x64 / ntdllntoskrnl /

_MI_PARTITION_CORE

← 10.0.28000.3231 16 builds latest →
struct _MI_PARTITION_CORE {
unsigned short PartitionId;/* 0x0 2 */
/* 2 bytes padding */
unsigned long Signature;/* 0x8 4 */
unsigned char MemoryConfigurationChanged;/* 0xc 1 */
/* 3 bytes padding */
/* ── cacheline 1 boundary (64 bytes) ── */
unsigned __int64 PfnUnmapCount;/* 0x48 8 */
/* ── cacheline 2 boundary (128 bytes) ── */
void* SystemThreadHandles[9];/* 0xb8 72 */
/* ── cacheline 4 boundary (256 bytes) ── */
volatile long DynamicMemoryLock;/* 0x110 4 */
unsigned char PfnUnmapActive;/* 0x114 1 */
/* 3 bytes padding */
void* RootDirectory;/* 0x130 8 */
void* KernelObjectsDirectory;/* 0x138 8 */
/* ── cacheline 5 boundary (320 bytes) ── */
/* ── cacheline 6 boundary (384 bytes) ── */
void* MemoryEventHandles[11];/* 0x198 88 */
/* ── cacheline 7 boundary (448 bytes) ── */
unsigned __int64 TotalHugeIoRanges;/* 0x1f0 8 */
unsigned __int64 NonChargedSecurePages;/* 0x1f8 8 */
/* ── cacheline 8 boundary (512 bytes) ── */
volatile unsigned __int64 KernelStackCommit;/* 0x210 8 */
unsigned __int64 KernelShadowStackPages;/* 0x218 8 */
};
size 560 (0x230)30 members3 holes (8 bytes)padding 89 cachelines
Used in (1)