arm64 / ntdllntoskrnl /

_POP_IRP_DATA

← first 1 build latest →
struct _POP_IRP_DATA {
unsigned __int64 WatchdogStart;/* 0x30 8 */
/* ── cacheline 1 boundary (64 bytes) ── */
/* ── cacheline 2 boundary (128 bytes) ── */
unsigned char MinorFunction;/* 0xb8 1 */
/* 3 bytes padding */
/* ── cacheline 3 boundary (192 bytes) ── */
/* 4 bytes padding */
unsigned char SystemTransition;/* 0xd0 1 */
unsigned char NotifyPEP;/* 0xd1 1 */
/* 2 bytes padding */
long IrpSequenceID;/* 0xd4 4 */
union {
struct {
void (*CallerCompletion)(struct _DEVICE_OBJECT*, unsigned char, union _POWER_STATE, void*, struct _IO_STATUS_BLOCK*);/* 0xd8 8 */
void* CallerContext;/* 0xe0 8 */
unsigned char SystemWake;/* 0xf0 1 */
/* 7 bytes padding */
} Device;/* 0xd8 64 */
struct {
unsigned char FxDeviceActivated;/* 0xe0 1 */
} System;/* 0xd8 16 */
};/* 0xd8 64 */
/* ── cacheline 4 boundary (256 bytes) ── */
/* 4 bytes padding */
unsigned __int64 WatchdogLock;/* 0x120 8 */
/* 4 bytes padding */
unsigned __int64 BlackboxWatchdogStartTime;/* 0x130 8 */
};
size 312 (0x138)21 members6 holes (24 bytes)padding 05 cachelines
Used in (1)