Initialized return value of 16->32 conversion of WM_MDIGETACTIVE in

[wine/dcerpc.git] / loader / pe_image.c

/* 
 *  Copyright   1994    Eric Youndale & Erik Bos
 *  Copyright   1995    Martin von Löwis
 *  Copyright   1996-98 Marcus Meissner
 *
 *      based on Eric Youndale's pe-test and:
 *
 *      ftp.microsoft.com:/pub/developer/MSDN/CD8/PEFILE.ZIP
 * make that:
 *      ftp.microsoft.com:/developr/MSDN/OctCD/PEFILE.ZIP
 */
/* Notes:
 * Before you start changing something in this file be aware of the following:
 *
 * - There are several functions called recursively. In a very subtle and 
 *   obscure way. DLLs can reference each other recursively etc.
 * - If you want to enhance, speed up or clean up something in here, think
 *   twice WHY it is implemented in that strange way. There is usually a reason.
 *   Though sometimes it might just be lazyness ;)
 * - In PE_MapImage, right before fixup_imports() all external and internal 
 *   state MUST be correct since this function can be called with the SAME image
 *   AGAIN. (Thats recursion for you.) That means MODREF.module and
 *   NE_MODULE.module32.
 * - No, you (usually) cannot use Linux mmap() to mmap() the images directly.
 *
 *   The problem is, that there is not direct 1:1 mapping from a diskimage and
 *   a memoryimage. The headers at the start are mapped linear, but the sections
 *   are not. For x86 the sections are 512 byte aligned in file and 4096 byte
 *   aligned in memory. Linux likes them 4096 byte aligned in memory (due to
 *   x86 pagesize, this cannot be fixed without a rather large kernel rewrite)
 *   and 'blocksize' file-aligned (offsets). Since we have 512/1024/2048 (CDROM)
 *   and other byte blocksizes, we can't do this. However, this could be less
 *   difficult to support... (See mm/filemap.c).
 * - All those function map things into a new addresspace. From the wrong
 *   process and the wrong thread. So calling other API functions will mess 
 *   things up badly sometimes.
 */

#include <errno.h>
#include <assert.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <sys/mman.h>
#include "windef.h"
#include "winbase.h"
#include "callback.h"
#include "file.h"
#include "heap.h"
#include "neexe.h"
#include "peexe.h"
#include "process.h"
#include "thread.h"
#include "pe_image.h"
#include "module.h"
#include "global.h"
#include "task.h"
#include "snoop.h"
#include "debug.h"


/* convert PE image VirtualAddress to Real Address */
#define RVA(x) ((unsigned int)load_addr+(unsigned int)(x))

#define AdjustPtr(ptr,delta) ((char *)(ptr) + (delta))

void dump_exports( HMODULE32 hModule )
{ 
  char          *Module;
  int           i, j;
  u_short       *ordinal;
  u_long        *function,*functions;
  u_char        **name;
  unsigned int load_addr = hModule;

  DWORD rva_start = PE_HEADER(hModule)->OptionalHeader
                   .DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].VirtualAddress;
  DWORD rva_end = rva_start + PE_HEADER(hModule)->OptionalHeader
                   .DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].Size;
  IMAGE_EXPORT_DIRECTORY *pe_exports = (IMAGE_EXPORT_DIRECTORY*)RVA(rva_start);

  Module = (char*)RVA(pe_exports->Name);
  TRACE(win32,"*******EXPORT DATA*******\n");
  TRACE(win32,"Module name is %s, %ld functions, %ld names\n", 
               Module, pe_exports->NumberOfFunctions, pe_exports->NumberOfNames);

  ordinal=(u_short*) RVA(pe_exports->AddressOfNameOrdinals);
  functions=function=(u_long*) RVA(pe_exports->AddressOfFunctions);
  name=(u_char**) RVA(pe_exports->AddressOfNames);

  TRACE(win32," Ord    RVA     Addr   Name\n" );
  for (i=0;i<pe_exports->NumberOfFunctions;i++, function++)
  {
      if (!*function) continue;  /* No such function */
      if (TRACE_ON(win32)){
        dbg_decl_str(win32, 1024);

        dsprintf(win32,"%4ld %08lx %08x",
                 i + pe_exports->Base, *function, RVA(*function) );
        /* Check if we have a name for it */
        for (j = 0; j < pe_exports->NumberOfNames; j++)
          if (ordinal[j] == i)
            dsprintf(win32, "  %s", (char*)RVA(name[j]) );
        if ((*function >= rva_start) && (*function <= rva_end))
          dsprintf(win32, " (forwarded -> %s)", (char *)RVA(*function));
        TRACE(win32,"%s\n", dbg_str(win32));
      }
  }
}

/* Look up the specified function or ordinal in the exportlist:
 * If it is a string:
 *      - look up the name in the Name list. 
 *      - look up the ordinal with that index.
 *      - use the ordinal as offset into the functionlist
 * If it is a ordinal:
 *      - use ordinal-pe_export->Base as offset into the functionlist
 */
FARPROC32 PE_FindExportedFunction( 
        PDB32 *process,         /* [in] process context */
        WINE_MODREF *wm,        /* [in] WINE modreference */
        LPCSTR funcName,        /* [in] function name */
        BOOL32 snoop )
{
        u_short                         * ordinal;
        u_long                          * function;
        u_char                          ** name, *ename;
        int                             i;
        PE_MODREF                       *pem = &(wm->binfmt.pe);
        IMAGE_EXPORT_DIRECTORY          *exports = pem->pe_export;
        unsigned int                    load_addr = wm->module;
        u_long                          rva_start, rva_end, addr;
        char                            * forward;

        if (HIWORD(funcName))
                TRACE(win32,"(%s)\n",funcName);
        else
                TRACE(win32,"(%d)\n",(int)funcName);
        if (!exports) {
                /* Not a fatal problem, some apps do
                 * GetProcAddress(0,"RegisterPenApp") which triggers this
                 * case.
                 */
                WARN(win32,"Module %08x(%s)/MODREF %p doesn't have a exports table.\n",wm->module,wm->modname,pem);
                return NULL;
        }
        ordinal = (u_short*)  RVA(exports->AddressOfNameOrdinals);
        function= (u_long*)   RVA(exports->AddressOfFunctions);
        name    = (u_char **) RVA(exports->AddressOfNames);
        forward = NULL;
        rva_start = PE_HEADER(wm->module)->OptionalHeader
                .DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].VirtualAddress;
        rva_end = rva_start + PE_HEADER(wm->module)->OptionalHeader
                .DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].Size;

        if (HIWORD(funcName)) {
                for(i=0; i<exports->NumberOfNames; i++) {
                        ename=(char*)RVA(*name);
                        if(!strcmp(ename,funcName))
                        {
                            addr = function[*ordinal];
                            if (!addr) return NULL;
                            if ((addr < rva_start) || (addr >= rva_end))
                                return snoop? SNOOP_GetProcAddress32(wm->module,ename,*ordinal,(FARPROC32)RVA(addr))
                                            : (FARPROC32)RVA(addr);
                            forward = (char *)RVA(addr);
                            break;
                        }
                        ordinal++;
                        name++;
                }
        } else  {
                int i;
                if (LOWORD(funcName)-exports->Base > exports->NumberOfFunctions) {
                        TRACE(win32,"   ordinal %d out of range!\n",
                                      LOWORD(funcName));
                        return NULL;
                }
                addr = function[(int)funcName-exports->Base];
                if (!addr) return NULL;
                ename = "";
                if (name) {
                    for (i=0;i<exports->NumberOfNames;i++) {
                            ename = (char*)RVA(*name);
                            if (*ordinal == LOWORD(funcName)-exports->Base)
                                break;
                            ordinal++;
                            name++;
                    }
                    if (i==exports->NumberOfNames)
                        ename = "";
                }
                if ((addr < rva_start) || (addr >= rva_end))
                        return snoop? SNOOP_GetProcAddress32(wm->module,ename,(DWORD)funcName-exports->Base,(FARPROC32)RVA(addr))
                                    : (FARPROC32)RVA(addr);
                forward = (char *)RVA(addr);
        }
        if (forward)
        {
                HMODULE32 hMod;
                char module[256];
                char *end = strchr(forward, '.');

                if (!end) return NULL;
                assert(end-forward<256);
                strncpy(module, forward, (end - forward));
                module[end-forward] = 0;
                hMod = MODULE_FindModule32(process,module);
                assert(hMod);
                return MODULE_GetProcAddress32( process, hMod, end + 1, snoop );
        }
        return NULL;
}

DWORD fixup_imports (PDB32 *process,WINE_MODREF *wm)
{
    IMAGE_IMPORT_DESCRIPTOR     *pe_imp;
    WINE_MODREF                 *xwm;
    PE_MODREF                   *pem;
    unsigned int load_addr      = wm->module;
    int                         i,characteristics_detection=1;
    char                        *modname;
    
    assert(wm->type==MODULE32_PE);
    pem = &(wm->binfmt.pe);
    if (pem->pe_export)
        modname = (char*) RVA(pem->pe_export->Name);
    else
        modname = "<unknown>";

    /* OK, now dump the import list */
    TRACE(win32, "Dumping imports list\n");

    /* first, count the number of imported non-internal modules */
    pe_imp = pem->pe_import;
    if (!pe_imp) 
        ERR(win32, "no import directory????\n");

    /* We assume that we have at least one import with !0 characteristics and
     * detect broken imports with all characteristsics 0 (notably Borland) and
     * switch the detection off for them.
     */
    for (i = 0; pe_imp->Name ; pe_imp++) {
        if (!i && !pe_imp->u.Characteristics)
                characteristics_detection = 0;
        if (characteristics_detection && !pe_imp->u.Characteristics)
                break;
        i++;
    }

    /* Allocate module dependency list */
    wm->nDeps = i;
    wm->deps  = HeapAlloc(process->heap, 0, i*sizeof(WINE_MODREF *));

    /* load the imported modules. They are automatically 
     * added to the modref list of the process.
     */
 
    for (i = 0, pe_imp = pem->pe_import; pe_imp->Name ; pe_imp++) {
        HMODULE32               hImpModule;
        IMAGE_IMPORT_BY_NAME    *pe_name;
        PIMAGE_THUNK_DATA       import_list,thunk_list;
        char                    *name = (char *) RVA(pe_imp->Name);

        if (characteristics_detection && !pe_imp->u.Characteristics)
                break;

        /* don't use MODULE_Load, Win32 creates new task differently */
        hImpModule = MODULE_LoadLibraryEx32A( name, process, 0, 0 );
        if (!hImpModule) {
            char *p,buffer[2000];
            
            /* GetModuleFileName would use the wrong process, so don't use it */
            strcpy(buffer,wm->shortname);
            if (!(p = strrchr (buffer, '\\')))
                p = buffer;
            strcpy (p + 1, name);
            hImpModule = MODULE_LoadLibraryEx32A( buffer, process, 0, 0 );
        }
        if (!hImpModule) {
            ERR (module, "Module %s not found\n", name);
            return 1;
        }
        xwm = MODULE32_LookupHMODULE(process, hImpModule);
        assert( xwm );
        wm->deps[i++] = xwm;

        /* FIXME: forwarder entries ... */

        if (pe_imp->u.OriginalFirstThunk != 0) { /* original MS style */
            TRACE(win32, "Microsoft style imports used\n");
            import_list =(PIMAGE_THUNK_DATA) RVA(pe_imp->u.OriginalFirstThunk);
            thunk_list = (PIMAGE_THUNK_DATA) RVA(pe_imp->FirstThunk);

            while (import_list->u1.Ordinal) {
                if (IMAGE_SNAP_BY_ORDINAL(import_list->u1.Ordinal)) {
                    int ordinal = IMAGE_ORDINAL(import_list->u1.Ordinal);

                    TRACE(win32, "--- Ordinal %s,%d\n", name, ordinal);
                    thunk_list->u1.Function=MODULE_GetProcAddress32(
                        process, hImpModule, (LPCSTR)ordinal, TRUE
                    );
                    if (!thunk_list->u1.Function) {
                        ERR(win32,"No implementation for %s.%d, setting to 0xdeadbeef\n",
                                name, ordinal);
                        thunk_list->u1.Function = (FARPROC32)0xdeadbeef;
                    }
                } else {                /* import by name */
                    pe_name = (PIMAGE_IMPORT_BY_NAME)RVA(import_list->u1.AddressOfData);
                    TRACE(win32, "--- %s %s.%d\n", pe_name->Name, name, pe_name->Hint);
                    thunk_list->u1.Function=MODULE_GetProcAddress32(
                        process, hImpModule, pe_name->Name, TRUE
                    );
                    if (!thunk_list->u1.Function) {
                        ERR(win32,"No implementation for %s.%d(%s), setting to 0xdeadbeef\n",
                                name,pe_name->Hint,pe_name->Name);
                        thunk_list->u1.Function = (FARPROC32)0xdeadbeef;
                    }
                }
                import_list++;
                thunk_list++;
            }
        } else {        /* Borland style */
            TRACE(win32, "Borland style imports used\n");
            thunk_list = (PIMAGE_THUNK_DATA) RVA(pe_imp->FirstThunk);
            while (thunk_list->u1.Ordinal) {
                if (IMAGE_SNAP_BY_ORDINAL(thunk_list->u1.Ordinal)) {
                    /* not sure about this branch, but it seems to work */
                    int ordinal = IMAGE_ORDINAL(thunk_list->u1.Ordinal);

                    TRACE(win32,"--- Ordinal %s.%d\n",name,ordinal);
                    thunk_list->u1.Function=MODULE_GetProcAddress32(
                        process, hImpModule, (LPCSTR) ordinal, TRUE
                    );
                    if (!thunk_list->u1.Function) {
                        ERR(win32, "No implementation for %s.%d, setting to 0xdeadbeef\n",
                                name,ordinal);
                        thunk_list->u1.Function = (FARPROC32)0xdeadbeef;
                    }
                } else {
                    pe_name=(PIMAGE_IMPORT_BY_NAME) RVA(thunk_list->u1.AddressOfData);
                    TRACE(win32,"--- %s %s.%d\n",
                                  pe_name->Name,name,pe_name->Hint);
                    thunk_list->u1.Function=MODULE_GetProcAddress32(
                        process, hImpModule, pe_name->Name, TRUE
                    );
                    if (!thunk_list->u1.Function) {
                        ERR(win32, "No implementation for %s.%d, setting to 0xdeadbeef\n",
                                name, pe_name->Hint);
                        thunk_list->u1.Function = (FARPROC32)0xdeadbeef;
                    }
                }
                thunk_list++;
            }
        }
    }
    return 0;
}

static int calc_vma_size( HMODULE32 hModule )
{
    int i,vma_size = 0;
    IMAGE_SECTION_HEADER *pe_seg = PE_SECTIONS(hModule);

    TRACE(win32, "Dump of segment table\n");
    TRACE(win32, "   Name    VSz  Vaddr     SzRaw   Fileadr  *Reloc *Lineum #Reloc #Linum Char\n");
    for (i = 0; i< PE_HEADER(hModule)->FileHeader.NumberOfSections; i++)
    {
        TRACE(win32, "%8s: %4.4lx %8.8lx %8.8lx %8.8lx %8.8lx %8.8lx %4.4x %4.4x %8.8lx\n", 
                      pe_seg->Name, 
                      pe_seg->Misc.VirtualSize,
                      pe_seg->VirtualAddress,
                      pe_seg->SizeOfRawData,
                      pe_seg->PointerToRawData,
                      pe_seg->PointerToRelocations,
                      pe_seg->PointerToLinenumbers,
                      pe_seg->NumberOfRelocations,
                      pe_seg->NumberOfLinenumbers,
                      pe_seg->Characteristics);
        vma_size=MAX(vma_size, pe_seg->VirtualAddress+pe_seg->SizeOfRawData);
        vma_size=MAX(vma_size, pe_seg->VirtualAddress+pe_seg->Misc.VirtualSize);
        pe_seg++;
    }
    return vma_size;
}

static void do_relocations( unsigned int load_addr, IMAGE_BASE_RELOCATION *r )
{
    int delta = load_addr - PE_HEADER(load_addr)->OptionalHeader.ImageBase;
    int hdelta = (delta >> 16) & 0xFFFF;
    int ldelta = delta & 0xFFFF;

        if(delta == 0)
                /* Nothing to do */
                return;
        while(r->VirtualAddress)
        {
                char *page = (char*) RVA(r->VirtualAddress);
                int count = (r->SizeOfBlock - 8)/2;
                int i;
                TRACE(fixup, "%x relocations for page %lx\n",
                        count, r->VirtualAddress);
                /* patching in reverse order */
                for(i=0;i<count;i++)
                {
                        int offset = r->TypeOffset[i] & 0xFFF;
                        int type = r->TypeOffset[i] >> 12;
                        TRACE(fixup,"patching %x type %x\n", offset, type);
                        switch(type)
                        {
                        case IMAGE_REL_BASED_ABSOLUTE: break;
                        case IMAGE_REL_BASED_HIGH:
                                *(short*)(page+offset) += hdelta;
                                break;
                        case IMAGE_REL_BASED_LOW:
                                *(short*)(page+offset) += ldelta;
                                break;
                        case IMAGE_REL_BASED_HIGHLOW:
#if 1
                                *(int*)(page+offset) += delta;
#else
                                { int h=*(unsigned short*)(page+offset);
                                  int l=r->TypeOffset[++i];
                                  *(unsigned int*)(page + offset) = (h<<16) + l + delta;
                                }
#endif
                                break;
                        case IMAGE_REL_BASED_HIGHADJ:
                                FIXME(win32, "Don't know what to do with IMAGE_REL_BASED_HIGHADJ\n");
                                break;
                        case IMAGE_REL_BASED_MIPS_JMPADDR:
                                FIXME(win32, "Is this a MIPS machine ???\n");
                                break;
                        default:
                                FIXME(win32, "Unknown fixup type\n");
                                break;
                        }
                }
                r = (IMAGE_BASE_RELOCATION*)((char*)r + r->SizeOfBlock);
        }
}
                

        
        

/**********************************************************************
 *                      PE_LoadImage
 * Load one PE format DLL/EXE into memory
 * 
 * Unluckily we can't just mmap the sections where we want them, for 
 * (at least) Linux does only support offsets which are page-aligned.
 *
 * BUT we have to map the whole image anyway, for Win32 programs sometimes
 * want to access them. (HMODULE32 point to the start of it)
 */
static HMODULE32 PE_LoadImage( LPCSTR name, OFSTRUCT *ofs, LPCSTR *modName )
{
    HMODULE32   hModule;
    HFILE32     hFile;
    HANDLE32    mapping;

    IMAGE_NT_HEADERS *nt;
    IMAGE_SECTION_HEADER *pe_sec;
    IMAGE_DATA_DIRECTORY *dir;
    BY_HANDLE_FILE_INFORMATION bhfi;
    int i, rawsize, lowest_va, lowest_fa, vma_size, file_size = 0;
    DWORD load_addr, aoep, reloc = 0;
    char dllname[256], *p;

    /* Append .DLL to name if no extension present */
    strcpy( dllname, name );
    if ((p = strrchr( dllname, '\\' ))) p++; else p = dllname;
    if (!strchr( p, '.' )) strcat( dllname, ".DLL" ); 

    /* Open PE file */
    hFile = OpenFile32( dllname, ofs, OF_READ | OF_SHARE_DENY_WRITE );
    if ( hFile == HFILE_ERROR32 )
    {
        WARN( win32, "OpenFile error %ld\n", GetLastError() );
        return 2;
    }

    /* Retrieve file size */
    if ( GetFileInformationByHandle( hFile, &bhfi ) ) 
        file_size = bhfi.nFileSizeLow; /* FIXME: 64 bit */

    /* Map the PE file somewhere */
    mapping = CreateFileMapping32A( hFile, NULL, PAGE_READONLY | SEC_COMMIT,
                                    0, 0, NULL );
    CloseHandle( hFile );
    if (!mapping)
    {
        WARN( win32, "CreateFileMapping error %ld\n", GetLastError() );
        return 0;
    }
    hModule = (HMODULE32)MapViewOfFile( mapping, FILE_MAP_READ, 0, 0, 0 );
    CloseHandle( mapping );
    if (!hModule)
    {
        WARN( win32, "MapViewOfFile error %ld\n", GetLastError() );
        return 0;
    }
    nt = PE_HEADER( hModule );

    /* Check signature */
    if ( nt->Signature != IMAGE_NT_SIGNATURE )
    {
        WARN(win32, "image doesn't have PE signature, but 0x%08lx\n",
                    nt->Signature );
        goto error;
    }

    /* Check architecture */
    if ( nt->FileHeader.Machine != IMAGE_FILE_MACHINE_I386 )
    {
        MSG("Trying to load PE image for unsupported architecture (");
        switch (nt->FileHeader.Machine)
        {
        case IMAGE_FILE_MACHINE_UNKNOWN: MSG("Unknown"); break;
        case IMAGE_FILE_MACHINE_I860:    MSG("I860"); break;
        case IMAGE_FILE_MACHINE_R3000:   MSG("R3000"); break;
        case IMAGE_FILE_MACHINE_R4000:   MSG("R4000"); break;
        case IMAGE_FILE_MACHINE_R10000:  MSG("R10000"); break;
        case IMAGE_FILE_MACHINE_ALPHA:   MSG("Alpha"); break;
        case IMAGE_FILE_MACHINE_POWERPC: MSG("PowerPC"); break;
        default: MSG("Unknown-%04x", nt->FileHeader.Machine); break;
        }
        MSG(")\n");
        goto error;
    }

    /* Find out how large this executeable should be */
    pe_sec = PE_SECTIONS( hModule );
    rawsize = 0; lowest_va = 0x10000; lowest_fa = 0x10000;
    for (i = 0; i < nt->FileHeader.NumberOfSections; i++) 
    {
        if (lowest_va > pe_sec[i].VirtualAddress)
           lowest_va = pe_sec[i].VirtualAddress;
        if (pe_sec[i].Characteristics & IMAGE_SCN_CNT_UNINITIALIZED_DATA)
            continue;
        if (pe_sec[i].PointerToRawData < lowest_fa)
            lowest_fa = pe_sec[i].PointerToRawData;
        if (pe_sec[i].PointerToRawData+pe_sec[i].SizeOfRawData > rawsize)
            rawsize = pe_sec[i].PointerToRawData+pe_sec[i].SizeOfRawData;
    }
 
    /* Check file size */
    if ( file_size && file_size < rawsize )
    {
        ERR( win32, "PE module is too small (header: %d, filesize: %d), "
                    "probably truncated download?\n", 
                    rawsize, file_size );
        goto error;
    }

    /* Check entrypoint address */
    aoep = nt->OptionalHeader.AddressOfEntryPoint;
    if (aoep && (aoep < lowest_va))
        FIXME( win32, "WARNING: '%s' has an invalid entrypoint (0x%08lx) "
                      "below the first virtual address (0x%08x) "
                      "(possible Virus Infection or broken binary)!\n",
                       ofs->szPathName, aoep, lowest_va );


    /* Allocate memory for module */
    load_addr = nt->OptionalHeader.ImageBase;
    vma_size = calc_vma_size( hModule );

    load_addr = (DWORD)VirtualAlloc( (void*)load_addr, vma_size,
                                     MEM_RESERVE | MEM_COMMIT,
                                     PAGE_EXECUTE_READWRITE );
    if (load_addr == 0) 
    {
        /* We need to perform base relocations */
        dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_BASERELOC;
        if (dir->Size)
            reloc = dir->VirtualAddress;
        else 
        {
            FIXME( win32,
                   "Need to relocate %s, but no relocation records present (%s).\n",
                   ofs->szPathName,
                   (nt->FileHeader.Characteristics&IMAGE_FILE_RELOCS_STRIPPED)?
                   "stripped during link" : "unknown reason" );
            goto error;
        }

        load_addr = (DWORD)VirtualAlloc( NULL, vma_size,
                                         MEM_RESERVE | MEM_COMMIT,
                                         PAGE_EXECUTE_READWRITE );
    }

    TRACE( win32, "Load addr is %lx (base %lx), range %x\n",
                  load_addr, nt->OptionalHeader.ImageBase, vma_size );
    TRACE( segment, "Loading %s at %lx, range %x\n",
                    ofs->szPathName, load_addr, vma_size );

    /* Store the NT header at the load addr */
    *(PIMAGE_DOS_HEADER)load_addr = *(PIMAGE_DOS_HEADER)hModule;
    *PE_HEADER( load_addr ) = *nt;
    memcpy( PE_SECTIONS(load_addr), PE_SECTIONS(hModule),
            sizeof(IMAGE_SECTION_HEADER) * nt->FileHeader.NumberOfSections );
#if 0
    /* Copies all stuff up to the first section. Including win32 viruses. */
    memcpy( load_addr, hModule, lowest_fa );
#endif

    /* Copy sections into module image */
    pe_sec = PE_SECTIONS( hModule );
    for (i = 0; i < nt->FileHeader.NumberOfSections; i++, pe_sec++)
    {
        /* memcpy only non-BSS segments */
        /* FIXME: this should be done by mmap(..MAP_PRIVATE|MAP_FIXED..)
         * but it is not possible for (at least) Linux needs
         * a page-aligned offset.
         */
        if(!(pe_sec->Characteristics & IMAGE_SCN_CNT_UNINITIALIZED_DATA))
            memcpy((char*)RVA(pe_sec->VirtualAddress),
                   (char*)(hModule + pe_sec->PointerToRawData),
                   pe_sec->SizeOfRawData);
#if 0
        /* not needed, memory is zero */
        if(strcmp(pe_sec->Name, ".bss") == 0)
            memset((void *)RVA(pe_sec->VirtualAddress), 0, 
                   pe_sec->Misc.VirtualSize ?
                   pe_sec->Misc.VirtualSize :
                   pe_sec->SizeOfRawData);
#endif
    }

    /* Perform base relocation, if necessary */
    if ( reloc )
        do_relocations( load_addr, (IMAGE_BASE_RELOCATION *)RVA(reloc) );

    /* Get module name */
    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_EXPORT;
    if (dir->Size)
        *modName = (LPCSTR)RVA(((PIMAGE_EXPORT_DIRECTORY)RVA(dir->VirtualAddress))->Name);

    /* We don't need the orignal mapping any more */
    UnmapViewOfFile( (LPVOID)hModule );
    return (HMODULE32)load_addr;

error:
    UnmapViewOfFile( (LPVOID)hModule );
    return 0;
}

/**********************************************************************
 *                 PE_CreateModule
 *
 * Create WINE_MODREF structure for loaded HMODULE32, link it into
 * process modref_list, and fixup all imports.
 *
 * Note: hModule must point to a correctly allocated PE image,
 *       with base relocations applied; the 16-bit dummy module
 *       associated to hModule must already exist.
 */
static WINE_MODREF *PE_CreateModule( PDB32 *process, HMODULE32 hModule, 
                                     OFSTRUCT *ofs, DWORD flags, BOOL32 builtin )
{
    DWORD load_addr = (DWORD)hModule;  /* for RVA */
    IMAGE_NT_HEADERS *nt = PE_HEADER(hModule);
    IMAGE_DATA_DIRECTORY *dir;
    IMAGE_IMPORT_DESCRIPTOR *pe_import = NULL;
    IMAGE_EXPORT_DIRECTORY *pe_export = NULL;
    IMAGE_RESOURCE_DIRECTORY *pe_resource = NULL;
    WINE_MODREF *wm;
    int result;
    char *modname;


    /* Retrieve DataDirectory entries */

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_EXPORT;
    if (dir->Size)
        pe_export = (PIMAGE_EXPORT_DIRECTORY)RVA(dir->VirtualAddress);

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_IMPORT;
    if (dir->Size)
        pe_import = (PIMAGE_IMPORT_DESCRIPTOR)RVA(dir->VirtualAddress);

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_RESOURCE;
    if (dir->Size)
        pe_resource = (PIMAGE_RESOURCE_DIRECTORY)RVA(dir->VirtualAddress);

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_EXCEPTION;
    if (dir->Size) FIXME( win32, "Exception directory ignored\n" );

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_SECURITY;
    if (dir->Size) FIXME( win32, "Security directory ignored\n" );

    /* IMAGE_DIRECTORY_ENTRY_BASERELOC handled in PE_LoadImage */
    /* IMAGE_DIRECTORY_ENTRY_DEBUG handled by debugger */

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_DEBUG;
    if (dir->Size) TRACE( win32, "Debug directory ignored\n" );

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_COPYRIGHT;
    if (dir->Size) FIXME( win32, "Copyright string ignored\n" );

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_GLOBALPTR;
    if (dir->Size) FIXME( win32, "Global Pointer (MIPS) ignored\n" );

    /* IMAGE_DIRECTORY_ENTRY_TLS handled in PE_TlsInit */

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG;
    if (dir->Size) FIXME (win32, "Load Configuration directory ignored\n" );

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT;
    if (dir->Size) TRACE( win32, "Bound Import directory ignored\n" );

    dir = nt->OptionalHeader.DataDirectory+IMAGE_DIRECTORY_ENTRY_IAT;
    if (dir->Size) TRACE( win32, "Import Address Table directory ignored\n" );

    dir = nt->OptionalHeader.DataDirectory+13;
    if (dir->Size) FIXME( win32, "Unknown directory 13 ignored\n" );

    dir = nt->OptionalHeader.DataDirectory+14;
    if (dir->Size) FIXME( win32, "Unknown directory 14 ignored\n" );

    dir = nt->OptionalHeader.DataDirectory+15;
    if (dir->Size) FIXME( win32, "Unknown directory 15 ignored\n" );


    /* Allocate and fill WINE_MODREF */

    wm = (WINE_MODREF *)HeapAlloc( process->heap, HEAP_ZERO_MEMORY, sizeof(*wm) );
    wm->module = hModule;

    wm->type = MODULE32_PE;
    wm->binfmt.pe.flags = builtin? PE_MODREF_INTERNAL : 0;
    wm->binfmt.pe.pe_export = pe_export;
    wm->binfmt.pe.pe_import = pe_import;
    wm->binfmt.pe.pe_resource = pe_resource;

    if ( pe_export ) 
        modname = (char *)RVA( pe_export->Name );
    else 
    {
        /* try to find out the name from the OFSTRUCT */
        char *s;
        modname = ofs->szPathName;
        while ((s=strchr(modname,'\\')))
            modname = s+1;
    }
    wm->modname = HEAP_strdupA( process->heap, 0, modname );

    result = GetLongPathName32A( ofs->szPathName, NULL, 0 );
    wm->longname = (char *)HeapAlloc( process->heap, 0, result+1 );
    GetLongPathName32A( ofs->szPathName, wm->longname, result+1 );

    wm->shortname = HEAP_strdupA( process->heap, 0, ofs->szPathName );

    /* Link MODREF into process list */

    wm->next = process->modref_list;
    process->modref_list = wm;

    if ( !(nt->FileHeader.Characteristics & IMAGE_FILE_DLL) )
    {
        if ( process->exe_modref )
            FIXME( win32, "overwriting old exe_modref... arrgh\n" );
        process->exe_modref = wm;
    }

    /* Dump Exports */

    if ( pe_export )
        dump_exports( hModule );

    /* Fixup Imports */

    if ( pe_import && fixup_imports( process, wm ) ) 
    {
        /* remove entry from modref chain */
        WINE_MODREF **xwm;
        for ( xwm = &process->modref_list; *xwm; xwm = &(*xwm)->next )
            if ( *xwm == wm )
            {
                *xwm = wm->next;
                break;
            }
        /* FIXME: there are several more dangling references
         * left. Including dlls loaded by this dll before the
         * failed one. Unrolling is rather difficult with the
         * current structure and we can leave it them lying
         * around with no problems, so we don't care.
         * As these might reference our wm, we don't free it.
         */
         return NULL;
    }

    return wm;
}

/******************************************************************************
 * The PE Library Loader frontend. 
 * FIXME: handle the flags.
 */
HMODULE32 PE_LoadLibraryEx32A (LPCSTR name, PDB32 *process,
                               HFILE32 hFile, DWORD flags)
{
    LPCSTR      modName = NULL;
    OFSTRUCT    ofs;
    HMODULE32   hModule32;
    HMODULE16   hModule16;
    NE_MODULE   *pModule;
    WINE_MODREF *wm;
    BOOL32      builtin;

    /* Check for already loaded module */
    if ((hModule32 = MODULE_FindModule32( process, name ))) 
        return hModule32;

    /* try to load builtin, enabled modules first */
    if ((hModule32 = BUILTIN32_LoadImage( name, &ofs, FALSE )))
        builtin = TRUE;
    /* try to load the specified dll/exe */
    else if ((hModule32 = PE_LoadImage( name, &ofs, &modName )) >= 32)
        builtin = FALSE;
    /* Now try the built-in even if disabled */
    else if ((hModule32 = BUILTIN32_LoadImage( name, &ofs, TRUE ))) 
    {
        WARN( module, "Could not load external DLL '%s', using built-in module.\n", name );
        builtin = TRUE;
    }
    else
        return 0;

    /* Create 16-bit dummy module */
    if ((hModule16 = MODULE_CreateDummyModule( &ofs, modName )) < 32) return hModule16;
    pModule = (NE_MODULE *)GlobalLock16( hModule16 );
    pModule->flags    = NE_FFLAGS_LIBMODULE | NE_FFLAGS_SINGLEDATA |
                        NE_FFLAGS_WIN32 | (builtin? NE_FFLAGS_BUILTIN : 0);
    pModule->module32 = hModule32;

    /* Create 32-bit MODREF */
    if ( !(wm = PE_CreateModule( process, hModule32, &ofs, flags, builtin )) )
    {
        ERR(win32,"can't load %s\n",ofs.szPathName);
        FreeLibrary16( hModule16 );
        return 0;
    }

    if (wm->binfmt.pe.pe_export)
        SNOOP_RegisterDLL(wm->module,wm->modname,wm->binfmt.pe.pe_export->NumberOfFunctions);

    return wm->module;
}

/*****************************************************************************
 * Load the PE main .EXE. All other loading is done by PE_LoadLibraryEx32A
 * FIXME: this function should use PE_LoadLibraryEx32A, but currently can't
 * due to the PROCESS_Create stuff.
 */
HINSTANCE16 PE_CreateProcess( LPCSTR name, LPCSTR cmd_line,
                              LPCSTR env, BOOL32 inherit, LPSTARTUPINFO32A startup,
                              LPPROCESS_INFORMATION info )
{
    LPCSTR modName = NULL;
    HMODULE16 hModule16;
    HMODULE32 hModule32;
    HINSTANCE16 hInstance;
    NE_MODULE *pModule;
    OFSTRUCT ofs;
    PDB32 *process;
    TDB *pTask;
    WINE_MODREF *wm;

    /* Load file */
    if ((hModule32 = PE_LoadImage( name, &ofs, &modName )) < 32)
        return hModule32;
#if 0
    if (PE_HEADER(hModule32)->FileHeader.Characteristics & IMAGE_FILE_DLL)
        return 20;  /* FIXME: not the right error code */
#endif

    /* Create 16-bit dummy module */
    if ((hModule16 = MODULE_CreateDummyModule( &ofs, modName )) < 32) return hModule16;
    pModule = (NE_MODULE *)GlobalLock16( hModule16 );
    pModule->flags    = NE_FFLAGS_WIN32;
    pModule->module32 = hModule32;

    /* Create new process */
    hInstance = NE_CreateInstance( pModule, NULL, FALSE );
    process = PROCESS_Create( pModule, cmd_line, env,
                              hInstance, 0, inherit, startup, info );

    /* Create 32-bit MODREF */
    if ( !(wm = PE_CreateModule( process, hModule32, &ofs, 0, FALSE )) )
    {
        /* FIXME: should destroy the task created and free referenced stuff */
        return 0;
    }

    /* FIXME: Yuck. Is there no other good place to do that? */
    pTask = (TDB *)GlobalLock16( process->task );
    PE_InitTls( pTask->thdb );

    return hInstance;
}

/*********************************************************************
 * PE_UnloadImage [internal]
 */
int PE_UnloadImage( HMODULE32 hModule )
{
        FIXME(win32,"stub.\n");
        /* free resources, image, unmap */
        return 1;
}

/* Called if the library is loaded or freed.
 * NOTE: if a thread attaches a DLL, the current thread will only do
 * DLL_PROCESS_ATTACH. Only new created threads do DLL_THREAD_ATTACH
 * (SDK)
 */
void PE_InitDLL(WINE_MODREF *wm, DWORD type, LPVOID lpReserved)
{
    if (wm->type!=MODULE32_PE)
        return;
    if (wm->binfmt.pe.flags & PE_MODREF_NO_DLL_CALLS)
        return;
    if (type==DLL_PROCESS_ATTACH)
    {
        if (wm->binfmt.pe.flags & PE_MODREF_PROCESS_ATTACHED)
            return;

        wm->binfmt.pe.flags |= PE_MODREF_PROCESS_ATTACHED;
    }

    /*  DLL_ATTACH_PROCESS:
     *          lpreserved is NULL for dynamic loads, not-NULL for static loads
     *  DLL_DETACH_PROCESS:
     *          lpreserved is NULL if called by FreeLibrary, not-NULL otherwise
     *  the SDK doesn't mention anything for DLL_THREAD_*
     */
        
    /* Is this a library? And has it got an entrypoint? */
    if ((PE_HEADER(wm->module)->FileHeader.Characteristics & IMAGE_FILE_DLL) &&
        (PE_HEADER(wm->module)->OptionalHeader.AddressOfEntryPoint)
    ) {
        DLLENTRYPROC32 entry = (void*)RVA_PTR( wm->module,OptionalHeader.AddressOfEntryPoint );
        TRACE(relay, "CallTo32(entryproc=%p,module=%08x,type=%ld,res=%p)\n",
                       entry, wm->module, type, lpReserved );

        entry( wm->module, type, lpReserved );
    }
}

/************************************************************************
 *      PE_InitTls                      (internal)
 *
 * If included, initialises the thread local storages of modules.
 * Pointers in those structs are not RVAs but real pointers which have been
 * relocated by do_relocations() already.
 */
void PE_InitTls(THDB *thdb)
{
        WINE_MODREF             *wm;
        PE_MODREF               *pem;
        IMAGE_NT_HEADERS        *peh;
        DWORD                   size,datasize;
        LPVOID                  mem;
        PIMAGE_TLS_DIRECTORY    pdir;
        PDB32                   *pdb = thdb->process;
        int delta;
        
        for (wm = pdb->modref_list;wm;wm=wm->next) {
                if (wm->type!=MODULE32_PE)
                        continue;
                pem = &(wm->binfmt.pe);
                peh = PE_HEADER(wm->module);
                delta = wm->module - peh->OptionalHeader.ImageBase;
                if (!peh->OptionalHeader.DataDirectory[IMAGE_FILE_THREAD_LOCAL_STORAGE].VirtualAddress)
                        continue;
                pdir = (LPVOID)(wm->module + peh->OptionalHeader.
                        DataDirectory[IMAGE_FILE_THREAD_LOCAL_STORAGE].VirtualAddress);
                
                
                if (!(pem->flags & PE_MODREF_TLS_ALLOCED)) {
                        pem->tlsindex = THREAD_TlsAlloc(thdb);
                        *pdir->AddressOfIndex=pem->tlsindex;   
                }
                pem->flags |= PE_MODREF_TLS_ALLOCED;
                datasize= pdir->EndAddressOfRawData-pdir->StartAddressOfRawData;
                size    = datasize + pdir->SizeOfZeroFill;
                mem=VirtualAlloc(0,size,MEM_RESERVE|MEM_COMMIT,PAGE_READWRITE);
                memcpy(mem,(LPVOID)pdir->StartAddressOfRawData,datasize);
                if (pdir->AddressOfCallBacks) {
                     PIMAGE_TLS_CALLBACK *cbs = 
                       (PIMAGE_TLS_CALLBACK *)pdir->AddressOfCallBacks;

                     if (*cbs)
                       FIXME(win32, "TLS Callbacks aren't going to be called\n");
                }
                /* Don't use TlsSetValue, we are in the wrong thread */
                thdb->tls_array[pem->tlsindex] = mem;
        }
}

/****************************************************************************
 *              DisableThreadLibraryCalls (KERNEL32.74)
 * Don't call DllEntryPoint for DLL_THREAD_{ATTACH,DETACH} if set.
 */
BOOL32 WINAPI DisableThreadLibraryCalls(HMODULE32 hModule)
{
        WINE_MODREF     *wm;

        for (wm=PROCESS_Current()->modref_list;wm;wm=wm->next)
                if ((wm->module == hModule) && (wm->type==MODULE32_PE))
                        wm->binfmt.pe.flags|=PE_MODREF_NO_DLL_CALLS;
        return TRUE;
}