Enum GuardFlags

Namespace

AsmResolver.PE.Configuration

Assembly

AsmResolver.PE.dll

Provides members describing all control flow guard flags that can be specified in a load configuration of a PE image.

[Flags]
public enum GuardFlags : uint

Fields

CfEnableExportSuppression = 32768

Module enables suppression of exports.

CfExportSuppressionInfoPresent = 16384

Module contains suppressed export information. This also infers that the address taken IAT table is also present in the load config.

CfFunctionTablePresent = 1024

Module contains valid control flow target metadata.

CfFunctionTableSizeHasFlags = 268435456

Indicates each field in control flow guard function tables contains additional flags.

CfFunctionTableSizeMask = 4026531840

Mask for the subfield that contains the stride of Control Flow Guard function table entries (that is, the additional count of bytes per table entry).

CfInstrumented = 256

Module performs control flow integrity checks using system-supplied support.

CfLongJumpTablePresent = 65536

Module contains longjmp target information.

CfwInstrumented = 512

Module performs control flow and write integrity checks.

DelayloadIatInItsOwnSection = 8192

Delayload import table in its own .didat section (with nothing else in it) that can be freely reprotected.

ProtectDelayloadIat = 4096

Module supports read only delay load IAT.

SecurityCookieUnused = 2048

Module does not make use of the /GS security cookie.