XexLoadImage :: typeInfo ?

[Dwack]

I was just wondering if any one had any information on the xexloadimage typeInfo argument?

I've seen 8 and 9 but was just wondering what the uses for each was.

Thanks in advance!
-Dwack

[cory1492]

No, you haven't seen 8 and 9... you've seen bitfield flags, thus you've seen 0x8 and (0x8|0x1). 0x8 = dll, 0x1 = title process. If you were really looking, you'd have seen 0x40000000 as well, which is 'bind to path'.

[Dwack]

0x40000000 was also another one I had noticed while looking threw a few log files I had created while hooking load image.

8/9 were the two I saw the most which is why I asked about them in particular. (Just by launching the usual games I play)

I guess I should have figured they were some kind of bitfield flag value. Thanks for your response though. I got another response in a PM from another member with a full list of all the values.

So if a mod sees this thread it may be closed.

[stoker25]

not sure why stuff like this hasn't been made public already...

Code:

enum XEX_MODULE_FLAG
{
XEX_MODULE_FLAG_TITLE_PROCESS = 0x1,
XEX_MODULE_FLAG_TITLE_IMPORTS = 0x2,
XEX_MODULE_FLAG_DEBUGGER = 0x4,
XEX_MODULE_FLAG_DLL = 0x8,
XEX_MODULE_FLAG_PATCH = 0x10,
XEX_MODULE_FLAG_PATCH_FULL = 0x20,
XEX_MODULE_FLAG_PATCH_DELTA = 0x40,

XEX_MODULE_FLAG_BOUND_PATH = 0x40000000,
XEX_MODULE_FLAG_SILENT_LOAD = 0x80000000
};

NTSTATUS XexLoadImage(const char* modPath, DWORD modFlags, DWORD minVersion, HANDLE* modHandle);

enjoy