NtUserBlocks

final class ntoseye.NtUserBlocks

Subclass of BaseRecord.

A legacy-LFH user block region in one busy NT-heap entry.

property block_count: int

property block_size: int

Bytes per block.

property busy: bytes

One bit for each block, set if the block is busy (_RTL_BITMAP bit order: block i is byte i / 8, bit i % 8).

property busy_count: int

property first_block: int

property header: int

The _HEAP_USERDATA_HEADER.

property stride: int

The distance in bytes between consecutive blocks.

property subsegment: int

The _HEAP_SUBSEGMENT that owns the region.