ホーム › System.Diagnostics.Debug › IMAGE_COR20_HEADER
IMAGE_COR20_HEADER
構造体サイズ=各フィールドのバイト数(x64/x86 で異なる場合は x64/x86 と併記)。x64/x86 列=フィールドのバイトオフセット(HSPで dupptr / lpoke / wpoke 等に使用)。
フィールド
| フィールド | 型 | サイズ | x64 | x86 | 説明 |
|---|---|---|---|---|---|
| cb | DWORD | 4 | +0 | +0 | このCLRヘッダのバイトサイズ。 |
| MajorRuntimeVersion | WORD | 2 | +4 | +4 | 必要CLRのメジャーバージョン。 |
| MinorRuntimeVersion | WORD | 2 | +6 | +6 | 必要CLRのマイナーバージョン。 |
| MetaData | IMAGE_DATA_DIRECTORY | 8 | +8 | +8 | メタデータのRVAとサイズを示すデータディレクトリ。 |
| Flags | DWORD | 4 | +16 | +16 | マネージイメージの属性を示すフラグ(ILのみ等)。 |
| Anonymous | _Anonymous_e__Union | 4 | +20 | +20 | エントリポイントトークンまたはRVAを格納する共用体。 |
| Resources | IMAGE_DATA_DIRECTORY | 8 | +24 | +24 | マネージリソースのデータディレクトリ。 |
| StrongNameSignature | IMAGE_DATA_DIRECTORY | 8 | +32 | +32 | 強名署名のデータディレクトリ。 |
| CodeManagerTable | IMAGE_DATA_DIRECTORY | 8 | +40 | +40 | コードマネージャテーブルのデータディレクトリ(予約)。 |
| VTableFixups | IMAGE_DATA_DIRECTORY | 8 | +48 | +48 | VTable修正情報のデータディレクトリ。 |
| ExportAddressTableJumps | IMAGE_DATA_DIRECTORY | 8 | +56 | +56 | エクスポートアドレステーブルジャンプのデータディレクトリ。 |
| ManagedNativeHeader | IMAGE_DATA_DIRECTORY | 8 | +64 | +64 | ネイティブイメージ(NGEN)ヘッダのデータディレクトリ。 |
共用体: _Anonymous_e__Union x64 4B / x86 4B
| フィールド | 型 | サイズ | x64 | x86 |
|---|---|---|---|---|
| EntryPointToken | DWORD | 4 | +0 | +0 |
| EntryPointRVA | DWORD | 4 | +0 | +0 |
各言語での定義
#include <windows.h>
// IMAGE_DATA_DIRECTORY (x64 8 / x86 8 バイト)
typedef struct IMAGE_DATA_DIRECTORY {
DWORD VirtualAddress;
DWORD Size;
} IMAGE_DATA_DIRECTORY;
// IMAGE_COR20_HEADER (x64 72 / x86 72 バイト)
typedef struct IMAGE_COR20_HEADER {
DWORD cb;
WORD MajorRuntimeVersion;
WORD MinorRuntimeVersion;
IMAGE_DATA_DIRECTORY MetaData;
DWORD Flags;
_Anonymous_e__Union Anonymous;
IMAGE_DATA_DIRECTORY Resources;
IMAGE_DATA_DIRECTORY StrongNameSignature;
IMAGE_DATA_DIRECTORY CodeManagerTable;
IMAGE_DATA_DIRECTORY VTableFixups;
IMAGE_DATA_DIRECTORY ExportAddressTableJumps;
IMAGE_DATA_DIRECTORY ManagedNativeHeader;
} IMAGE_COR20_HEADER;using System;
using System.Runtime.InteropServices;
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct IMAGE_DATA_DIRECTORY
{
public uint VirtualAddress;
public uint Size;
}
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct IMAGE_COR20_HEADER
{
public uint cb;
public ushort MajorRuntimeVersion;
public ushort MinorRuntimeVersion;
public IMAGE_DATA_DIRECTORY MetaData;
public uint Flags;
public _Anonymous_e__Union Anonymous;
public IMAGE_DATA_DIRECTORY Resources;
public IMAGE_DATA_DIRECTORY StrongNameSignature;
public IMAGE_DATA_DIRECTORY CodeManagerTable;
public IMAGE_DATA_DIRECTORY VTableFixups;
public IMAGE_DATA_DIRECTORY ExportAddressTableJumps;
public IMAGE_DATA_DIRECTORY ManagedNativeHeader;
}Imports System.Runtime.InteropServices
<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure IMAGE_DATA_DIRECTORY
Public VirtualAddress As UInteger
Public Size As UInteger
End Structure
<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure IMAGE_COR20_HEADER
Public cb As UInteger
Public MajorRuntimeVersion As UShort
Public MinorRuntimeVersion As UShort
Public MetaData As IMAGE_DATA_DIRECTORY
Public Flags As UInteger
Public Anonymous As _Anonymous_e__Union
Public Resources As IMAGE_DATA_DIRECTORY
Public StrongNameSignature As IMAGE_DATA_DIRECTORY
Public CodeManagerTable As IMAGE_DATA_DIRECTORY
Public VTableFixups As IMAGE_DATA_DIRECTORY
Public ExportAddressTableJumps As IMAGE_DATA_DIRECTORY
Public ManagedNativeHeader As IMAGE_DATA_DIRECTORY
End Structureimport ctypes
from ctypes import wintypes
class IMAGE_DATA_DIRECTORY(ctypes.Structure):
_fields_ = [
("VirtualAddress", wintypes.DWORD),
("Size", wintypes.DWORD),
]
class IMAGE_COR20_HEADER(ctypes.Structure):
_fields_ = [
("cb", wintypes.DWORD),
("MajorRuntimeVersion", ctypes.c_ushort),
("MinorRuntimeVersion", ctypes.c_ushort),
("MetaData", IMAGE_DATA_DIRECTORY),
("Flags", wintypes.DWORD),
("Anonymous", _Anonymous_e__Union),
("Resources", IMAGE_DATA_DIRECTORY),
("StrongNameSignature", IMAGE_DATA_DIRECTORY),
("CodeManagerTable", IMAGE_DATA_DIRECTORY),
("VTableFixups", IMAGE_DATA_DIRECTORY),
("ExportAddressTableJumps", IMAGE_DATA_DIRECTORY),
("ManagedNativeHeader", IMAGE_DATA_DIRECTORY),
]#[repr(C)]
pub struct IMAGE_DATA_DIRECTORY {
pub VirtualAddress: u32,
pub Size: u32,
}
#[repr(C)]
pub struct IMAGE_COR20_HEADER {
pub cb: u32,
pub MajorRuntimeVersion: u16,
pub MinorRuntimeVersion: u16,
pub MetaData: IMAGE_DATA_DIRECTORY,
pub Flags: u32,
pub Anonymous: _Anonymous_e__Union,
pub Resources: IMAGE_DATA_DIRECTORY,
pub StrongNameSignature: IMAGE_DATA_DIRECTORY,
pub CodeManagerTable: IMAGE_DATA_DIRECTORY,
pub VTableFixups: IMAGE_DATA_DIRECTORY,
pub ExportAddressTableJumps: IMAGE_DATA_DIRECTORY,
pub ManagedNativeHeader: IMAGE_DATA_DIRECTORY,
}import "golang.org/x/sys/windows"
type IMAGE_DATA_DIRECTORY struct {
VirtualAddress uint32
Size uint32
}
type IMAGE_COR20_HEADER struct {
cb uint32
MajorRuntimeVersion uint16
MinorRuntimeVersion uint16
MetaData IMAGE_DATA_DIRECTORY
Flags uint32
Anonymous _Anonymous_e__Union
Resources IMAGE_DATA_DIRECTORY
StrongNameSignature IMAGE_DATA_DIRECTORY
CodeManagerTable IMAGE_DATA_DIRECTORY
VTableFixups IMAGE_DATA_DIRECTORY
ExportAddressTableJumps IMAGE_DATA_DIRECTORY
ManagedNativeHeader IMAGE_DATA_DIRECTORY
}type
IMAGE_DATA_DIRECTORY = record
VirtualAddress: DWORD;
Size: DWORD;
end;
IMAGE_COR20_HEADER = record
cb: DWORD;
MajorRuntimeVersion: Word;
MinorRuntimeVersion: Word;
MetaData: IMAGE_DATA_DIRECTORY;
Flags: DWORD;
Anonymous: _Anonymous_e__Union;
Resources: IMAGE_DATA_DIRECTORY;
StrongNameSignature: IMAGE_DATA_DIRECTORY;
CodeManagerTable: IMAGE_DATA_DIRECTORY;
VTableFixups: IMAGE_DATA_DIRECTORY;
ExportAddressTableJumps: IMAGE_DATA_DIRECTORY;
ManagedNativeHeader: IMAGE_DATA_DIRECTORY;
end;const IMAGE_DATA_DIRECTORY = extern struct {
VirtualAddress: u32,
Size: u32,
};
const IMAGE_COR20_HEADER = extern struct {
cb: u32,
MajorRuntimeVersion: u16,
MinorRuntimeVersion: u16,
MetaData: IMAGE_DATA_DIRECTORY,
Flags: u32,
Anonymous: _Anonymous_e__Union,
Resources: IMAGE_DATA_DIRECTORY,
StrongNameSignature: IMAGE_DATA_DIRECTORY,
CodeManagerTable: IMAGE_DATA_DIRECTORY,
VTableFixups: IMAGE_DATA_DIRECTORY,
ExportAddressTableJumps: IMAGE_DATA_DIRECTORY,
ManagedNativeHeader: IMAGE_DATA_DIRECTORY,
};type
IMAGE_DATA_DIRECTORY {.bycopy.} = object
VirtualAddress: uint32
Size: uint32
IMAGE_COR20_HEADER {.bycopy.} = object
cb: uint32
MajorRuntimeVersion: uint16
MinorRuntimeVersion: uint16
MetaData: IMAGE_DATA_DIRECTORY
Flags: uint32
Anonymous: _Anonymous_e__Union
Resources: IMAGE_DATA_DIRECTORY
StrongNameSignature: IMAGE_DATA_DIRECTORY
CodeManagerTable: IMAGE_DATA_DIRECTORY
VTableFixups: IMAGE_DATA_DIRECTORY
ExportAddressTableJumps: IMAGE_DATA_DIRECTORY
ManagedNativeHeader: IMAGE_DATA_DIRECTORYstruct IMAGE_DATA_DIRECTORY
{
uint VirtualAddress;
uint Size;
}
struct IMAGE_COR20_HEADER
{
uint cb;
ushort MajorRuntimeVersion;
ushort MinorRuntimeVersion;
IMAGE_DATA_DIRECTORY MetaData;
uint Flags;
_Anonymous_e__Union Anonymous;
IMAGE_DATA_DIRECTORY Resources;
IMAGE_DATA_DIRECTORY StrongNameSignature;
IMAGE_DATA_DIRECTORY CodeManagerTable;
IMAGE_DATA_DIRECTORY VTableFixups;
IMAGE_DATA_DIRECTORY ExportAddressTableJumps;
IMAGE_DATA_DIRECTORY ManagedNativeHeader;
}HSP用 定義
HSP3.7/3.8 は構造体機能が無いため4byte整数配列(dim)+peek/poke で操作(32/64bitでサイズ・位置が異なる場合はタブで分割)。IronHSP は NSTRUCT(#defstruct/stdim/->)で32/64bit共通。
; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x64 レイアウト)
; IMAGE_COR20_HEADER サイズ: 72 バイト(x64)
dim st, 18 ; 4byte整数×18(構造体サイズ 72 / 4 切り上げ)
; cb : DWORD (+0, 4byte) st.0 = 値 / 値 = st.0 (lpoke/lpeek も可)
; MajorRuntimeVersion : WORD (+4, 2byte) wpoke st,4,値 / 値 = wpeek(st,4)
; MinorRuntimeVersion : WORD (+6, 2byte) wpoke st,6,値 / 値 = wpeek(st,6)
; MetaData : IMAGE_DATA_DIRECTORY (+8, 8byte) varptr(st)+8 を基点に操作(8byte:入れ子/配列)
; Flags : DWORD (+16, 4byte) st.4 = 値 / 値 = st.4 (lpoke/lpeek も可)
; Anonymous : _Anonymous_e__Union (+20, 4byte) varptr(st)+20 を基点に操作(4byte:入れ子/配列)
; Resources : IMAGE_DATA_DIRECTORY (+24, 8byte) varptr(st)+24 を基点に操作(8byte:入れ子/配列)
; StrongNameSignature : IMAGE_DATA_DIRECTORY (+32, 8byte) varptr(st)+32 を基点に操作(8byte:入れ子/配列)
; CodeManagerTable : IMAGE_DATA_DIRECTORY (+40, 8byte) varptr(st)+40 を基点に操作(8byte:入れ子/配列)
; VTableFixups : IMAGE_DATA_DIRECTORY (+48, 8byte) varptr(st)+48 を基点に操作(8byte:入れ子/配列)
; ExportAddressTableJumps : IMAGE_DATA_DIRECTORY (+56, 8byte) varptr(st)+56 を基点に操作(8byte:入れ子/配列)
; ManagedNativeHeader : IMAGE_DATA_DIRECTORY (+64, 8byte) varptr(st)+64 を基点に操作(8byte:入れ子/配列)
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。; IronHSP は NSTRUCT(構造体)をサポート。32bit/64bit どちらでも同じコードで動作します。
; ※GUID・入れ子構造体はデフォルト型でないため、依存する #defstruct を先に定義(下記に同梱)。
#defstruct global IMAGE_DATA_DIRECTORY
#field int VirtualAddress
#field int Size
#endstruct
#defstruct global IMAGE_COR20_HEADER
#field int cb
#field short MajorRuntimeVersion
#field short MinorRuntimeVersion
#field IMAGE_DATA_DIRECTORY MetaData
#field int Flags
#field byte Anonymous 4
#field IMAGE_DATA_DIRECTORY Resources
#field IMAGE_DATA_DIRECTORY StrongNameSignature
#field IMAGE_DATA_DIRECTORY CodeManagerTable
#field IMAGE_DATA_DIRECTORY VTableFixups
#field IMAGE_DATA_DIRECTORY ExportAddressTableJumps
#field IMAGE_DATA_DIRECTORY ManagedNativeHeader
#endstruct
stdim st, IMAGE_COR20_HEADER ; NSTRUCT 変数を確保
st->cb = 100
mes "cb=" + st->cb
; ※union フィールドは byte 列で確保(NSTRUCT は union 非対応)。必要に応じ手動でアクセス。