copy
//0x4 bytes (sizeof)
struct _MI_SESSION_DRIVER_UNLOAD
{
    union
    {
        VOID (*Function)(struct _DRIVER_OBJECT* arg1);                      //0x0
        ULONG FunctionValue;                                                //0x0
    };
};