_CONTROL_AREA

Metadatacopy
struct _CONTROL_AREA {
    struct _SEGMENT* Segment;/* 0x0  4 */
    union {
        struct _LIST_ENTRY ListHead;/* 0x4  8 */
        void* AweContext;/* 0x4  4 */
    };/* 0x4  8 */
    unsigned long NumberOfSectionReferences;/* 0xc  4 */
    unsigned long NumberOfPfnReferences;/* 0x10  4 */
    unsigned long NumberOfMappedViews;/* 0x14  4 */
    unsigned long NumberOfUserReferences;/* 0x18  4 */
    union {
        unsigned long LongFlags;/* 0x1c  4 */
        struct _MMSECTION_FLAGS Flags;/* 0x1c  4 */
    } u;/* 0x1c  4 */
    struct _EX_FAST_REF FilePointer;/* 0x20  4 */
    volatile long ControlAreaLock;/* 0x24  4 */
    unsigned long ModifiedWriteCount;/* 0x28  4 */
    struct _MI_CONTROL_AREA_WAIT_BLOCK* WaitList;/* 0x2c  4 */
    union {
        struct {
            union {
                unsigned long NumberOfSystemCacheViews;/* 0x30  4 */
                unsigned long ImageRelocationStartBit;/* 0x30  4 */
            };/* 0x30  4 */
            union {
                volatile long WritableUserReferences;/* 0x34  4 */
                struct {
                    unsigned long ImageRelocationSizeIn64k : 16;/* 0x34:0  4 */
                    unsigned long SystemImage : 1;/* 0x34:16  4 */
                    unsigned long CantMove : 1;/* 0x34:17  4 */
                    unsigned long StrongCode : 2;/* 0x34:18  4 */
                    unsigned long BitMap : 2;/* 0x34:20  4 */
                    unsigned long ImageActive : 1;/* 0x34:22  4 */
                    unsigned long ImageBaseOkToReuse : 1;/* 0x34:23  4 */
                };/* 0x34  4 */
            };/* 0x34  4 */
            union {
                unsigned long FlushInProgressCount;/* 0x38  4 */
                unsigned long NumberOfSubsections;/* 0x38  4 */
                struct _MI_IMAGE_SECURITY_REFERENCE* SeImageStub;/* 0x38  4 */
            };/* 0x38  4 */
        } e2;/* 0x30  12 */
    } u2;/* 0x30  12 */
    struct _EX_PUSH_LOCK FileObjectLock;/* 0x3c  4 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    volatile unsigned __int64 LockedPages;/* 0x40  8 */
    union {
        struct {
            unsigned long IoAttributionContext : 29;/* 0x48:0  4 */
            unsigned long Spare : 3;/* 0x48:29  4 */
        };/* 0x48  4 */
        unsigned long ImageCrossPartitionCharge;/* 0x48  4 */
        unsigned long CommittedPageCount : 20;/* 0x48:0  4 */
    } u3;/* 0x48  4 */
};