Geoff Chappell, Software Analyst
The MI_PARTITION_SEGMENTS structure exists only within an MI_PARTITION. It is 0xA8 or 0x0110 bytes in 32-bit and 64-bit Windows, respectively.
Offset (x86) | Offset (x64) | Definition |
---|---|---|
0x00 | 0x00 |
KEVENT DeleteSubsectionCleanup; |
0x10 | 0x18 |
KEVENT UnusedSegmentCleanup; |
0x20 | 0x30 |
ULONG_PTR SubsectionDeletePtes; |
0x24 | 0x38 |
MMDEREFERENCE_SEGMENT_HEADER DereferenceSegmentHeader; |
0x40 | 0x68 |
LIST_ENTRY DeleteOnCloseList; |
0x48 | 0x78 |
KTIMER DeleteOnCloseTimer; |
0x70 | 0xB8 |
UCHAR DeleteOnCloseTimerActive; |
0x74 | 0xBC |
ULONG DeleteOnCloseCount; |
0x78 | 0xC0 |
LIST_ENTRY UnusedSegmentList; |
0x80 | 0xD0 |
LIST_ENTRY UnusedSubsectionList; |
0x88 | 0xE0 |
LIST_ENTRY DeleteSubsectionList; |
0x90 | 0xF0 |
KEVENT ControlAreaDeleteEvent; |
0xA0 | 0x0108 |
SINGLE_LIST_ENTRY ControlAreaDeleteList; |