x64 / ntdllntoskrnl /

_EXP_PULLED_FILE_TABLE

← 10.0.28000.3231 7 builds latest →
struct _EXP_PULLED_FILE_TABLE {
long NumberOfFiles;/* 0x0 4 */
long TableSize;/* 0x4 4 */
unsigned __int64 Hashes[1];/* 0x8 8 */
};
size 16 (0x10)3 members0 holespadding 01 cacheline