ホーム › System.SystemServices › IMAGE_HOT_PATCH_BASE
IMAGE_HOT_PATCH_BASE
構造体サイズ=各フィールドのバイト数(x64/x86 で異なる場合は x64/x86 と併記)。x64/x86 列=フィールドのバイトオフセット(HSPで dupptr / lpoke / wpoke 等に使用)。
フィールド
| フィールド | 型 | サイズ | x64 | x86 | 説明 |
|---|---|---|---|---|---|
| SequenceNumber | DWORD | 4 | +0 | +0 | ベースイメージのシーケンス番号。 |
| Flags | DWORD | 4 | +4 | +4 | ホットパッチベースのフラグ。 |
| OriginalTimeDateStamp | DWORD | 4 | +8 | +8 | 元イメージのタイムスタンプ。 |
| OriginalCheckSum | DWORD | 4 | +12 | +12 | 元イメージのチェックサム。 |
| CodeIntegrityInfo | DWORD | 4 | +16 | +16 | コード整合性情報へのオフセット。 |
| CodeIntegritySize | DWORD | 4 | +20 | +20 | コード整合性情報のサイズ。 |
| PatchTable | DWORD | 4 | +24 | +24 | パッチテーブルへのオフセット。 |
| BufferOffset | DWORD | 4 | +28 | +28 | 可変長バッファへのオフセット。 |
各言語での定義
#include <windows.h>
// IMAGE_HOT_PATCH_BASE (x64 32 / x86 32 バイト)
typedef struct IMAGE_HOT_PATCH_BASE {
DWORD SequenceNumber;
DWORD Flags;
DWORD OriginalTimeDateStamp;
DWORD OriginalCheckSum;
DWORD CodeIntegrityInfo;
DWORD CodeIntegritySize;
DWORD PatchTable;
DWORD BufferOffset;
} IMAGE_HOT_PATCH_BASE;using System;
using System.Runtime.InteropServices;
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
public struct IMAGE_HOT_PATCH_BASE
{
public uint SequenceNumber;
public uint Flags;
public uint OriginalTimeDateStamp;
public uint OriginalCheckSum;
public uint CodeIntegrityInfo;
public uint CodeIntegritySize;
public uint PatchTable;
public uint BufferOffset;
}Imports System.Runtime.InteropServices
<StructLayout(LayoutKind.Sequential, CharSet:=CharSet.Unicode)>
Public Structure IMAGE_HOT_PATCH_BASE
Public SequenceNumber As UInteger
Public Flags As UInteger
Public OriginalTimeDateStamp As UInteger
Public OriginalCheckSum As UInteger
Public CodeIntegrityInfo As UInteger
Public CodeIntegritySize As UInteger
Public PatchTable As UInteger
Public BufferOffset As UInteger
End Structureimport ctypes
from ctypes import wintypes
class IMAGE_HOT_PATCH_BASE(ctypes.Structure):
_fields_ = [
("SequenceNumber", wintypes.DWORD),
("Flags", wintypes.DWORD),
("OriginalTimeDateStamp", wintypes.DWORD),
("OriginalCheckSum", wintypes.DWORD),
("CodeIntegrityInfo", wintypes.DWORD),
("CodeIntegritySize", wintypes.DWORD),
("PatchTable", wintypes.DWORD),
("BufferOffset", wintypes.DWORD),
]#[repr(C)]
pub struct IMAGE_HOT_PATCH_BASE {
pub SequenceNumber: u32,
pub Flags: u32,
pub OriginalTimeDateStamp: u32,
pub OriginalCheckSum: u32,
pub CodeIntegrityInfo: u32,
pub CodeIntegritySize: u32,
pub PatchTable: u32,
pub BufferOffset: u32,
}import "golang.org/x/sys/windows"
type IMAGE_HOT_PATCH_BASE struct {
SequenceNumber uint32
Flags uint32
OriginalTimeDateStamp uint32
OriginalCheckSum uint32
CodeIntegrityInfo uint32
CodeIntegritySize uint32
PatchTable uint32
BufferOffset uint32
}type
IMAGE_HOT_PATCH_BASE = record
SequenceNumber: DWORD;
Flags: DWORD;
OriginalTimeDateStamp: DWORD;
OriginalCheckSum: DWORD;
CodeIntegrityInfo: DWORD;
CodeIntegritySize: DWORD;
PatchTable: DWORD;
BufferOffset: DWORD;
end;const IMAGE_HOT_PATCH_BASE = extern struct {
SequenceNumber: u32,
Flags: u32,
OriginalTimeDateStamp: u32,
OriginalCheckSum: u32,
CodeIntegrityInfo: u32,
CodeIntegritySize: u32,
PatchTable: u32,
BufferOffset: u32,
};type
IMAGE_HOT_PATCH_BASE {.bycopy.} = object
SequenceNumber: uint32
Flags: uint32
OriginalTimeDateStamp: uint32
OriginalCheckSum: uint32
CodeIntegrityInfo: uint32
CodeIntegritySize: uint32
PatchTable: uint32
BufferOffset: uint32struct IMAGE_HOT_PATCH_BASE
{
uint SequenceNumber;
uint Flags;
uint OriginalTimeDateStamp;
uint OriginalCheckSum;
uint CodeIntegrityInfo;
uint CodeIntegritySize;
uint PatchTable;
uint BufferOffset;
}HSP用 定義
HSP3.7/3.8 は構造体機能が無いため4byte整数配列(dim)+peek/poke で操作(32/64bitでサイズ・位置が異なる場合はタブで分割)。IronHSP は NSTRUCT(#defstruct/stdim/->)で32/64bit共通。
; HSP3.7/3.8 は構造体機能が無いため、4byte整数の配列変数で操作します。(x64 レイアウト)
; IMAGE_HOT_PATCH_BASE サイズ: 32 バイト(x64)
dim st, 8 ; 4byte整数×8(構造体サイズ 32 / 4 切り上げ)
; SequenceNumber : DWORD (+0, 4byte) st.0 = 値 / 値 = st.0 (lpoke/lpeek も可)
; Flags : DWORD (+4, 4byte) st.1 = 値 / 値 = st.1 (lpoke/lpeek も可)
; OriginalTimeDateStamp : DWORD (+8, 4byte) st.2 = 値 / 値 = st.2 (lpoke/lpeek も可)
; OriginalCheckSum : DWORD (+12, 4byte) st.3 = 値 / 値 = st.3 (lpoke/lpeek も可)
; CodeIntegrityInfo : DWORD (+16, 4byte) st.4 = 値 / 値 = st.4 (lpoke/lpeek も可)
; CodeIntegritySize : DWORD (+20, 4byte) st.5 = 値 / 値 = st.5 (lpoke/lpeek も可)
; PatchTable : DWORD (+24, 4byte) st.6 = 値 / 値 = st.6 (lpoke/lpeek も可)
; BufferOffset : DWORD (+28, 4byte) st.7 = 値 / 値 = st.7 (lpoke/lpeek も可)
; ※4byte境界の整数は添字 st.N(N=オフセット/4)で読み書き可。それ以外は peek/poke 系を使用。; IronHSP は NSTRUCT(構造体)をサポート。32bit/64bit どちらでも同じコードで動作します。
#defstruct global IMAGE_HOT_PATCH_BASE
#field int SequenceNumber
#field int Flags
#field int OriginalTimeDateStamp
#field int OriginalCheckSum
#field int CodeIntegrityInfo
#field int CodeIntegritySize
#field int PatchTable
#field int BufferOffset
#endstruct
stdim st, IMAGE_HOT_PATCH_BASE ; NSTRUCT 変数を確保
st->SequenceNumber = 100
mes "SequenceNumber=" + st->SequenceNumber