64_PCREL60I: u16 = 0x0018;
1448 /// If possible, convert to MMB bundle with NOP.M in slot 1
1449 pub const IMAGE_REL_IA64_PCREL60M: u16 = 0x0019;
1450 pub const IMAGE_REL_IA64_IMMGPREL64: u16 = 0x001A;
1451 /// clr token
1452 pub const IMAGE_REL_IA64_TOKEN: u16 = 0x001B;
1453 pub const IMAGE_REL_IA64_GPREL32: u16 = 0x001C;
1454 pub const IMAGE_REL_IA64_ADDEND: u16 = 0x001F;
1455
1456 //
1457 // CEF relocation types.
1458 //
1459 /// Reference is absolute, no relocation is necessary
1460 pub const IMAGE_REL_CEF_ABSOLUTE: u16 = 0x0000;
1461 /// 32-bit address (VA).
1462 pub const IMAGE_REL_CEF_ADDR32: u16 = 0x0001;
1463 /// 64-bit address (VA).
1464 pub const IMAGE_REL_CEF_ADDR64: u16 = 0x0002;
1465 /// 32-bit address w/o image base (RVA).
1466 pub const IMAGE_REL_CEF_ADDR32NB: u16 = 0x0003;
1467 /// Section index
1468 pub const IMAGE_REL_CEF_SECTION: u16 = 0x0004;
1469 /// 32 bit offset from base of section containing target
1470 pub const IMAGE_REL_CEF_SECREL: u16 = 0x0005;
1471 /// 32 bit metadata token
1472 pub const IMAGE_REL_CEF_TOKEN: u16 = 0x0006;
1473
1474 //
1475 // clr relocation types.
1476 //
1477 /// Reference is absolute, no relocation is necessary
1478 pub const IMAGE_REL_CEE_ABSOLUTE: u16 = 0x0000;
1479 /// 32-bit address (VA).
1480 pub const IMAGE_REL_CEE_ADDR32: u16 = 0x0001;
1481 /// 64-bit address (VA).
1482 pub const IMAGE_REL_CEE_ADDR64: u16 = 0x0002;
1483 /// 32-bit address w/o image base (RVA).
1484 pub const IMAGE_REL_CEE_ADDR32NB: u16 = 0x0003;
1485 /// Section index
1486 pub const IMAGE_REL_CEE_SECTION: u16 = 0x0004;
1487 /// 32 bit offset from base of section containing target
1488 pub const IMAGE_REL_CEE_SECREL: u16 = 0x0005;
1489 /// 32 bit metadata token
1490 pub const IMAGE_REL_CEE_TOKEN: u16 = 0x0006;
1491
1492 /// No relocation required
1493 pub const IMAGE_REL_M32R_ABSOLUTE: u16 = 0x0000;
1494 /// 32 bit address
1495 pub const IMAGE_REL_M32R_ADDR32: u16 = 0x0001;
1496 /// 32 bit address w/o image base
1497 pub const IMAGE_REL_M32R_ADDR32NB: u16 = 0x0002;
1498 /// 24 bit address
1499 pub const IMAGE_REL_M32R_ADDR24: u16 = 0x0003;
1500 /// GP relative addressing
1501 pub const IMAGE_REL_M32R_GPREL16: u16 = 0x0004;
1502 /// 24 bit offset << 2 & sign ext.
1503 pub const IMAGE_REL_M32R_PCREL24: u16 = 0x0005;
1504 /// 16 bit offset << 2 & sign ext.
1505 pub const IMAGE_REL_M32R_PCREL16: u16 = 0x0006;
1506 /// 8 bit offset << 2 & sign ext.
1507 pub const IMAGE_REL_M32R_PCREL8: u16 = 0x0007;
1508 /// 16 MSBs
1509 pub const IMAGE_REL_M32R_REFHALF: u16 = 0x0008;
1510 /// 16 MSBs; adj for LSB sign ext.
1511 pub const IMAGE_REL_M32R_REFHI: u16 = 0x0009;
1512 /// 16 LSBs
1513 pub const IMAGE_REL_M32R_REFLO: u16 = 0x000A;
1514 /// Link HI and LO
1515 pub const IMAGE_REL_M32R_PAIR: u16 = 0x000B;
1516 /// Section table index
1517 pub const IMAGE_REL_M32R_SECTION: u16 = 0x000C;
1518 /// 32 bit section relative reference
1519 pub const IMAGE_REL_M32R_SECREL32: u16 = 0x000D;
1520 /// clr token
1521 pub const IMAGE_REL_M32R_TOKEN: u16 = 0x000E;
1522
1523 /// No relocation required
1524 pub const IMAGE_REL_EBC_ABSOLUTE: u16 = 0x0000;
1525 /// 32 bit address w/o image base
1526 pub const IMAGE_REL_EBC_ADDR32NB: u16 = 0x0001;
1527 /// 32-bit relative address from byte following reloc
1528 pub const IMAGE_REL_EBC_REL32: u16 = 0x0002;
1529 /// Section table index
1530 pub const IMAGE_REL_EBC_SECTION: u16 = 0x0003;
1531 /// Offset within section
1532 pub const IMAGE_REL_EBC_SECREL: u16 = 0x0004;
1533
1534 /*
1535 // TODO?
1536 #define EXT_IMM64(Value, Address, Size, InstPos, ValPos)  /* Intel-IA64-Filler */           \
1537     Value |= (((ULONGLONG)((*(Address) >> InstPos) & (((ULONGLONG)1 << Size) - 1))) << ValPos)  // Intel-IA64-Filler
1538
1539 #define INS_IMM64(Value, Address, Size, InstPos, ValPos)  /* Intel-IA64-Filler */\
1540     *(PDWORD)Address = (*(PDWORD)Address & ~(((1 << Size) - 1) << InstPos)) | /* Intel-IA64-Filler */\
1541           ((DWORD)((((ULONGLONG)Value >> ValPos) & (((ULONGLONG)1 << Size) - 1))) << InstPos)  // Intel-IA64-Filler
1542 */
1543
1544 /// Intel-IA64-Filler
1545 pub const EMARCH_ENC_I17_IMM7B_INST_WORD_X: u16 = 3;
1546 /// Intel-IA64-Filler
1547 pub const EMARCH_ENC_I17_IMM7B_SIZE_X: u16 = 7;
1548 /// Intel-IA64-Filler
1549 pub const EMARCH_ENC_I17_IMM7B_INST_WORD_POS_X: u16 = 4;
1550 /// Intel-IA64-Filler
1551 pub const EMARCH_ENC_I17_IMM7B_VAL_POS_X: u16 = 0;
1552
1553 /// Intel-IA64-Filler
1554 pub const EMARCH_ENC_I17_IMM9D_INST_WORD_X: u16 = 3;
1555 /// Intel-IA64-Filler
1556 pub const EMARCH_ENC_I17_IMM9D_SIZE_X: u16 = 9;
1557 /// Intel-IA64-Filler
1558 pub const EMARCH_ENC_I17_IMM9D_INST_WORD_POS_X: u16 = 18;
1559 /// Intel-IA64-Filler
1560 pub const EMARCH_ENC_I17_IMM9D_VAL_POS_X: u16 = 7;
1561
1562 /// Intel-IA64-Filler
1563 pub const EMARCH_ENC_I17_IMM5C_INST_WORD_X: u16 = 3;
1564 /// Intel-IA64-Filler
1565 pub const EMARCH_ENC_I17_IMM5C_SIZE_X: u16 = 5;
1566 /// Intel-IA64-Filler
1567 pub const EMARCH_ENC_I17_IMM5C_INST_WORD_POS_X: u16 = 13;
1568 /// Intel-IA64-Filler
1569 pub const EMARCH_ENC_I17_IMM5C_VAL_POS_X: u16 = 16;
1570
1571 /// Intel-IA64-Filler
1572 pub const EMARCH_ENC_I17_IC_INST_WORD_X: u16 = 3;
1573 /// Intel-IA64-Filler
1574 pub const EMARCH_ENC_I17_IC_SIZE_X: u16 = 1;
1575 /// Intel-IA64-Filler
1576 pub const EMARCH_ENC_I17_IC_INST_WORD_POS_X: u16 = 12;
1577 /// Intel-IA64-Filler
1578 pub const EMARCH_ENC_I17_IC_VAL_POS_X: u16 = 21;
1579
1580 /// Intel-IA64-Filler
1581 pub const EMARCH_ENC_I17_IMM41A_INST_WORD_X: u16 = 1;
1582 /// Intel-IA64-Filler
1583 pub const EMARCH_ENC_I17_IMM41A_SIZE_X: u16 = 10;
1584 /// Intel-IA64-Filler
1585 pub const EMARCH_ENC_I17_IMM41A_INST_WORD_POS_X: u16 = 14;
1586 /// Intel-IA64-Filler
1587 pub const EMARCH_ENC_I17_IMM41A_VAL_POS_X: u16 = 22;
1588
1589 /// Intel-IA64-Filler
1590 pub const EMARCH_ENC_I17_IMM41B_INST_WORD_X: u16 = 1;
1591 /// Intel-IA64-Filler
1592 pub const EMARCH_ENC_I17_IMM41B_SIZE_X: u16 = 8;
1593 /// Intel-IA64-Filler
1594 pub const EMARCH_ENC_I17_IMM41B_INST_WORD_POS_X: u16 = 24;
1595 /// Intel-IA64-Filler
1596 pub const EMARCH_ENC_I17_IMM41B_VAL_POS_X: u16 = 32;
1597
1598 /// Intel-IA64-Filler
1599 pub const EMARCH_ENC_I17_IMM41C_INST_WORD_X: u16 = 2;
1600 /// Intel-IA64-Filler
1601 pub const EMARCH_ENC_I17_IMM41C_SIZE_X: u16 = 23;
1602 /// Intel-IA64-Filler
1603 pub const EMARCH_ENC_I17_IMM41C_INST_WORD_POS_X: u16 = 0;
1604 /// Intel-IA64-Filler
1605 pub const EMARCH_ENC_I17_IMM41C_VAL_POS_X: u16 = 40;
1606
1607 /// Intel-IA64-Filler
1608 pub const EMARCH_ENC_I17_SIGN_INST_WORD_X: u16 = 3;
1609 /// Intel-IA64-Filler
1610 pub const EMARCH_ENC_I17_SIGN_SIZE_X: u16 = 1;
1611 /// Intel-IA64-Filler
1612 pub const EMARCH_ENC_I17_SIGN_INST_WORD_POS_X: u16 = 27;
1613 /// Intel-IA64-Filler
1614 pub const EMARCH_ENC_I17_SIGN_VAL_POS_X: u16 = 63;
1615
1616 /// Intel-IA64-Filler
1617 pub const X3_OPCODE_INST_WORD_X: u16 = 3;
1618 /// Intel-IA64-Filler
1619 pub const X3_OPCODE_SIZE_X: u16 = 4;
1620 /// Intel-IA64-Filler
1621 pub const X3_OPCODE_INST_WORD_POS_X: u16 = 28;
1622 /// Intel-IA64-Filler
1623 pub const X3_OPCODE_SIGN_VAL_POS_X: u16 = 0;
1624
1625 /// Intel-IA64-Filler
1626 pub const X3_I_INST_WORD_X: u16 = 3;
1627 /// Intel-IA64-Filler
1628 pub const X3_I_SIZE_X: u16 = 1;
1629 /// Intel-IA64-Filler
1630 pub const X3_I_INST_WORD_POS_X: u16 = 27;
1631 /// Intel-IA64-Filler
1632 pub const X3_I_SIGN_VAL_POS_X: u16 = 59;
1633
1634 /// Intel-IA64-Filler
1635 pub const X3_D_WH_INST_WORD_X: u16 = 3;
1636 /// Intel-IA64-Filler
1637 pub const X3_D_WH_SIZE_X: u16 = 3;
1638 /// Intel-IA64-Filler
1639 pub const X3_D_WH_INST_WORD_POS_X: u16 = 24;
1640 /// Intel-IA64-Filler
1641 pub const X3_D_WH_SIGN_VAL_POS_X: u16 = 0;
1642
1643 /// Intel-IA64-Filler
1644 pub const X3_IMM20_INST_WORD_X: u16 = 3;
1645 /// Intel-IA64-Filler
1646 pub const X3_IMM20_SIZE_X: u16 = 20;
1647 /// Intel-IA64-Filler
1648 pub const X3_IMM20_INST_WORD_POS_X: u16 = 4;
1649 /// Intel-IA64-Filler
1650 pub const X3_IMM20_SIGN_VAL_POS_X: u16 = 0;
1651
1652 /// Intel-IA64-Filler
1653 pub const X3_IMM39_1_INST_WORD_X: u16 = 2;
1654 /// Intel-IA64-Filler
1655 pub const X3_IMM39_1_SIZE_X: u16 = 23;
1656 /// Intel-IA64-Filler
1657 pub const X3_IMM39_1_INST_WORD_POS_X: u16 = 0;
1658 /// Intel-IA64-Filler
1659 pub const X3_IMM39_1_SIGN_VAL_POS_X: u16 = 36;
1660
1661 /// Intel-IA64-Filler
1662 pub const X3_IMM39_2_INST_WORD_X: u16 = 1;
1663 /// Intel-IA64-Filler
1664 pub const X3_IMM39_2_SIZE_X: u16 = 16;
1665 /// Intel-IA64-Filler
1666 pub const X3_IMM39_2_INST_WORD_POS_X: u16 = 16;
1667 /// Intel-IA64-Filler
1668 pub const X3_IMM39_2_SIGN_VAL_POS_X: u16 = 20;
1669
1670 /// Intel-IA64-Filler
1671 pub const X3_P_INST_WORD_X: u16 = 3;
1672 /// Intel-IA64-Filler
1673 pub const X3_P_SIZE_X: u16 = 4;
1674 /// Intel-IA64-Filler
1675 pub const X3_P_INST_WORD_POS_X: u16 = 0;
1676 /// Intel-IA64-Filler
1677 pub const X3_P_SIGN_VAL_POS_X: u16 = 0;
1678
1679 /// Intel-IA64-Filler
1680 pub const X3_TMPLT_INST_WORD_X: u16 = 0;
1681 /// Intel-IA64-Filler
1682 pub const X3_TMPLT_SIZE_X: u16 = 4;
1683 /// Intel-IA64-Filler
1684 pub const X3_TMPLT_INST_WORD_POS_X: u16 = 0;
1685 /// Intel-IA64-Filler
1686 pub const X3_TMPLT_SIGN_VAL_POS_X: u16 = 0;
1687
1688 /// Intel-IA64-Filler
1689 pub const X3_BTYPE_QP_INST_WORD_X: u16 = 2;
1690 /// Intel-IA64-Filler
1691 pub const X3_BTYPE_QP_SIZE_X: u16 = 9;
1692 /// Intel-IA64-Filler
1693 pub const X3_BTYPE_QP_INST_WORD_POS_X: u16 = 23;
1694 /// Intel-IA64-Filler
1695 pub const X3_BTYPE_QP_INST_VAL_POS_X: u16 = 0;
1696
1697 /// Intel-IA64-Filler
1698 pub const X3_EMPTY_INST_WORD_X: u16 = 1;
1699 /// Intel-IA64-Filler
1700 pub const X3_EMPTY_SIZE_X: u16 = 2;
1701 /// Intel-IA64-Filler
1702 pub const X3_EMPTY_INST_WORD_POS_X: u16 = 14;
1703 /// Intel-IA64-Filler
1704 pub const X3_EMPTY_INST_VAL_POS_X: u16 = 0;
1705
1706 //
1707 // Line number format.
1708 //
1709
1710 // This struct has alignment 1.
1711 #[derive(Debug, Clone, Copy)]
1712 #[repr(C)]
1713 pub struct ImageLinenumber {
1714     /// Symbol table index of function name if Linenumber is 0.
1715     /// Otherwise virtual address of line number.
1716     pub symbol_table_index_or_virtual_address: U32Bytes<LE>,
1717     /// Line number.
1718     pub linenumber: U16Bytes<LE>,
1719 }
1720
1721 //
1722 // Based relocation format.
1723 //
1724
1725 #[derive(Debug, Clone, Copy)]
1726 #[repr(C)]
1727 pub struct ImageBaseRelocation {
1728     pub virtual_address: U32<LE>,
1729     pub size_of_block: U32<LE>,
1730     //  pub type_offset[1]: U16<LE>,
1731 }
1732
1733 //
1734 // Based relocation types.
1735 //
1736
1737 pub const IMAGE_REL_BASED_ABSOLUTE: u16 = 0;
1738 pub const IMAGE_REL_BASED_HIGH: u16 = 1;
1739 pub const IMAGE_REL_BASED_LOW: u16 = 2;
1740 pub const IMAGE_REL_BASED_HIGHLOW: u16 = 3;
1741 pub const IMAGE_REL_BASED_HIGHADJ: u16 = 4;
1742 pub const IMAGE_REL_BASED_MACHINE_SPECIFIC_5: u16 = 5;
1743 pub const IMAGE_REL_BASED_RESERVED: u16 = 6;
1744 pub const IMAGE_REL_BASED_MACHINE_SPECIFIC_7: u16 = 7;
1745 pub const IMAGE_REL_BASED_MACHINE_SPECIFIC_8: u16 = 8;
1746 pub const IMAGE_REL_BASED_MACHINE_SPECIFIC_9: u16 = 9;
1747 pub const IMAGE_REL_BASED_DIR64: u16 = 10;
1748
1749 //
1750 // Platform-specific based relocation types.
1751 //
1752
1753 pub const IMAGE_REL_BASED_IA64_IMM64: u16 = 9;
1754
1755 pub const IMAGE_REL_BASED_MIPS_JMPADDR: u16 = 5;
1756 pub const IMAGE_REL_BASED_MIPS_JMPADDR16: u16 = 9;
1757
1758 pub const IMAGE_REL_BASED_ARM_MOV32: u16 = 5;
1759 pub const IMAGE_REL_BASED_THUMB_MOV32: u16 = 7;
1760
1761 pub const IMAGE_REL_BASED_RISCV_HIGH20: u16 = 5;
1762 pub const IMAGE_REL_BASED_RISCV_LOW12I: u16 = 7;
1763 pub const IMAGE_REL_BASED_RISCV_LOW12S: u16 = 8;
1764
1765 //
1766 // Archive format.
1767 //
1768
1769 pub const IMAGE_ARCHIVE_START_SIZE: usize = 8;
1770 pub const IMAGE_ARCHIVE_START: &[u8; 8] = b"!<arch>\n";
1771 pub const IMAGE_ARCHIVE_END: &[u8] = b"`\n";
1772 pub const IMAGE_ARCHIVE_PAD: &[u8] = b"\n";
1773 pub const IMAGE_ARCHIVE_LINKER_MEMBER: &[u8; 16] = b"/               ";
1774 pub const IMAGE_ARCHIVE_LONGNAMES_MEMBER: &[u8; 16] = b"//              ";
1775 pub const IMAGE_ARCHIVE_HYBRIDMAP_MEMBER: &[u8; 16] = b"/<HYBRIDMAP>/   ";
1776
1777 #[derive(Debug, Clone, Copy)]
1778 #[repr(C)]
1779 pub struct ImageArchiveMemberHeader {
1780     /// File member name - `/' terminated.
1781     pub name: [u8; 16],
1782     /// File member date - decimal.
1783     pub date: [u8; 12],
1784     /// File member user id - decimal.
1785     pub user_id: [u8; 6],
1786     /// File member group id - decimal.
1787     pub group_id: [u8; 6],
1788     /// File member mode - octal.
1789     pub mode: [u8; 8],
1790     /// File member size - decimal.
1791     pub size: [u8; 10],
1792     /// String to end header.
1793     pub end_header: [u8; 2],
1794 }
1795
1796 pub const IMAGE_SIZEOF_ARCHIVE_MEMBER_HDR: u16 = 60;
1797
1798 //
1799 // DLL support.
1800 //
1801
1802 //
1803 // Export Format
1804 //
1805
1806 #[derive(Debug, Clone, Copy)]
1807 #[repr(C)]
1808 pub struct ImageExportDirectory {
1809     pub characteristics: U32<LE>,
1810     pub time_date_stamp: U32<LE>,
1811     pub major_version: U16<LE>,
1812     pub minor_version: U16<LE>,
1813     pub name: U32<LE>,
1814     pub base: U32<LE>,
1815     pub number_of_functions: U32<LE>,
1816     pub number_of_names: U32<LE>,
1817     /// RVA from base of image
1818     pub address_of_functions: U32<LE>,
1819     /// RVA from base of image
1820     pub address_of_names: U32<LE>,
1821     /// RVA from base of image
1822     pub address_of_name_ordinals: U32<LE>,
1823 }
1824
1825 //
1826 // Import Format
1827 //
1828
1829 #[derive(Debug, Clone, Copy)]
1830 #[repr(C)]
1831 pub struct ImageImportByName {
1832     pub hint: U16<LE>,
1833     //pub name: [i8; 1],
1834 }
1835
1836 #[derive(Debug, Clone, Copy)]
1837 #[repr(C)]
1838 pub struct ImageThunkData64(pub U64<LE>);
1839 /*
1840     union {
1841 /// PBYTE
1842         pub forwarder_string: U64<LE>,
1843 /// PDWORD
1844         pub function: U64<LE>,
1845         pub ordinal: U64<LE>,
1846 /// PIMAGE_IMPORT_BY_NAME
1847         pub address_of_data: U64<LE>,
1848     } u1;
1849 */
1850
1851 #[derive(Debug, Clone, Copy)]
1852 #[repr(C)]
1853 pub struct ImageThunkData32(pub U32<LE>);
1854 /*
1855     union {
1856 /// PBYTE
1857         pub forwarder_string: U32<LE>,
1858 /// PDWORD
1859         pub function: U32<LE>,
1860         pub ordinal: U32<LE>,
1861 /// PIMAGE_IMPORT_BY_NAME
1862         pub address_of_data: U32<LE>,
1863     } u1;
1864 }
1865 */
1866
1867 pub const IMAGE_ORDINAL_FLAG64: u64 = 0x8000000000000000;
1868 pub const IMAGE_ORDINAL_FLAG32: u32 = 0x80000000;
1869
1870 /*
1871 #define IMAGE_ORDINAL64(Ordinal) (Ordinal & 0xffff)
1872 #define IMAGE_ORDINAL32(Ordinal) (Ordinal & 0xffff)
1873 #define IMAGE_SNAP_BY_ORDINAL64(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG64) != 0)
1874 #define IMAGE_SNAP_BY_ORDINAL32(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG32) != 0)
1875
1876 */
1877
1878 //
1879 // Thread Local Storage
1880 //
1881
1882 #[derive(Debug, Clone, Copy)]
1883 #[repr(C)]
1884 pub struct ImageTlsDirectory64 {
1885     pub start_address_of_raw_data: U64<LE>,
1886     pub end_address_of_raw_data: U64<LE>,
1887     /// PDWORD
1888     pub address_of_index: U64<LE>,
1889     /// PIMAGE_TLS_CALLBACK *;
1890     pub address_of_call_backs: U64<LE>,
1891     pub size_of_zero_fill: U32<LE>,
1892     pub characteristics: U32<LE>,
1893 }
1894
1895 #[derive(Debug, Clone, Copy)]
1896 #[repr(C)]
1897 pub struct ImageTlsDirectory32 {
1898     pub start_address_of_raw_data: U32<LE>,
1899     pub end_address_of_raw_data: U32<LE>,
1900     /// PDWORD
1901     pub address_of_index: U32<LE>,
1902     /// PIMAGE_TLS_CALLBACK *
1903     pub address_of_call_backs: U32<LE>,
1904     pub size_of_zero_fill: U32<LE>,
1905     pub characteristics: U32<LE>,
1906 }
1907
1908 #[derive(Debug, Clone, Copy)]
1909 #[repr(C)]
1910 pub struct ImageImportDescriptor {
1911     /// RVA to original unbound IAT (`ImageThunkData32`/`ImageThunkData64`)
1912     /// 0 for terminating null import descriptor
1913     pub original_first_thunk: U32Bytes<LE>,
1914     /// 0 if not bound,
1915     /// -1 if bound, and real date\time stamp
1916     ///     in IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT (new BIND)
1917     /// O.W. date/time stamp of DLL bound to (Old BIND)
1918     pub time_date_stamp: U32Bytes<LE>,
1919     /// -1 if no forwarders
1920     pub forwarder_chain: U32Bytes<LE>,
1921     pub name: U32Bytes<LE>,
1922     /// RVA to IAT (if bound this IAT has actual addresses)
1923     pub first_thunk: U32Bytes<LE>,
1924 }
1925
1926 impl ImageImportDescriptor {
1927     /// Tell whether this import descriptor is the null descriptor
1928     /// (used to mark the end of the iterator array in a PE)
1929     pub fn is_null(&self) -> bool {
1930         self.original_first_thunk.get(LE) == 0
1931             && self.time_date_stamp.get(LE) == 0
1932             && self.forwarder_chain.get(LE) == 0
1933             && self.name.get(LE) == 0
1934             && self.first_thunk.get(LE) == 0
1935     }
1936 }
1937
1938 //
1939 // New format import descriptors pointed to by DataDirectory[ IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT ]
1940 //
1941
1942 #[derive(Debug, Clone, Copy)]
1943 #[repr(C)]
1944 pub struct ImageBoundImportDescriptor {
1945     pub time_date_stamp: U32<LE>,
1946     pub offset_module_name: U16<LE>,
1947     pub number_of_module_forwarder_refs: U16<LE>,
1948     // Array of zero or more IMAGE_BOUND_FORWARDER_REF follows
1949 }
1950
1951 #[derive(Debug, Clone, Copy)]
1952 #[repr(C)]
1953 pub struct ImageBoundForwarderRef {
1954     pub time_date_stamp: U32<LE>,
1955     pub offset_module_name: U16<LE>,
1956     pub reserved: U16<LE>,
1957 }
1958
1959 #[derive(Debug, Clone, Copy)]
1960 #[repr(C)]
1961 pub struct ImageDelayloadDescriptor {
1962     pub attributes: U32<LE>,
1963
1964     /// RVA to the name of the target library (NULL-terminate ASCII string)
1965     pub dll_name_rva: U32<LE>,
1966     /// RVA to the HMODULE caching location (PHMODULE)
1967     pub module_handle_rva: U32<LE>,
1968     /// RVA to the start of the IAT (PIMAGE_THUNK_DATA)
1969     pub import_address_table_rva: U32<LE>,
1970     /// RVA to the start of the name table (PIMAGE_THUNK_DATA::AddressOfData)
1971     pub import_name_table_rva: U32<LE>,
1972     /// RVA to an optional bound IAT
1973     pub bound_import_address_table_rva: U32<LE>,
1974     /// RVA to an optional unload info table
1975     pub unload_information_table_rva: U32<LE>,
1976     /// 0 if not bound, otherwise, date/time of the target DLL
1977     pub time_date_stamp: U32<LE>,
1978 }
1979
1980 impl ImageDelayloadDescriptor {
1981     /// Tell whether this delay-load import descriptor is the null descriptor
1982     /// (used to mark the end of the iterator array in a PE)
1983     pub fn is_null(&self) -> bool {
1984         self.attributes.get(LE) == 0
1985             && self.dll_name_rva.get(LE) == 0
1986             && self.module_handle_rva.get(LE) == 0
1987             && self.import_address_table_rva.get(LE) == 0
1988             && self.import_name_table_rva.get(LE) == 0
1989             && self.bound_import_address_table_rva.get(LE) == 0
1990             && self.unload_information_table_rva.get(LE) == 0
1991             && self.time_date_stamp.get(LE) == 0
1992     }
1993 }
1994
1995 /// Delay load version 2 flag for `ImageDelayloadDescriptor::attributes`.
1996 pub const IMAGE_DELAYLOAD_RVA_BASED: u32 = 0x8000_0000;
1997
1998 //
1999 // Resource Format.
2000 //
2001
2002 //
2003 // Resource directory consists of two counts, following by a variable length
2004 // array of directory entries.  The first count is the number of entries at
2005 // beginning of the array that have actual names associated with each entry.
2006 // The entries are in ascending order, case insensitive strings.  The second
2007 // count is the number of entries that immediately follow the named entries.
2008 // This second count identifies the number of entries that have 16-bit integer
2009 // Ids as their name.  These entries are also sorted in ascending order.
2010 //
2011 // This structure allows fast lookup by either name or number, but for any
2012 // given resource entry only one form of lookup is supported, not both.
2013 // This is consistant with the syntax of the .RC file and the .RES file.
2014 //
2015
2016 #[derive(Debug, Clone, Copy)]
2017 #[repr(C)]
2018 pub struct ImageResourceDirectory {
2019     pub characteristics: U32<LE>,
2020     pub time_date_stamp: U32<LE>,
2021     pub major_version: U16<LE>,
2022     pub minor_version: U16<LE>,
2023     pub number_of_named_entries: U16<LE>,
2024     pub number_of_id_entries: U16<LE>,
2025 }
2026
2027 pub const IMAGE_RESOURCE_NAME_IS_STRING: u32 = 0x8000_0000;
2028 pub const IMAGE_RESOURCE_DATA_IS_DIRECTORY: u32 = 0x8000_0000;
2029 //
2030 // Each directory contains the 32-bit Name of the entry and an offset,
2031 // relative to the beginning of the resource directory of the data associated
2032 // with this directory entry.  If the name of the entry is an actual text
2033 // string instead of an integer Id, then the high order bit of the name field
2034 // is set to one and the low order 31-bits are an offset, relative to the
2035 // beginning of the resource directory of the string, which is of type
2036 // IMAGE_RESOURCE_DIRECTORY_STRING.  Otherwise the high bit is clear and the
2037 // low-order 16-bits are the integer Id that identify this resource directory
2038 // entry. If the directory entry is yet another resource directory (i.e. a
2039 // subdirectory), then the high order bit of the offset field will be
2040 // set to indicate this.  Otherwise the high bit is clear and the offset
2041 // field points to a resource data entry.
2042 //
2043
2044 #[derive(Debug, Clone, Copy)]
2045 #[repr(C)]
2046 pub struct ImageResourceDirectoryEntry {
2047     pub name_or_id: U32<LE>,
2048     pub offset_to_data_or_directory: U32<LE>,
2049 }
2050
2051 //
2052 // For resource directory entries that have actual string names, the Name
2053 // field of the directory entry points to an object of the following type.
2054 // All of these string objects are stored together after the last resource
2055 // directory entry and before the first resource data object.  This minimizes
2056 // the impact of these variable length objects on the alignment of the fixed
2057 // size directory entry objects.
2058 //
2059
2060 #[derive(Debug, Clone, Copy)]
2061 #[repr(C)]
2062 pub struct ImageResourceDirectoryString {
2063     pub length: U16<LE>,
2064     //pub name_string: [i8; 1],
2065 }
2066
2067 #[derive(Debug, Clone, Copy)]
2068 #[repr(C)]
2069 pub struct ImageResourceDirStringU {
2070     pub length: U16<LE>,
2071     //pub name_string: [U16<LE>; 1],
2072 }
2073
2074 //
2075 // Each resource data entry describes a leaf node in the resource directory
2076 // tree.  It contains an offset, relative to the beginning of the resource
2077 // directory of the data for the resource, a size field that gives the number
2078 // of bytes of data at that offset, a CodePage that should be used when
2079 // decoding code point values within the resource data.  Typically for new
2080 // applications the code page would be the unicode code page.
2081 //
2082
2083 #[derive(Debug, Clone, Copy)]
2084 #[repr(C)]
2085 pub struct ImageResourceDataEntry {
2086     /// RVA of the data.
2087     pub offset_to_data: U32<LE>,
2088     pub size: U32<LE>,
2089     pub code_page: U32<LE>,
2090     pub reserved: U32<LE>,
2091 }
2092
2093 // Resource type: https://docs.microsoft.com/en-us/windows/win32/menurc/resource-types
2094
2095 /// ID for: Hardware-dependent cursor resource.
2096 pub const RT_CURSOR: u16 = 1;
2097 /// ID for: Bitmap resource.
2098 pub const RT_BITMAP: u16 = 2;
2099 /// ID for: Hardware-dependent icon resource.
2100 pub const RT_ICON: u16 = 3;
2101 /// ID for: Menu resource.
2102 pub const RT_MENU: u16 = 4;
2103 /// ID for: Dialog box.
2104 pub const RT_DIALOG: u16 = 5;
2105 /// ID for: String-table entry.
2106 pub const RT_STRING: u16 = 6;
2107 /// ID for: Font directory resource.
2108 pub const RT_FONTDIR: u16 = 7;
2109 /// ID for: Font resource.
2110 pub const RT_FONT: u16 = 8;
2111 /// ID for: Accelerator table.
2112 pub const RT_ACCELERATOR: u16 = 9;
2113 /// ID for: Application-defined resource (raw data).
2114 pub const RT_RCDATA: u16 = 10;
2115 /// ID for: Message-table entry.
2116 pub const RT_MESSAGETABLE: u16 = 11;
2117 /// ID for: Hardware-independent cursor resource.
2118 pub const RT_GROUP_CURSOR: u16 = 12;
2119 /// ID for: Hardware-independent icon resource.
2120 pub const RT_GROUP_ICON: u16 = 14;
2121 /// ID for: Version resource.
2122 pub const RT_VERSION: u16 = 16;
2123 /// ID for: Allows a resource editing tool to associate a string with an .rc file.
2124 pub const RT_DLGINCLUDE: u16 = 17;
2125 /// ID for: Plug and Play resource.
2126 pub const RT_PLUGPLAY: u16 = 19;
2127 /// ID for: VXD.
2128 pub const RT_VXD: u16 = 20;
2129 /// ID for: Animated cursor.
2130 pub const RT_ANICURSOR: u16 = 21;
2131 /// ID for: Animated icon.
2132 pub const RT_ANIICON: u16 = 22;
2133 /// ID for: HTML resource.
2134 pub const RT_HTML: u16 = 23;
2135 /// ID for: Side-by-Side Assembly Manifest.
2136 pub const RT_MANIFEST: u16 = 24;
2137
2138 //
2139 // Code Integrity in loadconfig (CI)
2140 //
2141
2142 #[derive(Debug, Clone, Copy)]
2143 #[repr(C)]
2144 pub struct ImageLoadConfigCodeIntegrity {
2145     /// Flags to indicate if CI information is available, etc.
2146     pub flags: U16<LE>,
2147     /// 0xFFFF means not available
2148     pub catalog: U16<LE>,
2149     pub catalog_offset: U32<LE>,
2150     /// Additional bitmask to be defined later
2151     pub reserved: U32<LE>,
2152 }
2153
2154 //
2155 // Dynamic value relocation table in loadconfig
2156 //
2157
2158 #[derive(Debug, Clone, Copy)]
2159 #[repr(C)]
2160 pub struct ImageDynamicRelocationTable {
2161     pub version: U32<LE>,
2162     pub size: U32<LE>,
2163     // DynamicRelocations: [ImageDynamicRelocation; 0],
2164 }
2165
2166 //
2167 // Dynamic value relocation entries following IMAGE_DYNAMIC_RELOCATION_TABLE
2168 //
2169
2170 #[derive(Debug, Clone, Copy)]
2171 #[repr(C)]
2172 pub struct ImageDynamicRelocation32 {
2173     pub symbol: U32<LE>,
2174     pub base_reloc_size: U32<LE>,
2175     // BaseRelocations: [ImageBaseRelocation; 0],
2176 }
2177
2178 #[derive(Debug, Clone, Copy)]
2179 #[repr(C)]
2180 pub struct ImageDynamicRelocation64 {
2181     pub symbol: U64<LE>,
2182     pub base_reloc_size: U32<LE>,
2183     // BaseRelocations: [ImageBaseRelocation; 0],
2184 }
2185
2186 #[derive(Debug, Clone, Copy)]
2187 #[repr(C)]
2188 pub struct ImageDynamicRelocation32V2 {
2189     pub header_size: U32<LE>,
2190     pub fixup_info_size: U32<LE>,
2191     pub symbol: U32<LE>,
2192     pub symbol_group: U32<LE>,
2193     pub flags: U32<LE>,
2194     // ...     variable length header fields
2195     // pub     fixup_info: [u8; fixup_info_size]
2196 }
2197
2198 #[derive(Debug, Clone, Copy)]
2199 #[repr(C)]
2200 pub struct ImageDynamicRelocation64V2 {
2201     pub header_size: U32<LE>,
2202     pub fixup_info_size: U32<LE>,
2203     pub symbol: U64<LE>,
2204     pub symbol_group: U32<LE>,
2205     pub flags: U32<LE>,
2206     // ...     variable length header fields
2207     // pub     fixup_info[u8; fixup_info_size]
2208 }
2209
2210 //
2211 // Defined symbolic dynamic relocation entries.
2212 //
2213
2214 pub const IMAGE_DYNAMIC_RELOCATION_GUARD_RF_PROLOGUE: u32 = 0x0000_0001;
2215 pub const IMAGE_DYNAMIC_RELOCATION_GUARD_RF_EPILOGUE: u32 = 0x0000_0002;
2216 pub const IMAGE_DYNAMIC_RELOCATION_GUARD_IMPORT_CONTROL_TRANSFER: u32 = 0x0000_0003;
2217 pub const IMAGE_DYNAMIC_RELOCATION_GUARD_INDIR_CONTROL_TRANSFER: u32 = 0x0000_0004;
2218 pub const IMAGE_DYNAMIC_RELOCATION_GUARD_SWITCHTABLE_BRANCH: u32 = 0x0000_0005;
2219
2220 // This struct has alignment 1.
2221 #[derive(Debug, Clone, Copy)]
2222 #[repr(C)]
2223 pub struct ImagePrologueDynamicRelocationHeader {
2224     pub prologue_byte_count: u8,
2225     // pub prologue_bytes: [u8; prologue_byte_count],
2226 }
2227
2228 // This struct has alignment 1.
2229 #[derive(Debug, Clone, Copy)]
2230 #[repr(C)]
2231 pub struct ImageEpilogueDynamicRelocationHeader {
2232     pub epilogue_count: U32Bytes<LE>,
2233     pub epilogue_byte_count: u8,
2234     pub branch_descriptor_element_size: u8,
2235     pub branch_descriptor_count: U16Bytes<LE>,
2236     // pub branch_descriptors[...],
2237     // pub branch_descriptor_bit_map[...],
2238 }
2239
2240 /*
2241 // TODO? bitfields
2242 // TODO: unaligned?
2243 #[derive(Debug, Clone, Copy)]
2244 #[repr(C)]
2245 pub struct ImageImportControlTransferDynamicRelocation {
2246     DWORD       PageRelativeOffset : 12;
2247     DWORD       IndirectCall       : 1;
2248     DWORD       IATIndex           : 19;
2249 }
2250
2251 // TODO: unaligned?
2252 #[derive(Debug, Clone, Copy)]
2253 #[repr(C)]
2254 pub struct ImageIndirControlTransferDynamicRelocation {
2255     WORD        PageRelativeOffset : 12;
2256     WORD        IndirectCall       : 1;
2257     WORD        RexWPrefix         : 1;
2258     WORD        CfgCheck           : 1;
2259     WORD        Reserved           : 1;
2260 }
2261
2262 // TODO: unaligned?
2263 #[derive(Debug, Clone, Copy)]
2264 #[repr(C)]
2265 pub struct ImageSwitchtableBranchDynamicRelocation {
2266     WORD        PageRelativeOffset : 12;
2267     WORD        RegisterNumber     : 4;
2268 }
2269 */
2270
2271 //
2272 // Load Configuration Directory Entry
2273 //
2274
2275 #[derive(Debug, Clone, Copy)]
2276 #[repr(C)]
2277 pub struct ImageLoadConfigDirectory32 {
2278     pub size: U32<LE>,
2279     pub time_date_stamp: U32<LE>,
2280     pub major_version: U16<LE>,
2281     pub minor_version: U16<LE>,
2282     pub global_flags_clear: U32<LE>,
2283     pub global_flags_set: U32<LE>,
2284     pub critical_section_default_timeout: U32<LE>,
2285     pub de_commit_free_block_threshold: U32<LE>,
2286     pub de_commit_total_free_threshold: U32<LE>,
2287     /// VA
2288     pub lock_prefix_table: U32<LE>,
2289     pub maximum_allocation_size: U32<LE>,
2290     pub virtual_memory_threshold: U32<LE>,
2291     pub process_heap_flags: U32<LE>,
2292     pub process_affinity_mask: U32<LE>,
2293     pub csd_version: U16<LE>,
2294     pub dependent_load_flags: U16<LE>,
2295     /// VA
2296     pub edit_list: U32<LE>,
2297     /// VA
2298     pub security_cookie: U32<LE>,
2299     /// VA
2300     pub sehandler_table: U32<LE>,
2301     pub sehandler_count: U32<LE>,
2302     /// VA
2303     pub guard_cf_check_function_pointer: U32<LE>,
2304     /// VA
2305     pub guard_cf_dispatch_function_pointer: U32<LE>,
2306     /// VA
2307     pub guard_cf_function_table: U32<LE>,
2308     pub guard_cf_function_count: U32<LE>,
2309     pub guard_flags: U32<LE>,
2310     pub code_integrity: ImageLoadConfigCodeIntegrity,
2311     /// VA
2312     pub guard_address_taken_iat_entry_table: U32<LE>,
2313     pub guard_address_taken_iat_entry_count: U32<LE>,
2314     /// VA
2315     pub guard_long_jump_target_table: U32<LE>,
2316     pub guard_long_jump_target_count: U32<LE>,
2317     /// VA
2318     pub dynamic_value_reloc_table: U32<LE>,
2319     pub chpe_metadata_pointer: U32<LE>,
2320     /// VA
2321     pub guard_rf_failure_routine: U32<LE>,
2322     /// VA
2323     pub guard_rf_failure_routine_function_pointer: U32<LE>,
2324     pub dynamic_value_reloc_table_offset: U32<LE>,
2325     pub dynamic_value_reloc_table_section: U16<LE>,
2326     pub reserved2: U16<LE>,
2327     /// VA
2328     pub guard_rf_verify_stack_pointer_function_pointer: U32<LE>,
2329     pub hot_patch_table_offset: U32<LE>,
2330     pub reserved3: U32<LE>,
2331     /// VA
2332     pub enclave_configuration_pointer: U32<LE>,
2333     /// VA
2334     pub volatile_metadata_pointer: U32<LE>,
2335 }
2336
2337 #[derive(Debug, Clone, Copy)]
2338 #[repr(C)]
2339 pub struct ImageLoadConfigDirectory64 {
2340     pub size: U32<LE>,
2341     pub time_date_stamp: U32<LE>,
2342     pub major_version: U16<LE>,
2343     pub minor_version: U16<LE>,
2344     pub global_flags_clear: U32<LE>,
2345     pub global_flags_set: U32<LE>,
2346     pub critical_section_default_timeout: U32<LE>,
2347     pub de_commit_free_block_threshold: U64<LE>,
2348     pub de_commit_total_free_threshold: U64<LE>,
2349     /// VA
2350     pub lock_prefix_table: U64<LE>,
2351     pub maximum_allocation_size: U64<LE>,
2352     pub virtual_memory_threshold: U64<LE>,
2353     pub process_affinity_mask: U64<LE>,
2354     pub process_heap_flags: U32<LE>,
2355     pub csd_version: U16<LE>,
2356     pub dependent_load_flags: U16<LE>,
2357     /// VA
2358     pub edit_list: U64<LE>,
2359     /// VA
2360     pub security_cookie: U64<LE>,
2361     /// VA
2362     pub sehandler_table: U64<LE>,
2363     pub sehandler_count: U64<LE>,
2364     /// VA
2365     pub guard_cf_check_function_pointer: U64<LE>,
2366     /// VA
2367     pub guard_cf_dispatch_function_pointer: U64<LE>,
2368     /// VA
2369     pub guard_cf_function_table: U64<LE>,
2370     pub guard_cf_function_count: U64<LE>,
2371     pub guard_flags: U32<LE>,
2372     pub code_integrity: ImageLoadConfigCodeIntegrity,
2373     /// VA
2374     pub guard_address_taken_iat_entry_table: U64<LE>,
2375     pub guard_address_taken_iat_entry_count: U64<LE>,
2376     /// VA
2377     pub guard_long_jump_target_table: U64<LE>,
2378     pub guard_long_jump_target_count: U64<LE>,
2379     /// VA
2380     pub dynamic_value_reloc_table: U64<LE>,
2381     /// VA
2382     pub chpe_metadata_pointer: U64<LE>,
2383     /// VA
2384     pub guard_rf_failure_routine: U64<LE>,
2385     /// VA
2386     pub guard_rf_failure_routine_function_pointer: U64<LE>,
2387     pub dynamic_value_reloc_table_offset: U32<LE>,
2388     pub dynamic_value_reloc_table_section: U16<LE>,
2389     pub reserved2: U16<LE>,
2390     /// VA
2391     pub guard_rf_verify_stack_pointer_function_pointer: U64<LE>,
2392     pub hot_patch_table_offset: U32<LE>,
2393     pub reserved3: U32<LE>,
2394     /// VA
2395     pub enclave_configuration_pointer: U64<LE>,
2396     /// VA
2397     pub volatile_metadata_pointer: U64<LE>,
2398 }
2399
2400 #[derive(Debug, Clone, Copy)]
2401 #[repr(C)]
2402 pub struct ImageHotPatchInfo {
2403     pub version: U32<LE>,
2404     pub size: U32<LE>,
2405     pub sequence_number: U32<LE>,
2406     pub base_image_list: U32<LE>,
2407     pub base_image_count: U32<LE>,
2408     /// Version 2 and later
2409     pub buffer_offset: U32<LE>,
2410     /// Version 3 and later
2411     pub extra_patch_size: U32<LE>,
2412 }
2413
2414 #[derive(Debug, Clone, Copy)]
2415 #[repr(C)]
2416 pub struct ImageHotPatchBase {
2417     pub sequence_number: U32<LE>,
2418     pub flags: U32<LE>,
2419     pub original_time_date_stamp: U32<LE>,
2420     pub original_check_sum: U32<LE>,
2421     pub code_integrity_info: U32<LE>,
2422     pub code_integrity_size: U32<LE>,
2423     pub patch_table: U32<LE>,
2424     /// Version 2 and later
2425     pub buffer_offset: U32<LE>,
2426 }
2427
2428 #[derive(Debug, Clone, Copy)]
2429 #[repr(C)]
2430 pub struct ImageHotPatchHashes {
2431     pub sha256: [u8; 32],
2432     pub sha1: [u8; 20],
2433 }
2434
2435 pub const IMAGE_HOT_PATCH_BASE_OBLIGATORY: u32 = 0x0000_0001;
2436 pub const IMAGE_HOT_PATCH_BASE_CAN_ROLL_BACK: u32 = 0x0000_0002;
2437
2438 pub const IMAGE_HOT_PATCH_CHUNK_INVERSE: u32 = 0x8000_0000;
2439 pub const IMAGE_HOT_PATCH_CHUNK_OBLIGATORY: u32 = 0x4000_0000;
2440 pub const IMAGE_HOT_PATCH_CHUNK_RESERVED: u32 = 0x3FF0_3000;
2441 pub const IMAGE_HOT_PATCH_CHUNK_TYPE: u32 = 0x000F_C000;
2442 pub const IMAGE_HOT_PATCH_CHUNK_SOURCE_RVA: u32 = 0x0000_8000;
2443 pub const IMAGE_HOT_PATCH_CHUNK_TARGET_RVA: u32 = 0x0000_4000;
2444 pub const IMAGE_HOT_PATCH_CHUNK_SIZE: u32 = 0x0000_0FFF;
2445
2446 pub const IMAGE_HOT_PATCH_NONE: u32 = 0x0000_0000;
2447 pub const IMAGE_HOT_PATCH_FUNCTION: u32 = 0x0001_C000;
2448 pub const IMAGE_HOT_PATCH_ABSOLUTE: u32 = 0x0002_C000;
2449 pub const IMAGE_HOT_PATCH_REL32: u32 = 0x0003_C000;
2450 pub const IMAGE_HOT_PATCH_CALL_TARGET: u32 = 0x0004_4000;
2451 pub const IMAGE_HOT_PATCH_INDIRECT: u32 = 0x0005_C000;
2452 pub const IMAGE_HOT_PATCH_NO_CALL_TARGET: u32 = 0x0006_4000;
2453 pub const IMAGE_HOT_PATCH_DYNAMIC_VALUE: u32 = 0x0007_8000;
2454
2455 /// Module performs control flow integrity checks using system-supplied support
2456 pub const IMAGE_GUARD_CF_INSTRUMENTED: u32 = 0x0000_0100;
2457 /// Module performs control flow and write integrity checks
2458 pub const IMAGE_GUARD_CFW_INSTRUMENTED: u32 = 0x0000_0200;
2459 /// Module contains valid control flow target metadata
2460 pub const IMAGE_GUARD_CF_FUNCTION_TABLE_PRESENT: u32 = 0x0000_0400;
2461 /// Module does not make use of the /GS security cookie
2462 pub const IMAGE_GUARD_SECURITY_COOKIE_UNUSED: u32 = 0x0000_0800;
2463 /// Module supports read only delay load IAT
2464 pub const IMAGE_GUARD_PROTECT_DELAYLOAD_IAT: u32 = 0x0000_1000;
2465 /// Delayload import table in its own .didat section (with nothing else in it) that can be freely reprotected
2466 pub const IMAGE_GUARD_DELAYLOAD_IAT_IN_ITS_OWN_SECTION: u32 = 0x0000_2000;
2467 /// Module contains suppressed export information.
2468 ///
2469 /// This also infers that the address taken taken IAT table is also present in the load config.
2470 pub const IMAGE_GUARD_CF_EXPORT_SUPPRESSION_INFO_PRESENT: u32 = 0x0000_4000;
2471 /// Module enables suppression of exports
2472 pub const IMAGE_GUARD_CF_ENABLE_EXPORT_SUPPRESSION: u32 = 0x0000_8000;
2473 /// Module contains longjmp target information
2474 pub const IMAGE_GUARD_CF_LONGJUMP_TABLE_PRESENT: u32 = 0x0001_0000;
2475 /// Module contains return flow instrumentation and metadata
2476 pub const IMAGE_GUARD_RF_INSTRUMENTED: u32 = 0x0002_0000;
2477 /// Module requests that the OS enable return flow protection
2478 pub const IMAGE_GUARD_RF_ENABLE: u32 = 0x0004_0000;
2479 /// Module requests that the OS enable return flow protection in strict mode
2480 pub const IMAGE_GUARD_RF_STRICT: u32 = 0x0008_0000;
2481 /// Module was built with retpoline support
2482 pub const IMAGE_GUARD_RETPOLINE_PRESENT: u32 = 0x0010_0000;
2483
2484 /// Stride of Guard CF function table encoded in these bits (additional count of bytes per element)
2485 pub const IMAGE_GUARD_CF_FUNCTION_TABLE_SIZE_MASK: u32 = 0xF000_0000;
2486 /// Shift to right-justify Guard CF function table stride
2487 pub const IMAGE_GUARD_CF_FUNCTION_TABLE_SIZE_SHIFT: u32 = 28;
2488
2489 //
2490 // GFIDS table entry flags.
2491 //
2492
2493 /// The containing GFID entry is suppressed
2494 pub const IMAGE_GUARD_FLAG_FID_SUPPRESSED: u16 = 0x01;
2495 /// The containing GFID entry is export suppressed
2496 pub const IMAGE_GUARD_FLAG_EXPORT_SUPPRESSED: u16 = 0x02;
2497
2498 //
2499 // WIN CE Exception table format
2500 //
2501
2502 //
2503 // Function table entry format.  Function table is pointed to by the
2504 // IMAGE_DIRECTORY_ENTRY_EXCEPTION directory entry.
2505 //
2506
2507 /*
2508 // TODO? bitfields
2509 #[derive(Debug, Clone, Copy)]
2510 #[repr(C)]
2511 pub struct ImageCeRuntimeFunctionEntry {
2512     pub func_start: U32<LE>,
2513     DWORD PrologLen : 8;
2514     DWORD FuncLen : 22;
2515     DWORD ThirtyTwoBit : 1;
2516     DWORD ExceptionFlag : 1;
2517 }
2518 */
2519
2520 #[derive(Debug, Clone, Copy)]
2521 #[repr(C)]
2522 pub struct ImageArmRuntimeFunctionEntry {
2523     pub begin_address: U32<LE>,
2524     pub unwind_data: U32<LE>,
2525 }
2526
2527 #[derive(Debug, Clone, Copy)]
2528 #[repr(C)]
2529 pub struct ImageArm64RuntimeFunctionEntry {
2530     pub begin_address: U32<LE>,
2531     pub unwind_data: U32<LE>,
2532 }
2533
2534 #[derive(Debug, Clone, Copy)]
2535 #[repr(C)]
2536 pub struct ImageAlpha64RuntimeFunctionEntry {
2537     pub begin_address: U64<LE>,
2538     pub end_address: U64<LE>,
2539     pub exception_handler: U64<LE>,
2540     pub handler_data: U64<LE>,
2541     pub prolog_end_address: U64<LE>,
2542 }
2543
2544 #[derive(Debug, Clone, Copy)]
2545 #[repr(C)]
2546 pub struct ImageAlphaRuntimeFunctionEntry {
2547     pub begin_address: U32<LE>,
2548     pub end_address: U32<LE>,
2549     pub exception_handler: U32<LE>,
2550     pub handler_data: U32<LE>,
2551     pub prolog_end_address: U32<LE>,
2552 }
2553
2554 #[derive(Debug, Clone, Copy)]
2555 #[repr(C)]
2556 pub struct ImageRuntimeFunctionEntry {
2557     pub begin_address: U32<LE>,
2558     pub end_address: U32<LE>,
2559     pub unwind_info_address_or_data: U32<LE>,
2560 }
2561
2562 //
2563 // Sofware enclave information
2564 //
2565
2566 pub const IMAGE_ENCLAVE_LONG_ID_LENGTH: usize = 32;
2567 pub const IMAGE_ENCLAVE_SHORT_ID_LENGTH: usize = 16;
2568
2569 #[derive(Debug, Clone, Copy)]
2570 #[repr(C)]
2571 pub struct ImageEnclaveConfig32 {
2572     pub size: U32<LE>,
2573     pub minimum_required_config_size: U32<LE>,
2574     pub policy_flags: U32<LE>,
2575     pub number_of_imports: U32<LE>,
2576     pub import_list: U32<LE>,
2577     pub import_entry_size: U32<LE>,
2578     pub family_id: [u8; IMAGE_ENCLAVE_SHORT_ID_LENGTH],
2579     pub image_id: [u8; IMAGE_ENCLAVE_SHORT_ID_LENGTH],
2580     pub image_version: U32<LE>,
2581     pub security_version: U32<LE>,
2582     pub enclave_size: U32<LE>,
2583     pub number_of_threads: U32<LE>,
2584     pub enclave_flags: U32<LE>,
2585 }
2586
2587 #[derive(Debug, Clone, Copy)]
2588 #[repr(C)]
2589 pub struct ImageEnclaveConfig64 {
2590     pub size: U32<LE>,
2591     pub minimum_required_config_size: U32<LE>,
2592     pub policy_flags: U32<LE>,
2593     pub number_of_imports: U32<LE>,
2594     pub import_list: U32<LE>,
2595     pub import_entry_size: U32<LE>,
2596     pub family_id: [u8; IMAGE_ENCLAVE_SHORT_ID_LENGTH],
2597     pub image_id: [u8; IMAGE_ENCLAVE_SHORT_ID_LENGTH],
2598     pub image_version: U32<LE>,
2599     pub security_version: U32<LE>,
2600     pub enclave_size: U64<LE>,
2601     pub number_of_threads: U32<LE>,
2602     pub enclave_flags: U32<LE>,
2603 }
2604
2605 //pub const IMAGE_ENCLAVE_MINIMUM_CONFIG_SIZE: usize = FIELD_OFFSET(IMAGE_ENCLAVE_CONFIG, EnclaveFlags);
2606
2607 pub const IMAGE_ENCLAVE_POLICY_DEBUGGABLE: u32 = 0x0000_0001;
2608
2609 pub const IMAGE_ENCLAVE_FLAG_PRIMARY_IMAGE: u32 = 0x0000_0001;
2610
2611 #[derive(Debug, Clone, Copy)]
2612 #[repr(C)]
2613 pub struct ImageEnclaveImport {
2614     pub match_type: U32<LE>,
2615     pub minimum_security_version: U32<LE>,
2616     pub unique_or_author_id: [u8; IMAGE_ENCLAVE_LONG_ID_LENGTH],
2617     pub family_id: [u8; IMAGE_ENCLAVE_SHORT_ID_LENGTH],
2618     pub image_id: [u8; IMAGE_ENCLAVE_SHORT_ID_LENGTH],
2619     pub import_name: U32<LE>,
2620     pub reserved: U32<LE>,
2621 }
2622
2623 pub const IMAGE_ENCLAVE_IMPORT_MATCH_NONE: u32 = 0x0000_0000;
2624 pub const IMAGE_ENCLAVE_IMPORT_MATCH_UNIQUE_ID: u32 = 0x0000_0001;
2625 pub const IMAGE_ENCLAVE_IMPORT_MATCH_AUTHOR_ID: u32 = 0x0000_0002;
2626 pub const IMAGE_ENCLAVE_IMPORT_MATCH_FAMILY_ID: u32 = 0x0000_0003;
2627 pub const IMAGE_ENCLAVE_IMPORT_MATCH_IMAGE_ID: u32 = 0x0000_0004;
2628
2629 //
2630 // Debug Format
2631 //
2632
2633 #[derive(Debug, Clone, Copy)]
2634 #[repr(C)]
2635 pub struct ImageDebugDirectory {
2636     pub characteristics: U32<LE>,
2637     pub time_date_stamp: U32<LE>,
2638     pub major_version: U16<LE>,
2639     pub minor_version: U16<LE>,
2640     pub typ: U32<LE>,
2641     pub size_of_data: U32<LE>,
2642     pub address_of_raw_data: U32<LE>,
2643     pub pointer_to_raw_data: U32<LE>,
2644 }
2645
2646 pub const IMAGE_DEBUG_TYPE_UNKNOWN: u32 = 0;
2647 pub const IMAGE_DEBUG_TYPE_COFF: u32 = 1;
2648 pub const IMAGE_DEBUG_TYPE_CODEVIEW: u32 = 2;
2649 pub const IMAGE_DEBUG_TYPE_FPO: u32 = 3;
2650 pub const IMAGE_DEBUG_TYPE_MISC: u32 = 4;
2651 pub const IMAGE_DEBUG_TYPE_EXCEPTION: u32 = 5;
2652 pub const IMAGE_DEBUG_TYPE_FIXUP: u32 = 6;
2653 pub const IMAGE_DEBUG_TYPE_OMAP_TO_SRC: u32 = 7;
2654 pub const IMAGE_DEBUG_TYPE_OMAP_FROM_SRC: u32 = 8;
2655 pub const IMAGE_DEBUG_TYPE_BORLAND: u32 = 9;
2656 pub const IMAGE_DEBUG_TYPE_RESERVED10: u32 = 10;
2657 pub const IMAGE_DEBUG_TYPE_CLSID: u32 = 11;
2658 pub const IMAGE_DEBUG_TYPE_VC_FEATURE: u32 = 12;
2659 pub const IMAGE_DEBUG_TYPE_POGO: u32 = 13;
2660 pub const IMAGE_DEBUG_TYPE_ILTCG: u32 = 14;
2661 pub const IMAGE_DEBUG_TYPE_MPX: u32 = 15;
2662 pub const IMAGE_DEBUG_TYPE_REPRO: u32 = 16;
2663
2664 #[derive(Debug, Clone, Copy)]
2665 #[repr(C)]
2666 pub struct ImageCoffSymbolsHeader {
2667     pub number_of_symbols: U32<LE>,
2668     pub lva_to_first_symbol: U32<LE>,
2669     pub number_of_linenumbers: U32<LE>,
2670     pub lva_to_first_linenumber: U32<LE>,
2671     pub rva_to_first_byte_of_code: U32<LE>,
2672     pub rva_to_last_byte_of_code: U32<LE>,
2673     pub rva_to_first_byte_of_data: U32<LE>,
2674     pub rva_to_last_byte_of_data: U32<LE>,
2675 }
2676
2677 pub const FRAME_FPO: u16 = 0;
2678 pub const FRAME_TRAP: u16 = 1;
2679 pub const FRAME_TSS: u16 = 2;
2680 pub const FRAME_NONFPO: u16 = 3;
2681
2682 /*
2683 // TODO? bitfields
2684 #[derive(Debug, Clone, Copy)]
2685 #[repr(C)]
2686 pub struct FpoData {
2687 /// offset 1st byte of function code
2688     pub ul_off_start: U32<LE>,
2689 /// # bytes in function
2690     pub cb_proc_size: U32<LE>,
2691 /// # bytes in locals/4
2692     pub cdw_locals: U32<LE>,
2693 /// # bytes in params/4
2694     pub cdw_params: U16<LE>,
2695 /// # bytes in prolog
2696     WORD        cbProlog : 8;
2697 /// # regs saved
2698     WORD        cbRegs   : 3;
2699 /// TRUE if SEH in func
2700     WORD        fHasSEH  : 1;
2701 /// TRUE if EBP has been allocated
2702     WORD        fUseBP   : 1;
2703 /// reserved for future use
2704     WORD        reserved : 1;
2705 /// frame type
2706     WORD        cbFrame  : 2;
2707 }
2708 pub const SIZEOF_RFPO_DATA: usize = 16;
2709 */
2710
2711 pub const IMAGE_DEBUG_MISC_EXENAME: u16 = 1;
2712
2713 #[derive(Debug, Clone, Copy)]
2714 #[repr(C)]
2715 pub struct ImageDebugMisc {
2716     /// type of misc data, see defines
2717     pub data_type: U32<LE>,
2718     /// total length of record, rounded to four byte multiple.
2719     pub length: U32<LE>,
2720     /// TRUE if data is unicode string
2721     pub unicode: u8,
2722     pub reserved: [u8; 3],
2723     // Actual data
2724     //pub data: [u8; 1],
2725 }
2726
2727 //
2728 // Function table extracted from MIPS/ALPHA/IA64 images.  Does not contain
2729 // information needed only for runtime support.  Just those fields for
2730 // each entry needed by a debugger.
2731 //
2732
2733 #[derive(Debug, Clone, Copy)]
2734 #[repr(C)]
2735 pub struct ImageFunctionEntry {
2736     pub starting_address: U32<LE>,
2737     pub ending_address: U32<LE>,
2738     pub end_of_prologue: U32<LE>,
2739 }
2740
2741 #[derive(Debug, Clone, Copy)]
2742 #[repr(C)]
2743 pub struct ImageFunctionEntry64 {
2744     pub starting_address: U64<LE>,
2745     pub ending_address: U64<LE>,
2746     pub end_of_prologue_or_unwind_info_address: U64<LE>,
2747 }
2748
2749 //
2750 // Debugging information can be stripped from an image file and placed
2751 // in a separate .DBG file, whose file name part is the same as the
2752 // image file name part (e.g. symbols for CMD.EXE could be stripped
2753 // and placed in CMD.DBG).  This is indicated by the IMAGE_FILE_DEBUG_STRIPPED
2754 // flag in the Characteristics field of the file header.  The beginning of
2755 // the .DBG file contains the following structure which captures certain
2756 // information from the image file.  This allows a debug to proceed even if
2757 // the original image file is not accessable.  This header is followed by
2758 // zero of more IMAGE_SECTION_HEADER structures, followed by zero or more
2759 // IMAGE_DEBUG_DIRECTORY structures.  The latter structures and those in
2760 // the image file contain file offsets relative to the beginning of the
2761 // .DBG file.
2762 //
2763 // If symbols have been stripped from an image, the IMAGE_DEBUG_MISC structure
2764 // is left in the image file, but not mapped.  This allows a debugger to
2765 // compute the name of the .DBG file, from the name of the image in the
2766 // IMAGE_DEBUG_MISC structure.
2767 //
2768
2769 #[derive(Debug, Clone, Copy)]
2770 #[repr(C)]
2771 pub struct ImageSeparateDebugHeader {
2772     pub signature: U16<LE>,
2773     pub flags: U16<LE>,
2774     pub machine: U16<LE>,
2775     pub characteristics: U16<LE>,
2776     pub time_date_stamp: U32<LE>,
2777     pub check_sum: U32<LE>,
2778     pub image_base: U32<LE>,
2779     pub size_of_image: U32<LE>,
2780     pub number_of_sections: U32<LE>,
2781     pub exported_names_size: U32<LE>,
2782     pub debug_directory_size: U32<LE>,
2783     pub section_alignment: U32<LE>,
2784     pub reserved: [U32<LE>; 2],
2785 }
2786
2787 #[derive(Debug, Clone, Copy)]
2788 #[repr(C)]
2789 pub struct NonPagedDebugInfo {
2790     pub signature: U16<LE>,
2791     pub flags: U16<LE>,
2792     pub size: U32<LE>,
2793     pub machine: U16<LE>,
2794     pub characteristics: U16<LE>,
2795     pub time_date_stamp: U32<LE>,
2796     pub check_sum: U32<LE>,
2797     pub size_of_image: U32<LE>,
2798     pub image_base: U64<LE>,
2799     //debug_directory_size
2800     //ImageDebugDirectory
2801 }
2802
2803 pub const IMAGE_SEPARATE_DEBUG_SIGNATURE: u16 = 0x4944;
2804 pub const NON_PAGED_DEBUG_SIGNATURE: u16 = 0x494E;
2805
2806 pub const IMAGE_SEPARATE_DEBUG_FLAGS_MASK: u16 = 0x8000;
2807 /// when DBG was updated, the old checksum didn't match.
2808 pub const IMAGE_SEPARATE_DEBUG_MISMATCH: u16 = 0x8000;
2809
2810 //
2811 //  The .arch section is made up of headers, each describing an amask position/value
2812 //  pointing to an array of IMAGE_ARCHITECTURE_ENTRY's.  Each "array" (both the header
2813 //  and entry arrays) are terminiated by a quadword of 0xffffffffL.
2814 //
2815 //  NOTE: There may be quadwords of 0 sprinkled around and must be skipped.
2816 //
2817
2818 /*
2819 // TODO? bitfields
2820 #[derive(Debug, Clone, Copy)]
2821 #[repr(C)]
2822 pub struct ImageArchitectureHeader {
2823     /// 1 -> code section depends on mask bit
2824     /// 0 -> new instruction depends on mask bit
2825     unsigned int AmaskValue: 1;
2826     /// MBZ
2827     int :7;
2828     /// Amask bit in question for this fixup
2829     unsigned int AmaskShift: 8;
2830     /// MBZ
2831     int :16;
2832     /// RVA into .arch section to array of ARCHITECTURE_ENTRY's
2833     pub first_entry_rva: U32<LE>,
2834 }
2835 */
2836
2837 #[derive(Debug, Clone, Copy)]
2838 #[repr(C)]
2839 pub struct ImageArchitectureEntry {
2840     /// RVA of instruction to fixup
2841     pub fixup_inst_rva: U32<LE>,
2842     /// fixup instruction (see alphaops.h)
2843     pub new_inst: U32<LE>,
2844 }
2845
2846 // The following structure defines the new import object.  Note the values of the first two fields,
2847 // which must be set as stated in order to differentiate old and new import members.
2848 // Following this structure, the linker emits two null-terminated strings used to recreate the
2849 // import at the time of use.  The first string is the import's name, the second is the dll's name.
2850
2851 pub const IMPORT_OBJECT_HDR_SIG2: u16 = 0xffff;
2852
2853 #[derive(Debug, Clone, Copy)]
2854 #[repr(C)]
2855 pub struct ImportObjectHeader {
2856     /// Must be IMAGE_FILE_MACHINE_UNKNOWN
2857     pub sig1: U16<LE>,
2858     /// Must be IMPORT_OBJECT_HDR_SIG2.
2859     pub sig2: U16<LE>,
2860     pub version: U16<LE>,
2861     pub machine: U16<LE>,
2862     /// Time/date stamp
2863     pub time_date_stamp: U32<LE>,
2864     /// particularly useful for incremental links
2865     pub size_of_data: U32<LE>,
2866
2867     /// if grf & IMPORT_OBJECT_ORDINAL
2868     pub ordinal_or_hint: U16<LE>,
2869
2870     // WORD    Type : 2;
2871     // WORD    NameType : 3;
2872     // WORD    Reserved : 11;
2873     pub name_type: U16<LE>,
2874 }
2875
2876 pub const IMPORT_OBJECT_CODE: u16 = 0;
2877 pub const IMPORT_OBJECT_DATA: u16 = 1;
2878 pub const IMPORT_OBJECT_CONST: u16 = 2;
2879
2880 /// Import by ordinal
2881 pub const IMPORT_OBJECT_ORDINAL: u16 = 0;
2882 /// Import name == public symbol name.
2883 pub const IMPORT_OBJECT_NAME: u16 = 1;
2884 /// Import name == public symbol name skipping leading ?, @, or optionally _.
2885 pub const IMPORT_OBJECT_NAME_NO_PREFIX: u16 = 2;
2886 /// Import name == public symbol name skipping leading ?, @, or optionally _ and truncating at first @.
2887 pub const IMPORT_OBJECT_NAME_UNDECORATE: u16 = 3;
2888 /// Import name == a name is explicitly provided after the DLL name.
2889 pub const IMPORT_OBJECT_NAME_EXPORTAS: u16 = 4;
2890
2891 // COM+ Header entry point flags.
2892 pub const COMIMAGE_FLAGS_ILONLY: u32 = 0x0000_0001;
2893 pub const COMIMAGE_FLAGS_32BITREQUIRED: u32 = 0x0000_0002;
2894 pub const COMIMAGE_FLAGS_IL_LIBRARY: u32 = 0x0000_0004;
2895 pub const COMIMAGE_FLAGS_STRONGNAMESIGNED: u32 = 0x0000_0008;
2896 pub const COMIMAGE_FLAGS_NATIVE_ENTRYPOINT: u32 = 0x0000_0010;
2897 pub const COMIMAGE_FLAGS_TRACKDEBUGDATA: u32 = 0x0001_0000;
2898 pub const COMIMAGE_FLAGS_32BITPREFERRED: u32 = 0x0002_0000;
2899
2900 // Version flags for image.
2901 pub const COR_VERSION_MAJOR_V2: u16 = 2;
2902 pub const COR_VERSION_MAJOR: u16 = COR_VERSION_MAJOR_V2;
2903 pub const COR_VERSION_MINOR: u16 = 5;
2904 pub const COR_DELETED_NAME_LENGTH: usize = 8;
2905 pub const COR_VTABLEGAP_NAME_LENGTH: usize = 8;
2906
2907 // Maximum size of a NativeType descriptor.
2908 pub const NATIVE_TYPE_MAX_CB: u16 = 1;
2909 pub const COR_ILMETHOD_SECT_SMALL_MAX_DATASIZE: u16 = 0xFF;
2910
2911 // Consts for the MIH FLAGS
2912 pub const IMAGE_COR_MIH_METHODRVA: u16 = 0x01;
2913 pub const IMAGE_COR_MIH_EHRVA: u16 = 0x02;
2914 pub const IMAGE_COR_MIH_BASICBLOCK: u16 = 0x08;
2915
2916 // V-table constants
2917 /// V-table slots are 32-bits in size.
2918 pub const COR_VTABLE_32BIT: u16 = 0x01;
2919 /// V-table slots are 64-bits in size.
2920 pub const COR_VTABLE_64BIT: u16 = 0x02;
2921 /// If set, transition from unmanaged.
2922 pub const COR_VTABLE_FROM_UNMANAGED: u16 = 0x04;
2923 /// If set, transition from unmanaged with keeping the current appdomain.
2924 pub const COR_VTABLE_FROM_UNMANAGED_RETAIN_APPDOMAIN: u16 = 0x08;
2925 /// Call most derived method described by
2926 pub const COR_VTABLE_CALL_MOST_DERIVED: u16 = 0x10;
2927
2928 // EATJ constants
2929 /// Size of a jump thunk reserved range.
2930 pub const IMAGE_COR_EATJ_THUNK_SIZE: usize = 32;
2931
2932 // Max name lengths
2933 pub const MAX_CLASS_NAME: usize = 1024;
2934 pub const MAX_PACKAGE_NAME: usize = 1024;
2935
2936 // CLR 2.0 header structure.
2937 #[derive(Debug, Clone, Copy)]
2938 #[repr(C)]
2939 pub struct ImageCor20Header {
2940     // Header versioning
2941     pub cb: U32<LE>,
2942     pub major_runtime_version: U16<LE>,
2943     pub minor_runtime_version: U16<LE>,
2944
2945     // Symbol table and startup information
2946     pub meta_data: ImageDataDirectory,
2947     pub flags: U32<LE>,
2948
2949     // If COMIMAGE_FLAGS_NATIVE_ENTRYPOINT is not set, EntryPointToken represents a managed entrypoint.
2950     // If COMIMAGE_FLAGS_NATIVE_ENTRYPOINT is set, EntryPointRVA represents an RVA to a native entrypoint.
2951     pub entry_point_token_or_rva: U32<LE>,
2952
2953     // Binding information
2954     pub resources: ImageDataDirectory,
2955     pub strong_name_signature: ImageDataDirectory,
2956
2957     // Regular fixup and binding information
2958     pub code_manager_table: ImageDataDirectory,
2959     pub vtable_fixups: ImageDataDirectory,
2960     pub export_address_table_jumps: ImageDataDirectory,
2961
2962     // Precompiled image info (internal use only - set to zero)
2963     pub managed_native_header: ImageDataDirectory,
2964 }
2965
2966 unsafe_impl_pod!(
2967     ImageDosHeader,
2968     ImageOs2Header,
2969     ImageVxdHeader,
2970     ImageFileHeader,
2971     ImageDataDirectory,
2972     ImageOptionalHeader32,
2973     ImageRomOptionalHeader,
2974     ImageOptionalHeader64,
2975     ImageNtHeaders64,
2976     ImageNtHeaders32,
2977     ImageRomHeaders,
2978     Guid,
2979     AnonObjectHeader,
2980     AnonObjectHeaderV2,
2981     AnonObjectHeaderBigobj,
2982     ImageSectionHeader,
2983     ImageSymbol,
2984     ImageSymbolBytes,
2985     ImageSymbolEx,
2986     ImageSymbolExBytes,
2987     ImageAuxSymbolTokenDef,
2988     ImageAuxSymbolFunction,
2989     ImageAuxSymbolFunctionBeginEnd,
2990     ImageAuxSymbolWeak,
2991     ImageAuxSymbolSection,
2992     ImageAuxSymbolCrc,
2993     ImageRelocation,
2994     ImageLinenumber,
2995     ImageBaseRelocation,
2996     ImageArchiveMemberHeader,
2997     ImageExportDirectory,
2998     ImageImportByName,
2999     ImageThunkData64,
3000     ImageThunkData32,
3001     ImageTlsDirectory64,
3002     ImageTlsDirectory32,
3003     ImageImportDescriptor,
3004     ImageBoundImportDescriptor,
3005     ImageBoundForwarderRef,
3006     ImageDelayloadDescriptor,
3007     ImageResourceDirectory,
3008     ImageResourceDirectoryEntry,
3009     ImageResourceDirectoryString,
3010     ImageResourceDirStringU,
3011     ImageResourceDataEntry,
3012     ImageLoadConfigCodeIntegrity,
3013     ImageDynamicRelocationTable,
3014     ImageDynamicRelocation32,
3015     ImageDynamicRelocation64,
3016     ImageDynamicRelocation32V2,
3017     ImageDynamicRelocation64V2,
3018     ImagePrologueDynamicRelocationHeader,
3019     ImageEpilogueDynamicRelocationHeader,
3020     //ImageImportControlTransferDynamicRelocation,
3021     //ImageIndirControlTransferDynamicRelocation,
3022     //ImageSwitchtableBranchDynamicRelocation,
3023     ImageLoadConfigDirectory32,
3024     ImageLoadConfigDirectory64,
3025     ImageHotPatchInfo,
3026     ImageHotPatchBase,
3027     ImageHotPatchHashes,
3028     //ImageCeRuntimeFunctionEntry,
3029     ImageArmRuntimeFunctionEntry,
3030     ImageArm64RuntimeFunctionEntry,
3031     ImageAlpha64RuntimeFunctionEntry,
3032     ImageAlphaRuntimeFunctionEntry,
3033     ImageRuntimeFunctionEntry,
3034     ImageEnclaveConfig32,
3035     ImageEnclaveConfig64,
3036     ImageEnclaveImport,
3037     ImageDebugDirectory,
3038     ImageCoffSymbolsHeader,
3039     //FpoData,
3040     ImageDebugMisc,
3041     ImageFunctionEntry,
3042     ImageFunctionEntry64,
3043     ImageSeparateDebugHeader,
3044     NonPagedDebugInfo,
3045     //ImageArchitectureHeader,
3046     ImageArchitectureEntry,
3047     ImportObjectHeader,
3048     ImageCor20Header,
3049     MaskedRichHeaderEntry,
3050 );