Geoff Chappell, Software Analyst
The SYSTEM_BIGPOOL_ENTRY structure is a recurring element in the SYSTEM_BIGPOOL_INFORMATION that a successful call to ZwQuerySystemInformation or NtQuerySystemInformation produces in its output buffer when given the information class SystemBigPoolInformation (0x42).
The SYSTEM_BIGPOOL_ENTRY structure is not documented.
The SYSTEM_BIGPOOL_ENTRY is 0x0C or 0x18 bytes in 32-bit and 64-bit Windows, respectively.
| Offset (x86) | Offset (x64) | Definition |
|---|---|---|
| 0x00 | 0x00 |
union {
PVOID VirtualAddress;
ULONG_PTR NonPaged : 1;
};
|
| 0x04 | 0x08 |
ULONG_PTR SizeInBytes; |
| 0x08 | 0x10 |
union {
UCHAR Tag [4];
ULONG TagUlong;
};
|