Min version | XP |
---|---|
Max version | 10 TH2 |
x86 offset offset:bitpos | Field Name |
0x0000 | struct _MDL * Next |
0x0004 | int16_t Size |
0x0006 | int16_t MdlFlags |
0x0008 | struct _EPROCESS * Process |
0x000C | void * MappedSystemVa |
0x0010 | void * StartVa |
0x0014 | unsigned long ByteCount |
0x0018 | unsigned long ByteOffset |