Metadatacopystruct _MI_SESSION_DRIVER_UNLOAD { union { void (*Function)(struct _DRIVER_OBJECT*);/* 0x0 8 */ unsigned __int64 FunctionValue;/* 0x0 8 */ };/* 0x0 8 */};