Min versionXP8
Max version10 TH2
Architecturex86x64
x86 offset
offset:bitpos
Field Namex64 offset
offset:bitpos
0x0000struct _MDL *
Next
0x0000
0x0004int16_t
Size
0x0008
0x0006int16_t
MdlFlags
0x000A
uint16_t
AllocationProcessorNumber
0x000C
uint16_t
Reserved
0x000E
0x0008struct _EPROCESS *
Process
0x0010
0x000Cvoid *
MappedSystemVa
0x0018
0x0010void *
StartVa
0x0020
0x0014unsigned long
ByteCount
0x0028
0x0018unsigned long
ByteOffset
0x002C