_LDR_DATA_TABLE_ENTRY

Metadatacopy
struct _LDR_DATA_TABLE_ENTRY {
    struct _LIST_ENTRY InLoadOrderLinks;/* 0x0  16 */
    struct _LIST_ENTRY InMemoryOrderLinks;/* 0x10  16 */
    struct _LIST_ENTRY InInitializationOrderLinks;/* 0x20  16 */
    void* DllBase;/* 0x30  8 */
    void* EntryPoint;/* 0x38  8 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    unsigned long SizeOfImage;/* 0x40  4 */
    /* 4 bytes padding */
    struct _UNICODE_STRING FullDllName;/* 0x48  16 */
    struct _UNICODE_STRING BaseDllName;/* 0x58  16 */
    union {
        unsigned long Flags;/* 0x68  4 */
        struct {
            unsigned long PackagedBinary : 1;/* 0x68:0  4 */
            unsigned long MarkedForRemoval : 1;/* 0x68:1  4 */
            unsigned long ImageDll : 1;/* 0x68:2  4 */
            unsigned long LoadNotificationsSent : 1;/* 0x68:3  4 */
            unsigned long TelemetryEntryProcessed : 1;/* 0x68:4  4 */
            unsigned long ProcessStaticImport : 1;/* 0x68:5  4 */
            unsigned long InLegacyLists : 1;/* 0x68:6  4 */
            unsigned long InIndexes : 1;/* 0x68:7  4 */
            unsigned long ShimDll : 1;/* 0x68:8  4 */
            unsigned long InExceptionTable : 1;/* 0x68:9  4 */
            unsigned long VerifierProvider : 1;/* 0x68:10  4 */
            unsigned long ShimEngineCalloutSent : 1;/* 0x68:11  4 */
            unsigned long LoadInProgress : 1;/* 0x68:12  4 */
            unsigned long LoadConfigProcessed : 1;/* 0x68:13  4 */
            unsigned long EntryProcessed : 1;/* 0x68:14  4 */
            unsigned long ProtectDelayLoad : 1;/* 0x68:15  4 */
            unsigned long AuxIatCopyPrivate : 1;/* 0x68:16  4 */
            unsigned long ReservedFlags3 : 1;/* 0x68:17  4 */
            unsigned long DontCallForThreads : 1;/* 0x68:18  4 */
            unsigned long ProcessAttachCalled : 1;/* 0x68:19  4 */
            unsigned long ProcessAttachFailed : 1;/* 0x68:20  4 */
            unsigned long ScpInExceptionTable : 1;/* 0x68:21  4 */
            unsigned long CorImage : 1;/* 0x68:22  4 */
            unsigned long DontRelocate : 1;/* 0x68:23  4 */
            unsigned long CorILOnly : 1;/* 0x68:24  4 */
            unsigned long ChpeImage : 1;/* 0x68:25  4 */
            unsigned long ChpeEmulatorImage : 1;/* 0x68:26  4 */
            unsigned long ReservedFlags5 : 1;/* 0x68:27  4 */
            unsigned long Redirected : 1;/* 0x68:28  4 */
            unsigned long ReservedFlags6 : 2;/* 0x68:29  4 */
            unsigned long CompatDatabaseProcessed : 1;/* 0x68:31  4 */
        };/* 0x68  4 */
    };/* 0x68  4 */
    unsigned short ObsoleteLoadCount;/* 0x6c  2 */
    unsigned short TlsIndex;/* 0x6e  2 */
    struct _LIST_ENTRY HashLinks;/* 0x70  16 */
    /* ── cacheline 2 boundary (128 bytes) ── */
    unsigned long TimeDateStamp;/* 0x80  4 */
    /* 4 bytes padding */
    struct _ACTIVATION_CONTEXT* EntryPointActivationContext;/* 0x88  8 */
    void* Lock;/* 0x90  8 */
    struct _LDR_DDAG_NODE* DdagNode;/* 0x98  8 */
    struct _LIST_ENTRY NodeModuleLink;/* 0xa0  16 */
    struct _LDRP_LOAD_CONTEXT* LoadContext;/* 0xb0  8 */
    void* ParentDllBase;/* 0xb8  8 */
    /* ── cacheline 3 boundary (192 bytes) ── */
    void* SwitchBackContext;/* 0xc0  8 */
    struct _RTL_BALANCED_NODE BaseAddressIndexNode;/* 0xc8  24 */
    struct _RTL_BALANCED_NODE MappingInfoIndexNode;/* 0xe0  24 */
    unsigned __int64 OriginalBase;/* 0xf8  8 */
    /* ── cacheline 4 boundary (256 bytes) ── */
    union _LARGE_INTEGER LoadTime;/* 0x100  8 */
    unsigned long BaseNameHashValue;/* 0x108  4 */
    enum _LDR_DLL_LOAD_REASON LoadReason;/* 0x10c  4 */
    unsigned long ImplicitPathOptions;/* 0x110  4 */
    unsigned long ReferenceCount;/* 0x114  4 */
    unsigned long DependentLoadFlags;/* 0x118  4 */
    unsigned char SigningLevel;/* 0x11c  1 */
    /* 3 bytes padding */
    unsigned long CheckSum;/* 0x120  4 */
    /* 4 bytes padding */
    void* ActivePatchImageBase;/* 0x128  8 */
    enum _LDR_HOT_PATCH_STATE HotPatchState;/* 0x130  4 */
};