Details | Last modification | View Log | RSS feed
| Rev | Author | Line No. | Line | 
|---|---|---|---|
| 14 | pmbaty | 1 | //===-- llvm/BinaryFormat/COFF.h --------------------------------*- C++ -*-===// | 
| 2 | // | ||
| 3 | // Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. | ||
| 4 | // See https://llvm.org/LICENSE.txt for license information. | ||
| 5 | // SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception | ||
| 6 | // | ||
| 7 | //===----------------------------------------------------------------------===// | ||
| 8 | // | ||
| 9 | // This file contains an definitions used in Windows COFF Files. | ||
| 10 | // | ||
| 11 | // Structures and enums defined within this file where created using | ||
| 12 | // information from Microsoft's publicly available PE/COFF format document: | ||
| 13 | // | ||
| 14 | // Microsoft Portable Executable and Common Object File Format Specification | ||
| 15 | // Revision 8.1 - February 15, 2008 | ||
| 16 | // | ||
| 17 | // As of 5/2/2010, hosted by Microsoft at: | ||
| 18 | // http://www.microsoft.com/whdc/system/platform/firmware/pecoff.mspx | ||
| 19 | // | ||
| 20 | //===----------------------------------------------------------------------===// | ||
| 21 | |||
| 22 | #ifndef LLVM_BINARYFORMAT_COFF_H | ||
| 23 | #define LLVM_BINARYFORMAT_COFF_H | ||
| 24 | |||
| 25 | #include "llvm/Support/DataTypes.h" | ||
| 26 | #include <cassert> | ||
| 27 | |||
| 28 | namespace llvm { | ||
| 29 | namespace COFF { | ||
| 30 | |||
| 31 | // The maximum number of sections that a COFF object can have (inclusive). | ||
| 32 | const int32_t MaxNumberOfSections16 = 65279; | ||
| 33 | |||
| 34 | // The PE signature bytes that follows the DOS stub header. | ||
| 35 | static const char PEMagic[] = {'P', 'E', '\0', '\0'}; | ||
| 36 | |||
| 37 | static const char BigObjMagic[] = { | ||
| 38 | '\xc7', '\xa1', '\xba', '\xd1', '\xee', '\xba', '\xa9', '\x4b', | ||
| 39 | '\xaf', '\x20', '\xfa', '\xf6', '\x6a', '\xa4', '\xdc', '\xb8', | ||
| 40 | }; | ||
| 41 | |||
| 42 | static const char ClGlObjMagic[] = { | ||
| 43 | '\x38', '\xfe', '\xb3', '\x0c', '\xa5', '\xd9', '\xab', '\x4d', | ||
| 44 | '\xac', '\x9b', '\xd6', '\xb6', '\x22', '\x26', '\x53', '\xc2', | ||
| 45 | }; | ||
| 46 | |||
| 47 | // The signature bytes that start a .res file. | ||
| 48 | static const char WinResMagic[] = { | ||
| 49 | '\x00', '\x00', '\x00', '\x00', '\x20', '\x00', '\x00', '\x00', | ||
| 50 | '\xff', '\xff', '\x00', '\x00', '\xff', '\xff', '\x00', '\x00', | ||
| 51 | }; | ||
| 52 | |||
| 53 | // Sizes in bytes of various things in the COFF format. | ||
| 54 | enum { | ||
| 55 | Header16Size = 20, | ||
| 56 | Header32Size = 56, | ||
| 57 | NameSize = 8, | ||
| 58 | Symbol16Size = 18, | ||
| 59 | Symbol32Size = 20, | ||
| 60 | SectionSize = 40, | ||
| 61 | RelocationSize = 10 | ||
| 62 | }; | ||
| 63 | |||
| 64 | struct header { | ||
| 65 | uint16_t Machine; | ||
| 66 | int32_t NumberOfSections; | ||
| 67 | uint32_t TimeDateStamp; | ||
| 68 | uint32_t PointerToSymbolTable; | ||
| 69 | uint32_t NumberOfSymbols; | ||
| 70 | uint16_t SizeOfOptionalHeader; | ||
| 71 | uint16_t Characteristics; | ||
| 72 | }; | ||
| 73 | |||
| 74 | struct BigObjHeader { | ||
| 75 | enum : uint16_t { MinBigObjectVersion = 2 }; | ||
| 76 | |||
| 77 | uint16_t Sig1; ///< Must be IMAGE_FILE_MACHINE_UNKNOWN (0). | ||
| 78 | uint16_t Sig2; ///< Must be 0xFFFF. | ||
| 79 | uint16_t Version; | ||
| 80 | uint16_t Machine; | ||
| 81 | uint32_t TimeDateStamp; | ||
| 82 | uint8_t UUID[16]; | ||
| 83 | uint32_t unused1; | ||
| 84 | uint32_t unused2; | ||
| 85 | uint32_t unused3; | ||
| 86 | uint32_t unused4; | ||
| 87 | uint32_t NumberOfSections; | ||
| 88 | uint32_t PointerToSymbolTable; | ||
| 89 | uint32_t NumberOfSymbols; | ||
| 90 | }; | ||
| 91 | |||
| 92 | enum MachineTypes : unsigned { | ||
| 93 | MT_Invalid = 0xffff, | ||
| 94 | |||
| 95 | IMAGE_FILE_MACHINE_UNKNOWN = 0x0, | ||
| 96 | IMAGE_FILE_MACHINE_AM33 = 0x1D3, | ||
| 97 | IMAGE_FILE_MACHINE_AMD64 = 0x8664, | ||
| 98 | IMAGE_FILE_MACHINE_ARM = 0x1C0, | ||
| 99 | IMAGE_FILE_MACHINE_ARMNT = 0x1C4, | ||
| 100 | IMAGE_FILE_MACHINE_ARM64 = 0xAA64, | ||
| 101 | IMAGE_FILE_MACHINE_ARM64EC = 0xA641, | ||
| 102 | IMAGE_FILE_MACHINE_EBC = 0xEBC, | ||
| 103 | IMAGE_FILE_MACHINE_I386 = 0x14C, | ||
| 104 | IMAGE_FILE_MACHINE_IA64 = 0x200, | ||
| 105 | IMAGE_FILE_MACHINE_M32R = 0x9041, | ||
| 106 | IMAGE_FILE_MACHINE_MIPS16 = 0x266, | ||
| 107 | IMAGE_FILE_MACHINE_MIPSFPU = 0x366, | ||
| 108 | IMAGE_FILE_MACHINE_MIPSFPU16 = 0x466, | ||
| 109 | IMAGE_FILE_MACHINE_POWERPC = 0x1F0, | ||
| 110 | IMAGE_FILE_MACHINE_POWERPCFP = 0x1F1, | ||
| 111 | IMAGE_FILE_MACHINE_R4000 = 0x166, | ||
| 112 | IMAGE_FILE_MACHINE_RISCV32 = 0x5032, | ||
| 113 | IMAGE_FILE_MACHINE_RISCV64 = 0x5064, | ||
| 114 | IMAGE_FILE_MACHINE_RISCV128 = 0x5128, | ||
| 115 | IMAGE_FILE_MACHINE_SH3 = 0x1A2, | ||
| 116 | IMAGE_FILE_MACHINE_SH3DSP = 0x1A3, | ||
| 117 | IMAGE_FILE_MACHINE_SH4 = 0x1A6, | ||
| 118 | IMAGE_FILE_MACHINE_SH5 = 0x1A8, | ||
| 119 | IMAGE_FILE_MACHINE_THUMB = 0x1C2, | ||
| 120 | IMAGE_FILE_MACHINE_WCEMIPSV2 = 0x169 | ||
| 121 | }; | ||
| 122 | |||
| 123 | enum Characteristics : unsigned { | ||
| 124 | C_Invalid = 0, | ||
| 125 | |||
| 126 |   /// The file does not contain base relocations and must be loaded at its | ||
| 127 |   /// preferred base. If this cannot be done, the loader will error. | ||
| 128 | IMAGE_FILE_RELOCS_STRIPPED = 0x0001, | ||
| 129 |   /// The file is valid and can be run. | ||
| 130 | IMAGE_FILE_EXECUTABLE_IMAGE = 0x0002, | ||
| 131 |   /// COFF line numbers have been stripped. This is deprecated and should be | ||
| 132 |   /// 0. | ||
| 133 | IMAGE_FILE_LINE_NUMS_STRIPPED = 0x0004, | ||
| 134 |   /// COFF symbol table entries for local symbols have been removed. This is | ||
| 135 |   /// deprecated and should be 0. | ||
| 136 | IMAGE_FILE_LOCAL_SYMS_STRIPPED = 0x0008, | ||
| 137 |   /// Aggressively trim working set. This is deprecated and must be 0. | ||
| 138 | IMAGE_FILE_AGGRESSIVE_WS_TRIM = 0x0010, | ||
| 139 |   /// Image can handle > 2GiB addresses. | ||
| 140 | IMAGE_FILE_LARGE_ADDRESS_AWARE = 0x0020, | ||
| 141 |   /// Little endian: the LSB precedes the MSB in memory. This is deprecated | ||
| 142 |   /// and should be 0. | ||
| 143 | IMAGE_FILE_BYTES_REVERSED_LO = 0x0080, | ||
| 144 |   /// Machine is based on a 32bit word architecture. | ||
| 145 | IMAGE_FILE_32BIT_MACHINE = 0x0100, | ||
| 146 |   /// Debugging info has been removed. | ||
| 147 | IMAGE_FILE_DEBUG_STRIPPED = 0x0200, | ||
| 148 |   /// If the image is on removable media, fully load it and copy it to swap. | ||
| 149 | IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP = 0x0400, | ||
| 150 |   /// If the image is on network media, fully load it and copy it to swap. | ||
| 151 | IMAGE_FILE_NET_RUN_FROM_SWAP = 0x0800, | ||
| 152 |   /// The image file is a system file, not a user program. | ||
| 153 | IMAGE_FILE_SYSTEM = 0x1000, | ||
| 154 |   /// The image file is a DLL. | ||
| 155 | IMAGE_FILE_DLL = 0x2000, | ||
| 156 |   /// This file should only be run on a uniprocessor machine. | ||
| 157 | IMAGE_FILE_UP_SYSTEM_ONLY = 0x4000, | ||
| 158 |   /// Big endian: the MSB precedes the LSB in memory. This is deprecated | ||
| 159 |   /// and should be 0. | ||
| 160 | IMAGE_FILE_BYTES_REVERSED_HI = 0x8000 | ||
| 161 | }; | ||
| 162 | |||
| 163 | enum ResourceTypeID : unsigned { | ||
| 164 | RID_Cursor = 1, | ||
| 165 | RID_Bitmap = 2, | ||
| 166 | RID_Icon = 3, | ||
| 167 | RID_Menu = 4, | ||
| 168 | RID_Dialog = 5, | ||
| 169 | RID_String = 6, | ||
| 170 | RID_FontDir = 7, | ||
| 171 | RID_Font = 8, | ||
| 172 | RID_Accelerator = 9, | ||
| 173 | RID_RCData = 10, | ||
| 174 | RID_MessageTable = 11, | ||
| 175 | RID_Group_Cursor = 12, | ||
| 176 | RID_Group_Icon = 14, | ||
| 177 | RID_Version = 16, | ||
| 178 | RID_DLGInclude = 17, | ||
| 179 | RID_PlugPlay = 19, | ||
| 180 | RID_VXD = 20, | ||
| 181 | RID_AniCursor = 21, | ||
| 182 | RID_AniIcon = 22, | ||
| 183 | RID_HTML = 23, | ||
| 184 | RID_Manifest = 24, | ||
| 185 | }; | ||
| 186 | |||
| 187 | struct symbol { | ||
| 188 | char Name[NameSize]; | ||
| 189 | uint32_t Value; | ||
| 190 | int32_t SectionNumber; | ||
| 191 | uint16_t Type; | ||
| 192 | uint8_t StorageClass; | ||
| 193 | uint8_t NumberOfAuxSymbols; | ||
| 194 | }; | ||
| 195 | |||
| 196 | enum SymbolSectionNumber : int32_t { | ||
| 197 | IMAGE_SYM_DEBUG = -2, | ||
| 198 | IMAGE_SYM_ABSOLUTE = -1, | ||
| 199 | IMAGE_SYM_UNDEFINED = 0 | ||
| 200 | }; | ||
| 201 | |||
| 202 | /// Storage class tells where and what the symbol represents | ||
| 203 | enum SymbolStorageClass { | ||
| 204 | SSC_Invalid = 0xff, | ||
| 205 | |||
| 206 | IMAGE_SYM_CLASS_END_OF_FUNCTION = -1, ///< Physical end of function | ||
| 207 | IMAGE_SYM_CLASS_NULL = 0, ///< No symbol | ||
| 208 | IMAGE_SYM_CLASS_AUTOMATIC = 1, ///< Stack variable | ||
| 209 | IMAGE_SYM_CLASS_EXTERNAL = 2, ///< External symbol | ||
| 210 | IMAGE_SYM_CLASS_STATIC = 3, ///< Static | ||
| 211 | IMAGE_SYM_CLASS_REGISTER = 4, ///< Register variable | ||
| 212 | IMAGE_SYM_CLASS_EXTERNAL_DEF = 5, ///< External definition | ||
| 213 | IMAGE_SYM_CLASS_LABEL = 6, ///< Label | ||
| 214 | IMAGE_SYM_CLASS_UNDEFINED_LABEL = 7, ///< Undefined label | ||
| 215 | IMAGE_SYM_CLASS_MEMBER_OF_STRUCT = 8, ///< Member of structure | ||
| 216 | IMAGE_SYM_CLASS_ARGUMENT = 9, ///< Function argument | ||
| 217 | IMAGE_SYM_CLASS_STRUCT_TAG = 10, ///< Structure tag | ||
| 218 | IMAGE_SYM_CLASS_MEMBER_OF_UNION = 11, ///< Member of union | ||
| 219 | IMAGE_SYM_CLASS_UNION_TAG = 12, ///< Union tag | ||
| 220 | IMAGE_SYM_CLASS_TYPE_DEFINITION = 13, ///< Type definition | ||
| 221 | IMAGE_SYM_CLASS_UNDEFINED_STATIC = 14, ///< Undefined static | ||
| 222 | IMAGE_SYM_CLASS_ENUM_TAG = 15, ///< Enumeration tag | ||
| 223 | IMAGE_SYM_CLASS_MEMBER_OF_ENUM = 16, ///< Member of enumeration | ||
| 224 | IMAGE_SYM_CLASS_REGISTER_PARAM = 17, ///< Register parameter | ||
| 225 | IMAGE_SYM_CLASS_BIT_FIELD = 18, ///< Bit field | ||
| 226 |   /// ".bb" or ".eb" - beginning or end of block | ||
| 227 | IMAGE_SYM_CLASS_BLOCK = 100, | ||
| 228 |   /// ".bf" or ".ef" - beginning or end of function | ||
| 229 | IMAGE_SYM_CLASS_FUNCTION = 101, | ||
| 230 | IMAGE_SYM_CLASS_END_OF_STRUCT = 102, ///< End of structure | ||
| 231 | IMAGE_SYM_CLASS_FILE = 103, ///< File name | ||
| 232 |   /// Line number, reformatted as symbol | ||
| 233 | IMAGE_SYM_CLASS_SECTION = 104, | ||
| 234 | IMAGE_SYM_CLASS_WEAK_EXTERNAL = 105, ///< Duplicate tag | ||
| 235 |   /// External symbol in dmert public lib | ||
| 236 | IMAGE_SYM_CLASS_CLR_TOKEN = 107 | ||
| 237 | }; | ||
| 238 | |||
| 239 | enum SymbolBaseType : unsigned { | ||
| 240 | IMAGE_SYM_TYPE_NULL = 0, ///< No type information or unknown base type. | ||
| 241 | IMAGE_SYM_TYPE_VOID = 1, ///< Used with void pointers and functions. | ||
| 242 | IMAGE_SYM_TYPE_CHAR = 2, ///< A character (signed byte). | ||
| 243 | IMAGE_SYM_TYPE_SHORT = 3, ///< A 2-byte signed integer. | ||
| 244 | IMAGE_SYM_TYPE_INT = 4, ///< A natural integer type on the target. | ||
| 245 | IMAGE_SYM_TYPE_LONG = 5, ///< A 4-byte signed integer. | ||
| 246 | IMAGE_SYM_TYPE_FLOAT = 6, ///< A 4-byte floating-point number. | ||
| 247 | IMAGE_SYM_TYPE_DOUBLE = 7, ///< An 8-byte floating-point number. | ||
| 248 | IMAGE_SYM_TYPE_STRUCT = 8, ///< A structure. | ||
| 249 | IMAGE_SYM_TYPE_UNION = 9, ///< An union. | ||
| 250 | IMAGE_SYM_TYPE_ENUM = 10, ///< An enumerated type. | ||
| 251 | IMAGE_SYM_TYPE_MOE = 11, ///< A member of enumeration (a specific value). | ||
| 252 | IMAGE_SYM_TYPE_BYTE = 12, ///< A byte; unsigned 1-byte integer. | ||
| 253 | IMAGE_SYM_TYPE_WORD = 13, ///< A word; unsigned 2-byte integer. | ||
| 254 | IMAGE_SYM_TYPE_UINT = 14, ///< An unsigned integer of natural size. | ||
| 255 | IMAGE_SYM_TYPE_DWORD = 15 ///< An unsigned 4-byte integer. | ||
| 256 | }; | ||
| 257 | |||
| 258 | enum SymbolComplexType : unsigned { | ||
| 259 | IMAGE_SYM_DTYPE_NULL = 0, ///< No complex type; simple scalar variable. | ||
| 260 | IMAGE_SYM_DTYPE_POINTER = 1, ///< A pointer to base type. | ||
| 261 | IMAGE_SYM_DTYPE_FUNCTION = 2, ///< A function that returns a base type. | ||
| 262 | IMAGE_SYM_DTYPE_ARRAY = 3, ///< An array of base type. | ||
| 263 | |||
| 264 |   /// Type is formed as (base + (derived << SCT_COMPLEX_TYPE_SHIFT)) | ||
| 265 | SCT_COMPLEX_TYPE_SHIFT = 4 | ||
| 266 | }; | ||
| 267 | |||
| 268 | enum AuxSymbolType { IMAGE_AUX_SYMBOL_TYPE_TOKEN_DEF = 1 }; | ||
| 269 | |||
| 270 | struct section { | ||
| 271 | char Name[NameSize]; | ||
| 272 | uint32_t VirtualSize; | ||
| 273 | uint32_t VirtualAddress; | ||
| 274 | uint32_t SizeOfRawData; | ||
| 275 | uint32_t PointerToRawData; | ||
| 276 | uint32_t PointerToRelocations; | ||
| 277 | uint32_t PointerToLineNumbers; | ||
| 278 | uint16_t NumberOfRelocations; | ||
| 279 | uint16_t NumberOfLineNumbers; | ||
| 280 | uint32_t Characteristics; | ||
| 281 | }; | ||
| 282 | |||
| 283 | enum SectionCharacteristics : uint32_t { | ||
| 284 | SC_Invalid = 0xffffffff, | ||
| 285 | |||
| 286 | IMAGE_SCN_TYPE_NOLOAD = 0x00000002, | ||
| 287 | IMAGE_SCN_TYPE_NO_PAD = 0x00000008, | ||
| 288 | IMAGE_SCN_CNT_CODE = 0x00000020, | ||
| 289 | IMAGE_SCN_CNT_INITIALIZED_DATA = 0x00000040, | ||
| 290 | IMAGE_SCN_CNT_UNINITIALIZED_DATA = 0x00000080, | ||
| 291 | IMAGE_SCN_LNK_OTHER = 0x00000100, | ||
| 292 | IMAGE_SCN_LNK_INFO = 0x00000200, | ||
| 293 | IMAGE_SCN_LNK_REMOVE = 0x00000800, | ||
| 294 | IMAGE_SCN_LNK_COMDAT = 0x00001000, | ||
| 295 | IMAGE_SCN_GPREL = 0x00008000, | ||
| 296 | IMAGE_SCN_MEM_PURGEABLE = 0x00020000, | ||
| 297 | IMAGE_SCN_MEM_16BIT = 0x00020000, | ||
| 298 | IMAGE_SCN_MEM_LOCKED = 0x00040000, | ||
| 299 | IMAGE_SCN_MEM_PRELOAD = 0x00080000, | ||
| 300 | IMAGE_SCN_ALIGN_1BYTES = 0x00100000, | ||
| 301 | IMAGE_SCN_ALIGN_2BYTES = 0x00200000, | ||
| 302 | IMAGE_SCN_ALIGN_4BYTES = 0x00300000, | ||
| 303 | IMAGE_SCN_ALIGN_8BYTES = 0x00400000, | ||
| 304 | IMAGE_SCN_ALIGN_16BYTES = 0x00500000, | ||
| 305 | IMAGE_SCN_ALIGN_32BYTES = 0x00600000, | ||
| 306 | IMAGE_SCN_ALIGN_64BYTES = 0x00700000, | ||
| 307 | IMAGE_SCN_ALIGN_128BYTES = 0x00800000, | ||
| 308 | IMAGE_SCN_ALIGN_256BYTES = 0x00900000, | ||
| 309 | IMAGE_SCN_ALIGN_512BYTES = 0x00A00000, | ||
| 310 | IMAGE_SCN_ALIGN_1024BYTES = 0x00B00000, | ||
| 311 | IMAGE_SCN_ALIGN_2048BYTES = 0x00C00000, | ||
| 312 | IMAGE_SCN_ALIGN_4096BYTES = 0x00D00000, | ||
| 313 | IMAGE_SCN_ALIGN_8192BYTES = 0x00E00000, | ||
| 314 | IMAGE_SCN_ALIGN_MASK = 0x00F00000, | ||
| 315 | IMAGE_SCN_LNK_NRELOC_OVFL = 0x01000000, | ||
| 316 | IMAGE_SCN_MEM_DISCARDABLE = 0x02000000, | ||
| 317 | IMAGE_SCN_MEM_NOT_CACHED = 0x04000000, | ||
| 318 | IMAGE_SCN_MEM_NOT_PAGED = 0x08000000, | ||
| 319 | IMAGE_SCN_MEM_SHARED = 0x10000000, | ||
| 320 | IMAGE_SCN_MEM_EXECUTE = 0x20000000, | ||
| 321 | IMAGE_SCN_MEM_READ = 0x40000000, | ||
| 322 | IMAGE_SCN_MEM_WRITE = 0x80000000 | ||
| 323 | }; | ||
| 324 | |||
| 325 | struct relocation { | ||
| 326 | uint32_t VirtualAddress; | ||
| 327 | uint32_t SymbolTableIndex; | ||
| 328 | uint16_t Type; | ||
| 329 | }; | ||
| 330 | |||
| 331 | enum RelocationTypeI386 : unsigned { | ||
| 332 | IMAGE_REL_I386_ABSOLUTE = 0x0000, | ||
| 333 | IMAGE_REL_I386_DIR16 = 0x0001, | ||
| 334 | IMAGE_REL_I386_REL16 = 0x0002, | ||
| 335 | IMAGE_REL_I386_DIR32 = 0x0006, | ||
| 336 | IMAGE_REL_I386_DIR32NB = 0x0007, | ||
| 337 | IMAGE_REL_I386_SEG12 = 0x0009, | ||
| 338 | IMAGE_REL_I386_SECTION = 0x000A, | ||
| 339 | IMAGE_REL_I386_SECREL = 0x000B, | ||
| 340 | IMAGE_REL_I386_TOKEN = 0x000C, | ||
| 341 | IMAGE_REL_I386_SECREL7 = 0x000D, | ||
| 342 | IMAGE_REL_I386_REL32 = 0x0014 | ||
| 343 | }; | ||
| 344 | |||
| 345 | enum RelocationTypeAMD64 : unsigned { | ||
| 346 | IMAGE_REL_AMD64_ABSOLUTE = 0x0000, | ||
| 347 | IMAGE_REL_AMD64_ADDR64 = 0x0001, | ||
| 348 | IMAGE_REL_AMD64_ADDR32 = 0x0002, | ||
| 349 | IMAGE_REL_AMD64_ADDR32NB = 0x0003, | ||
| 350 | IMAGE_REL_AMD64_REL32 = 0x0004, | ||
| 351 | IMAGE_REL_AMD64_REL32_1 = 0x0005, | ||
| 352 | IMAGE_REL_AMD64_REL32_2 = 0x0006, | ||
| 353 | IMAGE_REL_AMD64_REL32_3 = 0x0007, | ||
| 354 | IMAGE_REL_AMD64_REL32_4 = 0x0008, | ||
| 355 | IMAGE_REL_AMD64_REL32_5 = 0x0009, | ||
| 356 | IMAGE_REL_AMD64_SECTION = 0x000A, | ||
| 357 | IMAGE_REL_AMD64_SECREL = 0x000B, | ||
| 358 | IMAGE_REL_AMD64_SECREL7 = 0x000C, | ||
| 359 | IMAGE_REL_AMD64_TOKEN = 0x000D, | ||
| 360 | IMAGE_REL_AMD64_SREL32 = 0x000E, | ||
| 361 | IMAGE_REL_AMD64_PAIR = 0x000F, | ||
| 362 | IMAGE_REL_AMD64_SSPAN32 = 0x0010 | ||
| 363 | }; | ||
| 364 | |||
| 365 | enum RelocationTypesARM : unsigned { | ||
| 366 | IMAGE_REL_ARM_ABSOLUTE = 0x0000, | ||
| 367 | IMAGE_REL_ARM_ADDR32 = 0x0001, | ||
| 368 | IMAGE_REL_ARM_ADDR32NB = 0x0002, | ||
| 369 | IMAGE_REL_ARM_BRANCH24 = 0x0003, | ||
| 370 | IMAGE_REL_ARM_BRANCH11 = 0x0004, | ||
| 371 | IMAGE_REL_ARM_TOKEN = 0x0005, | ||
| 372 | IMAGE_REL_ARM_BLX24 = 0x0008, | ||
| 373 | IMAGE_REL_ARM_BLX11 = 0x0009, | ||
| 374 | IMAGE_REL_ARM_REL32 = 0x000A, | ||
| 375 | IMAGE_REL_ARM_SECTION = 0x000E, | ||
| 376 | IMAGE_REL_ARM_SECREL = 0x000F, | ||
| 377 | IMAGE_REL_ARM_MOV32A = 0x0010, | ||
| 378 | IMAGE_REL_ARM_MOV32T = 0x0011, | ||
| 379 | IMAGE_REL_ARM_BRANCH20T = 0x0012, | ||
| 380 | IMAGE_REL_ARM_BRANCH24T = 0x0014, | ||
| 381 | IMAGE_REL_ARM_BLX23T = 0x0015, | ||
| 382 | IMAGE_REL_ARM_PAIR = 0x0016, | ||
| 383 | }; | ||
| 384 | |||
| 385 | enum RelocationTypesARM64 : unsigned { | ||
| 386 | IMAGE_REL_ARM64_ABSOLUTE = 0x0000, | ||
| 387 | IMAGE_REL_ARM64_ADDR32 = 0x0001, | ||
| 388 | IMAGE_REL_ARM64_ADDR32NB = 0x0002, | ||
| 389 | IMAGE_REL_ARM64_BRANCH26 = 0x0003, | ||
| 390 | IMAGE_REL_ARM64_PAGEBASE_REL21 = 0x0004, | ||
| 391 | IMAGE_REL_ARM64_REL21 = 0x0005, | ||
| 392 | IMAGE_REL_ARM64_PAGEOFFSET_12A = 0x0006, | ||
| 393 | IMAGE_REL_ARM64_PAGEOFFSET_12L = 0x0007, | ||
| 394 | IMAGE_REL_ARM64_SECREL = 0x0008, | ||
| 395 | IMAGE_REL_ARM64_SECREL_LOW12A = 0x0009, | ||
| 396 | IMAGE_REL_ARM64_SECREL_HIGH12A = 0x000A, | ||
| 397 | IMAGE_REL_ARM64_SECREL_LOW12L = 0x000B, | ||
| 398 | IMAGE_REL_ARM64_TOKEN = 0x000C, | ||
| 399 | IMAGE_REL_ARM64_SECTION = 0x000D, | ||
| 400 | IMAGE_REL_ARM64_ADDR64 = 0x000E, | ||
| 401 | IMAGE_REL_ARM64_BRANCH19 = 0x000F, | ||
| 402 | IMAGE_REL_ARM64_BRANCH14 = 0x0010, | ||
| 403 | IMAGE_REL_ARM64_REL32 = 0x0011, | ||
| 404 | }; | ||
| 405 | |||
| 406 | enum COMDATType : uint8_t { | ||
| 407 | IMAGE_COMDAT_SELECT_NODUPLICATES = 1, | ||
| 408 | IMAGE_COMDAT_SELECT_ANY, | ||
| 409 | IMAGE_COMDAT_SELECT_SAME_SIZE, | ||
| 410 | IMAGE_COMDAT_SELECT_EXACT_MATCH, | ||
| 411 | IMAGE_COMDAT_SELECT_ASSOCIATIVE, | ||
| 412 | IMAGE_COMDAT_SELECT_LARGEST, | ||
| 413 | IMAGE_COMDAT_SELECT_NEWEST | ||
| 414 | }; | ||
| 415 | |||
| 416 | // Auxiliary Symbol Formats | ||
| 417 | struct AuxiliaryFunctionDefinition { | ||
| 418 | uint32_t TagIndex; | ||
| 419 | uint32_t TotalSize; | ||
| 420 | uint32_t PointerToLinenumber; | ||
| 421 | uint32_t PointerToNextFunction; | ||
| 422 | char unused[2]; | ||
| 423 | }; | ||
| 424 | |||
| 425 | struct AuxiliarybfAndefSymbol { | ||
| 426 | uint8_t unused1[4]; | ||
| 427 | uint16_t Linenumber; | ||
| 428 | uint8_t unused2[6]; | ||
| 429 | uint32_t PointerToNextFunction; | ||
| 430 | uint8_t unused3[2]; | ||
| 431 | }; | ||
| 432 | |||
| 433 | struct AuxiliaryWeakExternal { | ||
| 434 | uint32_t TagIndex; | ||
| 435 | uint32_t Characteristics; | ||
| 436 | uint8_t unused[10]; | ||
| 437 | }; | ||
| 438 | |||
| 439 | enum WeakExternalCharacteristics : unsigned { | ||
| 440 | IMAGE_WEAK_EXTERN_SEARCH_NOLIBRARY = 1, | ||
| 441 | IMAGE_WEAK_EXTERN_SEARCH_LIBRARY = 2, | ||
| 442 | IMAGE_WEAK_EXTERN_SEARCH_ALIAS = 3, | ||
| 443 | IMAGE_WEAK_EXTERN_ANTI_DEPENDENCY = 4 | ||
| 444 | }; | ||
| 445 | |||
| 446 | struct AuxiliarySectionDefinition { | ||
| 447 | uint32_t Length; | ||
| 448 | uint16_t NumberOfRelocations; | ||
| 449 | uint16_t NumberOfLinenumbers; | ||
| 450 | uint32_t CheckSum; | ||
| 451 | uint32_t Number; | ||
| 452 | uint8_t Selection; | ||
| 453 | char unused; | ||
| 454 | }; | ||
| 455 | |||
| 456 | struct AuxiliaryCLRToken { | ||
| 457 | uint8_t AuxType; | ||
| 458 | uint8_t unused1; | ||
| 459 | uint32_t SymbolTableIndex; | ||
| 460 | char unused2[12]; | ||
| 461 | }; | ||
| 462 | |||
| 463 | union Auxiliary { | ||
| 464 |   AuxiliaryFunctionDefinition FunctionDefinition; | ||
| 465 |   AuxiliarybfAndefSymbol bfAndefSymbol; | ||
| 466 |   AuxiliaryWeakExternal WeakExternal; | ||
| 467 |   AuxiliarySectionDefinition SectionDefinition; | ||
| 468 | }; | ||
| 469 | |||
| 470 | /// The Import Directory Table. | ||
| 471 | /// | ||
| 472 | /// There is a single array of these and one entry per imported DLL. | ||
| 473 | struct ImportDirectoryTableEntry { | ||
| 474 | uint32_t ImportLookupTableRVA; | ||
| 475 | uint32_t TimeDateStamp; | ||
| 476 | uint32_t ForwarderChain; | ||
| 477 | uint32_t NameRVA; | ||
| 478 | uint32_t ImportAddressTableRVA; | ||
| 479 | }; | ||
| 480 | |||
| 481 | /// The PE32 Import Lookup Table. | ||
| 482 | /// | ||
| 483 | /// There is an array of these for each imported DLL. It represents either | ||
| 484 | /// the ordinal to import from the target DLL, or a name to lookup and import | ||
| 485 | /// from the target DLL. | ||
| 486 | /// | ||
| 487 | /// This also happens to be the same format used by the Import Address Table | ||
| 488 | /// when it is initially written out to the image. | ||
| 489 | struct ImportLookupTableEntry32 { | ||
| 490 | uint32_t data; | ||
| 491 | |||
| 492 |   /// Is this entry specified by ordinal, or name? | ||
| 493 | bool isOrdinal() const { return data & 0x80000000; } | ||
| 494 | |||
| 495 |   /// Get the ordinal value of this entry. isOrdinal must be true. | ||
| 496 | uint16_t getOrdinal() const { | ||
| 497 | assert(isOrdinal() && "ILT entry is not an ordinal!"); | ||
| 498 | return data & 0xFFFF; | ||
| 499 |   } | ||
| 500 | |||
| 501 |   /// Set the ordinal value and set isOrdinal to true. | ||
| 502 | void setOrdinal(uint16_t o) { | ||
| 503 | data = o; | ||
| 504 | data |= 0x80000000; | ||
| 505 |   } | ||
| 506 | |||
| 507 |   /// Get the Hint/Name entry RVA. isOrdinal must be false. | ||
| 508 | uint32_t getHintNameRVA() const { | ||
| 509 | assert(!isOrdinal() && "ILT entry is not a Hint/Name RVA!"); | ||
| 510 | return data; | ||
| 511 |   } | ||
| 512 | |||
| 513 |   /// Set the Hint/Name entry RVA and set isOrdinal to false. | ||
| 514 | void setHintNameRVA(uint32_t rva) { data = rva; } | ||
| 515 | }; | ||
| 516 | |||
| 517 | /// The DOS compatible header at the front of all PEs. | ||
| 518 | struct DOSHeader { | ||
| 519 | uint16_t Magic; | ||
| 520 | uint16_t UsedBytesInTheLastPage; | ||
| 521 | uint16_t FileSizeInPages; | ||
| 522 | uint16_t NumberOfRelocationItems; | ||
| 523 | uint16_t HeaderSizeInParagraphs; | ||
| 524 | uint16_t MinimumExtraParagraphs; | ||
| 525 | uint16_t MaximumExtraParagraphs; | ||
| 526 | uint16_t InitialRelativeSS; | ||
| 527 | uint16_t InitialSP; | ||
| 528 | uint16_t Checksum; | ||
| 529 | uint16_t InitialIP; | ||
| 530 | uint16_t InitialRelativeCS; | ||
| 531 | uint16_t AddressOfRelocationTable; | ||
| 532 | uint16_t OverlayNumber; | ||
| 533 | uint16_t Reserved[4]; | ||
| 534 | uint16_t OEMid; | ||
| 535 | uint16_t OEMinfo; | ||
| 536 | uint16_t Reserved2[10]; | ||
| 537 | uint32_t AddressOfNewExeHeader; | ||
| 538 | }; | ||
| 539 | |||
| 540 | struct PE32Header { | ||
| 541 | enum { PE32 = 0x10b, PE32_PLUS = 0x20b }; | ||
| 542 | |||
| 543 | uint16_t Magic; | ||
| 544 | uint8_t MajorLinkerVersion; | ||
| 545 | uint8_t MinorLinkerVersion; | ||
| 546 | uint32_t SizeOfCode; | ||
| 547 | uint32_t SizeOfInitializedData; | ||
| 548 | uint32_t SizeOfUninitializedData; | ||
| 549 | uint32_t AddressOfEntryPoint; // RVA | ||
| 550 | uint32_t BaseOfCode; // RVA | ||
| 551 | uint32_t BaseOfData; // RVA | ||
| 552 | uint64_t ImageBase; | ||
| 553 | uint32_t SectionAlignment; | ||
| 554 | uint32_t FileAlignment; | ||
| 555 | uint16_t MajorOperatingSystemVersion; | ||
| 556 | uint16_t MinorOperatingSystemVersion; | ||
| 557 | uint16_t MajorImageVersion; | ||
| 558 | uint16_t MinorImageVersion; | ||
| 559 | uint16_t MajorSubsystemVersion; | ||
| 560 | uint16_t MinorSubsystemVersion; | ||
| 561 | uint32_t Win32VersionValue; | ||
| 562 | uint32_t SizeOfImage; | ||
| 563 | uint32_t SizeOfHeaders; | ||
| 564 | uint32_t CheckSum; | ||
| 565 | uint16_t Subsystem; | ||
| 566 |   // FIXME: This should be DllCharacteristics to match the COFF spec. | ||
| 567 | uint16_t DLLCharacteristics; | ||
| 568 | uint64_t SizeOfStackReserve; | ||
| 569 | uint64_t SizeOfStackCommit; | ||
| 570 | uint64_t SizeOfHeapReserve; | ||
| 571 | uint64_t SizeOfHeapCommit; | ||
| 572 | uint32_t LoaderFlags; | ||
| 573 |   // FIXME: This should be NumberOfRvaAndSizes to match the COFF spec. | ||
| 574 | uint32_t NumberOfRvaAndSize; | ||
| 575 | }; | ||
| 576 | |||
| 577 | struct DataDirectory { | ||
| 578 | uint32_t RelativeVirtualAddress; | ||
| 579 | uint32_t Size; | ||
| 580 | }; | ||
| 581 | |||
| 582 | enum DataDirectoryIndex : unsigned { | ||
| 583 | EXPORT_TABLE = 0, | ||
| 584 | IMPORT_TABLE, | ||
| 585 | RESOURCE_TABLE, | ||
| 586 | EXCEPTION_TABLE, | ||
| 587 | CERTIFICATE_TABLE, | ||
| 588 | BASE_RELOCATION_TABLE, | ||
| 589 | DEBUG_DIRECTORY, | ||
| 590 | ARCHITECTURE, | ||
| 591 | GLOBAL_PTR, | ||
| 592 | TLS_TABLE, | ||
| 593 | LOAD_CONFIG_TABLE, | ||
| 594 | BOUND_IMPORT, | ||
| 595 | IAT, | ||
| 596 | DELAY_IMPORT_DESCRIPTOR, | ||
| 597 | CLR_RUNTIME_HEADER, | ||
| 598 | |||
| 599 | NUM_DATA_DIRECTORIES | ||
| 600 | }; | ||
| 601 | |||
| 602 | enum WindowsSubsystem : unsigned { | ||
| 603 | IMAGE_SUBSYSTEM_UNKNOWN = 0, ///< An unknown subsystem. | ||
| 604 | IMAGE_SUBSYSTEM_NATIVE = 1, ///< Device drivers and native Windows processes | ||
| 605 | IMAGE_SUBSYSTEM_WINDOWS_GUI = 2, ///< The Windows GUI subsystem. | ||
| 606 | IMAGE_SUBSYSTEM_WINDOWS_CUI = 3, ///< The Windows character subsystem. | ||
| 607 | IMAGE_SUBSYSTEM_OS2_CUI = 5, ///< The OS/2 character subsystem. | ||
| 608 | IMAGE_SUBSYSTEM_POSIX_CUI = 7, ///< The POSIX character subsystem. | ||
| 609 | IMAGE_SUBSYSTEM_NATIVE_WINDOWS = 8, ///< Native Windows 9x driver. | ||
| 610 | IMAGE_SUBSYSTEM_WINDOWS_CE_GUI = 9, ///< Windows CE. | ||
| 611 | IMAGE_SUBSYSTEM_EFI_APPLICATION = 10, ///< An EFI application. | ||
| 612 | IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER = 11, ///< An EFI driver with boot | ||
| 613 |                                                 ///  services. | ||
| 614 | IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER = 12, ///< An EFI driver with run-time | ||
| 615 |                                                 ///  services. | ||
| 616 | IMAGE_SUBSYSTEM_EFI_ROM = 13, ///< An EFI ROM image. | ||
| 617 | IMAGE_SUBSYSTEM_XBOX = 14, ///< XBOX. | ||
| 618 | IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION = 16 ///< A BCD application. | ||
| 619 | }; | ||
| 620 | |||
| 621 | enum DLLCharacteristics : unsigned { | ||
| 622 |   /// ASLR with 64 bit address space. | ||
| 623 | IMAGE_DLL_CHARACTERISTICS_HIGH_ENTROPY_VA = 0x0020, | ||
| 624 |   /// DLL can be relocated at load time. | ||
| 625 | IMAGE_DLL_CHARACTERISTICS_DYNAMIC_BASE = 0x0040, | ||
| 626 |   /// Code integrity checks are enforced. | ||
| 627 | IMAGE_DLL_CHARACTERISTICS_FORCE_INTEGRITY = 0x0080, | ||
| 628 |   ///< Image is NX compatible. | ||
| 629 | IMAGE_DLL_CHARACTERISTICS_NX_COMPAT = 0x0100, | ||
| 630 |   /// Isolation aware, but do not isolate the image. | ||
| 631 | IMAGE_DLL_CHARACTERISTICS_NO_ISOLATION = 0x0200, | ||
| 632 |   /// Does not use structured exception handling (SEH). No SEH handler may be | ||
| 633 |   /// called in this image. | ||
| 634 | IMAGE_DLL_CHARACTERISTICS_NO_SEH = 0x0400, | ||
| 635 |   /// Do not bind the image. | ||
| 636 | IMAGE_DLL_CHARACTERISTICS_NO_BIND = 0x0800, | ||
| 637 |   ///< Image should execute in an AppContainer. | ||
| 638 | IMAGE_DLL_CHARACTERISTICS_APPCONTAINER = 0x1000, | ||
| 639 |   ///< A WDM driver. | ||
| 640 | IMAGE_DLL_CHARACTERISTICS_WDM_DRIVER = 0x2000, | ||
| 641 |   ///< Image supports Control Flow Guard. | ||
| 642 | IMAGE_DLL_CHARACTERISTICS_GUARD_CF = 0x4000, | ||
| 643 |   /// Terminal Server aware. | ||
| 644 | IMAGE_DLL_CHARACTERISTICS_TERMINAL_SERVER_AWARE = 0x8000 | ||
| 645 | }; | ||
| 646 | |||
| 647 | enum ExtendedDLLCharacteristics : unsigned { | ||
| 648 |   /// Image is CET compatible | ||
| 649 | IMAGE_DLL_CHARACTERISTICS_EX_CET_COMPAT = 0x0001 | ||
| 650 | }; | ||
| 651 | |||
| 652 | enum DebugType : unsigned { | ||
| 653 | IMAGE_DEBUG_TYPE_UNKNOWN = 0, | ||
| 654 | IMAGE_DEBUG_TYPE_COFF = 1, | ||
| 655 | IMAGE_DEBUG_TYPE_CODEVIEW = 2, | ||
| 656 | IMAGE_DEBUG_TYPE_FPO = 3, | ||
| 657 | IMAGE_DEBUG_TYPE_MISC = 4, | ||
| 658 | IMAGE_DEBUG_TYPE_EXCEPTION = 5, | ||
| 659 | IMAGE_DEBUG_TYPE_FIXUP = 6, | ||
| 660 | IMAGE_DEBUG_TYPE_OMAP_TO_SRC = 7, | ||
| 661 | IMAGE_DEBUG_TYPE_OMAP_FROM_SRC = 8, | ||
| 662 | IMAGE_DEBUG_TYPE_BORLAND = 9, | ||
| 663 | IMAGE_DEBUG_TYPE_RESERVED10 = 10, | ||
| 664 | IMAGE_DEBUG_TYPE_CLSID = 11, | ||
| 665 | IMAGE_DEBUG_TYPE_VC_FEATURE = 12, | ||
| 666 | IMAGE_DEBUG_TYPE_POGO = 13, | ||
| 667 | IMAGE_DEBUG_TYPE_ILTCG = 14, | ||
| 668 | IMAGE_DEBUG_TYPE_MPX = 15, | ||
| 669 | IMAGE_DEBUG_TYPE_REPRO = 16, | ||
| 670 | IMAGE_DEBUG_TYPE_EX_DLLCHARACTERISTICS = 20, | ||
| 671 | }; | ||
| 672 | |||
| 673 | enum BaseRelocationType : unsigned { | ||
| 674 | IMAGE_REL_BASED_ABSOLUTE = 0, | ||
| 675 | IMAGE_REL_BASED_HIGH = 1, | ||
| 676 | IMAGE_REL_BASED_LOW = 2, | ||
| 677 | IMAGE_REL_BASED_HIGHLOW = 3, | ||
| 678 | IMAGE_REL_BASED_HIGHADJ = 4, | ||
| 679 | IMAGE_REL_BASED_MIPS_JMPADDR = 5, | ||
| 680 | IMAGE_REL_BASED_ARM_MOV32A = 5, | ||
| 681 | IMAGE_REL_BASED_ARM_MOV32T = 7, | ||
| 682 | IMAGE_REL_BASED_MIPS_JMPADDR16 = 9, | ||
| 683 | IMAGE_REL_BASED_DIR64 = 10 | ||
| 684 | }; | ||
| 685 | |||
| 686 | enum ImportType : unsigned { | ||
| 687 | IMPORT_CODE = 0, | ||
| 688 | IMPORT_DATA = 1, | ||
| 689 | IMPORT_CONST = 2 | ||
| 690 | }; | ||
| 691 | |||
| 692 | enum ImportNameType : unsigned { | ||
| 693 |   /// Import is by ordinal. This indicates that the value in the Ordinal/Hint | ||
| 694 |   /// field of the import header is the import's ordinal. If this constant is | ||
| 695 |   /// not specified, then the Ordinal/Hint field should always be interpreted | ||
| 696 |   /// as the import's hint. | ||
| 697 | IMPORT_ORDINAL = 0, | ||
| 698 |   /// The import name is identical to the public symbol name | ||
| 699 | IMPORT_NAME = 1, | ||
| 700 |   /// The import name is the public symbol name, but skipping the leading ?, | ||
| 701 |   /// @, or optionally _. | ||
| 702 | IMPORT_NAME_NOPREFIX = 2, | ||
| 703 |   /// The import name is the public symbol name, but skipping the leading ?, | ||
| 704 |   /// @, or optionally _, and truncating at the first @. | ||
| 705 | IMPORT_NAME_UNDECORATE = 3 | ||
| 706 | }; | ||
| 707 | |||
| 708 | enum class GuardFlags : uint32_t { | ||
| 709 |   /// Module performs control flow integrity checks using system-supplied | ||
| 710 |   /// support. | ||
| 711 | CF_INSTRUMENTED = 0x100, | ||
| 712 |   /// Module performs control flow and write integrity checks. | ||
| 713 | CFW_INSTRUMENTED = 0x200, | ||
| 714 |   /// Module contains valid control flow target metadata. | ||
| 715 | CF_FUNCTION_TABLE_PRESENT = 0x400, | ||
| 716 |   /// Module does not make use of the /GS security cookie. | ||
| 717 | SECURITY_COOKIE_UNUSED = 0x800, | ||
| 718 |   /// Module supports read only delay load IAT. | ||
| 719 | PROTECT_DELAYLOAD_IAT = 0x1000, | ||
| 720 |   /// Delayload import table in its own .didat section (with nothing else in it) | ||
| 721 |   /// that can be freely reprotected. | ||
| 722 | DELAYLOAD_IAT_IN_ITS_OWN_SECTION = 0x2000, | ||
| 723 |   /// Module contains suppressed export information. This also infers that the | ||
| 724 |   /// address taken IAT table is also present in the load config. | ||
| 725 | CF_EXPORT_SUPPRESSION_INFO_PRESENT = 0x4000, | ||
| 726 |   /// Module enables suppression of exports. | ||
| 727 | CF_ENABLE_EXPORT_SUPPRESSION = 0x8000, | ||
| 728 |   /// Module contains longjmp target information. | ||
| 729 | CF_LONGJUMP_TABLE_PRESENT = 0x10000, | ||
| 730 |   /// Module contains EH continuation target information. | ||
| 731 | EH_CONTINUATION_TABLE_PRESENT = 0x400000, | ||
| 732 |   /// Mask for the subfield that contains the stride of Control Flow Guard | ||
| 733 |   /// function table entries (that is, the additional count of bytes per table | ||
| 734 |   /// entry). | ||
| 735 | CF_FUNCTION_TABLE_SIZE_MASK = 0xF0000000, | ||
| 736 | CF_FUNCTION_TABLE_SIZE_5BYTES = 0x10000000, | ||
| 737 | CF_FUNCTION_TABLE_SIZE_6BYTES = 0x20000000, | ||
| 738 | CF_FUNCTION_TABLE_SIZE_7BYTES = 0x30000000, | ||
| 739 | CF_FUNCTION_TABLE_SIZE_8BYTES = 0x40000000, | ||
| 740 | CF_FUNCTION_TABLE_SIZE_9BYTES = 0x50000000, | ||
| 741 | CF_FUNCTION_TABLE_SIZE_10BYTES = 0x60000000, | ||
| 742 | CF_FUNCTION_TABLE_SIZE_11BYTES = 0x70000000, | ||
| 743 | CF_FUNCTION_TABLE_SIZE_12BYTES = 0x80000000, | ||
| 744 | CF_FUNCTION_TABLE_SIZE_13BYTES = 0x90000000, | ||
| 745 | CF_FUNCTION_TABLE_SIZE_14BYTES = 0xA0000000, | ||
| 746 | CF_FUNCTION_TABLE_SIZE_15BYTES = 0xB0000000, | ||
| 747 | CF_FUNCTION_TABLE_SIZE_16BYTES = 0xC0000000, | ||
| 748 | CF_FUNCTION_TABLE_SIZE_17BYTES = 0xD0000000, | ||
| 749 | CF_FUNCTION_TABLE_SIZE_18BYTES = 0xE0000000, | ||
| 750 | CF_FUNCTION_TABLE_SIZE_19BYTES = 0xF0000000, | ||
| 751 | }; | ||
| 752 | |||
| 753 | struct ImportHeader { | ||
| 754 | uint16_t Sig1; ///< Must be IMAGE_FILE_MACHINE_UNKNOWN (0). | ||
| 755 | uint16_t Sig2; ///< Must be 0xFFFF. | ||
| 756 | uint16_t Version; | ||
| 757 | uint16_t Machine; | ||
| 758 | uint32_t TimeDateStamp; | ||
| 759 | uint32_t SizeOfData; | ||
| 760 | uint16_t OrdinalHint; | ||
| 761 | uint16_t TypeInfo; | ||
| 762 | |||
| 763 | ImportType getType() const { return static_cast<ImportType>(TypeInfo & 0x3); } | ||
| 764 | |||
| 765 | ImportNameType getNameType() const { | ||
| 766 | return static_cast<ImportNameType>((TypeInfo & 0x1C) >> 2); | ||
| 767 |   } | ||
| 768 | }; | ||
| 769 | |||
| 770 | enum CodeViewIdentifiers { | ||
| 771 | DEBUG_SECTION_MAGIC = 0x4, | ||
| 772 | DEBUG_HASHES_SECTION_MAGIC = 0x133C9C5 | ||
| 773 | }; | ||
| 774 | |||
| 775 | // These flags show up in the @feat.00 symbol. They appear to be some kind of | ||
| 776 | // compiler features bitfield read by link.exe. | ||
| 777 | enum Feat00Flags : uint32_t { | ||
| 778 |   // Object is compatible with /safeseh. | ||
| 779 | SafeSEH = 0x1, | ||
| 780 |   // Object was compiled with /GS. | ||
| 781 | GuardStack = 0x100, | ||
| 782 |   // Object was compiled with /sdl. | ||
| 783 | SDL = 0x200, | ||
| 784 |   // Object was compiled with /guard:cf. | ||
| 785 | GuardCF = 0x800, | ||
| 786 |   // Object was compiled with /guard:ehcont. | ||
| 787 | GuardEHCont = 0x4000, | ||
| 788 |   // Object was compiled with /kernel. | ||
| 789 | Kernel = 0x40000000, | ||
| 790 | }; | ||
| 791 | |||
| 792 | inline bool isReservedSectionNumber(int32_t SectionNumber) { | ||
| 793 | return SectionNumber <= 0; | ||
| 794 | } | ||
| 795 | |||
| 796 | /// Encode section name based on string table offset. | ||
| 797 | /// The size of Out must be at least COFF::NameSize. | ||
| 798 | bool encodeSectionName(char *Out, uint64_t Offset); | ||
| 799 | |||
| 800 | } // End namespace COFF. | ||
| 801 | } // End namespace llvm. | ||
| 802 | |||
| 803 | #endif |