Min versionXP
Max version10 TH2
x86 offset
offset:bitpos
Field Name
0x0000struct _MDL *
Next
0x0004int16_t
Size
0x0006int16_t
MdlFlags
0x0008struct _EPROCESS *
Process
0x000Cvoid *
MappedSystemVa
0x0010void *
StartVa
0x0014unsigned long
ByteCount
0x0018unsigned long
ByteOffset