_CONTROL_AREA

Metadatacopy
struct _CONTROL_AREA {
    struct _SEGMENT* Segment;/* 0x0  8 */
    union {
        struct _LIST_ENTRY ListHead;/* 0x8  16 */
        void* AweContext;/* 0x8  8 */
    };/* 0x8  16 */
    unsigned __int64 NumberOfSectionReferences;/* 0x18  8 */
    unsigned __int64 NumberOfPfnReferences;/* 0x20  8 */
    unsigned __int64 NumberOfMappedViews;/* 0x28  8 */
    unsigned __int64 NumberOfUserReferences;/* 0x30  8 */
    union {
        unsigned long LongFlags;/* 0x38  4 */
        struct _MMSECTION_FLAGS Flags;/* 0x38  4 */
    } u;/* 0x38  4 */
    union {
        unsigned long LongFlags;/* 0x3c  4 */
        struct _MMSECTION_FLAGS2 Flags;/* 0x3c  4 */
    } u1;/* 0x3c  4 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    struct _EX_FAST_REF FilePointer;/* 0x40  8 */
    volatile long ControlAreaLock;/* 0x48  4 */
    unsigned long ModifiedWriteCount;/* 0x4c  4 */
    struct _MI_CONTROL_AREA_WAIT_BLOCK* WaitList;/* 0x50  8 */
    union {
        struct {
            union {
                unsigned long NumberOfSystemCacheViews;/* 0x58  4 */
                unsigned long ImageRelocationStartBit;/* 0x58  4 */
            };/* 0x58  4 */
            union {
                volatile long WritableUserReferences;/* 0x5c  4 */
                struct {
                    unsigned long ImageRelocationSizeIn64k : 16;/* 0x5c:0  4 */
                    unsigned long SystemImage : 1;/* 0x5c:16  4 */
                    unsigned long CantMove : 1;/* 0x5c:17  4 */
                    unsigned long StrongCode : 2;/* 0x5c:18  4 */
                    unsigned long BitMap : 2;/* 0x5c:20  4 */
                    unsigned long ImageActive : 1;/* 0x5c:22  4 */
                    unsigned long ImageBaseOkToReuse : 1;/* 0x5c:23  4 */
                };/* 0x5c  4 */
            };/* 0x5c  4 */
            union {
                unsigned long NumberOfSubsections;/* 0x60  4 */
                union _MI_IMAGE_INFO_REF ImageInfoRef;/* 0x60  8 */
            };/* 0x60  8 */
        } e2;/* 0x58  16 */
    } u2;/* 0x58  16 */
    struct _EX_PUSH_LOCK FileObjectLock;/* 0x68  8 */
    volatile unsigned __int64 LockedPages;/* 0x70  8 */
    union {
        struct {
            unsigned __int64 Spare : 3;/* 0x78:0  8 */
            unsigned __int64 IoAttributionContext : 61;/* 0x78:3  8 */
        };/* 0x78  8 */
        unsigned __int64 ImageCrossPartitionCharge;/* 0x78  8 */
        unsigned __int64 CommittedPageCount : 36;/* 0x78:0  8 */
    } u3;/* 0x78  8 */
};