arm64 / ntdllntoskrnl /

_MI_PROCESS_STATE

← first 1 build latest →
struct _MI_PROCESS_STATE {
void* SystemDllBase;/* 0x0 8 */
unsigned long ColorSeed;/* 0x8 4 */
/* 4 bytes padding */
void* HypervisorSharedVa;/* 0x38 8 */
/* ── cacheline 1 boundary (64 bytes) ── */
unsigned __int64 VadSecureCookie;/* 0x40 8 */
void* NativeCfgBitmapPreferredAddress;/* 0x48 8 */
void* EcBitmapPreferredAddress;/* 0x50 8 */
};
size 88 (0x58)9 members1 hole (4 bytes)padding 02 cachelines
Used in (1)