_MI_VAD_EVENT_BLOCK

Metadatacopy
struct _MI_VAD_EVENT_BLOCK {
    struct _MI_VAD_EVENT_BLOCK* Next;/* 0x0  8 */
    unsigned short WaitReason;/* 0x8  2 */
    unsigned char Attributes;/* 0xa  1 */
    /* 5 bytes padding */
    struct _EPROCESS* OwningProcess;/* 0x10  8 */
    struct _MI_QUOTA_TRACKER QuotaTracker;/* 0x18  1 */
    /* 7 bytes padding */
    void (*DeleteFunction)(struct _MI_VAD_EVENT_BLOCK*);/* 0x20  8 */
    union {
        struct _RTL_BITMAP_EX BitMap;/* 0x28  16 */
        struct _KGATE Gate;/* 0x28  24 */
        struct _MI_SECURED_VAD_LIST SecureInfo;/* 0x28  24 */
        struct _MI_WRITE_WATCH_BLOCK WriteWatch;/* 0x28  24 */
        struct _MI_ROTATE_EVENT_BLOCK Rotate;/* 0x28  4 */
        struct _MI_LARGEPAGE_VAD_INFO LargePage;/* 0x28  40 */
        struct _MI_PHYSICAL_VIEW AweView;/* 0x28  80 */
        struct _ETHREAD* CreatingThread;/* 0x28  8 */
        struct _MI_SUB64K_FREE_RANGES PebTeb;/* 0x28  56 */
        struct _MMVAD_SHORT* PlaceholderVad;/* 0x28  8 */
        void* HotPatchEntry;/* 0x28  8 */
        struct _MI_VAD_PRIVATE_FIXUPS PrivateFixups;/* 0x28  32 */
    };/* 0x28  80 */
};