x64x86arm64ia64 / ntdllntoskrnl

PO_MEMORY_IMAGE

← 5.2.3790.3959 3 builds latest →
struct PO_MEMORY_IMAGE {
unsigned long Signature;/* 0x0 4 */
unsigned long ImageType;/* 0x4 4 */
unsigned long CheckSum;/* 0x8 4 */
unsigned long LengthSelf;/* 0xc 4 */
unsigned __int64 PageSelf;/* 0x10 8 */
unsigned long PageSize;/* 0x18 4 */
/* 4 bytes padding */
unsigned __int64 InterruptTime;/* 0x28 8 */
unsigned long FeatureFlags;/* 0x30 4 */
unsigned char HiberFlags;/* 0x34 1 */
unsigned char spare[3];/* 0x35 3 */
unsigned long NoHiberPtes;/* 0x38 4 */
/* 4 bytes padding */
/* ── cacheline 1 boundary (64 bytes) ── */
unsigned __int64 HiberVa;/* 0x40 8 */
unsigned long NoFreePages;/* 0x50 4 */
unsigned long FreeMapCheck;/* 0x54 4 */
unsigned long WakeCheck;/* 0x58 4 */
/* 4 bytes padding */
unsigned __int64 TotalPages;/* 0x60 8 */
unsigned __int64 FirstTablePage;/* 0x68 8 */
/* ── cacheline 3 boundary (192 bytes) ── */
unsigned long FirmwareRuntimeInformationPages;/* 0xd0 4 */
/* 4 bytes padding */
unsigned __int64 FirmwareRuntimeInformation[1];/* 0xd8 8 */
unsigned long NoBootLoaderLogPages;/* 0xe0 4 */
/* 4 bytes padding */
unsigned __int64 BootLoaderLogPages[8];/* 0xe8 64 */
/* ── cacheline 4 boundary (256 bytes) ── */
unsigned long NotUsed;/* 0x128 4 */
unsigned long ResumeContextCheck;/* 0x12c 4 */
unsigned long ResumeContextPages;/* 0x130 4 */
};
size 312 (0x138)27 members5 holes (20 bytes)padding 45 cachelines
Used in (1)