arm64 / ntdllntoskrnl /

_HBASE_BLOCK

← first 1 build latest →
struct _HBASE_BLOCK {
unsigned long Signature;/* 0x0 4 */
unsigned long Sequence1;/* 0x4 4 */
unsigned long Sequence2;/* 0x8 4 */
unsigned long Major;/* 0x14 4 */
unsigned long Minor;/* 0x18 4 */
unsigned long Type;/* 0x1c 4 */
unsigned long Format;/* 0x20 4 */
unsigned long RootCell;/* 0x24 4 */
unsigned long Length;/* 0x28 4 */
unsigned long Cluster;/* 0x2c 4 */
unsigned char FileName[64];/* 0x30 64 */
/* ── cacheline 1 boundary (64 bytes) ── */
/* ── cacheline 2 boundary (128 bytes) ── */
unsigned long Flags;/* 0x90 4 */
unsigned long GuidSignature;/* 0xa4 4 */
unsigned __int64 LastReorganizeTime;/* 0xa8 8 */
unsigned long Reserved1[83];/* 0xb0 332 */
/* ── cacheline 7 boundary (448 bytes) ── */
unsigned long CheckSum;/* 0x1fc 4 */
/* ── cacheline 8 boundary (512 bytes) ── */
unsigned long Reserved2[882];/* 0x200 3528 */
/* ── cacheline 63 boundary (4032 bytes) ── */
unsigned long BootType;/* 0xff8 4 */
unsigned long BootRecover;/* 0xffc 4 */
};
size 4096 (0x1000)26 members0 holespadding 064 cachelines
Used in (2)