Metadatacopystruct _OBJECT_HEADER_PROCESS_INFO { struct _EPROCESS* ExclusiveProcess;/* 0x0 4 */ unsigned long Reserved;/* 0x4 4 */};