struct _VF_TARGET_VERIFIED_DRIVER_DATA { struct _VF_SUSPECT_DRIVER_ENTRY* SuspectDriverEntry;/* 0x0 8 */ void* WMICallback;/* 0x8 8 */ struct _LIST_ENTRY EtwHandlesListHead;/* 0x10 16 */ union { struct { unsigned long MissedEtwRegistration : 1;/* 0x20:0 4 */ unsigned long IsBootDriver : 1;/* 0x20:1 4 */ unsigned long Spare : 30;/* 0x20:2 4 */ } Flags;/* 0x20 4 */ unsigned long Whole;/* 0x20 4 */ } u1;/* 0x20 4 */ /* 4 bytes padding */ unsigned __int64 Signature;/* 0x28 8 */ unsigned char SeSigningLevel;/* 0x30 1 */ /* 15 bytes padding */ /* ── cacheline 1 boundary (64 bytes) ── */ union _SLIST_HEADER PoolPageHeaders;/* 0x40 16 */ union _SLIST_HEADER PoolTrackers;/* 0x50 16 */ struct _LIST_ENTRY DifPluginPerDriverDataContextHead;/* 0x60 16 */ volatile unsigned long CurrentPagedPoolAllocations;/* 0x70 4 */ volatile unsigned long CurrentNonPagedPoolAllocations;/* 0x74 4 */ unsigned long PeakPagedPoolAllocations;/* 0x78 4 */ unsigned long PeakNonPagedPoolAllocations;/* 0x7c 4 */ /* ── cacheline 2 boundary (128 bytes) ── */ volatile unsigned __int64 PagedBytes;/* 0x80 8 */ volatile unsigned __int64 NonPagedBytes;/* 0x88 8 */ unsigned __int64 PeakPagedBytes;/* 0x90 8 */ unsigned __int64 PeakNonPagedBytes;/* 0x98 8 */ unsigned long RaiseIrqls;/* 0xa0 4 */ unsigned long AcquireSpinLocks;/* 0xa4 4 */ unsigned long SynchronizeExecutions;/* 0xa8 4 */ unsigned long AllocationsWithNoTag;/* 0xac 4 */ unsigned long AllocationsFailed;/* 0xb0 4 */ unsigned long AllocationsFailedDeliberately;/* 0xb4 4 */ unsigned __int64 LockedBytes;/* 0xb8 8 */ /* ── cacheline 3 boundary (192 bytes) ── */ unsigned __int64 PeakLockedBytes;/* 0xc0 8 */ unsigned __int64 MappedLockedBytes;/* 0xc8 8 */ unsigned __int64 PeakMappedLockedBytes;/* 0xd0 8 */ unsigned __int64 MappedIoSpaceBytes;/* 0xd8 8 */ unsigned __int64 PeakMappedIoSpaceBytes;/* 0xe0 8 */ unsigned __int64 PagesForMdlBytes;/* 0xe8 8 */ unsigned __int64 PeakPagesForMdlBytes;/* 0xf0 8 */ unsigned __int64 ContiguousMemoryBytes;/* 0xf8 8 */ /* ── cacheline 4 boundary (256 bytes) ── */ unsigned __int64 PeakContiguousMemoryBytes;/* 0x100 8 */ struct _LIST_ENTRY ContiguousMemoryListHead;/* 0x108 16 */};size 288 (0x120)34 members2 holes (19 bytes)padding 85 cachelines
Used in (1)