//0x80 bytes (sizeof)
struct _CONTROL_AREA
{
struct _SEGMENT* Segment; //0x0
union
{
struct _LIST_ENTRY ListHead; //0x8
VOID* AweContext; //0x8
};
ULONGLONG NumberOfSectionReferences; //0x18
ULONGLONG NumberOfPfnReferences; //0x20
ULONGLONG NumberOfMappedViews; //0x28
ULONGLONG NumberOfUserReferences; //0x30
union
{
ULONG LongFlags; //0x38
struct _MMSECTION_FLAGS Flags; //0x38
} u; //0x38
union
{
ULONG LongFlags; //0x3c
struct _MMSECTION_FLAGS2 Flags; //0x3c
} u1; //0x3c
struct _EX_FAST_REF FilePointer; //0x40
volatile LONG ControlAreaLock; //0x48
ULONG ModifiedWriteCount; //0x4c
struct _MI_CONTROL_AREA_WAIT_BLOCK* WaitList; //0x50
union
{
struct
{
union
{
ULONG NumberOfSystemCacheViews; //0x58
ULONG ImageRelocationStartBit; //0x58
};
union
{
volatile LONG WritableUserReferences; //0x5c
struct
{
ULONG ImageRelocationSizeIn64k:16; //0x5c
ULONG LargePage:1; //0x5c
ULONG AweSection:1; //0x5c
ULONG SystemImage:1; //0x5c
ULONG StrongCode:2; //0x5c
ULONG CantMove:1; //0x5c
ULONG BitMap:2; //0x5c
ULONG ImageActive:1; //0x5c
ULONG ImageBaseOkToReuse:1; //0x5c
};
};
union
{
ULONG FlushInProgressCount; //0x60
ULONG NumberOfSubsections; //0x60
struct _MI_IMAGE_SECURITY_REFERENCE* SeImageStub; //0x60
};
} e2; //0x58
} u2; //0x58
struct _EX_PUSH_LOCK FileObjectLock; //0x68
volatile ULONGLONG LockedPages; //0x70
union
{
ULONGLONG IoAttributionContext:61; //0x78
ULONGLONG Spare:3; //0x78
ULONGLONG ImageCrossPartitionCharge; //0x78
ULONGLONG CommittedPageCount:36; //0x78
} u3; //0x78
};