_VF_TARGET_VERIFIED_DRIVER_DATA

//0xb0 bytes (sizeof) struct _VF_TARGET_VERIFIED_DRIVER_DATA { struct _VF_SUSPECT_DRIVER_ENTRY* SuspectDriverEntry; //0x0 VOID* WMICallback; //0x4 struct _LIST_ENTRY EtwHandlesListHead; //0x8 union { struct { ULONG MissedEtwRegistration:1; //0x10 ULONG IsBootDriver:1; //0x10 ULONG Spare:30; //0x10 } Flags; //0x10 ULONG Whole; //0x10 } u1; //0x10 ULONG Signature; //0x14 UCHAR SeSigningLevel; //0x18 union _SLIST_HEADER PoolPageHeaders; //0x20 union _SLIST_HEADER PoolTrackers; //0x28 volatile ULONG CurrentPagedPoolAllocations; //0x30 volatile ULONG CurrentNonPagedPoolAllocations; //0x34 ULONG PeakPagedPoolAllocations; //0x38 ULONG PeakNonPagedPoolAllocations; //0x3c volatile ULONG PagedBytes; //0x40 volatile ULONG NonPagedBytes; //0x44 ULONG PeakPagedBytes; //0x48 ULONG PeakNonPagedBytes; //0x4c ULONG RaiseIrqls; //0x50 ULONG AcquireSpinLocks; //0x54 ULONG SynchronizeExecutions; //0x58 ULONG AllocationsWithNoTag; //0x5c ULONG AllocationsFailed; //0x60 ULONG AllocationsFailedDeliberately; //0x64 ULONG LockedBytes; //0x68 ULONG PeakLockedBytes; //0x6c ULONG MappedLockedBytes; //0x70 ULONG PeakMappedLockedBytes; //0x74 ULONG MappedIoSpaceBytes; //0x78 ULONG PeakMappedIoSpaceBytes; //0x7c ULONG PagesForMdlBytes; //0x80 ULONG PeakPagesForMdlBytes; //0x84 ULONG ContiguousMemoryBytes; //0x88 ULONG PeakContiguousMemoryBytes; //0x8c struct _LIST_ENTRY ContiguousMemoryListHead; //0x90 volatile ULONG ExecutePoolTypes; //0x98 volatile ULONG ExecutePageProtections; //0x9c volatile ULONG ExecutePageMappings; //0xa0 volatile ULONG ExecuteWriteSections; //0xa4 volatile ULONG SectionAlignmentFailures; //0xa8 volatile ULONG IATInExecutableSection; //0xac };