IMAGE_LOAD_CONFIG_DIRECTORY64 structure

IMAGE_LOAD_CONFIG_DIRECTORY64 structure

Contains the load configuration data of an image.

Syntax

typedef struct {
  DWORD     Size;
  DWORD     TimeDateStamp;
  WORD      MajorVersion;
  WORD      MinorVersion;
  DWORD     GlobalFlagsClear;
  DWORD     GlobalFlagsSet;
  DWORD     CriticalSectionDefaultTimeout;
  ULONGLONG DeCommitFreeBlockThreshold;
  ULONGLONG DeCommitTotalFreeThreshold;
  ULONGLONG LockPrefixTable;
  ULONGLONG MaximumAllocationSize;
  ULONGLONG VirtualMemoryThreshold;
  ULONGLONG ProcessAffinityMask;
  DWORD     ProcessHeapFlags;
  WORD      CSDVersion;
  WORD      Reserved1;
  ULONGLONG EditList;
  ULONGLONG SecurityCookie;
  ULONGLONG SEHandlerTable;
  ULONGLONG SEHandlerCount;
} IMAGE_LOAD_CONFIG_DIRECTORY64, *PIMAGE_LOAD_CONFIG_DIRECTORY64;

Members

Size
The size of the structure. For Windows XP, the size must be specified as 64 for x86 images.
TimeDateStamp
The date and time stamp value. The value is represented in the number of seconds elapsed since midnight (00:00:00), January 1, 1970, Universal Coordinated Time, according to the system clock. The time stamp can be printed using the C run-time (CRT) function ctime.
MajorVersion
The major version number.
MinorVersion
The minor version number.
GlobalFlagsClear
The global flags that control system behavior. For more information, see Gflags.exe.
GlobalFlagsSet
The global flags that control system behavior. For more information, see Gflags.exe.
CriticalSectionDefaultTimeout
The critical section default time-out value.
DeCommitFreeBlockThreshold
The size of the minimum block that must be freed before it is freed (de-committed), in bytes. This value is advisory.
DeCommitTotalFreeThreshold
The size of the minimum total memory that must be freed in the process heap before it is freed (de-committed), in bytes. This value is advisory.
LockPrefixTable
The VA of a list of addresses where the LOCK prefix is used. These will be replaced by NOP on single-processor systems. This member is available only for x86.
MaximumAllocationSize
The maximum allocation size, in bytes. This member is obsolete and is used only for debugging purposes.
VirtualMemoryThreshold
The maximum block size that can be allocated from heap segments, in bytes.
ProcessAffinityMask
The process affinity mask. For more information, see GetProcessAffinityMask. This member is available only for .exe files.
ProcessHeapFlags
The process heap flags. For more information, see HeapCreate.
CSDVersion
The service pack version.
Reserved1
Reserved for use by the operating system.
EditList
Reserved for use by the system.
SecurityCookie
A pointer to a cookie that is used by Visual C++ or GS implementation.
SEHandlerTable
The VA of the sorted table of RVAs of each valid, unique handler in the image. This member is available only for x86.
SEHandlerCount
The count of unique handlers in the table. This member is available only for x86.

https://msdn.microsoft.com/en-us/library/windows/desktop/ms680328(v=vs.85).aspx

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s