Geoff Chappell - Software Analyst
The MMWSL_FULL evolved from splitting the MMWSL structure into parts for the 1607 release of Windows 10.
As an internal structure with little, if any, visibility outside the kernel, the MMWSL_FULL varies greatly between versions and even between builds.
Version | Size (x86) | Size (x64) |
---|---|---|
1607 | 0x0120 | 0x0200 |
These sizes, and the names, offsets and types in the tables that follow, are from Microsoft’s symbol files for the kernel.
Offset (x86) | Offset (x64) | Definition | Versions |
---|---|---|---|
0x00 | 0x00 |
MMWSL_INSTANCE Instance; |
1607 and higher |
0xE0 | 0x01A0 |
MMWSL_SHARED Shared; |
1607 and higher |