typedefstruct_LDR_DATA_TABLE_ENTRY {//Start from Windows XPLIST_ENTRY InLoadOrderLinks; LIST_ENTRY InMemoryOrderLinks; LIST_ENTRY InInitializationOrderLinks; PVOID DllBase; PVOID EntryPoint; ULONG SizeOfImage; UNICODE_STRING FullDllName; UNICODE_STRING BaseDllName; ULONG Flags; USHORT LoadCount;...
//0xe0 ULONGLONG OriginalBase; //0xf8 union _LARGE_INTEGER LoadTime; //0x100 ULONG BaseNameHashValue; //0x108 enum _LDR_DLL_LOAD_REASON LoadReason; //0x10c ULONG ImplicitPathOptions; //0x110 ULONG ReferenceCount; //0x114 ULONG DependentLoadFlags; //0x118 UCHAR SigningLevel; //0x11c ...
/* 0x2C */ULONGFlags;/* 0x34 */union{UCHARFlagGroup[4];ULONGFlags;struct{/* bit fields, see below */};};WORDLoadCount;/* 0x38 */WORDTlsIndex;/* 0x3A */union/* 0x3C */{LIST_ENTRYHashLinks;struct{PVOIDSectionPointer;ULONGCheckSum;};};union{ULONGTimeDateStamp;PVOIDLoadedImports;...
ULONG Flags; USHORT LoadCount; USHORT TlsIndex; union { LIST_ENTRY HashLinks; PVOID SectionPointer; }; ULONG CheckSum; union { ULONG TimeDateStamp; PVOID LoadedImports; }; PVOID EntryPointActivationContext; PVOID PatchInformation; } LDR_DATA_TABLE_ENTRY * PLDR_DATA_TABLE_ENTRY; ...