Class ImageLoadConfigDirectory

The ImageLoadConfigDirectory holds information important to load the PE file correctly.

Inheritance

object

AbstractStructure

ImageLoadConfigDirectory

Implements

IDisposable

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Namespace: PeNet.Header.Pe

Assembly: PeNet.dll

Syntax

public class ImageLoadConfigDirectory : AbstractStructure, IDisposable

Constructors

| Edit this page View Source

ImageLoadConfigDirectory(IRawFile, long, bool)

Create a new ImageLoadConfigDirectory object.

Declaration

public ImageLoadConfigDirectory(IRawFile peFile, long offset, bool is64Bit)

Parameters

Type	Name	Description
IRawFile	peFile	A PE file.
long	offset	Offset of the structure in the buffer.
bool	is64Bit	Flag if the PE file is 64 Bit.

Properties

| Edit this page View Source

CSDVersion

Service pack version.

Declaration

public ushort CSDVersion { get; set; }

Property Value

Type	Description
ushort

| Edit this page View Source

CodeIntegrity

Code integrity information.

Declaration

public IMAGE_LOAD_CONFIG_CODE_INTEGRITY CodeIntegrity { get; }

Property Value

Type	Description
IMAGE_LOAD_CONFIG_CODE_INTEGRITY

| Edit this page View Source

CriticalSectionDefaultTimeout

Default time-out value for critical sections.

Declaration

public uint CriticalSectionDefaultTimeout { get; set; }

Property Value

Type	Description
uint

| Edit this page View Source

DeCommitFreeBlockThreshold

The size of the minimum block that has to be freed before it's freed in bytes.

Declaration

public ulong DeCommitFreeBlockThreshold { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

DeCommitTotalFreeThreshold

Size of the minimum total heap memory that has to be freed before it is freed in bytes.

Declaration

public ulong DeCommitTotalFreeThreshold { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

EditList

Reserved for use by the operating system.

Declaration

public ulong EditList { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

GlobalFlagsClear

Global flags to control system behavior.

Declaration

public uint GlobalFlagsClear { get; set; }

Property Value

Type	Description
uint

| Edit this page View Source

GlobalFlagsSet

Global flags to control system behavior.

Declaration

public uint GlobalFlagsSet { get; set; }

Property Value

Type	Description
uint

| Edit this page View Source

GuardCFCheckFunctionPointer

Control flow guard (Win 8.1 and up) function pointer.

Declaration

public ulong GuardCFCheckFunctionPointer { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

GuardCFFunctionCount

Count of functions under control flow guard. Only on Win 8.1 and up.

Declaration

public ulong GuardCFFunctionCount { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

GuardCFFunctionTable

Pointer to the control flow guard function table. Only on Win 8.1 and up.

Declaration

public ulong GuardCFFunctionTable { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

GuardFlags

Flags for the control flow guard. Only on Win 8.1 and up.

Declaration

public uint GuardFlags { get; set; }

Property Value

Type	Description
uint

| Edit this page View Source

LoadConfig

Declaration

public IMAGE_LOAD_CONFIG_DIRECTORY32 LoadConfig { get; }

Property Value

Type	Description
IMAGE_LOAD_CONFIG_DIRECTORY32

| Edit this page View Source

LoadConfig64

Declaration

public IMAGE_LOAD_CONFIG_DIRECTORY64 LoadConfig64 { get; }

Property Value

Type	Description
IMAGE_LOAD_CONFIG_DIRECTORY64

| Edit this page View Source

LockPrefixTable

Virtual Address of a list with addresses where the LOCK prefix is used. Will be replaced by NOP instructions on single-processor systems. Only available on x86.

Declaration

public ulong LockPrefixTable { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

MajorVersion

Major version number.

Declaration

public ushort MajorVersion { get; set; }

Property Value

Type	Description
ushort

| Edit this page View Source

MaximumAllocationSize

The maximum allocation size in bytes. Only used for debugging purposes.

Declaration

public ulong MaximumAllocationSize { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

MinorVersion

Minor version number.

Declaration

public ushort MinorVersion { get; set; }

Property Value

Type	Description
ushort

| Edit this page View Source

PePtr

return IRawFile to support parsing PE information from the third software

Declaration

public IRawFile PePtr { get; }

Property Value

Type	Description
IRawFile

| Edit this page View Source

ProcessAffinityMask

The processor affinity mask defines on which CPU the executable should run.

Declaration

public ulong ProcessAffinityMask { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

ProcessHeapFlags

The process heap flags.

Declaration

public uint ProcessHeapFlags { get; set; }

Property Value

Type	Description
uint

| Edit this page View Source

Reserved1

Reserved for use by the operating system.

Declaration

public ushort Reserved1 { get; set; }

Property Value

Type	Description
ushort

| Edit this page View Source

Reserved2

Reserved

Declaration

public ulong Reserved2 { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

SEHandlerCount

Count of unique exception handlers in the table. Only available on x86.

Declaration

public ulong SEHandlerCount { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

SEHandlerTable

Virtual Address of a sorted table of RVAs of each valid and unique handler in the image. Only available on x86.

Declaration

public ulong SEHandlerTable { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

SecurityCookie

Pointer to a cookie used by Visual C++ or GS implementation.

Declaration

public ulong SecurityCookie { get; set; }

Property Value

Type	Description
ulong

| Edit this page View Source

Size

Size of the ImageLoadConfigDirectory structure.

Declaration

public uint Size { get; set; }

Property Value

Type	Description
uint

| Edit this page View Source

TimeDateStamp

Time and date stamp. Shows seconds elapsed since 00:00:00, January 1, 1970 in UCT.

Declaration

public uint TimeDateStamp { get; set; }

Property Value

Type	Description
uint

| Edit this page View Source

VirtualMemoryThreshold

The maximum block size that can be allocated from heap segments in bytes.

Declaration

public ulong VirtualMemoryThreshold { get; set; }

Property Value

Type	Description
ulong

Methods

| Edit this page View Source

Dispose()

Performs application-defined tasks associated with freeing, releasing, or resetting unmanaged resources.

Declaration

public void Dispose()

| Edit this page View Source

~ImageLoadConfigDirectory()

Declaration

protected ~ImageLoadConfigDirectory()

Implements

IDisposable