pe.h 8.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263
  1. /*
  2. * Portable Executable binary format structures
  3. *
  4. * Copyright (c) 2016 Alexander Graf
  5. *
  6. * Based on wine code
  7. *
  8. * SPDX-License-Identifier: GPL-2.0+
  9. */
  10. #ifndef _PE_H
  11. #define _PE_H
  12. typedef struct _IMAGE_DOS_HEADER {
  13. uint16_t e_magic; /* 00: MZ Header signature */
  14. uint16_t e_cblp; /* 02: Bytes on last page of file */
  15. uint16_t e_cp; /* 04: Pages in file */
  16. uint16_t e_crlc; /* 06: Relocations */
  17. uint16_t e_cparhdr; /* 08: Size of header in paragraphs */
  18. uint16_t e_minalloc; /* 0a: Minimum extra paragraphs needed */
  19. uint16_t e_maxalloc; /* 0c: Maximum extra paragraphs needed */
  20. uint16_t e_ss; /* 0e: Initial (relative) SS value */
  21. uint16_t e_sp; /* 10: Initial SP value */
  22. uint16_t e_csum; /* 12: Checksum */
  23. uint16_t e_ip; /* 14: Initial IP value */
  24. uint16_t e_cs; /* 16: Initial (relative) CS value */
  25. uint16_t e_lfarlc; /* 18: File address of relocation table */
  26. uint16_t e_ovno; /* 1a: Overlay number */
  27. uint16_t e_res[4]; /* 1c: Reserved words */
  28. uint16_t e_oemid; /* 24: OEM identifier (for e_oeminfo) */
  29. uint16_t e_oeminfo; /* 26: OEM information; e_oemid specific */
  30. uint16_t e_res2[10]; /* 28: Reserved words */
  31. uint32_t e_lfanew; /* 3c: Offset to extended header */
  32. } IMAGE_DOS_HEADER, *PIMAGE_DOS_HEADER;
  33. #define IMAGE_DOS_SIGNATURE 0x5A4D /* MZ */
  34. #define IMAGE_NT_SIGNATURE 0x00004550 /* PE00 */
  35. #define IMAGE_FILE_MACHINE_ARM 0x01c0
  36. #define IMAGE_FILE_MACHINE_THUMB 0x01c2
  37. #define IMAGE_FILE_MACHINE_ARMNT 0x01c4
  38. #define IMAGE_FILE_MACHINE_AMD64 0x8664
  39. #define IMAGE_FILE_MACHINE_ARM64 0xaa64
  40. #define IMAGE_NT_OPTIONAL_HDR32_MAGIC 0x10b
  41. #define IMAGE_NT_OPTIONAL_HDR64_MAGIC 0x20b
  42. #define IMAGE_SUBSYSTEM_EFI_APPLICATION 10
  43. typedef struct _IMAGE_FILE_HEADER {
  44. uint16_t Machine;
  45. uint16_t NumberOfSections;
  46. uint32_t TimeDateStamp;
  47. uint32_t PointerToSymbolTable;
  48. uint32_t NumberOfSymbols;
  49. uint16_t SizeOfOptionalHeader;
  50. uint16_t Characteristics;
  51. } IMAGE_FILE_HEADER, *PIMAGE_FILE_HEADER;
  52. typedef struct _IMAGE_DATA_DIRECTORY {
  53. uint32_t VirtualAddress;
  54. uint32_t Size;
  55. } IMAGE_DATA_DIRECTORY, *PIMAGE_DATA_DIRECTORY;
  56. #define IMAGE_NUMBEROF_DIRECTORY_ENTRIES 16
  57. typedef struct _IMAGE_OPTIONAL_HEADER64 {
  58. uint16_t Magic; /* 0x20b */
  59. uint8_t MajorLinkerVersion;
  60. uint8_t MinorLinkerVersion;
  61. uint32_t SizeOfCode;
  62. uint32_t SizeOfInitializedData;
  63. uint32_t SizeOfUninitializedData;
  64. uint32_t AddressOfEntryPoint;
  65. uint32_t BaseOfCode;
  66. uint64_t ImageBase;
  67. uint32_t SectionAlignment;
  68. uint32_t FileAlignment;
  69. uint16_t MajorOperatingSystemVersion;
  70. uint16_t MinorOperatingSystemVersion;
  71. uint16_t MajorImageVersion;
  72. uint16_t MinorImageVersion;
  73. uint16_t MajorSubsystemVersion;
  74. uint16_t MinorSubsystemVersion;
  75. uint32_t Win32VersionValue;
  76. uint32_t SizeOfImage;
  77. uint32_t SizeOfHeaders;
  78. uint32_t CheckSum;
  79. uint16_t Subsystem;
  80. uint16_t DllCharacteristics;
  81. uint64_t SizeOfStackReserve;
  82. uint64_t SizeOfStackCommit;
  83. uint64_t SizeOfHeapReserve;
  84. uint64_t SizeOfHeapCommit;
  85. uint32_t LoaderFlags;
  86. uint32_t NumberOfRvaAndSizes;
  87. IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
  88. } IMAGE_OPTIONAL_HEADER64, *PIMAGE_OPTIONAL_HEADER64;
  89. typedef struct _IMAGE_NT_HEADERS64 {
  90. uint32_t Signature;
  91. IMAGE_FILE_HEADER FileHeader;
  92. IMAGE_OPTIONAL_HEADER64 OptionalHeader;
  93. } IMAGE_NT_HEADERS64, *PIMAGE_NT_HEADERS64;
  94. typedef struct _IMAGE_OPTIONAL_HEADER {
  95. /* Standard fields */
  96. uint16_t Magic; /* 0x10b or 0x107 */ /* 0x00 */
  97. uint8_t MajorLinkerVersion;
  98. uint8_t MinorLinkerVersion;
  99. uint32_t SizeOfCode;
  100. uint32_t SizeOfInitializedData;
  101. uint32_t SizeOfUninitializedData;
  102. uint32_t AddressOfEntryPoint; /* 0x10 */
  103. uint32_t BaseOfCode;
  104. uint32_t BaseOfData;
  105. /* NT additional fields */
  106. uint32_t ImageBase;
  107. uint32_t SectionAlignment; /* 0x20 */
  108. uint32_t FileAlignment;
  109. uint16_t MajorOperatingSystemVersion;
  110. uint16_t MinorOperatingSystemVersion;
  111. uint16_t MajorImageVersion;
  112. uint16_t MinorImageVersion;
  113. uint16_t MajorSubsystemVersion; /* 0x30 */
  114. uint16_t MinorSubsystemVersion;
  115. uint32_t Win32VersionValue;
  116. uint32_t SizeOfImage;
  117. uint32_t SizeOfHeaders;
  118. uint32_t CheckSum; /* 0x40 */
  119. uint16_t Subsystem;
  120. uint16_t DllCharacteristics;
  121. uint32_t SizeOfStackReserve;
  122. uint32_t SizeOfStackCommit;
  123. uint32_t SizeOfHeapReserve; /* 0x50 */
  124. uint32_t SizeOfHeapCommit;
  125. uint32_t LoaderFlags;
  126. uint32_t NumberOfRvaAndSizes;
  127. IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES]; /* 0x60 */
  128. /* 0xE0 */
  129. } IMAGE_OPTIONAL_HEADER32, *PIMAGE_OPTIONAL_HEADER32;
  130. typedef struct _IMAGE_NT_HEADERS {
  131. uint32_t Signature; /* "PE"\0\0 */ /* 0x00 */
  132. IMAGE_FILE_HEADER FileHeader; /* 0x04 */
  133. IMAGE_OPTIONAL_HEADER32 OptionalHeader; /* 0x18 */
  134. } IMAGE_NT_HEADERS32, *PIMAGE_NT_HEADERS32;
  135. #define IMAGE_SIZEOF_SHORT_NAME 8
  136. typedef struct _IMAGE_SECTION_HEADER {
  137. uint8_t Name[IMAGE_SIZEOF_SHORT_NAME];
  138. union {
  139. uint32_t PhysicalAddress;
  140. uint32_t VirtualSize;
  141. } Misc;
  142. uint32_t VirtualAddress;
  143. uint32_t SizeOfRawData;
  144. uint32_t PointerToRawData;
  145. uint32_t PointerToRelocations;
  146. uint32_t PointerToLinenumbers;
  147. uint16_t NumberOfRelocations;
  148. uint16_t NumberOfLinenumbers;
  149. uint32_t Characteristics;
  150. } IMAGE_SECTION_HEADER, *PIMAGE_SECTION_HEADER;
  151. #define IMAGE_DIRECTORY_ENTRY_BASERELOC 5
  152. typedef struct _IMAGE_BASE_RELOCATION
  153. {
  154. uint32_t VirtualAddress;
  155. uint32_t SizeOfBlock;
  156. /* WORD TypeOffset[1]; */
  157. } IMAGE_BASE_RELOCATION,*PIMAGE_BASE_RELOCATION;
  158. typedef struct _IMAGE_RELOCATION
  159. {
  160. union {
  161. uint32_t VirtualAddress;
  162. uint32_t RelocCount;
  163. } DUMMYUNIONNAME;
  164. uint32_t SymbolTableIndex;
  165. uint16_t Type;
  166. } IMAGE_RELOCATION, *PIMAGE_RELOCATION;
  167. #define IMAGE_SIZEOF_RELOCATION 10
  168. /* generic relocation types */
  169. #define IMAGE_REL_BASED_ABSOLUTE 0
  170. #define IMAGE_REL_BASED_HIGH 1
  171. #define IMAGE_REL_BASED_LOW 2
  172. #define IMAGE_REL_BASED_HIGHLOW 3
  173. #define IMAGE_REL_BASED_HIGHADJ 4
  174. #define IMAGE_REL_BASED_MIPS_JMPADDR 5
  175. #define IMAGE_REL_BASED_ARM_MOV32A 5 /* yes, 5 too */
  176. #define IMAGE_REL_BASED_ARM_MOV32 5 /* yes, 5 too */
  177. #define IMAGE_REL_BASED_SECTION 6
  178. #define IMAGE_REL_BASED_REL 7
  179. #define IMAGE_REL_BASED_ARM_MOV32T 7 /* yes, 7 too */
  180. #define IMAGE_REL_BASED_THUMB_MOV32 7 /* yes, 7 too */
  181. #define IMAGE_REL_BASED_MIPS_JMPADDR16 9
  182. #define IMAGE_REL_BASED_IA64_IMM64 9 /* yes, 9 too */
  183. #define IMAGE_REL_BASED_DIR64 10
  184. #define IMAGE_REL_BASED_HIGH3ADJ 11
  185. /* ARM relocation types */
  186. #define IMAGE_REL_ARM_ABSOLUTE 0x0000
  187. #define IMAGE_REL_ARM_ADDR 0x0001
  188. #define IMAGE_REL_ARM_ADDR32NB 0x0002
  189. #define IMAGE_REL_ARM_BRANCH24 0x0003
  190. #define IMAGE_REL_ARM_BRANCH11 0x0004
  191. #define IMAGE_REL_ARM_TOKEN 0x0005
  192. #define IMAGE_REL_ARM_GPREL12 0x0006
  193. #define IMAGE_REL_ARM_GPREL7 0x0007
  194. #define IMAGE_REL_ARM_BLX24 0x0008
  195. #define IMAGE_REL_ARM_BLX11 0x0009
  196. #define IMAGE_REL_ARM_SECTION 0x000E
  197. #define IMAGE_REL_ARM_SECREL 0x000F
  198. #define IMAGE_REL_ARM_MOV32A 0x0010
  199. #define IMAGE_REL_ARM_MOV32T 0x0011
  200. #define IMAGE_REL_ARM_BRANCH20T 0x0012
  201. #define IMAGE_REL_ARM_BRANCH24T 0x0014
  202. #define IMAGE_REL_ARM_BLX23T 0x0015
  203. /* ARM64 relocation types */
  204. #define IMAGE_REL_ARM64_ABSOLUTE 0x0000
  205. #define IMAGE_REL_ARM64_ADDR32 0x0001
  206. #define IMAGE_REL_ARM64_ADDR32NB 0x0002
  207. #define IMAGE_REL_ARM64_BRANCH26 0x0003
  208. #define IMAGE_REL_ARM64_PAGEBASE_REL21 0x0004
  209. #define IMAGE_REL_ARM64_REL21 0x0005
  210. #define IMAGE_REL_ARM64_PAGEOFFSET_12A 0x0006
  211. #define IMAGE_REL_ARM64_PAGEOFFSET_12L 0x0007
  212. #define IMAGE_REL_ARM64_SECREL 0x0008
  213. #define IMAGE_REL_ARM64_SECREL_LOW12A 0x0009
  214. #define IMAGE_REL_ARM64_SECREL_HIGH12A 0x000A
  215. #define IMAGE_REL_ARM64_SECREL_LOW12L 0x000B
  216. #define IMAGE_REL_ARM64_TOKEN 0x000C
  217. #define IMAGE_REL_ARM64_SECTION 0x000D
  218. #define IMAGE_REL_ARM64_ADDR64 0x000E
  219. /* AMD64 relocation types */
  220. #define IMAGE_REL_AMD64_ABSOLUTE 0x0000
  221. #define IMAGE_REL_AMD64_ADDR64 0x0001
  222. #define IMAGE_REL_AMD64_ADDR32 0x0002
  223. #define IMAGE_REL_AMD64_ADDR32NB 0x0003
  224. #define IMAGE_REL_AMD64_REL32 0x0004
  225. #define IMAGE_REL_AMD64_REL32_1 0x0005
  226. #define IMAGE_REL_AMD64_REL32_2 0x0006
  227. #define IMAGE_REL_AMD64_REL32_3 0x0007
  228. #define IMAGE_REL_AMD64_REL32_4 0x0008
  229. #define IMAGE_REL_AMD64_REL32_5 0x0009
  230. #define IMAGE_REL_AMD64_SECTION 0x000A
  231. #define IMAGE_REL_AMD64_SECREL 0x000B
  232. #define IMAGE_REL_AMD64_SECREL7 0x000C
  233. #define IMAGE_REL_AMD64_TOKEN 0x000D
  234. #define IMAGE_REL_AMD64_SREL32 0x000E
  235. #define IMAGE_REL_AMD64_PAIR 0x000F
  236. #define IMAGE_REL_AMD64_SSPAN32 0x0010
  237. #endif /* _PE_H */