You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Image Load Config Directory<br />
Special data structure provided by the linker (with support from the<br />
compiler) which was originally used for compatibility/debugging flags<br />
Became relevant again when security mitigations were added:<br />
◦ Contains the security cookie<br />
◦ Contains the array of trusted SEH dispatch routines<br />
When CFG was introduced, the following new fields were added to<br />
IMAGE_LOAD_CONFIG_DIRECTORY:<br />
◦ ULONGLONG GuardCFCheckFunctionPointer;<br />
◦ ULONGLONG GuardCFFunctionTable;<br />
◦ ULONGLONG GuardCFFunctionCount;<br />
◦ DWORD GuardFlags;<br />
Bonus: check out GuardCFDispatchFunctionPointer and CodeIntegrity<br />
fields in Win 10<br />
1/26/2016 COPYRIGHT 2015 ALEX IONESCU. ALL RIGHTS RESERVED. 35
Change language