arm64 / ntdllntoskrnl /

_MI_SYSTEM_IMAGE_STATE

← first 1 build latest →
struct _MI_SYSTEM_IMAGE_STATE {
unsigned long LoadLockCount;/* 0x18 4 */
volatile long FixupLock;/* 0x1c 4 */
unsigned long EncodeDecodeDepth;/* 0x28 4 */
unsigned char FirstLoadEver;/* 0x2c 1 */
unsigned char SystemImagesLoaded;/* 0x2d 1 */
/* 2 bytes padding */
/* ── cacheline 1 boundary (64 bytes) ── */
/* ── cacheline 2 boundary (128 bytes) ── */
unsigned __int64 ImportEntriesReplaced;/* 0x98 8 */
void* SecurePteExclusionBase;/* 0xa8 8 */
void* SecurePteExclusionTop;/* 0xb0 8 */
/* 72 bytes padding */
/* ── cacheline 4 boundary (256 bytes) ── */
/* ── cacheline 12 boundary (768 bytes) ── */
};
size 896 (0x380)23 members2 holes (74 bytes)padding 7114 cachelines
Used in (1)