Geoff Chappell, Software Analyst
The SYSTEM_BIGPOOL_ENTRY structure is a recurring element in the SYSTEM_BIGPOOL_INFORMATION that a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemBigPoolInformation (0x42).
The SYSTEM_BIGPOOL_ENTRY structure is not documented.
The SYSTEM_BIGPOOL_ENTRY is 0x0C or 0x18 bytes in 32-bit and 64-bit Windows, respectively.
Offset (x86) | Offset (x64) | Definition |
---|---|---|
0x00 | 0x00 |
union { PVOID VirtualAddress; ULONG_PTR NonPaged : 1; }; |
0x04 | 0x08 |
ULONG_PTR SizeInBytes; |
0x08 | 0x10 |
union { UCHAR Tag [4]; ULONG TagUlong; }; |