-
Notifications
You must be signed in to change notification settings - Fork 463
Expand file tree
/
Copy pathnt.inc
More file actions
218 lines (204 loc) · 4.37 KB
/
Copy pathnt.inc
File metadata and controls
218 lines (204 loc) · 4.37 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
WOW64_CONTEXT_i386 = 0x00010000
WOW64_CONTEXT_INTEGER = 0x00000002
struct UNICODE_STRING
Length dw ?
MaximumLength dw ?
Buffer dd ?
ends
struct IMAGE_DOS_HEADER
e_magic dw ?
e_cblp dw ?
e_cp dw ?
e_crlc dw ?
e_cparhdr dw ?
e_minalloc dw ?
e_maxalloc dw ?
e_ss dw ?
e_sp dw ?
e_csum dw ?
e_ip dw ?
e_cs dw ?
e_lfarl dw ?
e_ovno dw ?
e_res rw 4
e_oemid dw ?
e_oeminfo dw ?
e_res2 rw 10
e_lfanew dd ?
ends
struct IMAGE_FILE_HEADER
Machine dw ?
NumberOfSections dw ?
TimeDateStamp dd ?
PointerToSymbolTable dd ?
NumberOfSymbols dd ?
SizeOfOptionalHeader dw ?
Characteristics dw ?
ends
struct IMAGE_DATA_DIRECTORY
VirtualAddress dd ?
Size dd ?
ends
struct IMAGE_OPTIONAL_HEADER32
Magic dw ?
MajorLinkerVersion db ?
MinorLinkerVersion db ?
SizeOfCode dd ?
SizeOfInitializedData dd ?
SizeOfUninitializedData dd ?
AddressOfEntryPoint dd ?
BaseOfCode dd ?
BaseOfData dd ?
ImageBase dd ?
SectionAlignment dd ?
FileAlignment dd ?
MajorOperatingSystemVersion dw ?
MinorOperatingSystemVersion dw ?
MajorImageVersion dw ?
MinorImageVersion dw ?
MajorSubsystemVersion dw ?
MinorSubsystemVersion dw ?
Win32VersionValue dd ?
SizeOfImage dd ?
SizeOfHeaders dd ?
CheckSum dd ?
Subsystem dw ?
DllCharacteristics dw ?
SizeOfStackReserve dd ?
SizeOfStackCommit dd ?
SizeOfHeapReserve dd ?
SizeOfHeapCommit dd ?
LoaderFlags dd ?
NumberOfRvaAndSizes dd ?
DataDirectoryExport IMAGE_DATA_DIRECTORY
DataDirectoryImport IMAGE_DATA_DIRECTORY
DataDirectoryResource IMAGE_DATA_DIRECTORY
DataDirectoryException IMAGE_DATA_DIRECTORY
DataDirectorySecurity IMAGE_DATA_DIRECTORY
DataDirectoryBaseReloc IMAGE_DATA_DIRECTORY
DataDirectoryDebug IMAGE_DATA_DIRECTORY
DataDirectoryArchitecture IMAGE_DATA_DIRECTORY
DataDirectoryGlobalPtr IMAGE_DATA_DIRECTORY
DataDirectoryTls IMAGE_DATA_DIRECTORY
DataDirectoryLoadConfig IMAGE_DATA_DIRECTORY
DataDirectoryBoundImport IMAGE_DATA_DIRECTORY
DataDirectoryIat IMAGE_DATA_DIRECTORY
DataDirectoryDelayImport IMAGE_DATA_DIRECTORY
DataDirectoryComDescriptor IMAGE_DATA_DIRECTORY
DataDirectory16 IMAGE_DATA_DIRECTORY
ends
struct IMAGE_EXPORT_DIRECTORY
Characteristics dd ?
TimeDateStamp dd ?
MajorVersion dw ?
MinorVersion dw ?
Name dd ?
Base dd ?
NumberOfFunctions dd ?
NumberOfNames dd ?
AddressOfFunctions dd ?
AddressOfNames dd ?
AddressOfNameOrdinals dd ?
ends
struct IMAGE_NT_HEADERS32
Signature dd ?
FileHeader IMAGE_FILE_HEADER
OptionalHeader IMAGE_OPTIONAL_HEADER32
ends
struct IMAGE_SECTION_HEADER
Name rb 8
union
PhysicalAddress dd ?
VirtualSize dd ?
ends
VirtualAddress dd ?
SizeOfRawData dd ?
PointerToRawData dd ?
PointerToRelocations dd ?
PointerToLinenumbers dd ?
NumberOfRelocations dw ?
NumberOfLinenumbers dw ?
Characteristics dd ?
ends
struct FLOATING_SAVE_AREA
ControlWord dd ?
StatusWord dd ?
TagWord dd ?
ErrorOffset dd ?
ErrorSelector dd ?
DataOffset dd ?
DataSelector dd ?
RegisterArea rb 80
Cr0NpxState dd ?
ends
struct CONTEXT32
ContextFlags dd ?
Dr0 dd ?
Dr1 dd ?
Dr2 dd ?
Dr3 dd ?
Dr6 dd ?
Dr7 dd ?
FloatSave FLOATING_SAVE_AREA
SegGs dd ?
SegFs dd ?
SegEs dd ?
SegDs dd ?
Edi dd ?
Esi dd ?
Ebx dd ?
Edx dd ?
Ecx dd ?
Eax dd ?
Ebp dd ?
Eip dd ?
SegCs dd ?
EFlags dd ?
Esp dd ?
SegSs dd ?
ExtendedRegisters rb 512
ends
struct LIST_ENTRY
Flink dd ?
Blink dd ?
ends
struct LDR_DATA_TABLE_ENTRY
InMemoryOrderModuleList LIST_ENTRY
InInitializationOrderModuleList LIST_ENTRY
DllBase dd ?
EntryPoint dd ?
SizeOfImage dd ?
FullDllName UNICODE_STRING
BaseDllName UNICODE_STRING
Flags dd ?
LoadCount dw ?
TlsIndex dw ?
HashTableEntry LIST_ENTRY
TimeDateStamp dd ?
ends
struct PEB_LDR_DATA
Reserved1 rb 8
Reserved2 rd 3
InMemoryOrderModuleList LIST_ENTRY
ends
struct PEB
Reserved1 rb 2
BeingDebugged db ?
Reserved2 db ?
Reserved3 rd 2
Ldr dd ?
ProcessParameters dd ?
Reserved4 rd 3
AtlThunkSListPtr dd ?
Reserved5 dd ?
Reserved6 dd ?
Reserved7 dd ?
Reserved8 dd ?
AtlThunkSListPtr32 dd ?
Reserved9 rd 45
Reserved10 rb 96
PostProcessInitRoutine dd ?
Reserved11 rb 128
Reserved12 dd ?
SessionId dd ?
ends