x64 / ntdllntoskrnl /

_UNICODE_STRING

← 10.0.28000.3231 22 builds latest → 
struct _UNICODE_STRING {
    unsigned short Length;/* 0x0  2 */
    unsigned short MaximumLength;/* 0x2  2 */
    /* 4 bytes padding */
    wchar_t* Buffer;/* 0x8  8 */
};
size 16 (0x10)3 members1 hole (4 bytes)padding 01 cacheline
Used in (64)
_ACCESS_STATE_BACKING_LAYER_INFORMATION_CIM_FILE_LAYER_INFORMATION_CIM_IMAGE_LAYER_INFORMATION_CMHIVE_CM_KEY_CONTROL_BLOCK_CRITICAL_PROCESS_EXCEPTION_DATA_CURDIR_DEVICE_NODE_DIAGNOSTIC_CONTEXT_DRIVER_EXTENSION_DRIVER_OBJECT_ESERVERSILO_GLOBALS_ETHREAD_EXP_POOL_FILE_OBJECT_HALP_DMA_CONTROLLER_HIVE_LIST_ENTRY_IO_STACK_LOCATION_KLDR_DATA_TABLE_ENTRY_KRESOURCEMANAGER_KSR_FIRMWARE_INFORMATION_KTM_KTRANSACTION_LDR_DATA_TABLE_ENTRY_LOADER_PARAMETER_EXTENSION_MMPAGING_FILE_MM_DRIVER_VERIFIER_DATA_OBJECT_ATTRIBUTES_OBJECT_HEADER_NAME_INFO_OBJECT_NAME_INFORMATION_OBJECT_SYMBOLIC_LINK_OBJECT_TYPE_PCW_COUNTER_INFORMATION_PCW_MASK_INFORMATION_PCW_REGISTRATION_INFORMATION_PEB_PEP_ACPI_EXTENDED_ADDRESS_PEP_ACPI_GPIO_RESOURCE_PEP_ACPI_SPB_RESOURCE_PLUGPLAY_CONTROL_STATUS_DATA_PNP_DEVICE_EVENT_ENTRY_PNP_WATCHDOG_POP_COOLING_EXTENSION_POP_DEVICE_POWER_PROFILE_POP_FX_DEVICE_POP_POLICY_DEVICE_POP_POWER_PLANE_POP_THERMAL_ZONE_PO_FX_COMPONENT_PERF_SET_PPM_IDLE_STATE_PPM_PLATFORM_STATE_REGISTERED_INTERRUPT_CONTROLLER_REGISTERED_IOMMU_RELATIVE_SYMLINK_INFO_RTL_USER_PROCESS_PARAMETERS_SEP_CACHED_HANDLES_ENTRY_DESCRIPTOR_SEP_LOGON_SESSION_REFERENCES_SEP_SILOSTATE_TEB_TRIAGE_DEVICE_NODE_VF_SUSPECT_DRIVER_ENTRY_VHD_LAYER_INFORMATION_WMI_LOGGER_CONTEXT