x64 / ntdllntoskrnl /

_CONTROL_AREA

← 10.0.28000.3231 22 builds latest →
struct _CONTROL_AREA {
union {
void* AweContext;/* 0x8 8 */
};/* 0x8 16 */
unsigned __int64 NumberOfSectionReferences;/* 0x18 8 */
unsigned __int64 NumberOfPfnReferences;/* 0x20 8 */
unsigned __int64 NumberOfMappedViews;/* 0x28 8 */
unsigned __int64 NumberOfUserReferences;/* 0x30 8 */
union {
unsigned long LongFlags;/* 0x38 4 */
} u;/* 0x38 4 */
/* ── cacheline 1 boundary (64 bytes) ── */
volatile long ControlAreaLock;/* 0x48 4 */
unsigned long ModifiedWriteCount;/* 0x4c 4 */
union {
struct {
union {
unsigned long NumberOfSystemCacheViews;/* 0x58 4 */
unsigned long ImageRelocationStartBit;/* 0x58 4 */
};/* 0x58 4 */
union {
volatile long WritableUserReferences;/* 0x5c 4 */
};/* 0x5c 4 */
union {
unsigned long NumberOfSubsections;/* 0x60 4 */
};/* 0x60 8 */
} e2;/* 0x58 16 */
} u2;/* 0x58 16 */
volatile unsigned __int64 LockedPages;/* 0x70 8 */
union {
struct {
unsigned __int64 Spare : 3;/* 0x78:0 8 */
unsigned __int64 IoAttributionContext : 61;/* 0x78:3 8 */
};/* 0x78 8 */
unsigned __int64 ImageCrossPartitionCharge;/* 0x78 8 */
unsigned __int64 CommittedPageCount : 36;/* 0x78:0 8 */
} u3;/* 0x78 8 */
};
size 128 (0x80)17 members0 holespadding 02 cachelines
Used in (7)