include/ddk/ntimage.h

   1 #ifndef _NTIMAGE_
   2 #define _NTIMAGE_
   3
   4 //
   5 // Image Formats
   6 //
   7 #define IMAGE_DOS_SIGNATURE                 0x5A4D
   8 #define IMAGE_OS2_SIGNATURE                 0x454E
   9 #define IMAGE_OS2_SIGNATURE_LE              0x454C
  10 #define IMAGE_VXD_SIGNATURE                 0x454C
  11 #define IMAGE_NT_SIGNATURE                  0x00004550
  12
  13 //
  14 // Image architectures
  15 //
  16 #define IMAGE_FILE_MACHINE_AM33       0x1d3
  17 #define IMAGE_FILE_MACHINE_AMD64      0x8664
  18 #define IMAGE_FILE_MACHINE_ARM        0x1c0
  19 #define IMAGE_FILE_MACHINE_EBC        0xebc
  20 #define IMAGE_FILE_MACHINE_I386       0x14c
  21 #define IMAGE_FILE_MACHINE_IA64       0x200
  22 #define IMAGE_FILE_MACHINE_M32R       0x9041
  23 #define IMAGE_FILE_MACHINE_MIPS16     0x266
  24 #define IMAGE_FILE_MACHINE_MIPSFPU    0x366
  25 #define IMAGE_FILE_MACHINE_MIPSFPU16  0x466
  26 #define IMAGE_FILE_MACHINE_POWERPC    0x1f0
  27 #define IMAGE_FILE_MACHINE_POWERPCFP  0x1f1
  28 #define IMAGE_FILE_MACHINE_R4000      0x166
  29 #define IMAGE_FILE_MACHINE_SH3        0x1a2
  30 #define IMAGE_FILE_MACHINE_SH3E       0x01a4
  31 #define IMAGE_FILE_MACHINE_SH3DSP     0x1a3
  32 #define IMAGE_FILE_MACHINE_SH4        0x1a6
  33 #define IMAGE_FILE_MACHINE_SH5        0x1a8
  34 #define IMAGE_FILE_MACHINE_THUMB      0x1c2
  35 #define IMAGE_FILE_MACHINE_WCEMIPSV2  0x169
  36 #define IMAGE_FILE_MACHINE_R3000      0x162
  37 #define IMAGE_FILE_MACHINE_R10000     0x168
  38 #define IMAGE_FILE_MACHINE_ALPHA      0x184
  39 #define IMAGE_FILE_MACHINE_ALPHA64    0x0284
  40 #define IMAGE_FILE_MACHINE_AXP64      IMAGE_FILE_MACHINE_ALPHA64
  41 #define IMAGE_FILE_MACHINE_CEE        0xC0EE
  42 #define IMAGE_FILE_MACHINE_TRICORE    0x0520
  43 #define IMAGE_FILE_MACHINE_CEF        0x0CEF
  44
  45
  46
  47 //
  48 // DOS Image Header Format
  49 //
  50 #include <pshpack2.h>
  51 typedef struct _IMAGE_DOS_HEADER {
  52     USHORT e_magic;
  53     USHORT e_cblp;
  54     USHORT e_cp;
  55     USHORT e_crlc;
  56     USHORT e_cparhdr;
  57     USHORT e_minalloc;
  58     USHORT e_maxalloc;
  59     USHORT e_ss;
  60     USHORT e_sp;
  61     USHORT e_csum;
  62     USHORT e_ip;
  63     USHORT e_cs;
  64     USHORT e_lfarlc;
  65     USHORT e_ovno;
  66     USHORT e_res[4];
  67     USHORT e_oemid;
  68     USHORT e_oeminfo;
  69     USHORT e_res2[10];
  70     LONG e_lfanew;
  71 } IMAGE_DOS_HEADER, *PIMAGE_DOS_HEADER;
  72 #include <poppack.h>
  73
  74
  75
  76 //
  77 // Export/Import Format
  78 //
  79 #include <pshpack4.h>
  80 typedef struct _IMAGE_EXPORT_DIRECTORY {
  81     ULONG Characteristics;
  82     ULONG TimeDateStamp;
  83     USHORT MajorVersion;
  84     USHORT MinorVersion;
  85     ULONG Name;
  86     ULONG Base;
  87     ULONG NumberOfFunctions;
  88     ULONG NumberOfNames;
  89     ULONG AddressOfFunctions;
  90     ULONG AddressOfNames;
  91     ULONG AddressOfNameOrdinals;
  92 } IMAGE_EXPORT_DIRECTORY, *PIMAGE_EXPORT_DIRECTORY;
  93
  94
  95
  96 //
  97 // Resource Data Entry Format
  98 //
  99 typedef struct _IMAGE_RESOURCE_DATA_ENTRY {
 100     ULONG OffsetToData;
 101     ULONG Size;
 102     ULONG CodePage;
 103     ULONG Reserved;
 104 } IMAGE_RESOURCE_DATA_ENTRY, *PIMAGE_RESOURCE_DATA_ENTRY;
 105
 106
 107
 108 //
 109 // Load Configuration Directory Entry Format
 110 //
 111 typedef struct {
 112     ULONG   Size;
 113     ULONG   TimeDateStamp;
 114     USHORT  MajorVersion;
 115     USHORT  MinorVersion;
 116     ULONG   GlobalFlagsClear;
 117     ULONG   GlobalFlagsSet;
 118     ULONG   CriticalSectionDefaultTimeout;
 119     ULONG   DeCommitFreeBlockThreshold;
 120     ULONG   DeCommitTotalFreeThreshold;
 121     ULONG   LockPrefixTable;
 122     ULONG   MaximumAllocationSize;
 123     ULONG   VirtualMemoryThreshold;
 124     ULONG   ProcessHeapFlags;
 125     ULONG   ProcessAffinityMask;
 126     USHORT  CSDVersion;
 127     USHORT  Reserved1;
 128     ULONG   EditList;
 129     ULONG   SecurityCookie;
 130     ULONG   SEHandlerTable;
 131     ULONG   SEHandlerCount;
 132 } IMAGE_LOAD_CONFIG_DIRECTORY32, *PIMAGE_LOAD_CONFIG_DIRECTORY32;
 133
 134 typedef struct {
 135     ULONG      Size;
 136     ULONG      TimeDateStamp;
 137     USHORT     MajorVersion;
 138     USHORT     MinorVersion;
 139     ULONG      GlobalFlagsClear;
 140     ULONG      GlobalFlagsSet;
 141     ULONG      CriticalSectionDefaultTimeout;
 142     ULONGLONG  DeCommitFreeBlockThreshold;
 143     ULONGLONG  DeCommitTotalFreeThreshold;
 144     ULONGLONG  LockPrefixTable;
 145     ULONGLONG  MaximumAllocationSize;
 146     ULONGLONG  VirtualMemoryThreshold;
 147     ULONGLONG  ProcessAffinityMask;
 148     ULONG      ProcessHeapFlags;
 149     USHORT     CSDVersion;
 150     USHORT     Reserved1;
 151     ULONGLONG  EditList;
 152     ULONGLONG  SecurityCookie;
 153     ULONGLONG  SEHandlerTable;
 154     ULONGLONG  SEHandlerCount;
 155 } IMAGE_LOAD_CONFIG_DIRECTORY64, *PIMAGE_LOAD_CONFIG_DIRECTORY64;
 156
 157 #ifdef _WIN64
 158 typedef IMAGE_LOAD_CONFIG_DIRECTORY64     IMAGE_LOAD_CONFIG_DIRECTORY;
 159 typedef PIMAGE_LOAD_CONFIG_DIRECTORY64    PIMAGE_LOAD_CONFIG_DIRECTORY;
 160 #else
 161 typedef IMAGE_LOAD_CONFIG_DIRECTORY32     IMAGE_LOAD_CONFIG_DIRECTORY;
 162 typedef PIMAGE_LOAD_CONFIG_DIRECTORY32    PIMAGE_LOAD_CONFIG_DIRECTORY;
 163 #endif
 164
 165
 166 //
 167 // Base Relocation Format
 168 //
 169 typedef struct _IMAGE_BASE_RELOCATION {
 170         ULONG VirtualAddress;
 171         ULONG SizeOfBlock;
 172 } IMAGE_BASE_RELOCATION, *PIMAGE_BASE_RELOCATION;
 173
 174
 175
 176 //
 177 // Resource Format
 178 //
 179 typedef struct _IMAGE_RESOURCE_DIRECTORY {
 180     ULONG Characteristics;
 181     ULONG TimeDateStamp;
 182     USHORT MajorVersion;
 183     USHORT MinorVersion;
 184     USHORT NumberOfNamedEntries;
 185     USHORT NumberOfIdEntries;
 186 } IMAGE_RESOURCE_DIRECTORY, *PIMAGE_RESOURCE_DIRECTORY;
 187
 188 typedef struct _IMAGE_RESOURCE_DIRECTORY_STRING {
 189     USHORT Length;
 190     CHAR NameString[ANYSIZE_ARRAY];
 191 } IMAGE_RESOURCE_DIRECTORY_STRING, *PIMAGE_RESOURCE_DIRECTORY_STRING;
 192
 193
 194
 195 //
 196 // Section Header Format
 197 //
 198 #define IMAGE_SIZEOF_SHORT_NAME              8
 199 #define IMAGE_SIZEOF_SECTION_HEADER          40
 200
 201 typedef struct _IMAGE_SECTION_HEADER {
 202     UCHAR Name[IMAGE_SIZEOF_SHORT_NAME];
 203     union
 204     {
 205         ULONG PhysicalAddress;
 206         ULONG VirtualSize;
 207     } Misc;
 208     ULONG VirtualAddress;
 209     ULONG SizeOfRawData;
 210     ULONG PointerToRawData;
 211     ULONG PointerToRelocations;
 212     ULONG PointerToLinenumbers;
 213     USHORT NumberOfRelocations;
 214     USHORT NumberOfLinenumbers;
 215     ULONG Characteristics;
 216 } IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER;
 217
 218 //
 219 // Section Characteristics
 220 //
 221 #define IMAGE_SCN_CNT_CODE                   0x00000020
 222 #define IMAGE_SCN_CNT_INITIALIZED_DATA       0x00000040
 223 #define IMAGE_SCN_CNT_UNINITIALIZED_DATA     0x00000080
 224
 225 #define IMAGE_SCN_LNK_NRELOC_OVFL            0x01000000
 226 #define IMAGE_SCN_MEM_DISCARDABLE            0x02000000
 227 #define IMAGE_SCN_MEM_NOT_CACHED             0x04000000
 228 #define IMAGE_SCN_MEM_NOT_PAGED              0x08000000
 229 #define IMAGE_SCN_MEM_SHARED                 0x10000000
 230 #define IMAGE_SCN_MEM_EXECUTE                0x20000000
 231 #define IMAGE_SCN_MEM_READ                   0x40000000
 232 #define IMAGE_SCN_MEM_WRITE                  0x80000000
 233
 234
 235
 236 //
 237 // File Header Format
 238 //
 239 #define IMAGE_SIZEOF_FILE_HEADER             20
 240
 241 typedef struct _IMAGE_FILE_HEADER {
 242     USHORT Machine;
 243     USHORT NumberOfSections;
 244     ULONG TimeDateStamp;
 245     ULONG PointerToSymbolTable;
 246     ULONG NumberOfSymbols;
 247     USHORT SizeOfOptionalHeader;
 248     USHORT Characteristics;
 249 } IMAGE_FILE_HEADER, *PIMAGE_FILE_HEADER;
 250
 251 //
 252 // File Characteristics
 253 //
 254 #define IMAGE_FILE_RELOCS_STRIPPED           0x0001
 255 #define IMAGE_FILE_EXECUTABLE_IMAGE          0x0002
 256 #define IMAGE_FILE_LINE_NUMS_STRIPPED        0x0004
 257 #define IMAGE_FILE_LOCAL_SYMS_STRIPPED       0x0008
 258 #define IMAGE_FILE_AGGRESIVE_WS_TRIM         0x0010
 259 #define IMAGE_FILE_LARGE_ADDRESS_AWARE       0x0020
 260 #define IMAGE_FILE_BYTES_REVERSED_LO         0x0080
 261 #define IMAGE_FILE_32BIT_MACHINE             0x0100
 262 #define IMAGE_FILE_DEBUG_STRIPPED            0x0200
 263 #define IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP   0x0400
 264 #define IMAGE_FILE_NET_RUN_FROM_SWAP         0x0800
 265 #define IMAGE_FILE_SYSTEM                    0x1000
 266 #define IMAGE_FILE_DLL                       0x2000
 267 #define IMAGE_FILE_UP_SYSTEM_ONLY            0x4000
 268 #define IMAGE_FILE_BYTES_REVERSED_HI         0x8000
 269
 270
 271
 272 //
 273 // Directory format.
 274 //
 275 #define IMAGE_NUMBEROF_DIRECTORY_ENTRIES    16
 276
 277 typedef struct _IMAGE_DATA_DIRECTORY {
 278     ULONG   VirtualAddress;
 279     ULONG   Size;
 280 } IMAGE_DATA_DIRECTORY, *PIMAGE_DATA_DIRECTORY;
 281
 282
 283
 284 //
 285 // Optional Header Formats
 286 //
 287 typedef struct _IMAGE_OPTIONAL_HEADER {
 288     USHORT  Magic;
 289     UCHAR   MajorLinkerVersion;
 290     UCHAR   MinorLinkerVersion;
 291     ULONG   SizeOfCode;
 292     ULONG   SizeOfInitializedData;
 293     ULONG   SizeOfUninitializedData;
 294     ULONG   AddressOfEntryPoint;
 295     ULONG   BaseOfCode;
 296     ULONG   BaseOfData;
 297     ULONG   ImageBase;
 298     ULONG   SectionAlignment;
 299     ULONG   FileAlignment;
 300     USHORT  MajorOperatingSystemVersion;
 301     USHORT  MinorOperatingSystemVersion;
 302     USHORT  MajorImageVersion;
 303     USHORT  MinorImageVersion;
 304     USHORT  MajorSubsystemVersion;
 305     USHORT  MinorSubsystemVersion;
 306     ULONG   Win32VersionValue;
 307     ULONG   SizeOfImage;
 308     ULONG   SizeOfHeaders;
 309     ULONG   CheckSum;
 310     USHORT  Subsystem;
 311     USHORT  DllCharacteristics;
 312     ULONG   SizeOfStackReserve;
 313     ULONG   SizeOfStackCommit;
 314     ULONG   SizeOfHeapReserve;
 315     ULONG   SizeOfHeapCommit;
 316     ULONG   LoaderFlags;
 317     ULONG   NumberOfRvaAndSizes;
 318     IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
 319 } IMAGE_OPTIONAL_HEADER32, *PIMAGE_OPTIONAL_HEADER32;
 320
 321 typedef struct _IMAGE_ROM_OPTIONAL_HEADER {
 322     USHORT Magic;
 323     UCHAR  MajorLinkerVersion;
 324     UCHAR  MinorLinkerVersion;
 325     ULONG  SizeOfCode;
 326     ULONG  SizeOfInitializedData;
 327     ULONG  SizeOfUninitializedData;
 328     ULONG  AddressOfEntryPoint;
 329     ULONG  BaseOfCode;
 330     ULONG  BaseOfData;
 331     ULONG  BaseOfBss;
 332     ULONG  GprMask;
 333     ULONG  CprMask[4];
 334     ULONG  GpValue;
 335 } IMAGE_ROM_OPTIONAL_HEADER, *PIMAGE_ROM_OPTIONAL_HEADER;
 336
 337 typedef struct _IMAGE_OPTIONAL_HEADER64 {
 338     USHORT      Magic;
 339     UCHAR       MajorLinkerVersion;
 340     UCHAR       MinorLinkerVersion;
 341     ULONG       SizeOfCode;
 342     ULONG       SizeOfInitializedData;
 343     ULONG       SizeOfUninitializedData;
 344     ULONG       AddressOfEntryPoint;
 345     ULONG       BaseOfCode;
 346     ULONGLONG   ImageBase;
 347     ULONG       SectionAlignment;
 348     ULONG       FileAlignment;
 349     USHORT      MajorOperatingSystemVersion;
 350     USHORT      MinorOperatingSystemVersion;
 351     USHORT      MajorImageVersion;
 352     USHORT      MinorImageVersion;
 353     USHORT      MajorSubsystemVersion;
 354     USHORT      MinorSubsystemVersion;
 355     ULONG       Win32VersionValue;
 356     ULONG       SizeOfImage;
 357     ULONG       SizeOfHeaders;
 358     ULONG       CheckSum;
 359     USHORT      Subsystem;
 360     USHORT      DllCharacteristics;
 361     ULONGLONG   SizeOfStackReserve;
 362     ULONGLONG   SizeOfStackCommit;
 363     ULONGLONG   SizeOfHeapReserve;
 364     ULONGLONG   SizeOfHeapCommit;
 365     ULONG       LoaderFlags;
 366     ULONG       NumberOfRvaAndSizes;
 367     IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
 368 } IMAGE_OPTIONAL_HEADER64, *PIMAGE_OPTIONAL_HEADER64;
 369
 370 //
 371 // Format Identifier Magics
 372 //
 373 #define IMAGE_NT_OPTIONAL_HDR32_MAGIC      0x10b
 374 #define IMAGE_NT_OPTIONAL_HDR64_MAGIC      0x20b
 375 #define IMAGE_ROM_OPTIONAL_HDR_MAGIC       0x107
 376
 377
 378 #ifdef _WIN64
 379 typedef IMAGE_OPTIONAL_HEADER64             IMAGE_OPTIONAL_HEADER;
 380 typedef PIMAGE_OPTIONAL_HEADER64            PIMAGE_OPTIONAL_HEADER;
 381 #define IMAGE_NT_OPTIONAL_HDR_MAGIC         IMAGE_NT_OPTIONAL_HDR64_MAGIC
 382 #else
 383 typedef IMAGE_OPTIONAL_HEADER32             IMAGE_OPTIONAL_HEADER;
 384 typedef PIMAGE_OPTIONAL_HEADER32            PIMAGE_OPTIONAL_HEADER;
 385 #define IMAGE_NT_OPTIONAL_HDR_MAGIC         IMAGE_NT_OPTIONAL_HDR32_MAGIC
 386 #endif
 387
 388
 389
 390 //
 391 // Nt Header Formats
 392 //
 393 typedef struct _IMAGE_NT_HEADERS64 {
 394     ULONG Signature;
 395     IMAGE_FILE_HEADER FileHeader;
 396     IMAGE_OPTIONAL_HEADER64 OptionalHeader;
 397 } IMAGE_NT_HEADERS64;
 398
 399 typedef struct _IMAGE_NT_HEADERS {
 400     ULONG Signature;
 401     IMAGE_FILE_HEADER FileHeader;
 402     IMAGE_OPTIONAL_HEADER32 OptionalHeader;
 403 } IMAGE_NT_HEADERS32;
 404
 405 #ifdef _WIN64
 406 typedef IMAGE_NT_HEADERS64 IMAGE_NT_HEADERS;
 407 #else
 408 typedef IMAGE_NT_HEADERS32 IMAGE_NT_HEADERS;
 409 #endif
 410
 411 #ifndef _NTDDK_
 412 typedef IMAGE_NT_HEADERS32 *PIMAGE_NT_HEADERS32;
 413 typedef IMAGE_NT_HEADERS64 *PIMAGE_NT_HEADERS64;
 414 typedef IMAGE_NT_HEADERS *PIMAGE_NT_HEADERS;
 415 #endif /* _NTDDK_ */
 416
 417 //
 418 // Retreives the first image section header from the Nt Header
 419 //
 420 #define IMAGE_FIRST_SECTION( NtHeader ) ((PIMAGE_SECTION_HEADER)        \
 421     ((ULONG_PTR)(NtHeader) +                                            \
 422      FIELD_OFFSET( IMAGE_NT_HEADERS, OptionalHeader ) +                 \
 423      ((NtHeader))->FileHeader.SizeOfOptionalHeader   \
 424     ))
 425
 426 //
 427 // Dll Characteristics
 428 //
 429 #define IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE          0x0040
 430 #define IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY       0x0080
 431 #define IMAGE_DLLCHARACTERISTICS_NX_COMPAT             0x0100
 432 #define IMAGE_DLLCHARACTERISTICS_NO_ISOLATION          0x0200
 433 #define IMAGE_DLLCHARACTERISTICS_NO_SEH                0x0400
 434 #define IMAGE_DLLCHARACTERISTICS_NO_BIND               0x0800
 435 #define IMAGE_DLLCHARACTERISTICS_WDM_DRIVER            0x2000
 436 #define IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE 0x8000
 437
 438 //
 439 // Directory Entry Specifiers
 440 //
 441 #define IMAGE_DIRECTORY_ENTRY_EXPORT          0
 442 #define IMAGE_DIRECTORY_ENTRY_IMPORT          1
 443 #define IMAGE_DIRECTORY_ENTRY_RESOURCE        2
 444 #define IMAGE_DIRECTORY_ENTRY_EXCEPTION       3
 445 #define IMAGE_DIRECTORY_ENTRY_SECURITY        4
 446 #define IMAGE_DIRECTORY_ENTRY_BASERELOC       5
 447 #define IMAGE_DIRECTORY_ENTRY_DEBUG           6
 448 #define IMAGE_DIRECTORY_ENTRY_ARCHITECTURE    7
 449 #define IMAGE_DIRECTORY_ENTRY_GLOBALPTR       8
 450 #define IMAGE_DIRECTORY_ENTRY_TLS             9
 451 #define IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG    10
 452 #define IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT   11
 453 #define IMAGE_DIRECTORY_ENTRY_IAT            12
 454 #define IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT   13
 455 #define IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR 14
 456
 457
 458
 459 //
 460 // Import Formats
 461 //
 462 typedef struct _IMAGE_IMPORT_BY_NAME {
 463     USHORT  Hint;
 464     UCHAR   Name[1];
 465 } IMAGE_IMPORT_BY_NAME, *PIMAGE_IMPORT_BY_NAME;
 466
 467 #include <pshpack8.h>
 468 typedef struct _IMAGE_THUNK_DATA64 {
 469     union {
 470         ULONGLONG ForwarderString;
 471         ULONGLONG Function;
 472         ULONGLONG Ordinal;
 473         ULONGLONG AddressOfData;
 474     } u1;
 475 } IMAGE_THUNK_DATA64, *PIMAGE_THUNK_DATA64;
 476 #include <poppack.h>
 477
 478 typedef struct _IMAGE_THUNK_DATA32 {
 479     union {
 480         ULONG ForwarderString;
 481         ULONG Function;
 482         ULONG Ordinal;
 483         ULONG AddressOfData;
 484     } u1;
 485 } IMAGE_THUNK_DATA32, *PIMAGE_THUNK_DATA32;
 486
 487 #define IMAGE_ORDINAL_FLAG64 0x8000000000000000ULL
 488 #define IMAGE_ORDINAL_FLAG32 0x80000000
 489 #define IMAGE_ORDINAL64(Ordinal) (Ordinal & 0xffff)
 490 #define IMAGE_ORDINAL32(Ordinal) (Ordinal & 0xffff)
 491 #define IMAGE_SNAP_BY_ORDINAL64(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG64) != 0)
 492 #define IMAGE_SNAP_BY_ORDINAL32(Ordinal) ((Ordinal & IMAGE_ORDINAL_FLAG32) != 0)
 493
 494
 495
 496 //
 497 // Thread Local Storage (TLS)
 498 //
 499 typedef
 500 VOID
 501 (NTAPI *PIMAGE_TLS_CALLBACK) (
 502     PVOID DllHandle,
 503     ULONG Reason,
 504     PVOID Reserved
 505 );
 506
 507 typedef struct _IMAGE_TLS_DIRECTORY64 {
 508     ULONGLONG   StartAddressOfRawData;
 509     ULONGLONG   EndAddressOfRawData;
 510     ULONGLONG   AddressOfIndex;
 511     ULONGLONG   AddressOfCallBacks;
 512     ULONG   SizeOfZeroFill;
 513     ULONG   Characteristics;
 514 } IMAGE_TLS_DIRECTORY64, *PIMAGE_TLS_DIRECTORY64;
 515
 516 typedef struct _IMAGE_TLS_DIRECTORY32 {
 517     ULONG   StartAddressOfRawData;
 518     ULONG   EndAddressOfRawData;
 519     ULONG   AddressOfIndex;
 520     ULONG   AddressOfCallBacks;
 521     ULONG   SizeOfZeroFill;
 522     ULONG   Characteristics;
 523 } IMAGE_TLS_DIRECTORY32, *PIMAGE_TLS_DIRECTORY32;
 524
 525 #ifdef _WIN64
 526 #define IMAGE_ORDINAL_FLAG              IMAGE_ORDINAL_FLAG64
 527 #define IMAGE_ORDINAL(Ordinal)          IMAGE_ORDINAL64(Ordinal)
 528 typedef IMAGE_THUNK_DATA64              IMAGE_THUNK_DATA;
 529 typedef PIMAGE_THUNK_DATA64             PIMAGE_THUNK_DATA;
 530 #define IMAGE_SNAP_BY_ORDINAL(Ordinal)  IMAGE_SNAP_BY_ORDINAL64(Ordinal)
 531 typedef IMAGE_TLS_DIRECTORY64           IMAGE_TLS_DIRECTORY;
 532 typedef PIMAGE_TLS_DIRECTORY64          PIMAGE_TLS_DIRECTORY;
 533 #else
 534 #define IMAGE_ORDINAL_FLAG              IMAGE_ORDINAL_FLAG32
 535 #define IMAGE_ORDINAL(Ordinal)          IMAGE_ORDINAL32(Ordinal)
 536 typedef IMAGE_THUNK_DATA32              IMAGE_THUNK_DATA;
 537 typedef PIMAGE_THUNK_DATA32             PIMAGE_THUNK_DATA;
 538 #define IMAGE_SNAP_BY_ORDINAL(Ordinal)  IMAGE_SNAP_BY_ORDINAL32(Ordinal)
 539 typedef IMAGE_TLS_DIRECTORY32           IMAGE_TLS_DIRECTORY;
 540 typedef PIMAGE_TLS_DIRECTORY32          PIMAGE_TLS_DIRECTORY;
 541 #endif
 542
 543 typedef struct _IMAGE_IMPORT_DESCRIPTOR {
 544     _ANONYMOUS_UNION union {
 545         ULONG   Characteristics;
 546         ULONG   OriginalFirstThunk;
 547     } DUMMYUNIONNAME;
 548     ULONG   TimeDateStamp;
 549     ULONG   ForwarderChain;
 550     ULONG   Name;
 551     ULONG   FirstThunk;
 552 } IMAGE_IMPORT_DESCRIPTOR, *PIMAGE_IMPORT_DESCRIPTOR;
 553
 554 #include <poppack.h>
 555
 556
 557
 558 #endif