mips / ntdllntoskrnl

_IMAGE_AUX_SYMBOL

← no build number 2 builds latest →

incomplete only the Native API and process/thread environment structures two MIPS binaries were compiled with (_TEB, _PEB, _KPCR, RTL, object/file/registry information classes, image headers): no kernel objects

union _IMAGE_AUX_SYMBOL {
struct {
unsigned long TagIndex;/* 0x0 4 */
union {
struct {
unsigned short Linenumber;/* 0x4 2 */
unsigned short Size;/* 0x6 2 */
} LnSz;/* 0x4 4 */
unsigned long TotalSize;/* 0x4 4 */
} Misc;/* 0x4 4 */
union {
struct {
unsigned long PointerToLinenumber;/* 0x8 4 */
unsigned long PointerToNextFunction;/* 0xc 4 */
} Function;/* 0x8 8 */
struct {
unsigned short Dimension[4];/* 0x8 8 */
} Array;/* 0x8 8 */
} FcnAry;/* 0x8 8 */
unsigned short TvIndex;/* 0x10 2 */
} Sym;/* 0x0 18 */
struct {
unsigned char Name[18];/* 0x0 18 */
} File;/* 0x0 18 */
struct {
unsigned long Length;/* 0x0 4 */
unsigned short NumberOfRelocations;/* 0x4 2 */
unsigned short NumberOfLinenumbers;/* 0x6 2 */
unsigned long CheckSum;/* 0x8 4 */
short Number;/* 0xc 2 */
unsigned char Selection;/* 0xe 1 */
} Section;/* 0x0 15 */
};
/* source: Windows NT 3.1 beta DDK, MIPS/CDPLAYER.EXE and MIPS/DISKPERF.EXE inline CodeView 4 (NB08) type records; build 404.1 per the DDK's version.h */
size 18 (0x12)3 members0 holespadding 01 cacheline