Metadatacopystruct _MI_SESSION_DRIVER_UNLOAD { union { void (*Function)(struct _DRIVER_OBJECT*);/* 0x0 4 */ unsigned long FunctionValue;/* 0x0 4 */ };/* 0x0 4 */};