_LDR_DATA_TABLE_ENTRY

Metadatacopy
struct _LDR_DATA_TABLE_ENTRY {
    struct _LIST_ENTRY InLoadOrderLinks;/* 0x0  8 */
    struct _LIST_ENTRY InMemoryOrderLinks;/* 0x8  8 */
    struct _LIST_ENTRY InInitializationOrderLinks;/* 0x10  8 */
    void* DllBase;/* 0x18  4 */
    void* EntryPoint;/* 0x1c  4 */
    unsigned long SizeOfImage;/* 0x20  4 */
    struct _UNICODE_STRING FullDllName;/* 0x24  8 */
    struct _UNICODE_STRING BaseDllName;/* 0x2c  8 */
    union {
        unsigned char FlagGroup[4];/* 0x34  4 */
        unsigned long Flags;/* 0x34  4 */
        struct {
            unsigned long PackagedBinary : 1;/* 0x34:0  4 */
            unsigned long MarkedForRemoval : 1;/* 0x34:1  4 */
            unsigned long ImageDll : 1;/* 0x34:2  4 */
            unsigned long LoadNotificationsSent : 1;/* 0x34:3  4 */
            unsigned long TelemetryEntryProcessed : 1;/* 0x34:4  4 */
            unsigned long ProcessStaticImport : 1;/* 0x34:5  4 */
            unsigned long InLegacyLists : 1;/* 0x34:6  4 */
            unsigned long InIndexes : 1;/* 0x34:7  4 */
            unsigned long ShimDll : 1;/* 0x34:8  4 */
            unsigned long InExceptionTable : 1;/* 0x34:9  4 */
            unsigned long ReservedFlags1 : 2;/* 0x34:10  4 */
            unsigned long LoadInProgress : 1;/* 0x34:12  4 */
            unsigned long LoadConfigProcessed : 1;/* 0x34:13  4 */
            unsigned long EntryProcessed : 1;/* 0x34:14  4 */
            unsigned long ProtectDelayLoad : 1;/* 0x34:15  4 */
            unsigned long ReservedFlags3 : 2;/* 0x34:16  4 */
            unsigned long DontCallForThreads : 1;/* 0x34:18  4 */
            unsigned long ProcessAttachCalled : 1;/* 0x34:19  4 */
            unsigned long ProcessAttachFailed : 1;/* 0x34:20  4 */
            unsigned long CorDeferredValidate : 1;/* 0x34:21  4 */
            unsigned long CorImage : 1;/* 0x34:22  4 */
            unsigned long DontRelocate : 1;/* 0x34:23  4 */
            unsigned long CorILOnly : 1;/* 0x34:24  4 */
            unsigned long ChpeImage : 1;/* 0x34:25  4 */
            unsigned long ReservedFlags5 : 2;/* 0x34:26  4 */
            unsigned long Redirected : 1;/* 0x34:28  4 */
            unsigned long ReservedFlags6 : 2;/* 0x34:29  4 */
            unsigned long CompatDatabaseProcessed : 1;/* 0x34:31  4 */
        };/* 0x34  4 */
    };/* 0x34  4 */
    unsigned short ObsoleteLoadCount;/* 0x38  2 */
    unsigned short TlsIndex;/* 0x3a  2 */
    struct _LIST_ENTRY HashLinks;/* 0x3c  8 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    unsigned long TimeDateStamp;/* 0x44  4 */
    struct _ACTIVATION_CONTEXT* EntryPointActivationContext;/* 0x48  4 */
    void* Lock;/* 0x4c  4 */
    struct _LDR_DDAG_NODE* DdagNode;/* 0x50  4 */
    struct _LIST_ENTRY NodeModuleLink;/* 0x54  8 */
    struct _LDRP_LOAD_CONTEXT* LoadContext;/* 0x5c  4 */
    void* ParentDllBase;/* 0x60  4 */
    void* SwitchBackContext;/* 0x64  4 */
    struct _RTL_BALANCED_NODE BaseAddressIndexNode;/* 0x68  12 */
    struct _RTL_BALANCED_NODE MappingInfoIndexNode;/* 0x74  12 */
    /* ── cacheline 2 boundary (128 bytes) ── */
    unsigned long OriginalBase;/* 0x80  4 */
    /* 4 bytes padding */
    union _LARGE_INTEGER LoadTime;/* 0x88  8 */
    unsigned long BaseNameHashValue;/* 0x90  4 */
    enum _LDR_DLL_LOAD_REASON LoadReason;/* 0x94  4 */
    unsigned long ImplicitPathOptions;/* 0x98  4 */
    unsigned long ReferenceCount;/* 0x9c  4 */
    unsigned long DependentLoadFlags;/* 0xa0  4 */
    unsigned char SigningLevel;/* 0xa4  1 */
};