Class IMAGE_LOAD_CONFIG_DIRECTORY

The IMAGE_LOAD_CONFIG_DIRECTORY hold information important to load the PE file correctly.

Inheritance

System.Object

AbstractStructure

IMAGE_LOAD_CONFIG_DIRECTORY

Inherited Members

AbstractStructure.ToString()

System.Object.Equals(System.Object)

System.Object.Equals(System.Object, System.Object)

System.Object.GetHashCode()

System.Object.GetType()

System.Object.MemberwiseClone()

System.Object.ReferenceEquals(System.Object, System.Object)

Namespace: PeNet.Structures

Assembly: PeNet.dll

Syntax

public class IMAGE_LOAD_CONFIG_DIRECTORY : AbstractStructure

Constructors

| Improve this Doc View Source

IMAGE_LOAD_CONFIG_DIRECTORY(Byte[], UInt32, Boolean)

Create a new IMAGE_LOAD_CONFIG_DIRECTORY object.

Declaration

public IMAGE_LOAD_CONFIG_DIRECTORY(byte[] buff, uint offset, bool is64Bit)

Parameters

Type	Name	Description
System.Byte[]	buff	Byte buffer with a PE file as content.
System.UInt32	offset	Offset of the structure in the buffer.
System.Boolean	is64Bit	Flag if the PE file is 64 Bit.

Properties

| Improve this Doc View Source

CriticalSectionDefaultTimeout

Default time-out value for critical sections.

Declaration

public uint CriticalSectionDefaultTimeout { get; set; }

Property Value

Type	Description
System.UInt32

| Improve this Doc View Source

CSDVersion

Service pack version.

Declaration

public ushort CSDVersion { get; set; }

Property Value

Type	Description
System.UInt16

| Improve this Doc View Source

DeCommitFreeBlockThreshold

The size of the minimum block that has to be freed before it's freed in bytes.

Declaration

public ulong DeCommitFreeBlockThreshold { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

DeCommitTotalFreeThreshold

SIze of the minimum total heap memory that has to be freed before it is freed in bytes.

Declaration

public ulong DeCommitTotalFreeThreshold { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

EditList

Reserved for use by the operating system.

Declaration

public ulong EditList { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

GlobalFlagsClear

GLobal flags to control system behavior.

Declaration

public uint GlobalFlagsClear { get; set; }

Property Value

Type	Description
System.UInt32

| Improve this Doc View Source

GlobalFlagsSet

Global flags to control system behavior.

Declaration

public uint GlobalFlagsSet { get; set; }

Property Value

Type	Description
System.UInt32

| Improve this Doc View Source

GuardCFCheckFunctionPointer

Control flow guard (Win 8.1 and up) function pointer.

Declaration

public ulong GuardCFCheckFunctionPointer { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

GuardCFFunctionCount

Count of functions under control flow guard. Only on Win 8.1 and up.

Declaration

public ulong GuardCFFunctionCount { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

GuardCFFunctionTable

Pointer to the control flow guard function table. Only on Win 8.1 and up.

Declaration

public ulong GuardCFFunctionTable { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

GuardFlags

Flags for the control flow guard. Only on Win 8.1 and up.

Declaration

public uint GuardFlags { get; set; }

Property Value

Type	Description
System.UInt32

| Improve this Doc View Source

LockPrefixTable

Virtual Address of a list with addresses where the LOCK prefix is used. Will be replaced by NOP instructions on single-processor systems. Only available on x86.

Declaration

public ulong LockPrefixTable { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

MajorVesion

Major version number.

Declaration

public ushort MajorVesion { get; set; }

Property Value

Type	Description
System.UInt16

| Improve this Doc View Source

MaximumAllocationSize

The maximum allocation size in bytes. Only used for debugging purposes.

Declaration

public ulong MaximumAllocationSize { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

MinorVersion

Minor version number.

Declaration

public ushort MinorVersion { get; set; }

Property Value

Type	Description
System.UInt16

| Improve this Doc View Source

ProcessAffinityMask

The processor affinity mask defines on which CPU the executable should run.

Declaration

public ulong ProcessAffinityMask { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

ProcessHeapFlags

The process heap flags.

Declaration

public uint ProcessHeapFlags { get; set; }

Property Value

Type	Description
System.UInt32

| Improve this Doc View Source

Reserved1

Reserved for use by the operating system.

Declaration

public ushort Reserved1 { get; set; }

Property Value

Type	Description
System.UInt16

| Improve this Doc View Source

Reserved2

Reserved

Declaration

public ulong Reserved2 { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

SecurityCoockie

Pointer to a cookie used by Visual C++ or GS implementation.

Declaration

public ulong SecurityCoockie { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

SEHandlerCount

Count of unique exception handlers in the table. Only available on x86.

Declaration

public ulong SEHandlerCount { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

SEHandlerTable

Virtual Address of a sorted table of RVAs of each valid and unique handler in the image. Only available on x86.

Declaration

public ulong SEHandlerTable { get; set; }

Property Value

Type	Description
System.UInt64

| Improve this Doc View Source

Size

SIze of the IMAGE_LOAD_CONFIG_DIRECTORY structure.

Declaration

public uint Size { get; set; }

Property Value

Type	Description
System.UInt32

| Improve this Doc View Source

TimeDateStamp

Time and date stamp. Shows seconds elapsed since 00:00:00, January 1, 1970 in UCT.

Declaration

public uint TimeDateStamp { get; set; }

Property Value

Type	Description
System.UInt32

| Improve this Doc View Source

VirtualMemoryThreshold

The maximum block size that can be allocated from heap segments in bytes.

Declaration

public ulong VirtualMemoryThreshold { get; set; }

Property Value

Type	Description
System.UInt64