w10 1909 build

[boris768]

seems dynamic data doesn`t changed from 1903

pData->ver              = WINVER_10_RS7; //18363 ?
pData->KExecOpt         = 0x1C3;
pData->Protection       = 0x6FA;
pData->EProcessFlags2   = 0x850;    // MitigationFlags offset
pData->ObjTable         = 0x418;
pData->VadRoot          = 0x658;
pData->NtCreateThdIndex = 0xBD;
pData->NtTermThdIndex   = 0x53;
pData->PrevMode         = 0x232;
pData->ExitStatus       = 0x710;
BBScanSection( "PAGE", (PCUCHAR)"\x4C\x8B\xDC\x49\x89\x5B\x08\x55\x56\x57\x48\x83\xEC", 0xCC, 13, (PVOID)&pData->MiAllocPage) 
if (NT_SUCCESS( BBScanSection( "PAGE", (PCUCHAR)"\x48\x83\xC7\x18\x48\x8B\x17", 0xCC, 7, (PVOID)&pData->ExRemoveTable ) ))
	pData->ExRemoveTable -= 0x34;

used ntoskrnl.exe for analyze
https://yadi.sk/d/gqmtJ5AMV0rOZA

[AzeDonLees]

IS it true?

[DarthTon]

Yes, nothing changed.