ntimage.h File Reference

#include <pshpack2.h>
#include <poppack.h>
#include <pshpack4.h>
#include <pshpack8.h>

Go to the source code of this file.

Data Structures
struct	PIMAGE_DOS_HEADER
struct	PIMAGE_EXPORT_DIRECTORY
struct	PIMAGE_RESOURCE_DATA_ENTRY
struct	PIMAGE_LOAD_CONFIG_DIRECTORY32
struct	PIMAGE_LOAD_CONFIG_DIRECTORY64
struct	PIMAGE_BASE_RELOCATION
struct	PIMAGE_RESOURCE_DIRECTORY
struct	PIMAGE_RESOURCE_DIRECTORY_STRING
struct	PIMAGE_SECTION_HEADER
struct	PIMAGE_FILE_HEADER
struct	PIMAGE_DATA_DIRECTORY
struct	PIMAGE_OPTIONAL_HEADER32
struct	PIMAGE_ROM_OPTIONAL_HEADER
struct	PIMAGE_OPTIONAL_HEADER64
struct	PIMAGE_NT_HEADERS64
struct	PIMAGE_NT_HEADERS32
struct	PIMAGE_IMPORT_BY_NAME
struct	PIMAGE_THUNK_DATA64
struct	PIMAGE_THUNK_DATA32
struct	PIMAGE_TLS_DIRECTORY64
struct	PIMAGE_TLS_DIRECTORY32
struct	PIMAGE_IMPORT_DESCRIPTOR
Defines
#define	IMAGE_DOS_SIGNATURE   0x5A4D
#define	IMAGE_OS2_SIGNATURE   0x454E
#define	IMAGE_OS2_SIGNATURE_LE   0x454C
#define	IMAGE_VXD_SIGNATURE   0x454C
#define	IMAGE_NT_SIGNATURE   0x00004550
#define	IMAGE_FILE_MACHINE_AM33   0x1d3
#define	IMAGE_FILE_MACHINE_AMD64   0x8664
#define	IMAGE_FILE_MACHINE_ARM   0x1c0
#define	IMAGE_FILE_MACHINE_ARMV7   0x1c4
#define	IMAGE_FILE_MACHINE_EBC   0xebc
#define	IMAGE_FILE_MACHINE_I386   0x14c
#define	IMAGE_FILE_MACHINE_IA64   0x200
#define	IMAGE_FILE_MACHINE_M32R   0x9041
#define	IMAGE_FILE_MACHINE_MIPS16   0x266
#define	IMAGE_FILE_MACHINE_MIPSFPU   0x366
#define	IMAGE_FILE_MACHINE_MIPSFPU16   0x466
#define	IMAGE_FILE_MACHINE_POWERPC   0x1f0
#define	IMAGE_FILE_MACHINE_POWERPCFP   0x1f1
#define	IMAGE_FILE_MACHINE_R4000   0x166
#define	IMAGE_FILE_MACHINE_SH3   0x1a2
#define	IMAGE_FILE_MACHINE_SH3E   0x01a4
#define	IMAGE_FILE_MACHINE_SH3DSP   0x1a3
#define	IMAGE_FILE_MACHINE_SH4   0x1a6
#define	IMAGE_FILE_MACHINE_SH5   0x1a8
#define	IMAGE_FILE_MACHINE_THUMB   0x1c2
#define	IMAGE_FILE_MACHINE_WCEMIPSV2   0x169
#define	IMAGE_FILE_MACHINE_R3000   0x162
#define	IMAGE_FILE_MACHINE_R10000   0x168
#define	IMAGE_FILE_MACHINE_ALPHA   0x184
#define	IMAGE_FILE_MACHINE_ALPHA64   0x0284
#define	IMAGE_FILE_MACHINE_AXP64   IMAGE_FILE_MACHINE_ALPHA64
#define	IMAGE_FILE_MACHINE_CEE   0xC0EE
#define	IMAGE_FILE_MACHINE_TRICORE   0x0520
#define	IMAGE_FILE_MACHINE_CEF   0x0CEF
#define	IMAGE_SIZEOF_SHORT_NAME   8
#define	IMAGE_SIZEOF_SECTION_HEADER   40
#define	IMAGE_SCN_CNT_CODE   0x00000020
#define	IMAGE_SCN_CNT_INITIALIZED_DATA   0x00000040
#define	IMAGE_SCN_CNT_UNINITIALIZED_DATA   0x00000080
#define	IMAGE_SCN_LNK_NRELOC_OVFL   0x01000000
#define	IMAGE_SCN_MEM_DISCARDABLE   0x02000000
#define	IMAGE_SCN_MEM_NOT_CACHED   0x04000000
#define	IMAGE_SCN_MEM_NOT_PAGED   0x08000000
#define	IMAGE_SCN_MEM_SHARED   0x10000000
#define	IMAGE_SCN_MEM_EXECUTE   0x20000000
#define	IMAGE_SCN_MEM_READ   0x40000000
#define	IMAGE_SCN_MEM_WRITE   0x80000000
#define	IMAGE_SIZEOF_FILE_HEADER   20
#define	IMAGE_FILE_RELOCS_STRIPPED   0x0001
#define	IMAGE_FILE_EXECUTABLE_IMAGE   0x0002
#define	IMAGE_FILE_LINE_NUMS_STRIPPED   0x0004
#define	IMAGE_FILE_LOCAL_SYMS_STRIPPED   0x0008
#define	IMAGE_FILE_AGGRESIVE_WS_TRIM   0x0010
#define	IMAGE_FILE_LARGE_ADDRESS_AWARE   0x0020
#define	IMAGE_FILE_BYTES_REVERSED_LO   0x0080
#define	IMAGE_FILE_32BIT_MACHINE   0x0100
#define	IMAGE_FILE_DEBUG_STRIPPED   0x0200
#define	IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP   0x0400
#define	IMAGE_FILE_NET_RUN_FROM_SWAP   0x0800
#define	IMAGE_FILE_SYSTEM   0x1000
#define	IMAGE_FILE_DLL   0x2000
#define	IMAGE_FILE_UP_SYSTEM_ONLY   0x4000
#define	IMAGE_FILE_BYTES_REVERSED_HI   0x8000
#define	IMAGE_NUMBEROF_DIRECTORY_ENTRIES   16
#define	IMAGE_NT_OPTIONAL_HDR32_MAGIC   0x10b
#define	IMAGE_NT_OPTIONAL_HDR64_MAGIC   0x20b
#define	IMAGE_ROM_OPTIONAL_HDR_MAGIC   0x107
#define	IMAGE_NT_OPTIONAL_HDR_MAGIC   IMAGE_NT_OPTIONAL_HDR32_MAGIC
#define	IMAGE_FIRST_SECTION(NtHeader)
#define	IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE   0x0040
#define	IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY   0x0080
#define	IMAGE_DLLCHARACTERISTICS_NX_COMPAT   0x0100
#define	IMAGE_DLLCHARACTERISTICS_NO_ISOLATION   0x0200
#define	IMAGE_DLLCHARACTERISTICS_NO_SEH   0x0400
#define	IMAGE_DLLCHARACTERISTICS_NO_BIND   0x0800
#define	IMAGE_DLLCHARACTERISTICS_WDM_DRIVER   0x2000
#define	IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE   0x8000
#define	IMAGE_LOADER_FLAGS_COMPLUS   0x00000001
#define	IMAGE_LOADER_FLAGS_SYSTEM_GLOBAL   0x01000000
#define	IMAGE_DIRECTORY_ENTRY_EXPORT   0
#define	IMAGE_DIRECTORY_ENTRY_IMPORT   1
#define	IMAGE_DIRECTORY_ENTRY_RESOURCE   2
#define	IMAGE_DIRECTORY_ENTRY_EXCEPTION   3
#define	IMAGE_DIRECTORY_ENTRY_SECURITY   4
#define	IMAGE_DIRECTORY_ENTRY_BASERELOC   5
#define	IMAGE_DIRECTORY_ENTRY_DEBUG   6
#define	IMAGE_DIRECTORY_ENTRY_ARCHITECTURE   7
#define	IMAGE_DIRECTORY_ENTRY_GLOBALPTR   8
#define	IMAGE_DIRECTORY_ENTRY_TLS   9
#define	IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG   10
#define	IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT   11
#define	IMAGE_DIRECTORY_ENTRY_IAT   12
#define	IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT   13
#define	IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR   14
#define	IMAGE_ORDINAL_FLAG64   0x8000000000000000ULL
#define	IMAGE_ORDINAL_FLAG32   0x80000000
#define	IMAGE_ORDINAL64(Ordinal)   (Ordinal & 0xffff)
#define	IMAGE_ORDINAL32(Ordinal)   (Ordinal & 0xffff)
#define	IMAGE_SNAP_BY_ORDINAL64(Ordinal)   ((Ordinal & IMAGE_ORDINAL_FLAG64) != 0)
#define	IMAGE_SNAP_BY_ORDINAL32(Ordinal)   ((Ordinal & IMAGE_ORDINAL_FLAG32) != 0)
#define	IMAGE_ORDINAL_FLAG   IMAGE_ORDINAL_FLAG32
#define	IMAGE_ORDINAL(Ordinal)   IMAGE_ORDINAL32(Ordinal)
#define	IMAGE_SNAP_BY_ORDINAL(Ordinal)   IMAGE_SNAP_BY_ORDINAL32(Ordinal)
Typedefs
typedef struct IMAGE_LOAD_CONFIG_DIRECTORY32 *	PIMAGE_LOAD_CONFIG_DIRECTORY32
typedef struct IMAGE_LOAD_CONFIG_DIRECTORY64 *	PIMAGE_LOAD_CONFIG_DIRECTORY64
typedef IMAGE_LOAD_CONFIG_DIRECTORY32	IMAGE_LOAD_CONFIG_DIRECTORY
typedef PIMAGE_LOAD_CONFIG_DIRECTORY32	PIMAGE_LOAD_CONFIG_DIRECTORY
typedef IMAGE_OPTIONAL_HEADER32	IMAGE_OPTIONAL_HEADER
typedef PIMAGE_OPTIONAL_HEADER32	PIMAGE_OPTIONAL_HEADER
typedef IMAGE_NT_HEADERS32	IMAGE_NT_HEADERS
typedef struct _IMAGE_NT_HEADERS *	PIMAGE_NT_HEADERS32
typedef struct _IMAGE_NT_HEADERS64 *	PIMAGE_NT_HEADERS64
typedef PIMAGE_NT_HEADERS32	PIMAGE_NT_HEADERS
typedef ULONG	Reason
typedef ULONG PVOID	Reserved
typedef IMAGE_THUNK_DATA32	IMAGE_THUNK_DATA
typedef PIMAGE_THUNK_DATA32	PIMAGE_THUNK_DATA
typedef IMAGE_TLS_DIRECTORY32	IMAGE_TLS_DIRECTORY
typedef PIMAGE_TLS_DIRECTORY32	PIMAGE_TLS_DIRECTORY
Functions
typedef	VOID (NTAPI *PIMAGE_TLS_CALLBACK)(PVOID DllHandle