/* Header autogenerated by Brandon Falk's PDB Dumper * * Invocation: C:\projects\pdbdump_2\pdbdump.exe L:\symbolarchive\win8_spB_x64\appxdeploymentclient.pdb\37E2839344B34755A7EFB4124563471C1\appxdeploymentclient.pdb */ enum DSAFIPSVERSION_ENUM { DSA_FIPS186_2 = 0, DSA_FIPS186_3 = 1 }; enum HASHALGORITHM_ENUM { DSA_HASH_ALGORITHM_SHA1 = 0, DSA_HASH_ALGORITHM_SHA256 = 1, DSA_HASH_ALGORITHM_SHA512 = 2 }; struct _CRYPT_ECC_PRIVATE_KEY_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char PrivateKey[16]; /* +0x0008 06 10 00 00 */ char *szCurveOid; /* +0x0018 */ unsigned char PublicKey[24]; /* +0x0020 07 10 00 00 */ }; struct _CMSG_RECIPIENT_ENCRYPTED_KEY_INFO { unsigned char RecipientId[40]; /* +0x0000 0c 10 00 00 */ unsigned char EncryptedKey[16]; /* +0x0028 06 10 00 00 */ unsigned char Date[8]; /* +0x0038 0d 10 00 00 */ unsigned char pOtherAttr[8]; /* +0x0040 0f 10 00 00 */ }; struct _CERT_CHAIN_ELEMENT { unsigned long cbSize; /* +0x0000 */ unsigned char pCertContext[8]; /* +0x0008 20 10 00 00 */ unsigned char TrustStatus[8]; /* +0x0010 21 10 00 00 */ unsigned char pRevocationInfo[8]; /* +0x0018 23 10 00 00 */ unsigned char pIssuanceUsage[8]; /* +0x0020 25 10 00 00 */ unsigned char pApplicationUsage[8]; /* +0x0028 25 10 00 00 */ unsigned char pwszExtendedErrorInfo[8]; /* +0x0030 27 10 00 00 */ }; struct _CRYPT_PROVIDER_REG { unsigned long cAliases; /* +0x0000 */ unsigned char rgpszAliases[8]; /* +0x0008 2a 10 00 00 */ unsigned char pUM[8]; /* +0x0010 2c 10 00 00 */ unsigned char pKM[8]; /* +0x0018 2c 10 00 00 */ }; struct _CERT_ECC_SIGNATURE { unsigned char r[16]; /* +0x0000 06 10 00 00 */ unsigned char s[16]; /* +0x0010 06 10 00 00 */ }; struct _CRYPT_ATTRIBUTES { unsigned long cAttr; /* +0x0000 */ unsigned char rgAttr[8]; /* +0x0008 32 10 00 00 */ }; struct _CRYPT_URL_ARRAY { unsigned long cUrl; /* +0x0000 */ unsigned char rgwszUrl[8]; /* +0x0008 2a 10 00 00 */ }; struct _CERT_QC_STATEMENT { char *pszStatementId; /* +0x0000 */ unsigned char StatementInfo[16]; /* +0x0008 06 10 00 00 */ }; struct _CRL_CONTEXT { unsigned long dwCertEncodingType; /* +0x0000 */ unsigned char *pbCrlEncoded; /* +0x0008 */ unsigned long cbCrlEncoded; /* +0x0010 */ unsigned char pCrlInfo[8]; /* +0x0018 3c 10 00 00 */ void *hCertStore; /* +0x0020 */ }; struct _CRYPT_KEY_PROV_INFO { unsigned char pwszContainerName[8]; /* +0x0000 71 06 00 00 */ unsigned char pwszProvName[8]; /* +0x0008 71 06 00 00 */ unsigned long dwProvType; /* +0x0010 */ unsigned long dwFlags; /* +0x0014 */ unsigned long cProvParam; /* +0x0018 */ unsigned char rgProvParam[8]; /* +0x0020 40 10 00 00 */ unsigned long dwKeySpec; /* +0x0028 */ }; struct _BCRYPT_KEY_BLOB { unsigned long Magic; /* +0x0000 */ }; struct _CMSG_MAIL_LIST_RECIPIENT_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 45 10 00 00 */ void *pvKeyEncryptionAuxInfo; /* +0x0020 */ unsigned long long hCryptProv; /* +0x0028 */ unsigned long dwKeyChoice; /* +0x0030 */ unsigned long long hKeyEncryptionKey; /* +0x0038 */ void *pvKeyEncryptionKey; /* +0x0038 */ unsigned char KeyId[16]; /* +0x0040 06 10 00 00 */ unsigned char Date[8]; /* +0x0050 0d 10 00 00 */ unsigned char pOtherAttr[8]; /* +0x0058 0f 10 00 00 */ }; struct _CERT_SERVER_OCSP_RESPONSE_CONTEXT { unsigned long cbSize; /* +0x0000 */ unsigned char *pbEncodedOcspResponse; /* +0x0008 */ unsigned long cbEncodedOcspResponse; /* +0x0010 */ }; struct _CERT_CHAIN_FIND_BY_ISSUER_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pszUsageIdentifier[8]; /* +0x0008 4f 10 00 00 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned long dwAcquirePrivateKeyFlags; /* +0x0014 */ unsigned long cIssuer; /* +0x0018 */ unsigned char rgIssuer[8]; /* +0x0020 12 10 00 00 */ unsigned char pfnFindCallback[8]; /* +0x0028 52 10 00 00 */ void *pvFindArg; /* +0x0030 */ }; struct _HMAC_Info { unsigned char HashAlgid[8]; /* +0x0000 75 00 00 00 */ unsigned char *pbInnerString; /* +0x0008 */ unsigned long cbInnerString; /* +0x0010 */ unsigned char *pbOuterString; /* +0x0018 */ unsigned long cbOuterString; /* +0x0020 */ }; struct _CRYPT_OID_FUNC_ENTRY { unsigned char pszOID[8]; /* +0x0000 4f 10 00 00 */ void *pvFuncAddr; /* +0x0008 */ }; struct _CTL_VERIFY_USAGE_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned long dwError; /* +0x0004 */ unsigned long dwFlags; /* +0x0008 */ unsigned char ppCtl[8]; /* +0x0010 5e 10 00 00 */ unsigned long dwCtlEntryIndex; /* +0x0018 */ unsigned char ppSigner[8]; /* +0x0020 5f 10 00 00 */ unsigned long dwSignerIndex; /* +0x0028 */ }; struct _CERT_CHAIN_CONTEXT { unsigned long cbSize; /* +0x0000 */ unsigned char TrustStatus[8]; /* +0x0004 21 10 00 00 */ unsigned long cChain; /* +0x000c */ unsigned char rgpChain[8]; /* +0x0010 66 10 00 00 */ unsigned long cLowerQualityChainContext; /* +0x0018 */ unsigned char rgpLowerQualityChainContext[8]; /* +0x0020 6a 10 00 00 */ unsigned char fHasRevocationFreshnessTime[4]; /* +0x0028 74 00 00 00 */ unsigned long dwRevocationFreshnessTime; /* +0x002c */ unsigned long dwCreateFlags; /* +0x0030 */ unsigned char ChainId[20]; /* +0x0034 6b 10 00 00 */ }; struct _CERT_POLICY_QUALIFIER_USER_NOTICE { unsigned char pNoticeReference[8]; /* +0x0000 71 10 00 00 */ unsigned char pszDisplayText[8]; /* +0x0008 71 06 00 00 */ }; struct _CERT_OTHER_LOGOTYPE_INFO { char *pszObjId; /* +0x0000 */ unsigned char LogotypeInfo[16]; /* +0x0008 74 10 00 00 */ }; struct _CERT_ACCESS_DESCRIPTION { char *pszAccessMethod; /* +0x0000 */ unsigned char AccessLocation[24]; /* +0x0008 7d 10 00 00 */ }; struct _CRL_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SignatureAlgorithm[24]; /* +0x0008 45 10 00 00 */ unsigned char Issuer[16]; /* +0x0020 06 10 00 00 */ unsigned char ThisUpdate[8]; /* +0x0030 0d 10 00 00 */ unsigned char NextUpdate[8]; /* +0x0038 0d 10 00 00 */ unsigned long cCRLEntry; /* +0x0040 */ unsigned char rgCRLEntry[8]; /* +0x0048 81 10 00 00 */ unsigned long cExtension; /* +0x0050 */ unsigned char rgExtension[8]; /* +0x0058 83 10 00 00 */ }; struct _CRYPT_TIMESTAMP_CONTEXT { unsigned long cbEncoded; /* +0x0000 */ unsigned char *pbEncoded; /* +0x0008 */ unsigned char pTimeStamp[8]; /* +0x0010 87 10 00 00 */ }; struct _CERT_SIGNED_CONTENT_INFO { unsigned char ToBeSigned[16]; /* +0x0000 06 10 00 00 */ unsigned char SignatureAlgorithm[24]; /* +0x0010 45 10 00 00 */ unsigned char Signature[24]; /* +0x0028 07 10 00 00 */ }; struct _CMC_TAGGED_ATTRIBUTE { unsigned long dwBodyPartID; /* +0x0000 */ unsigned char Attribute[24]; /* +0x0008 31 10 00 00 */ }; struct _CTL_FIND_SUBJECT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pUsagePara[8]; /* +0x0008 8f 10 00 00 */ unsigned long dwSubjectType; /* +0x0010 */ void *pvSubject; /* +0x0018 */ }; struct _OCSP_CERT_ID { unsigned char HashAlgorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char IssuerNameHash[16]; /* +0x0018 06 10 00 00 */ unsigned char IssuerKeyHash[16]; /* +0x0028 06 10 00 00 */ unsigned char SerialNumber[16]; /* +0x0038 06 10 00 00 */ }; struct _CRYPT_SMIME_CAPABILITIES { unsigned long cCapability; /* +0x0000 */ unsigned char rgCapability[8]; /* +0x0008 97 10 00 00 */ }; struct _CERT_SELECT_CHAIN_PARA { void *hChainEngine; /* +0x0000 */ unsigned char pTime[8]; /* +0x0008 9e 10 00 00 */ void *hAdditionalStore; /* +0x0010 */ unsigned char pChainPara[8]; /* +0x0018 a0 10 00 00 */ unsigned long dwFlags; /* +0x0020 */ }; struct _BCRYPT_DSA_PARAMETER_HEADER { unsigned long cbLength; /* +0x0000 */ unsigned long dwMagic; /* +0x0004 */ unsigned long cbKeyLength; /* +0x0008 */ unsigned char Count[4]; /* +0x000c a3 10 00 00 */ unsigned char Seed[20]; /* +0x0010 a4 10 00 00 */ unsigned char q[20]; /* +0x0024 a4 10 00 00 */ }; struct _CERT_ALT_NAME_INFO { unsigned long cAltEntry; /* +0x0000 */ unsigned char rgAltEntry[8]; /* +0x0008 a7 10 00 00 */ }; struct _CERT_BASIC_CONSTRAINTS2_INFO { unsigned char fCA[4]; /* +0x0000 74 00 00 00 */ unsigned char fPathLenConstraint[4]; /* +0x0004 74 00 00 00 */ unsigned long dwPathLenConstraint; /* +0x0008 */ }; struct _CERT_LOGOTYPE_EXT_INFO { unsigned long cCommunityLogo; /* +0x0000 */ unsigned char rgCommunityLogo[8]; /* +0x0008 ac 10 00 00 */ unsigned char pIssuerLogo[8]; /* +0x0010 ac 10 00 00 */ unsigned char pSubjectLogo[8]; /* +0x0018 ac 10 00 00 */ unsigned long cOtherLogo; /* +0x0020 */ unsigned char rgOtherLogo[8]; /* +0x0028 ae 10 00 00 */ }; struct _CERT_LOGOTYPE_AUDIO { unsigned char LogotypeDetails[24]; /* +0x0000 b1 10 00 00 */ unsigned char pLogotypeAudioInfo[8]; /* +0x0018 b3 10 00 00 */ }; struct _CMSG_SIGNER_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char Issuer[16]; /* +0x0008 06 10 00 00 */ unsigned char SerialNumber[16]; /* +0x0018 06 10 00 00 */ unsigned char HashAlgorithm[24]; /* +0x0028 45 10 00 00 */ unsigned char HashEncryptionAlgorithm[24]; /* +0x0040 45 10 00 00 */ unsigned char EncryptedHash[16]; /* +0x0058 06 10 00 00 */ unsigned char AuthAttrs[16]; /* +0x0068 b8 10 00 00 */ unsigned char UnauthAttrs[16]; /* +0x0078 b8 10 00 00 */ }; struct _CRYPT_PROVIDER_REF { unsigned long dwInterface; /* +0x0000 */ unsigned char pszFunction[8]; /* +0x0008 71 06 00 00 */ unsigned char pszProvider[8]; /* +0x0010 71 06 00 00 */ unsigned long cProperties; /* +0x0018 */ unsigned char rgpProperties[8]; /* +0x0020 c1 10 00 00 */ unsigned char pUM[8]; /* +0x0028 c3 10 00 00 */ unsigned char pKM[8]; /* +0x0030 c3 10 00 00 */ }; struct _PUBKEYVER3 { unsigned long magic; /* +0x0000 */ unsigned long bitlenP; /* +0x0004 */ unsigned long bitlenQ; /* +0x0008 */ unsigned long bitlenJ; /* +0x000c */ unsigned char DSSSeed[24]; /* +0x0010 ca 10 00 00 */ }; struct _CERT_REGISTRY_STORE_ROAMING_PARA { unsigned char hKey[8]; /* +0x0000 ce 10 00 00 */ unsigned char pwszStoreDirectory[8]; /* +0x0008 71 06 00 00 */ }; struct _CERT_CONTEXT { unsigned long dwCertEncodingType; /* +0x0000 */ unsigned char *pbCertEncoded; /* +0x0008 */ unsigned long cbCertEncoded; /* +0x0010 */ unsigned char pCertInfo[8]; /* +0x0018 d8 10 00 00 */ void *hCertStore; /* +0x0020 */ }; struct _CERT_LDAP_STORE_OPENED_PARA { void *pvLdapSessionHandle; /* +0x0000 */ unsigned char pwszLdapUrl[8]; /* +0x0008 27 10 00 00 */ }; struct _EV_EXTRA_CERT_CHAIN_POLICY_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned long dwQualifiers; /* +0x0004 */ unsigned long dwIssuanceUsageIndex; /* +0x0008 */ }; struct NCryptProviderName { unsigned char pszName[8]; /* +0x0000 71 06 00 00 */ unsigned char pszComment[8]; /* +0x0008 71 06 00 00 */ }; struct _CERT_STORE_PROV_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long cStoreProvFunc; /* +0x0004 */ unsigned char rgpvStoreProvFunc[8]; /* +0x0008 1a 10 00 00 */ void *hStoreProv; /* +0x0010 */ unsigned long dwStoreProvFlags; /* +0x0018 */ void *hStoreProvFuncAddr2; /* +0x0020 */ }; struct _CERT_BIOMETRIC_EXT_INFO { unsigned long cBiometricData; /* +0x0000 */ unsigned char rgBiometricData[8]; /* +0x0008 ea 10 00 00 */ }; struct _CMS_DH_KEY_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char Algid[4]; /* +0x0004 75 00 00 00 */ char *pszContentEncObjId; /* +0x0008 */ unsigned char PubInfo[16]; /* +0x0010 06 10 00 00 */ void *pReserved; /* +0x0020 */ }; struct _CRYPTOAPI_BLOB { unsigned long cbData; /* +0x0000 */ unsigned char *pbData; /* +0x0008 */ }; struct _CMC_ADD_EXTENSIONS_INFO { unsigned long dwCmcDataReference; /* +0x0000 */ unsigned long cCertReference; /* +0x0004 */ unsigned long *rgdwCertReference; /* +0x0008 */ unsigned long cExtension; /* +0x0010 */ unsigned char rgExtension[8]; /* +0x0018 83 10 00 00 */ }; struct _CERT_TRUST_STATUS { unsigned long dwErrorStatus; /* +0x0000 */ unsigned long dwInfoStatus; /* +0x0004 */ }; struct _CERT_OR_CRL_BLOB { unsigned long dwChoice; /* +0x0000 */ unsigned long cbEncoded; /* +0x0004 */ unsigned char *pbEncoded; /* +0x0008 */ }; struct _CRYPT_RC2_CBC_PARAMETERS { unsigned long dwVersion; /* +0x0000 */ unsigned char fIV[4]; /* +0x0004 74 00 00 00 */ unsigned char rgbIV[8]; /* +0x0008 fb 10 00 00 */ }; struct _CERT_FORTEZZA_DATA_PROP { unsigned char SerialNumber[8]; /* +0x0000 fb 10 00 00 */ unsigned char CertIndex[4]; /* +0x0008 74 00 00 00 */ unsigned char CertLabel[36]; /* +0x000c fe 10 00 00 */ }; struct _CMSG_CTRL_DEL_SIGNER_UNAUTH_ATTR_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwSignerIndex; /* +0x0004 */ unsigned long dwUnauthAttrIndex; /* +0x0008 */ }; struct _BCRYPT_ECCKEY_BLOB { unsigned long dwMagic; /* +0x0000 */ unsigned long cbKey; /* +0x0004 */ }; struct _CRYPT_ECC_CMS_SHARED_INFO { unsigned char Algorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char EntityUInfo[16]; /* +0x0018 06 10 00 00 */ unsigned char rgbSuppPubInfo[8]; /* +0x0028 a3 10 00 00 */ }; struct _BCRYPT_INTERFACE_VERSION { unsigned short MajorVersion; /* +0x0000 */ unsigned short MinorVersion; /* +0x0002 */ }; struct _CERT_ISSUER_SERIAL_NUMBER { unsigned char Issuer[16]; /* +0x0000 06 10 00 00 */ unsigned char SerialNumber[16]; /* +0x0010 06 10 00 00 */ }; struct _CMC_TAGGED_CONTENT_INFO { unsigned long dwBodyPartID; /* +0x0000 */ unsigned char EncodedContentInfo[16]; /* +0x0008 06 10 00 00 */ }; struct _PUBKEY { unsigned long magic; /* +0x0000 */ unsigned long bitlen; /* +0x0004 */ }; struct _CMSG_CONTENT_ENCRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0010 45 10 00 00 */ void *pvEncryptionAuxInfo; /* +0x0028 */ unsigned long cRecipients; /* +0x0030 */ unsigned char rgCmsRecipients[8]; /* +0x0038 1b 11 00 00 */ unsigned char pfnAlloc[8]; /* +0x0040 1e 11 00 00 */ unsigned char pfnFree[8]; /* +0x0048 21 11 00 00 */ unsigned long dwEncryptFlags; /* +0x0050 */ unsigned long long hContentEncryptKey; /* +0x0058 */ void *hCNGContentEncryptKey; /* +0x0058 */ unsigned long dwFlags; /* +0x0060 */ unsigned char fCNG[4]; /* +0x0064 74 00 00 00 */ unsigned char *pbCNGContentEncryptKeyObject; /* +0x0068 */ unsigned char *pbContentEncryptKey; /* +0x0070 */ unsigned long cbContentEncryptKey; /* +0x0078 */ }; struct _CERT_PRIVATE_KEY_VALIDITY { unsigned char NotBefore[8]; /* +0x0000 0d 10 00 00 */ unsigned char NotAfter[8]; /* +0x0008 0d 10 00 00 */ }; struct _KEY_TYPE_SUBTYPE { unsigned long dwKeySpec; /* +0x0000 */ unsigned char Type[16]; /* +0x0004 6b 10 00 00 */ unsigned char Subtype[16]; /* +0x0014 6b 10 00 00 */ }; struct _CRYPT_AES_128_KEY_STATE { unsigned char Key[16]; /* +0x0000 2d 11 00 00 */ unsigned char IV[16]; /* +0x0010 2d 11 00 00 */ unsigned char EncryptionState[176]; /* +0x0020 2e 11 00 00 */ unsigned char DecryptionState[176]; /* +0x00d0 2e 11 00 00 */ unsigned char Feedback[16]; /* +0x0180 2d 11 00 00 */ }; struct _PROV_ENUMALGS_EX { unsigned char aiAlgid[4]; /* +0x0000 75 00 00 00 */ unsigned long dwDefaultLen; /* +0x0004 */ unsigned long dwMinLen; /* +0x0008 */ unsigned long dwMaxLen; /* +0x000c */ unsigned long dwProtocols; /* +0x0010 */ unsigned long dwNameLen; /* +0x0014 */ unsigned char szName[20]; /* +0x0018 34 11 00 00 */ unsigned long dwLongNameLen; /* +0x002c */ unsigned char szLongName[40]; /* +0x0030 35 11 00 00 */ }; struct _CERT_X942_DH_PARAMETERS { unsigned char p[16]; /* +0x0000 06 10 00 00 */ unsigned char g[16]; /* +0x0010 06 10 00 00 */ unsigned char q[16]; /* +0x0020 06 10 00 00 */ unsigned char j[16]; /* +0x0030 06 10 00 00 */ unsigned char pValidationParams[8]; /* +0x0040 39 11 00 00 */ }; struct _CRYPT_ASYNC_RETRIEVAL_COMPLETION { unsigned char pfnCompletion[8]; /* +0x0000 45 11 00 00 */ void *pvCompletion; /* +0x0008 */ }; struct _SCHANNEL_ALG { unsigned long dwUse; /* +0x0000 */ unsigned char Algid[4]; /* +0x0004 75 00 00 00 */ unsigned long cBits; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ unsigned long dwReserved; /* +0x0010 */ }; struct _CMSG_ENCRYPTED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0008 45 10 00 00 */ void *pvEncryptionAuxInfo; /* +0x0020 */ }; struct _BCRYPT_OID_LIST { unsigned long dwOIDCount; /* +0x0000 */ unsigned char pOIDs[8]; /* +0x0008 4d 11 00 00 */ }; struct _OCSP_BASIC_REVOKED_INFO { unsigned char RevocationDate[8]; /* +0x0000 0d 10 00 00 */ unsigned long dwCrlReasonCode; /* +0x0008 */ }; struct _CERT_REVOCATION_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pIssuerCert[8]; /* +0x0008 20 10 00 00 */ unsigned long cCertStore; /* +0x0010 */ unsigned char rgCertStore[8]; /* +0x0018 1a 10 00 00 */ void *hCrlStore; /* +0x0020 */ unsigned char pftTimeToUse[8]; /* +0x0028 9e 10 00 00 */ }; struct _CRYPT_DES_KEY_STATE { unsigned char Key[8]; /* +0x0000 fb 10 00 00 */ unsigned char IV[8]; /* +0x0008 fb 10 00 00 */ unsigned char Feedback[8]; /* +0x0010 fb 10 00 00 */ }; struct _CMSG_CTRL_DECRYPT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned long dwRecipientIndex; /* +0x0014 */ }; struct _CRYPT_ATTRIBUTE_TYPE_VALUE { char *pszObjId; /* +0x0000 */ unsigned char Value[16]; /* +0x0008 06 10 00 00 */ }; struct _CMSG_RECIPIENT_ENCODE_INFO { unsigned long dwRecipientChoice; /* +0x0000 */ /* unsigned char pKeyTrans[0]; +0x0008 5d 11 00 00 */ /* unsigned char pKeyAgree[0]; +0x0008 0b 10 00 00 */ unsigned char pMailList[8]; /* +0x0008 5f 11 00 00 */ }; struct _CRYPT_TIMESTAMP_ACCURACY { unsigned long dwSeconds; /* +0x0000 */ unsigned long dwMillis; /* +0x0004 */ unsigned long dwMicros; /* +0x0008 */ }; struct _CTL_ENTRY { unsigned char SubjectIdentifier[16]; /* +0x0000 06 10 00 00 */ unsigned long cAttribute; /* +0x0010 */ unsigned char rgAttribute[8]; /* +0x0018 32 10 00 00 */ }; struct _CERT_REQUEST_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char Subject[16]; /* +0x0008 06 10 00 00 */ unsigned char SubjectPublicKeyInfo[48]; /* +0x0018 70 11 00 00 */ unsigned long cAttribute; /* +0x0048 */ unsigned char rgAttribute[8]; /* +0x0050 32 10 00 00 */ }; struct _CERT_POLICIES_INFO { unsigned long cPolicyInfo; /* +0x0000 */ unsigned char rgPolicyInfo[8]; /* +0x0008 74 11 00 00 */ }; struct _CMSG_CTRL_KEY_TRANS_DECRYPT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned char pKeyTrans[8]; /* +0x0018 78 11 00 00 */ unsigned long dwRecipientIndex; /* +0x0020 */ }; struct _CERT_PHYSICAL_STORE_INFO { unsigned long cbSize; /* +0x0000 */ char *pszOpenStoreProvider; /* +0x0008 */ unsigned long dwOpenEncodingType; /* +0x0010 */ unsigned long dwOpenFlags; /* +0x0014 */ unsigned char OpenParameters[16]; /* +0x0018 06 10 00 00 */ unsigned long dwFlags; /* +0x0028 */ unsigned long dwPriority; /* +0x002c */ }; struct _CERT_KEYGEN_REQUEST_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SubjectPublicKeyInfo[48]; /* +0x0008 70 11 00 00 */ unsigned char pwszChallengeString[8]; /* +0x0038 71 06 00 00 */ }; struct __BCRYPT_KEY_LENGTHS_STRUCT { unsigned long dwMinLength; /* +0x0000 */ unsigned long dwMaxLength; /* +0x0004 */ unsigned long dwIncrement; /* +0x0008 */ }; struct _CRYPT_PROPERTY_REF { unsigned char pszProperty[8]; /* +0x0000 71 06 00 00 */ unsigned long cbValue; /* +0x0008 */ unsigned char *pbValue; /* +0x0010 */ }; struct _CRYPT_ENCODE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pfnAlloc[8]; /* +0x0008 1e 11 00 00 */ unsigned char pfnFree[8]; /* +0x0010 21 11 00 00 */ }; struct _CERT_TEMPLATE_EXT { char *pszObjId; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0008 */ unsigned char fMinorVersion[4]; /* +0x000c 74 00 00 00 */ unsigned long dwMinorVersion; /* +0x0010 */ }; struct __NCRYPT_SUPPORTED_LENGTHS { unsigned long dwMinLength; /* +0x0000 */ unsigned long dwMaxLength; /* +0x0004 */ unsigned long dwIncrement; /* +0x0008 */ unsigned long dwDefaultLength; /* +0x000c */ }; struct _CERT_POLICY_MAPPINGS_INFO { unsigned long cPolicyMapping; /* +0x0000 */ unsigned char rgPolicyMapping[8]; /* +0x0008 9f 11 00 00 */ }; struct _CERT_POLICY_CONSTRAINTS_INFO { unsigned char fRequireExplicitPolicy[4]; /* +0x0000 74 00 00 00 */ unsigned long dwRequireExplicitPolicySkipCerts; /* +0x0004 */ unsigned char fInhibitPolicyMapping[4]; /* +0x0008 74 00 00 00 */ unsigned long dwInhibitPolicyMappingSkipCerts; /* +0x000c */ }; struct _BCryptBufferDesc { unsigned long ulVersion; /* +0x0000 */ unsigned long cBuffers; /* +0x0004 */ unsigned char pBuffers[8]; /* +0x0008 ae 11 00 00 */ }; struct _CRYPT_PASSWORD_CREDENTIALSW { unsigned long cbSize; /* +0x0000 */ unsigned char pszUsername[8]; /* +0x0008 71 06 00 00 */ unsigned char pszPassword[8]; /* +0x0010 71 06 00 00 */ }; struct _OCSP_RESPONSE_INFO { unsigned long dwStatus; /* +0x0000 */ char *pszObjId; /* +0x0008 */ unsigned char Value[16]; /* +0x0010 06 10 00 00 */ }; struct _CRYPT_CONTEXT_FUNCTION_CONFIG { unsigned long dwFlags; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ }; struct _CRYPT_CONTENT_INFO_SEQUENCE_OF_ANY { char *pszObjId; /* +0x0000 */ unsigned long cValue; /* +0x0008 */ unsigned char rgValue[8]; /* +0x0010 12 10 00 00 */ }; struct _CRYPT_RSA_SSA_PSS_PARAMETERS { unsigned char HashAlgorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char MaskGenAlgorithm[32]; /* +0x0018 c1 11 00 00 */ unsigned long dwSaltLength; /* +0x0038 */ unsigned long dwTrailerField; /* +0x003c */ }; struct _CRL_FIND_ISSUED_FOR_PARA { unsigned char pSubjectCert[8]; /* +0x0000 20 10 00 00 */ unsigned char pIssuerCert[8]; /* +0x0008 20 10 00 00 */ }; struct _CMSG_CTRL_KEY_AGREE_DECRYPT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned char pKeyAgree[8]; /* +0x0018 c7 11 00 00 */ unsigned long dwRecipientIndex; /* +0x0020 */ unsigned long dwRecipientEncryptedKeyIndex; /* +0x0024 */ unsigned char OriginatorPublicKey[24]; /* +0x0028 07 10 00 00 */ }; struct _CRYPT_DEFAULT_CONTEXT_MULTI_OID_PARA { unsigned long cOID; /* +0x0000 */ unsigned char rgpszOID[8]; /* +0x0008 ca 11 00 00 */ }; struct _CRYPT_BIT_BLOB { unsigned long cbData; /* +0x0000 */ unsigned char *pbData; /* +0x0008 */ unsigned long cUnusedBits; /* +0x0010 */ }; struct _CERT_PUBLIC_KEY_INFO { unsigned char Algorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char PublicKey[24]; /* +0x0018 07 10 00 00 */ }; struct _CERT_LOGOTYPE_AUDIO_INFO { unsigned long dwFileSize; /* +0x0000 */ unsigned long dwPlayTime; /* +0x0004 */ unsigned long dwChannels; /* +0x0008 */ unsigned long dwSampleRate; /* +0x000c */ unsigned char pwszLanguage[8]; /* +0x0010 71 06 00 00 */ }; struct _CERT_AUTHORITY_INFO_ACCESS { unsigned long cAccDescr; /* +0x0000 */ unsigned char rgAccDescr[8]; /* +0x0008 da 11 00 00 */ }; struct _CERT_STRONG_SIGN_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwInfoChoice; /* +0x0004 */ void *pvInfo; /* +0x0008 */ /* unsigned char pSerializedInfo[0]; +0x0008 de 11 00 00 */ char *pszOID; /* +0x0008 */ }; struct _CRL_DIST_POINT_NAME { unsigned long dwDistPointNameChoice; /* +0x0000 */ unsigned char FullName[16]; /* +0x0008 ea 11 00 00 */ }; struct _CMSG_RECIPIENT_ENCRYPTED_KEY_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char RecipientPublicKey[24]; /* +0x0008 07 10 00 00 */ unsigned char RecipientId[40]; /* +0x0020 0c 10 00 00 */ unsigned char Date[8]; /* +0x0048 0d 10 00 00 */ unsigned char pOtherAttr[8]; /* +0x0050 0f 10 00 00 */ }; struct _CERT_GENERAL_SUBTREE { unsigned char Base[24]; /* +0x0000 7d 10 00 00 */ unsigned long dwMinimum; /* +0x0018 */ unsigned char fMaximum[4]; /* +0x001c 74 00 00 00 */ unsigned long dwMaximum; /* +0x0020 */ }; struct _CERT_KEY_CONTEXT { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ }; struct _HTTPSPolicyCallbackData { unsigned long cbStruct; /* +0x0000 */ unsigned long cbSize; /* +0x0000 */ unsigned long dwAuthType; /* +0x0004 */ unsigned long fdwChecks; /* +0x0008 */ unsigned char pwszServerName[8]; /* +0x0010 71 06 00 00 */ }; struct _BCryptBuffer { unsigned long cbBuffer; /* +0x0000 */ unsigned long BufferType; /* +0x0004 */ void *pvBuffer; /* +0x0008 */ }; struct _CRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char iDeltaCrlIndicator[4]; /* +0x0004 74 00 00 00 */ unsigned char pftCacheResync[8]; /* +0x0008 9e 10 00 00 */ unsigned char pLastSyncTime[8]; /* +0x0010 9e 10 00 00 */ unsigned char pMaxAgeTime[8]; /* +0x0018 9e 10 00 00 */ unsigned char pChainPara[8]; /* +0x0020 fc 11 00 00 */ unsigned char pDeltaCrlIndicator[8]; /* +0x0028 12 10 00 00 */ }; struct _CERT_POLICY_QUALIFIER_NOTICE_REFERENCE { char *pszOrganization; /* +0x0000 */ unsigned long cNoticeNumbers; /* +0x0008 */ unsigned char rgNoticeNumbers[8]; /* +0x0010 74 06 00 00 */ }; struct _CERT_REVOCATION_CRL_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pBaseCrlContext[8]; /* +0x0008 66 11 00 00 */ unsigned char pDeltaCrlContext[8]; /* +0x0010 66 11 00 00 */ unsigned char pCrlEntry[8]; /* +0x0018 81 10 00 00 */ unsigned char fDeltaCrlEntry[8]; /* +0x0020 74 00 00 00 */ }; struct _CERT_CHAIN_POLICY_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ void *pvExtraPolicyPara; /* +0x0008 */ }; struct _CMC_TAGGED_REQUEST { unsigned long dwTaggedRequestChoice; /* +0x0000 */ unsigned char pTaggedCertRequest[8]; /* +0x0008 10 12 00 00 */ }; struct _CMS_KEY_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char Algid[4]; /* +0x0004 75 00 00 00 */ unsigned char *pbOID; /* +0x0008 */ unsigned long cbOID; /* +0x0010 */ }; struct _CTL_VERIFY_USAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char ListIdentifier[16]; /* +0x0008 06 10 00 00 */ unsigned long cCtlStore; /* +0x0018 */ unsigned char rghCtlStore[8]; /* +0x0020 1a 10 00 00 */ unsigned long cSignerStore; /* +0x0028 */ unsigned char rghSignerStore[8]; /* +0x0030 1a 10 00 00 */ }; struct _CMSG_KEY_TRANS_ENCRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwRecipientIndex; /* +0x0004 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 45 10 00 00 */ unsigned char EncryptedKey[16]; /* +0x0020 06 10 00 00 */ unsigned long dwFlags; /* +0x0030 */ }; struct _CRYPT_RETRIEVE_AUX_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pLastSyncTime[8]; /* +0x0008 9e 10 00 00 */ unsigned long dwMaxUrlRetrievalByteCount; /* +0x0010 */ unsigned char pPreFetchInfo[8]; /* +0x0018 1a 12 00 00 */ unsigned char pFlushInfo[8]; /* +0x0020 1c 12 00 00 */ unsigned char ppResponseInfo[8]; /* +0x0028 1f 12 00 00 */ unsigned char pwszCacheFileNamePrefix[8]; /* +0x0030 71 06 00 00 */ unsigned char pftCacheResync[8]; /* +0x0038 9e 10 00 00 */ unsigned char fProxyCacheRetrieval[4]; /* +0x0040 74 00 00 00 */ unsigned long dwHttpStatusCode; /* +0x0044 */ }; struct _BCRYPT_PSS_PADDING_INFO { unsigned char pszAlgId[8]; /* +0x0000 27 10 00 00 */ unsigned long cbSalt; /* +0x0008 */ }; struct _CRYPT_OID_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pszOID[8]; /* +0x0008 4f 10 00 00 */ unsigned char pwszName[8]; /* +0x0010 27 10 00 00 */ unsigned long dwGroupId; /* +0x0018 */ unsigned long dwValue; /* +0x001c */ /* unsigned char Algid[0]; +0x001c 75 00 00 00 */ unsigned long dwLength; /* +0x001c */ unsigned char ExtraInfo[16]; /* +0x0020 06 10 00 00 */ }; struct _CRYPT_RSAES_OAEP_PARAMETERS { unsigned char HashAlgorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char MaskGenAlgorithm[32]; /* +0x0018 c1 11 00 00 */ unsigned char PSourceAlgorithm[24]; /* +0x0038 26 12 00 00 */ }; struct _CERT_SELECT_CRITERIA { unsigned long dwType; /* +0x0000 */ unsigned long cPara; /* +0x0004 */ unsigned char ppPara[8]; /* +0x0008 1a 10 00 00 */ }; struct _CERT_REVOCATION_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwRevocationResult; /* +0x0004 */ unsigned char pszRevocationOid[8]; /* +0x0008 4f 10 00 00 */ void *pvOidSpecificInfo; /* +0x0010 */ unsigned char fHasFreshnessTime[4]; /* +0x0018 74 00 00 00 */ unsigned long dwFreshnessTime; /* +0x001c */ unsigned char pCrlInfo[8]; /* +0x0020 30 12 00 00 */ }; struct _CRYPT_PSOURCE_ALGORITHM { char *pszObjId; /* +0x0000 */ unsigned char EncodingParameters[16]; /* +0x0008 06 10 00 00 */ }; struct _CMSG_CNG_CONTENT_DECRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0008 45 10 00 00 */ unsigned char pfnAlloc[8]; /* +0x0020 1e 11 00 00 */ unsigned char pfnFree[8]; /* +0x0028 21 11 00 00 */ unsigned long long hNCryptKey; /* +0x0030 */ unsigned char *pbContentEncryptKey; /* +0x0038 */ unsigned long cbContentEncryptKey; /* +0x0040 */ void *hCNGContentEncryptKey; /* +0x0048 */ unsigned char *pbCNGContentEncryptKeyObject; /* +0x0050 */ }; struct _CRYPT_HASH_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char HashAlgorithm[24]; /* +0x0010 45 10 00 00 */ void *pvHashAuxInfo; /* +0x0028 */ }; struct _CERT_BASIC_CONSTRAINTS_INFO { unsigned char SubjectType[24]; /* +0x0000 07 10 00 00 */ unsigned char fPathLenConstraint[4]; /* +0x0018 74 00 00 00 */ unsigned long dwPathLenConstraint; /* +0x001c */ unsigned long cSubtreesConstraint; /* +0x0020 */ unsigned char rgSubtreesConstraint[8]; /* +0x0028 12 10 00 00 */ }; struct _BCRYPT_OAEP_PADDING_INFO { unsigned char pszAlgId[8]; /* +0x0000 27 10 00 00 */ unsigned char *pbLabel; /* +0x0008 */ unsigned long cbLabel; /* +0x0010 */ }; struct _OCSP_REQUEST_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char pRequestorName[8]; /* +0x0008 a7 10 00 00 */ unsigned long cRequestEntry; /* +0x0010 */ unsigned char rgRequestEntry[8]; /* +0x0018 47 12 00 00 */ unsigned long cExtension; /* +0x0020 */ unsigned char rgExtension[8]; /* +0x0028 83 10 00 00 */ }; struct _CMC_ADD_ATTRIBUTES_INFO { unsigned long dwCmcDataReference; /* +0x0000 */ unsigned long cCertReference; /* +0x0004 */ unsigned long *rgdwCertReference; /* +0x0008 */ unsigned long cAttribute; /* +0x0010 */ unsigned char rgAttribute[8]; /* +0x0018 32 10 00 00 */ }; struct _CERT_CREATE_CONTEXT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char pfnFree[8]; /* +0x0008 21 11 00 00 */ void *pvFree; /* +0x0010 */ unsigned char pfnSort[8]; /* +0x0018 50 12 00 00 */ void *pvSort; /* +0x0020 */ }; struct _CRYPT_TIME_STAMP_REQUEST_INFO { char *pszTimeStampAlgorithm; /* +0x0000 */ char *pszContentType; /* +0x0008 */ unsigned char Content[16]; /* +0x0010 06 10 00 00 */ unsigned long cAttribute; /* +0x0020 */ unsigned char rgAttribute[8]; /* +0x0028 32 10 00 00 */ }; struct _CERT_AUTHORITY_KEY_ID2_INFO { unsigned char KeyId[16]; /* +0x0000 06 10 00 00 */ unsigned char AuthorityCertIssuer[16]; /* +0x0010 ea 11 00 00 */ unsigned char AuthorityCertSerialNumber[16]; /* +0x0020 06 10 00 00 */ }; struct _CERT_LOGOTYPE_INFO { unsigned long dwLogotypeInfoChoice; /* +0x0000 */ /* unsigned char pLogotypeDirectInfo[0]; +0x0008 58 12 00 00 */ unsigned char pLogotypeIndirectInfo[8]; /* +0x0008 5a 12 00 00 */ }; struct _CRYPT_HASH_INFO { unsigned char HashAlgorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char Hash[16]; /* +0x0018 06 10 00 00 */ }; struct _CRYPT_OBJID_TABLE { unsigned long dwAlgId; /* +0x0000 */ unsigned char pszObjId[8]; /* +0x0008 4f 10 00 00 */ }; struct _CERT_AUTHORITY_KEY_ID_INFO { unsigned char KeyId[16]; /* +0x0000 06 10 00 00 */ unsigned char CertIssuer[16]; /* +0x0010 06 10 00 00 */ unsigned char CertSerialNumber[16]; /* +0x0020 06 10 00 00 */ }; struct _CERT_PAIR { unsigned char Forward[16]; /* +0x0000 06 10 00 00 */ unsigned char Reverse[16]; /* +0x0010 06 10 00 00 */ }; struct _CRYPT_CONTEXT_FUNCTIONS { unsigned long cFunctions; /* +0x0000 */ unsigned char rgpszFunctions[8]; /* +0x0008 2a 10 00 00 */ }; struct _CROSS_CERT_DIST_POINTS_INFO { unsigned long dwSyncDeltaTime; /* +0x0000 */ unsigned long cDistPoint; /* +0x0004 */ unsigned char rgDistPoint[8]; /* +0x0008 6d 12 00 00 */ }; struct _CRYPT_DECRYPT_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgAndCertEncodingType; /* +0x0004 */ unsigned long cCertStore; /* +0x0008 */ unsigned char rghCertStore[8]; /* +0x0010 1a 10 00 00 */ }; struct _CRYPT_VERIFY_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgAndCertEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char pfnGetSignerCertificate[8]; /* +0x0010 7a 12 00 00 */ void *pvGetArg; /* +0x0018 */ }; struct _CMSG_SIGNED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long cSigners; /* +0x0004 */ unsigned char rgSigners[8]; /* +0x0008 7e 12 00 00 */ unsigned long cCertEncoded; /* +0x0010 */ unsigned char rgCertEncoded[8]; /* +0x0018 12 10 00 00 */ unsigned long cCrlEncoded; /* +0x0020 */ unsigned char rgCrlEncoded[8]; /* +0x0028 12 10 00 00 */ }; struct _CRYPT_KEY_PROV_PARAM { unsigned long dwParam; /* +0x0000 */ unsigned char *pbData; /* +0x0008 */ unsigned long cbData; /* +0x0010 */ unsigned long dwFlags; /* +0x0014 */ }; struct _CERT_LOGOTYPE_REFERENCE { unsigned long cHashedUrl; /* +0x0000 */ unsigned char rgHashedUrl[8]; /* +0x0008 8e 12 00 00 */ }; struct _CERT_LOGOTYPE_IMAGE_INFO { unsigned long dwLogotypeImageInfoChoice; /* +0x0000 */ unsigned long dwFileSize; /* +0x0004 */ unsigned long dwXSize; /* +0x0008 */ unsigned long dwYSize; /* +0x000c */ unsigned long dwLogotypeImageResolutionChoice; /* +0x0010 */ unsigned long dwNumBits; /* +0x0014 */ unsigned long dwTableSize; /* +0x0014 */ unsigned char pwszLanguage[8]; /* +0x0018 71 06 00 00 */ }; struct _CERT_CHAIN_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char RequestedUsage[24]; /* +0x0008 95 12 00 00 */ }; struct _CRYPT_CREDENTIALS { unsigned long cbSize; /* +0x0000 */ unsigned char pszCredentialsOid[8]; /* +0x0008 4f 10 00 00 */ void *pvCredentials; /* +0x0010 */ }; struct _CERT_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SerialNumber[16]; /* +0x0008 06 10 00 00 */ unsigned char SignatureAlgorithm[24]; /* +0x0018 45 10 00 00 */ unsigned char Issuer[16]; /* +0x0030 06 10 00 00 */ unsigned char NotBefore[8]; /* +0x0040 0d 10 00 00 */ unsigned char NotAfter[8]; /* +0x0048 0d 10 00 00 */ unsigned char Subject[16]; /* +0x0050 06 10 00 00 */ unsigned char SubjectPublicKeyInfo[48]; /* +0x0060 70 11 00 00 */ unsigned char IssuerUniqueId[24]; /* +0x0090 07 10 00 00 */ unsigned char SubjectUniqueId[24]; /* +0x00a8 07 10 00 00 */ unsigned long cExtension; /* +0x00c0 */ unsigned char rgExtension[8]; /* +0x00c8 83 10 00 00 */ }; struct _CERT_BIOMETRIC_DATA { unsigned long dwTypeOfBiometricDataChoice; /* +0x0000 */ unsigned long dwPredefined; /* +0x0008 */ char *pszObjId; /* +0x0008 */ unsigned char HashedUrl[48]; /* +0x0010 8d 12 00 00 */ }; struct _BCRYPT_AUTHENTICATED_CIPHER_MODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwInfoVersion; /* +0x0004 */ unsigned char *pbNonce; /* +0x0008 */ unsigned long cbNonce; /* +0x0010 */ unsigned char *pbAuthData; /* +0x0018 */ unsigned long cbAuthData; /* +0x0020 */ unsigned char *pbTag; /* +0x0028 */ unsigned long cbTag; /* +0x0030 */ unsigned char *pbMacContext; /* +0x0038 */ unsigned long cbMacContext; /* +0x0040 */ unsigned long cbAAD; /* +0x0044 */ unsigned long long cbData; /* +0x0048 */ unsigned long dwFlags; /* +0x0050 */ }; struct _CERT_DSS_PARAMETERS { unsigned char p[16]; /* +0x0000 06 10 00 00 */ unsigned char q[16]; /* +0x0010 06 10 00 00 */ unsigned char g[16]; /* +0x0020 06 10 00 00 */ }; struct _DSSSEED { unsigned long counter; /* +0x0000 */ unsigned char seed[20]; /* +0x0004 a4 10 00 00 */ }; struct _CRYPT_KEY_SIGN_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgAndCertEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long long hNCryptKey; /* +0x0008 */ unsigned long dwKeySpec; /* +0x0010 */ unsigned char HashAlgorithm[24]; /* +0x0018 45 10 00 00 */ void *pvHashAuxInfo; /* +0x0030 */ unsigned char PubKeyAlgorithm[24]; /* +0x0038 45 10 00 00 */ }; struct _CERT_POLICY_MAPPING { char *pszIssuerDomainPolicy; /* +0x0000 */ char *pszSubjectDomainPolicy; /* +0x0008 */ }; struct _CMSG_HASHED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char HashAlgorithm[24]; /* +0x0010 45 10 00 00 */ void *pvHashAuxInfo; /* +0x0028 */ }; struct _CMSG_KEY_AGREE_RECIPIENT_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned long dwOriginatorChoice; /* +0x0004 */ /* unsigned char OriginatorCertId[0]; +0x0008 0c 10 00 00 */ unsigned char OriginatorPublicKeyInfo[48]; /* +0x0008 70 11 00 00 */ unsigned char UserKeyingMaterial[16]; /* +0x0038 06 10 00 00 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0048 45 10 00 00 */ unsigned long cRecipientEncryptedKeys; /* +0x0060 */ unsigned char rgpRecipientEncryptedKeys[8]; /* +0x0068 b5 12 00 00 */ }; struct _CERT_CHAIN { unsigned long cCerts; /* +0x0000 */ unsigned char certs[8]; /* +0x0008 12 10 00 00 */ unsigned char keyLocatorInfo[48]; /* +0x0010 a1 12 00 00 */ }; struct _CMSG_ENVELOPED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0010 45 10 00 00 */ void *pvEncryptionAuxInfo; /* +0x0028 */ unsigned long cRecipients; /* +0x0030 */ unsigned char rgpRecipients[8]; /* +0x0038 c0 12 00 00 */ }; struct _CRYPT_BLOB_ARRAY { unsigned long cBlob; /* +0x0000 */ unsigned char rgBlob[8]; /* +0x0008 12 10 00 00 */ }; struct _CERT_RDN_ATTR { char *pszObjId; /* +0x0000 */ unsigned long dwValueType; /* +0x0008 */ unsigned char Value[16]; /* +0x0010 06 10 00 00 */ }; struct _CRYPTNET_URL_CACHE_PRE_FETCH_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwObjectType; /* +0x0004 */ unsigned long dwError; /* +0x0008 */ unsigned long dwReserved; /* +0x000c */ unsigned char ThisUpdateTime[8]; /* +0x0010 0d 10 00 00 */ unsigned char NextUpdateTime[8]; /* +0x0018 0d 10 00 00 */ unsigned char PublishTime[8]; /* +0x0020 0d 10 00 00 */ }; struct _CRYPT_3DES_KEY_STATE { unsigned char Key[24]; /* +0x0000 d3 12 00 00 */ unsigned char IV[8]; /* +0x0018 fb 10 00 00 */ unsigned char Feedback[8]; /* +0x0020 fb 10 00 00 */ }; struct _CERT_REVOCATION_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned long dwIndex; /* +0x0004 */ unsigned long dwError; /* +0x0008 */ unsigned long dwReason; /* +0x000c */ unsigned char fHasFreshnessTime[4]; /* +0x0010 74 00 00 00 */ unsigned long dwFreshnessTime; /* +0x0014 */ }; struct _CERT_LOGOTYPE_IMAGE { unsigned char LogotypeDetails[24]; /* +0x0000 b1 10 00 00 */ unsigned char pLogotypeImageInfo[8]; /* +0x0018 d9 12 00 00 */ }; struct _CERT_X942_DH_VALIDATION_PARAMS { unsigned char seed[24]; /* +0x0000 07 10 00 00 */ unsigned long pgenCounter; /* +0x0018 */ }; struct _CERT_CHAIN_POLICY_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned long dwError; /* +0x0004 */ long lChainIndex; /* +0x0008 */ long lElementIndex; /* +0x000c */ void *pvExtraPolicyStatus; /* +0x0010 */ }; struct _CTL_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SubjectUsage[16]; /* +0x0008 24 10 00 00 */ unsigned char ListIdentifier[16]; /* +0x0018 06 10 00 00 */ unsigned char SequenceNumber[16]; /* +0x0028 06 10 00 00 */ unsigned char ThisUpdate[8]; /* +0x0038 0d 10 00 00 */ unsigned char NextUpdate[8]; /* +0x0040 0d 10 00 00 */ unsigned char SubjectAlgorithm[24]; /* +0x0048 45 10 00 00 */ unsigned long cCTLEntry; /* +0x0060 */ unsigned char rgCTLEntry[8]; /* +0x0068 e2 12 00 00 */ unsigned long cExtension; /* +0x0070 */ unsigned char rgExtension[8]; /* +0x0078 83 10 00 00 */ }; struct _RSAPUBKEY { unsigned long magic; /* +0x0000 */ unsigned long bitlen; /* +0x0004 */ unsigned long pubexp; /* +0x0008 */ }; struct _CRYPT_IMAGE_REF { unsigned char pszImage[8]; /* +0x0000 71 06 00 00 */ unsigned long dwFlags; /* +0x0008 */ }; struct _CMSG_SP3_COMPATIBLE_AUX_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ }; struct _CRYPT_PROVIDERS { unsigned long cProviders; /* +0x0000 */ unsigned char rgpszProviders[8]; /* +0x0008 2a 10 00 00 */ }; struct _CMSG_SIGNER_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pCertInfo[8]; /* +0x0008 d8 10 00 00 */ unsigned long long hCryptProv; /* +0x0010 */ unsigned long long hNCryptKey; /* +0x0010 */ unsigned long dwKeySpec; /* +0x0018 */ unsigned char HashAlgorithm[24]; /* +0x0020 45 10 00 00 */ void *pvHashAuxInfo; /* +0x0038 */ unsigned long cAuthAttr; /* +0x0040 */ unsigned char rgAuthAttr[8]; /* +0x0048 32 10 00 00 */ unsigned long cUnauthAttr; /* +0x0050 */ unsigned char rgUnauthAttr[8]; /* +0x0058 32 10 00 00 */ }; struct _CERT_DH_PARAMETERS { unsigned char p[16]; /* +0x0000 06 10 00 00 */ unsigned char g[16]; /* +0x0010 06 10 00 00 */ }; struct _CERT_OR_CRL_BUNDLE { unsigned long cItem; /* +0x0000 */ unsigned char rgItem[8]; /* +0x0008 17 13 00 00 */ }; struct _CRYPT_OBJECT_LOCATOR_PROVIDER_TABLE { unsigned long cbSize; /* +0x0000 */ unsigned char pfnGet[8]; /* +0x0008 1e 13 00 00 */ unsigned char pfnRelease[8]; /* +0x0010 9a 12 00 00 */ unsigned char pfnFreePassword[8]; /* +0x0018 2c 11 00 00 */ unsigned char pfnFree[8]; /* +0x0020 21 13 00 00 */ unsigned char pfnFreeIdentifier[8]; /* +0x0028 bc 12 00 00 */ }; struct _CRYPT_PKCS8_EXPORT_PARAMS { unsigned long long hCryptProv; /* +0x0000 */ unsigned long dwKeySpec; /* +0x0008 */ char *pszPrivateKeyObjId; /* +0x0010 */ unsigned char pEncryptPrivateKeyFunc[8]; /* +0x0018 26 13 00 00 */ void *pVoidEncryptFunc; /* +0x0020 */ }; struct _CERT_NAME_VALUE { unsigned long dwValueType; /* +0x0000 */ unsigned char Value[16]; /* +0x0008 06 10 00 00 */ }; struct _PROV_ENUMALGS { unsigned char aiAlgid[4]; /* +0x0000 75 00 00 00 */ unsigned long dwBitLen; /* +0x0004 */ unsigned long dwNameLen; /* +0x0008 */ unsigned char szName[20]; /* +0x000c 34 11 00 00 */ }; struct _CRL_ISSUING_DIST_POINT { unsigned char DistPointName[24]; /* +0x0000 b1 11 00 00 */ unsigned char fOnlyContainsUserCerts[4]; /* +0x0018 74 00 00 00 */ unsigned char fOnlyContainsCACerts[4]; /* +0x001c 74 00 00 00 */ unsigned char OnlySomeReasonFlags[24]; /* +0x0020 07 10 00 00 */ unsigned char fIndirectCRL[8]; /* +0x0038 74 00 00 00 */ }; struct _CRYPT_ENROLLMENT_NAME_VALUE_PAIR { unsigned char pwszName[8]; /* +0x0000 71 06 00 00 */ unsigned char pwszValue[8]; /* +0x0008 71 06 00 00 */ }; struct _CTL_USAGE { unsigned long cUsageIdentifier; /* +0x0000 */ unsigned char rgpszUsageIdentifier[8]; /* +0x0008 ca 11 00 00 */ }; struct _CMSG_RC2_AUX_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwBitLen; /* +0x0004 */ }; struct _CERT_KEY_USAGE_RESTRICTION_INFO { unsigned long cCertPolicyId; /* +0x0000 */ unsigned char rgCertPolicyId[8]; /* +0x0008 40 13 00 00 */ unsigned char RestrictedKeyUsage[24]; /* +0x0010 07 10 00 00 */ }; struct _OCSP_BASIC_SIGNED_RESPONSE_INFO { unsigned char ToBeSigned[16]; /* +0x0000 06 10 00 00 */ unsigned char SignatureInfo[64]; /* +0x0010 45 13 00 00 */ }; struct _CRYPT_CSP_PROVIDER { unsigned long dwKeySpec; /* +0x0000 */ unsigned char pwszProviderName[8]; /* +0x0008 71 06 00 00 */ unsigned char Signature[24]; /* +0x0010 07 10 00 00 */ }; struct _CMSG_CTRL_ADD_SIGNER_UNAUTH_ATTR_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwSignerIndex; /* +0x0004 */ unsigned char blob[16]; /* +0x0008 06 10 00 00 */ }; struct _CTL_ANY_SUBJECT_INFO { unsigned char SubjectAlgorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char SubjectIdentifier[16]; /* +0x0018 06 10 00 00 */ }; struct _PRIVKEYVER3 { unsigned long magic; /* +0x0000 */ unsigned long bitlenP; /* +0x0004 */ unsigned long bitlenQ; /* +0x0008 */ unsigned long bitlenJ; /* +0x000c */ unsigned long bitlenX; /* +0x0010 */ unsigned char DSSSeed[24]; /* +0x0014 ca 10 00 00 */ }; struct _CRL_DIST_POINTS_INFO { unsigned long cDistPoint; /* +0x0000 */ unsigned char rgDistPoint[8]; /* +0x0008 53 13 00 00 */ }; struct _CERT_STRONG_SIGN_SERIALIZED_INFO { unsigned long dwFlags; /* +0x0000 */ unsigned char pwszCNGSignHashAlgids[8]; /* +0x0008 71 06 00 00 */ unsigned char pwszCNGPubKeyMinBitLengths[8]; /* +0x0010 71 06 00 00 */ }; struct _CERT_ALT_NAME_ENTRY { unsigned long dwAltNameChoice; /* +0x0000 */ /* unsigned char pOtherName[0]; +0x0008 59 13 00 00 */ /* unsigned char pwszRfc822Name[0]; +0x0008 71 06 00 00 */ /* unsigned char pwszDNSName[0]; +0x0008 71 06 00 00 */ /* unsigned char DirectoryName[0]; +0x0008 06 10 00 00 */ /* unsigned char pwszURL[0]; +0x0008 71 06 00 00 */ /* unsigned char IPAddress[0]; +0x0008 06 10 00 00 */ char *pszRegisteredID; /* +0x0008 */ }; struct _CERT_NAME_INFO { unsigned long cRDN; /* +0x0000 */ unsigned char rgRDN[8]; /* +0x0008 e4 10 00 00 */ }; struct _BCRYPT_DSA_KEY_BLOB { unsigned long dwMagic; /* +0x0000 */ unsigned long cbKey; /* +0x0004 */ unsigned char Count[4]; /* +0x0008 a3 10 00 00 */ unsigned char Seed[20]; /* +0x000c a4 10 00 00 */ unsigned char q[20]; /* +0x0020 a4 10 00 00 */ }; struct _CMSG_STREAM_INFO { unsigned long cbContent; /* +0x0000 */ unsigned char pfnStreamOutput[8]; /* +0x0008 64 13 00 00 */ void *pvArg; /* +0x0010 */ }; struct _CERT_KEY_ATTRIBUTES_INFO { unsigned char KeyId[16]; /* +0x0000 06 10 00 00 */ unsigned char IntendedKeyUsage[24]; /* +0x0010 07 10 00 00 */ unsigned char pPrivateKeyUsagePeriod[8]; /* +0x0028 6c 13 00 00 */ }; struct _CERT_STORE_PROV_FIND_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgAndCertEncodingType; /* +0x0004 */ unsigned long dwFindFlags; /* +0x0008 */ unsigned long dwFindType; /* +0x000c */ unsigned char pvFindPara[8]; /* +0x0010 3d 11 00 00 */ }; struct _CMSG_KEY_AGREE_KEY_ENCRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char EncryptedKey[16]; /* +0x0008 06 10 00 00 */ }; struct _CRL_REVOCATION_INFO { unsigned char pCrlEntry[8]; /* +0x0000 81 10 00 00 */ unsigned char pCrlContext[8]; /* +0x0008 66 11 00 00 */ unsigned char pCrlIssuerChain[8]; /* +0x0010 69 10 00 00 */ }; struct _OCSP_SIGNATURE_INFO { unsigned char SignatureAlgorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char Signature[24]; /* +0x0018 07 10 00 00 */ unsigned long cCertEncoded; /* +0x0030 */ unsigned char rgCertEncoded[8]; /* +0x0038 12 10 00 00 */ }; struct _CERT_RDN { unsigned long cRDNAttr; /* +0x0000 */ unsigned char rgRDNAttr[8]; /* +0x0008 57 11 00 00 */ }; struct _CMC_TAGGED_CERT_REQUEST { unsigned long dwBodyPartID; /* +0x0000 */ unsigned char SignedCertRequest[16]; /* +0x0008 06 10 00 00 */ }; struct _CRYPT_RC4_KEY_STATE { unsigned char Key[16]; /* +0x0000 2d 11 00 00 */ unsigned char SBox[256]; /* +0x0010 86 13 00 00 */ unsigned char i; /* +0x0110 */ unsigned char j; /* +0x0111 */ }; struct _CRYPT_SMART_CARD_ROOT_INFO { unsigned char rgbCardID[16]; /* +0x0000 2d 11 00 00 */ unsigned char luid[8]; /* +0x0010 8b 12 00 00 */ }; struct _OCSP_REQUEST_ENTRY { unsigned char CertId[72]; /* +0x0000 43 13 00 00 */ unsigned long cExtension; /* +0x0048 */ unsigned char rgExtension[8]; /* +0x0050 83 10 00 00 */ }; struct _CRYPTPROTECT_PROMPTSTRUCT { unsigned long cbSize; /* +0x0000 */ unsigned long dwPromptFlags; /* +0x0004 */ unsigned char hwndApp[8]; /* +0x0008 97 13 00 00 */ unsigned char szPrompt[8]; /* +0x0010 27 10 00 00 */ }; struct _CRL_DIST_POINT { unsigned char DistPointName[24]; /* +0x0000 b1 11 00 00 */ unsigned char ReasonFlags[24]; /* +0x0018 07 10 00 00 */ unsigned char CRLIssuer[16]; /* +0x0030 ea 11 00 00 */ }; struct _CRYPT_MASK_GEN_ALGORITHM { char *pszObjId; /* +0x0000 */ unsigned char HashAlgorithm[24]; /* +0x0008 45 10 00 00 */ }; struct _CERT_LOGOTYPE_DETAILS { unsigned char pwszMimeType[8]; /* +0x0000 71 06 00 00 */ unsigned long cHashedUrl; /* +0x0008 */ unsigned char rgHashedUrl[8]; /* +0x0010 8e 12 00 00 */ }; struct _CRYPT_PKCS8_IMPORT_PARAMS { unsigned char PrivateKey[16]; /* +0x0000 06 10 00 00 */ unsigned char pResolvehCryptProvFunc[8]; /* +0x0010 b1 13 00 00 */ void *pVoidResolveFunc; /* +0x0018 */ unsigned char pDecryptPrivateKeyFunc[8]; /* +0x0020 b4 13 00 00 */ void *pVoidDecryptFunc; /* +0x0028 */ }; struct _BCRYPT_ALGORITHM_IDENTIFIER { unsigned char pszName[8]; /* +0x0000 71 06 00 00 */ unsigned long dwClass; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ }; struct _CRYPT_ENCRYPT_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char ContentEncryptionAlgorithm[24]; /* +0x0010 45 10 00 00 */ void *pvEncryptionAuxInfo; /* +0x0028 */ unsigned long dwFlags; /* +0x0030 */ unsigned long dwInnerContentType; /* +0x0034 */ }; struct _CERT_QC_STATEMENTS_EXT_INFO { unsigned long cStatement; /* +0x0000 */ unsigned char rgStatement[8]; /* +0x0008 08 12 00 00 */ }; struct _CERT_SYSTEM_STORE_INFO { unsigned long cbSize; /* +0x0000 */ }; struct _AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwRegPolicySettings; /* +0x0004 */ unsigned char pSignerInfo[8]; /* +0x0008 c6 13 00 00 */ }; struct _CMSG_CTRL_VERIFY_SIGNATURE_EX_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned long dwSignerIndex; /* +0x0010 */ unsigned long dwSignerType; /* +0x0014 */ void *pvSigner; /* +0x0018 */ }; struct _CERT_EXTENSION { char *pszObjId; /* +0x0000 */ unsigned char fCritical[8]; /* +0x0008 74 00 00 00 */ unsigned char Value[16]; /* +0x0010 06 10 00 00 */ }; struct _NCRYPT_CIPHER_PADDING_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char *pbIV; /* +0x0008 */ unsigned long cbIV; /* +0x0010 */ unsigned char *pbOtherInfo; /* +0x0018 */ unsigned long cbOtherInfo; /* +0x0020 */ }; struct _CRL_ENTRY { unsigned char SerialNumber[16]; /* +0x0000 06 10 00 00 */ unsigned char RevocationDate[8]; /* +0x0010 0d 10 00 00 */ unsigned long cExtension; /* +0x0018 */ unsigned char rgExtension[8]; /* +0x0020 83 10 00 00 */ }; struct _CRYPT_TIMESTAMP_PARA { unsigned char pszTSAPolicyId[8]; /* +0x0000 4f 10 00 00 */ unsigned char fRequestCerts[8]; /* +0x0008 74 00 00 00 */ unsigned char Nonce[16]; /* +0x0010 06 10 00 00 */ unsigned long cExtension; /* +0x0020 */ unsigned char rgExtension[8]; /* +0x0028 83 10 00 00 */ }; struct _CRYPT_ALGORITHM_IDENTIFIER { char *pszObjId; /* +0x0000 */ unsigned char Parameters[16]; /* +0x0008 06 10 00 00 */ }; struct _CMSG_KEY_AGREE_RECIPIENT_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 45 10 00 00 */ void *pvKeyEncryptionAuxInfo; /* +0x0020 */ unsigned char KeyWrapAlgorithm[24]; /* +0x0028 45 10 00 00 */ void *pvKeyWrapAuxInfo; /* +0x0040 */ unsigned long long hCryptProv; /* +0x0048 */ unsigned long dwKeySpec; /* +0x0050 */ unsigned long dwKeyChoice; /* +0x0054 */ /* unsigned char pEphemeralAlgorithm[0]; +0x0058 14 11 00 00 */ unsigned char pSenderId[8]; /* +0x0058 e0 13 00 00 */ unsigned char UserKeyingMaterial[16]; /* +0x0060 06 10 00 00 */ unsigned long cRecipientEncryptedKeys; /* +0x0070 */ unsigned char rgpRecipientEncryptedKeys[8]; /* +0x0078 e3 13 00 00 */ }; struct _CRYPT_X942_OTHER_INFO { char *pszContentEncryptionObjId; /* +0x0000 */ unsigned char rgbCounter[4]; /* +0x0008 a3 10 00 00 */ unsigned char rgbKeyLength[4]; /* +0x000c a3 10 00 00 */ unsigned char PubInfo[16]; /* +0x0010 06 10 00 00 */ }; struct _OCSP_SIGNED_REQUEST_INFO { unsigned char ToBeSigned[16]; /* +0x0000 06 10 00 00 */ unsigned char pOptionalSignatureInfo[8]; /* +0x0010 f3 13 00 00 */ }; struct _CMSG_KEY_TRANS_RECIPIENT_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char RecipientId[40]; /* +0x0008 0c 10 00 00 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0030 45 10 00 00 */ unsigned char EncryptedKey[16]; /* +0x0048 06 10 00 00 */ }; struct _CRYPT_PRIVATE_KEY_INFO { unsigned long Version; /* +0x0000 */ unsigned char Algorithm[24]; /* +0x0008 45 10 00 00 */ unsigned char PrivateKey[16]; /* +0x0020 06 10 00 00 */ unsigned char pAttributes[8]; /* +0x0030 bf 12 00 00 */ }; struct _CRYPT_PROVIDER_REFS { unsigned long cProviders; /* +0x0000 */ unsigned char rgpProviders[8]; /* +0x0008 fe 13 00 00 */ }; struct _BCRYPT_DH_PARAMETER_HEADER { unsigned long cbLength; /* +0x0000 */ unsigned long dwMagic; /* +0x0004 */ unsigned long cbKeyLength; /* +0x0008 */ }; struct _CMC_DATA_INFO { unsigned long cTaggedAttribute; /* +0x0000 */ unsigned char rgTaggedAttribute[8]; /* +0x0008 11 11 00 00 */ unsigned long cTaggedRequest; /* +0x0010 */ unsigned char rgTaggedRequest[8]; /* +0x0018 4b 12 00 00 */ unsigned long cTaggedContentInfo; /* +0x0020 */ unsigned char rgTaggedContentInfo[8]; /* +0x0028 0a 14 00 00 */ unsigned long cTaggedOtherMsg; /* +0x0030 */ unsigned char rgTaggedOtherMsg[8]; /* +0x0038 0c 14 00 00 */ }; struct _CMSG_SIGNED_AND_ENVELOPED_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char SignedInfo[48]; /* +0x0008 14 14 00 00 */ unsigned char EnvelopedInfo[64]; /* +0x0038 04 10 00 00 */ }; struct _CRYPT_VERIFY_CERT_SIGN_STRONG_PROPERTIES_INFO { unsigned char CertSignHashCNGAlgPropData[16]; /* +0x0000 06 10 00 00 */ unsigned char CertIssuerPubKeyBitLengthPropData[16]; /* +0x0010 06 10 00 00 */ }; struct _AUTHENTICODE_EXTRA_CERT_CHAIN_POLICY_STATUS { unsigned long cbSize; /* +0x0000 */ unsigned char fCommercial[4]; /* +0x0004 74 00 00 00 */ }; struct _CPS_URLS { unsigned char pszURL[8]; /* +0x0000 71 06 00 00 */ unsigned char pAlgorithm[8]; /* +0x0008 14 11 00 00 */ unsigned char pDigest[8]; /* +0x0010 12 10 00 00 */ }; struct _CRYPT_SEQUENCE_OF_ANY { unsigned long cValue; /* +0x0000 */ unsigned char rgValue[8]; /* +0x0008 12 10 00 00 */ }; struct _CRYPT_TIMESTAMP_REQUEST { unsigned long dwVersion; /* +0x0000 */ unsigned char HashAlgorithm[24]; /* +0x0008 45 10 00 00 */ unsigned char HashedMessage[16]; /* +0x0020 06 10 00 00 */ char *pszTSAPolicyId; /* +0x0030 */ unsigned char Nonce[16]; /* +0x0038 06 10 00 00 */ unsigned char fCertReq[4]; /* +0x0048 74 00 00 00 */ unsigned long cExtension; /* +0x004c */ unsigned char rgExtension[8]; /* +0x0050 83 10 00 00 */ }; struct _CRYPT_ENCRYPTED_PRIVATE_KEY_INFO { unsigned char EncryptionAlgorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char EncryptedPrivateKey[16]; /* +0x0018 06 10 00 00 */ }; struct _EV_EXTRA_CERT_CHAIN_POLICY_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwRootProgramQualifierFlags; /* +0x0004 */ }; struct _CERT_REGISTRY_STORE_CLIENT_GPT_PARA { unsigned char hKeyBase[8]; /* +0x0000 ce 10 00 00 */ unsigned char pwszRegPath[8]; /* +0x0008 71 06 00 00 */ }; struct _CRYPT_PKCS12_PBE_PARAMS { unsigned char iIterations[4]; /* +0x0000 74 00 00 00 */ unsigned long cbSalt; /* +0x0004 */ }; struct __NCRYPT_UI_POLICY { unsigned long dwVersion; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char pszCreationTitle[8]; /* +0x0008 27 10 00 00 */ unsigned char pszFriendlyName[8]; /* +0x0010 27 10 00 00 */ unsigned char pszDescription[8]; /* +0x0018 27 10 00 00 */ }; struct _CRYPTNET_URL_CACHE_RESPONSE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned short wResponseType; /* +0x0004 */ unsigned short wResponseFlags; /* +0x0006 */ unsigned char LastModifiedTime[8]; /* +0x0008 0d 10 00 00 */ unsigned long dwMaxAge; /* +0x0010 */ unsigned char pwszETag[8]; /* +0x0018 27 10 00 00 */ unsigned long dwProxyId; /* +0x0020 */ }; struct _NCRYPT_KEY_BLOB_HEADER { unsigned long cbSize; /* +0x0000 */ unsigned long dwMagic; /* +0x0004 */ unsigned long cbAlgName; /* +0x0008 */ unsigned long cbKeyData; /* +0x000c */ unsigned long cbKeyName; /* +0x0010 */ }; struct _CERT_SIMPLE_CHAIN { unsigned long cbSize; /* +0x0000 */ unsigned char TrustStatus[8]; /* +0x0004 21 10 00 00 */ unsigned long cElement; /* +0x000c */ unsigned char rgpElement[8]; /* +0x0010 43 14 00 00 */ unsigned char pTrustListInfo[8]; /* +0x0018 3e 13 00 00 */ unsigned char fHasRevocationFreshnessTime[4]; /* +0x0020 74 00 00 00 */ unsigned long dwRevocationFreshnessTime; /* +0x0024 */ }; struct _CERT_NAME_CONSTRAINTS_INFO { unsigned long cPermittedSubtree; /* +0x0000 */ unsigned char rgPermittedSubtree[8]; /* +0x0008 47 14 00 00 */ unsigned long cExcludedSubtree; /* +0x0010 */ unsigned char rgExcludedSubtree[8]; /* +0x0018 47 14 00 00 */ }; struct _CRYPT_PASSWORD_CREDENTIALSA { unsigned long cbSize; /* +0x0000 */ char *pszUsername; /* +0x0008 */ char *pszPassword; /* +0x0010 */ }; struct _CMSG_CMS_SIGNER_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char SignerId[40]; /* +0x0008 0c 10 00 00 */ unsigned char HashAlgorithm[24]; /* +0x0030 45 10 00 00 */ unsigned char HashEncryptionAlgorithm[24]; /* +0x0048 45 10 00 00 */ unsigned char EncryptedHash[16]; /* +0x0060 06 10 00 00 */ unsigned char AuthAttrs[16]; /* +0x0070 b8 10 00 00 */ unsigned char UnauthAttrs[16]; /* +0x0080 b8 10 00 00 */ }; struct _CRYPT_URL_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwSyncDeltaTime; /* +0x0004 */ unsigned long cGroup; /* +0x0008 */ unsigned long *rgcGroupEntry; /* +0x0010 */ }; struct _CRYPT_IMAGE_REG { unsigned char pszImage[8]; /* +0x0000 71 06 00 00 */ unsigned long cInterfaces; /* +0x0008 */ unsigned char rgpInterfaces[8]; /* +0x0010 61 14 00 00 */ }; struct _CERT_POLICY_ID { unsigned long cCertPolicyElementId; /* +0x0000 */ unsigned char rgpszCertPolicyElementId[8]; /* +0x0008 ca 11 00 00 */ }; struct _CMC_RESPONSE_INFO { unsigned long cTaggedAttribute; /* +0x0000 */ unsigned char rgTaggedAttribute[8]; /* +0x0008 11 11 00 00 */ unsigned long cTaggedContentInfo; /* +0x0010 */ unsigned char rgTaggedContentInfo[8]; /* +0x0018 0a 14 00 00 */ unsigned long cTaggedOtherMsg; /* +0x0020 */ unsigned char rgTaggedOtherMsg[8]; /* +0x0028 0c 14 00 00 */ }; struct _CERT_LOGOTYPE_DATA { unsigned long cLogotypeImage; /* +0x0000 */ unsigned char rgLogotypeImage[8]; /* +0x0008 f4 10 00 00 */ unsigned long cLogotypeAudio; /* +0x0010 */ unsigned char rgLogotypeAudio[8]; /* +0x0018 6b 14 00 00 */ }; struct _CTL_USAGE_MATCH { unsigned long dwType; /* +0x0000 */ unsigned char Usage[16]; /* +0x0008 24 10 00 00 */ }; struct _CRYPTNET_URL_CACHE_FLUSH_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwExemptSeconds; /* +0x0004 */ unsigned char ExpireTime[8]; /* +0x0008 0d 10 00 00 */ }; struct _AUTHENTICODE_TS_EXTRA_CERT_CHAIN_POLICY_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwRegPolicySettings; /* +0x0004 */ unsigned char fCommercial[4]; /* +0x0008 74 00 00 00 */ }; struct _CERT_HASHED_URL { unsigned char HashAlgorithm[24]; /* +0x0000 45 10 00 00 */ unsigned char Hash[16]; /* +0x0018 06 10 00 00 */ unsigned char pwszUrl[8]; /* +0x0028 71 06 00 00 */ }; struct _CRYPT_SIGN_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgEncodingType; /* +0x0004 */ unsigned char pSigningCert[8]; /* +0x0008 20 10 00 00 */ unsigned char HashAlgorithm[24]; /* +0x0010 45 10 00 00 */ void *pvHashAuxInfo; /* +0x0028 */ unsigned long cMsgCert; /* +0x0030 */ unsigned char rgpMsgCert[8]; /* +0x0038 5f 10 00 00 */ unsigned long cMsgCrl; /* +0x0040 */ unsigned char rgpMsgCrl[8]; /* +0x0048 f8 13 00 00 */ unsigned long cAuthAttr; /* +0x0050 */ unsigned char rgAuthAttr[8]; /* +0x0058 32 10 00 00 */ unsigned long cUnauthAttr; /* +0x0060 */ unsigned char rgUnauthAttr[8]; /* +0x0068 32 10 00 00 */ unsigned long dwFlags; /* +0x0070 */ unsigned long dwInnerContentType; /* +0x0074 */ }; struct _NCryptAlgorithmName { unsigned char pszName[8]; /* +0x0000 71 06 00 00 */ unsigned long dwClass; /* +0x0008 */ unsigned long dwAlgOperations; /* +0x000c */ unsigned long dwFlags; /* +0x0010 */ }; struct _CERT_ID { unsigned long dwIdChoice; /* +0x0000 */ /* unsigned char IssuerSerialNumber[0]; +0x0008 bb 10 00 00 */ /* unsigned char KeyId[0]; +0x0008 06 10 00 00 */ unsigned char HashId[32]; /* +0x0008 06 10 00 00 */ }; struct _CMSG_KEY_TRANS_RECIPIENT_ENCODE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 45 10 00 00 */ void *pvKeyEncryptionAuxInfo; /* +0x0020 */ unsigned long long hCryptProv; /* +0x0028 */ unsigned char RecipientPublicKey[24]; /* +0x0030 07 10 00 00 */ unsigned char RecipientId[40]; /* +0x0048 0c 10 00 00 */ }; struct _CRYPT_AES_256_KEY_STATE { unsigned char Key[32]; /* +0x0000 9b 14 00 00 */ unsigned char IV[16]; /* +0x0020 2d 11 00 00 */ unsigned char EncryptionState[240]; /* +0x0030 9c 14 00 00 */ unsigned char DecryptionState[240]; /* +0x0120 9c 14 00 00 */ unsigned char Feedback[16]; /* +0x0210 2d 11 00 00 */ }; struct _CRYPT_INTERFACE_REG { unsigned long dwInterface; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned long cFunctions; /* +0x0008 */ unsigned char rgpszFunctions[8]; /* +0x0010 2a 10 00 00 */ }; struct _BCRYPT_DSA_PARAMETER_HEADER_V2 { unsigned long cbLength; /* +0x0000 */ unsigned long dwMagic; /* +0x0004 */ unsigned long cbKeyLength; /* +0x0008 */ unsigned char hashAlgorithm[4]; /* +0x000c a4 14 00 00 */ unsigned char standardVersion[4]; /* +0x0010 a5 14 00 00 */ unsigned long cbSeedLength; /* +0x0014 */ unsigned long cbGroupSize; /* +0x0018 */ unsigned char Count[4]; /* +0x001c a3 10 00 00 */ }; struct _CERT_POLICY95_QUALIFIER1 { unsigned char pszPracticesReference[8]; /* +0x0000 71 06 00 00 */ char *pszNoticeIdentifier; /* +0x0008 */ char *pszNSINoticeIdentifier; /* +0x0010 */ unsigned long cCPSURLs; /* +0x0018 */ unsigned char rgCPSURLs[8]; /* +0x0020 2c 13 00 00 */ }; struct _CMC_STATUS_INFO { unsigned long dwStatus; /* +0x0000 */ unsigned long cBodyList; /* +0x0004 */ unsigned long *rgdwBodyList; /* +0x0008 */ unsigned char pwszStatusString[8]; /* +0x0010 71 06 00 00 */ unsigned long dwOtherInfoChoice; /* +0x0018 */ unsigned long dwFailInfo; /* +0x0020 */ unsigned char pPendInfo[8]; /* +0x0020 76 13 00 00 */ }; struct _CERT_CRL_CONTEXT_PAIR { unsigned char pCertContext[8]; /* +0x0000 20 10 00 00 */ unsigned char pCrlContext[8]; /* +0x0008 66 11 00 00 */ }; struct _OCSP_BASIC_RESPONSE_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned long dwResponderIdChoice; /* +0x0004 */ /* unsigned char ByNameResponderId[0]; +0x0008 06 10 00 00 */ unsigned char ByKeyResponderId[16]; /* +0x0008 06 10 00 00 */ unsigned char ProducedAt[8]; /* +0x0018 0d 10 00 00 */ unsigned long cResponseEntry; /* +0x0020 */ unsigned char rgResponseEntry[8]; /* +0x0028 f5 12 00 00 */ unsigned long cExtension; /* +0x0030 */ unsigned char rgExtension[8]; /* +0x0038 83 10 00 00 */ }; struct _CMC_TAGGED_OTHER_MSG { unsigned long dwBodyPartID; /* +0x0000 */ char *pszObjId; /* +0x0008 */ unsigned char Value[16]; /* +0x0010 06 10 00 00 */ }; struct _BCRYPT_KEY_DATA_BLOB_HEADER { unsigned long dwMagic; /* +0x0000 */ unsigned long dwVersion; /* +0x0004 */ unsigned long cbKeyData; /* +0x0008 */ }; struct _BCRYPT_OID { unsigned long cbOID; /* +0x0000 */ unsigned char *pbOID; /* +0x0008 */ }; struct _CMSG_CTRL_MAIL_LIST_DECRYPT_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long long hCryptProv; /* +0x0008 */ unsigned char pMailList[8]; /* +0x0010 ee 14 00 00 */ unsigned long dwRecipientIndex; /* +0x0018 */ unsigned long dwKeyChoice; /* +0x001c */ unsigned long long hKeyEncryptionKey; /* +0x0020 */ void *pvKeyEncryptionKey; /* +0x0020 */ }; struct _PUBLICKEYSTRUC { unsigned char bType; /* +0x0000 */ unsigned char bVersion; /* +0x0001 */ unsigned short reserved; /* +0x0002 */ unsigned char aiKeyAlg[4]; /* +0x0004 75 00 00 00 */ }; struct _CTL_FIND_USAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned char SubjectUsage[16]; /* +0x0008 24 10 00 00 */ unsigned char ListIdentifier[16]; /* +0x0018 06 10 00 00 */ unsigned char pSigner[8]; /* +0x0028 d8 10 00 00 */ }; struct _CRYPT_TIMESTAMP_RESPONSE { unsigned long dwStatus; /* +0x0000 */ unsigned long cFreeText; /* +0x0004 */ unsigned char rgFreeText[8]; /* +0x0008 2a 10 00 00 */ unsigned char FailureInfo[24]; /* +0x0010 07 10 00 00 */ unsigned char ContentInfo[16]; /* +0x0028 06 10 00 00 */ }; struct _CRYPT_CONTENT_INFO { char *pszObjId; /* +0x0000 */ unsigned char Content[16]; /* +0x0008 06 10 00 00 */ }; struct _BCRYPT_DSA_KEY_BLOB_V2 { unsigned long dwMagic; /* +0x0000 */ unsigned long cbKey; /* +0x0004 */ unsigned char hashAlgorithm[4]; /* +0x0008 a4 14 00 00 */ unsigned char standardVersion[4]; /* +0x000c a5 14 00 00 */ unsigned long cbSeedLength; /* +0x0010 */ unsigned long cbGroupSize; /* +0x0014 */ unsigned char Count[4]; /* +0x0018 a3 10 00 00 */ }; struct _CMSG_CMS_RECIPIENT_INFO { unsigned long dwRecipientChoice; /* +0x0000 */ /* unsigned char pKeyTrans[0]; +0x0008 78 11 00 00 */ /* unsigned char pKeyAgree[0]; +0x0008 c7 11 00 00 */ unsigned char pMailList[8]; /* +0x0008 ee 14 00 00 */ }; struct _CERT_TRUST_LIST_INFO { unsigned long cbSize; /* +0x0000 */ unsigned char pCtlEntry[8]; /* +0x0008 e2 12 00 00 */ unsigned char pCtlContext[8]; /* +0x0010 5d 10 00 00 */ }; struct _CRYPT_CONTEXTS { unsigned long cContexts; /* +0x0000 */ unsigned char rgpszContexts[8]; /* +0x0008 2a 10 00 00 */ }; struct _CERT_REVOCATION_CHAIN_PARA { unsigned long cbSize; /* +0x0000 */ void *hChainEngine; /* +0x0008 */ void *hAdditionalStore; /* +0x0010 */ unsigned long dwChainFlags; /* +0x0018 */ unsigned long dwUrlRetrievalTimeout; /* +0x001c */ unsigned char pftCurrentTime[8]; /* +0x0020 9e 10 00 00 */ unsigned char pftCacheResync[8]; /* +0x0028 9e 10 00 00 */ unsigned long cbMaxUrlRetrievalByteCount; /* +0x0030 */ }; struct _BCRYPT_PKCS1_PADDING_INFO { unsigned char pszAlgId[8]; /* +0x0000 27 10 00 00 */ }; struct _CERT_EXTENSIONS { unsigned long cExtension; /* +0x0000 */ unsigned char rgExtension[8]; /* +0x0008 83 10 00 00 */ }; struct _CMSG_MAIL_LIST_RECIPIENT_INFO { unsigned long dwVersion; /* +0x0000 */ unsigned char KeyId[16]; /* +0x0008 06 10 00 00 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0018 45 10 00 00 */ unsigned char EncryptedKey[16]; /* +0x0030 06 10 00 00 */ unsigned char Date[8]; /* +0x0040 0d 10 00 00 */ unsigned char pOtherAttr[8]; /* +0x0048 0f 10 00 00 */ }; struct _CERT_SYSTEM_STORE_RELOCATE_PARA { /* unsigned char hKeyBase[0]; +0x0000 ce 10 00 00 */ void *pvBase; /* +0x0000 */ void *pvSystemStore; /* +0x0008 */ /* unsigned char pszSystemStore[0]; +0x0008 4f 10 00 00 */ unsigned char pwszSystemStore[8]; /* +0x0008 27 10 00 00 */ }; struct _CERT_POLICY_INFO { char *pszPolicyIdentifier; /* +0x0000 */ unsigned long cPolicyQualifier; /* +0x0008 */ unsigned char rgPolicyQualifier[8]; /* +0x0010 98 11 00 00 */ }; struct _CRYPT_KEY_VERIFY_MESSAGE_PARA { unsigned long cbSize; /* +0x0000 */ unsigned long dwMsgEncodingType; /* +0x0004 */ unsigned long long hCryptProv; /* +0x0008 */ }; struct _CRYPT_TIMESTAMP_INFO { unsigned long dwVersion; /* +0x0000 */ char *pszTSAPolicyId; /* +0x0008 */ unsigned char HashAlgorithm[24]; /* +0x0010 45 10 00 00 */ unsigned char HashedMessage[16]; /* +0x0028 06 10 00 00 */ unsigned char SerialNumber[16]; /* +0x0038 06 10 00 00 */ unsigned char ftTime[8]; /* +0x0048 0d 10 00 00 */ unsigned char pvAccuracy[8]; /* +0x0050 8f 13 00 00 */ unsigned char fOrdering[8]; /* +0x0058 74 00 00 00 */ unsigned char Nonce[16]; /* +0x0060 06 10 00 00 */ unsigned char Tsa[16]; /* +0x0070 06 10 00 00 */ unsigned long cExtension; /* +0x0080 */ unsigned char rgExtension[8]; /* +0x0088 83 10 00 00 */ }; struct _BCRYPT_PROVIDER_NAME { unsigned char pszProviderName[8]; /* +0x0000 71 06 00 00 */ }; struct _CERT_CHAIN_ENGINE_CONFIG { unsigned long cbSize; /* +0x0000 */ void *hRestrictedRoot; /* +0x0008 */ void *hRestrictedTrust; /* +0x0010 */ void *hRestrictedOther; /* +0x0018 */ unsigned long cAdditionalStore; /* +0x0020 */ unsigned char rghAdditionalStore[8]; /* +0x0028 1a 10 00 00 */ unsigned long dwFlags; /* +0x0030 */ unsigned long dwUrlRetrievalTimeout; /* +0x0034 */ unsigned long MaximumCachedCertificates; /* +0x0038 */ unsigned long CycleDetectionModulus; /* +0x003c */ void *hExclusiveRoot; /* +0x0040 */ void *hExclusiveTrustedPeople; /* +0x0048 */ unsigned long dwExclusiveFlags; /* +0x0050 */ }; struct NCryptKeyName { unsigned char pszName[8]; /* +0x0000 71 06 00 00 */ unsigned char pszAlgid[8]; /* +0x0008 71 06 00 00 */ unsigned long dwLegacyKeySpec; /* +0x0010 */ unsigned long dwFlags; /* +0x0014 */ }; struct _CERT_POLICY_QUALIFIER_INFO { char *pszPolicyQualifierId; /* +0x0000 */ unsigned char Qualifier[16]; /* +0x0008 06 10 00 00 */ }; struct _CMSG_KEY_AGREE_ENCRYPT_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwRecipientIndex; /* +0x0004 */ unsigned char KeyEncryptionAlgorithm[24]; /* +0x0008 45 10 00 00 */ unsigned char UserKeyingMaterial[16]; /* +0x0020 06 10 00 00 */ unsigned long dwOriginatorChoice; /* +0x0030 */ /* unsigned char OriginatorCertId[0]; +0x0038 0c 10 00 00 */ unsigned char OriginatorPublicKeyInfo[48]; /* +0x0038 70 11 00 00 */ unsigned long cKeyAgreeKeyEncryptInfo; /* +0x0068 */ unsigned char rgpKeyAgreeKeyEncryptInfo[8]; /* +0x0070 65 15 00 00 */ unsigned long dwFlags; /* +0x0078 */ }; struct _CTL_CONTEXT { unsigned long dwMsgAndCertEncodingType; /* +0x0000 */ unsigned char *pbCtlEncoded; /* +0x0008 */ unsigned long cbCtlEncoded; /* +0x0010 */ unsigned char pCtlInfo[8]; /* +0x0018 5d 13 00 00 */ void *hCertStore; /* +0x0020 */ void *hCryptMsg; /* +0x0028 */ unsigned char *pbCtlContent; /* +0x0030 */ unsigned long cbCtlContent; /* +0x0038 */ }; struct _OCSP_BASIC_RESPONSE_ENTRY { unsigned char CertId[72]; /* +0x0000 43 13 00 00 */ unsigned long dwCertStatus; /* +0x0048 */ unsigned char pRevokedInfo[8]; /* +0x0050 9a 14 00 00 */ unsigned char ThisUpdate[8]; /* +0x0058 0d 10 00 00 */ unsigned char NextUpdate[8]; /* +0x0060 0d 10 00 00 */ unsigned long cExtension; /* +0x0068 */ unsigned char rgExtension[8]; /* +0x0070 83 10 00 00 */ }; struct _BCRYPT_RSAKEY_BLOB { unsigned long Magic; /* +0x0000 */ unsigned long BitLength; /* +0x0004 */ unsigned long cbPublicExp; /* +0x0008 */ unsigned long cbModulus; /* +0x000c */ unsigned long cbPrime1; /* +0x0010 */ unsigned long cbPrime2; /* +0x0014 */ }; struct _ROOT_INFO_LUID { unsigned long LowPart; /* +0x0000 */ long HighPart; /* +0x0004 */ }; struct _CMC_PEND_INFO { unsigned char PendToken[16]; /* +0x0000 06 10 00 00 */ unsigned char PendTime[8]; /* +0x0010 0d 10 00 00 */ }; enum tagTYPEFLAGS { TYPEFLAG_FAPPOBJECT = 1, TYPEFLAG_FCANCREATE = 2, TYPEFLAG_FLICENSED = 4, TYPEFLAG_FPREDECLID = 8, TYPEFLAG_FHIDDEN = 16, TYPEFLAG_FCONTROL = 32, TYPEFLAG_FDUAL = 64, TYPEFLAG_FNONEXTENSIBLE = 128, TYPEFLAG_FOLEAUTOMATION = 256, TYPEFLAG_FRESTRICTED = 512, TYPEFLAG_FAGGREGATABLE = 1024, TYPEFLAG_FREPLACEABLE = 2048, TYPEFLAG_FDISPATCHABLE = 4096, TYPEFLAG_FREVERSEBIND = 8192, TYPEFLAG_FPROXY = 16384 }; enum _PROC_THREAD_ATTRIBUTE_NUM { ProcThreadAttributeParentProcess = 0, ProcThreadAttributeExtendedFlags = 1, ProcThreadAttributeHandleList = 2, ProcThreadAttributeGroupAffinity = 3, ProcThreadAttributePreferredNode = 4, ProcThreadAttributeIdealProcessor = 5, ProcThreadAttributeUmsThread = 6, ProcThreadAttributeMitigationPolicy = 7, ProcThreadAttributePackageFullName = 8, ProcThreadAttributeSecurityCapabilities = 9, ProcThreadAttributeConsoleReference = 10, ProcThreadAttributeMax = 11 }; enum _SYSDBG_COMMAND { SysDbgQueryModuleInformation = 0, SysDbgQueryTraceInformation = 1, SysDbgSetTracepoint = 2, SysDbgSetSpecialCall = 3, SysDbgClearSpecialCalls = 4, SysDbgQuerySpecialCalls = 5, SysDbgBreakPoint = 6, SysDbgQueryVersion = 7, SysDbgReadVirtual = 8, SysDbgWriteVirtual = 9, SysDbgReadPhysical = 10, SysDbgWritePhysical = 11, SysDbgReadControlSpace = 12, SysDbgWriteControlSpace = 13, SysDbgReadIoSpace = 14, SysDbgWriteIoSpace = 15, SysDbgReadMsr = 16, SysDbgWriteMsr = 17, SysDbgReadBusData = 18, SysDbgWriteBusData = 19, SysDbgCheckLowMemory = 20, SysDbgEnableKernelDebugger = 21, SysDbgDisableKernelDebugger = 22, SysDbgGetAutoKdEnable = 23, SysDbgSetAutoKdEnable = 24, SysDbgGetPrintBufferSize = 25, SysDbgSetPrintBufferSize = 26, SysDbgGetKdUmExceptionEnable = 27, SysDbgSetKdUmExceptionEnable = 28, SysDbgGetTriageDump = 29, SysDbgGetKdBlockEnable = 30, SysDbgSetKdBlockEnable = 31, SysDbgRegisterForUmBreakInfo = 32, SysDbgGetUmBreakPid = 33, SysDbgClearUmBreakPid = 34, SysDbgGetUmAttachPid = 35, SysDbgClearUmAttachPid = 36 }; enum POWER_INFORMATION_LEVEL { SystemPowerPolicyAc = 0, SystemPowerPolicyDc = 1, VerifySystemPolicyAc = 2, VerifySystemPolicyDc = 3, SystemPowerCapabilities = 4, SystemBatteryState = 5, SystemPowerStateHandler = 6, ProcessorStateHandler = 7, SystemPowerPolicyCurrent = 8, AdministratorPowerPolicy = 9, SystemReserveHiberFile = 10, ProcessorInformation = 11, SystemPowerInformation = 12, ProcessorStateHandler2 = 13, LastWakeTime = 14, LastSleepTime = 15, SystemExecutionState = 16, SystemPowerStateNotifyHandler = 17, ProcessorPowerPolicyAc = 18, ProcessorPowerPolicyDc = 19, VerifyProcessorPowerPolicyAc = 20, VerifyProcessorPowerPolicyDc = 21, ProcessorPowerPolicyCurrent = 22, SystemPowerStateLogging = 23, SystemPowerLoggingEntry = 24, SetPowerSettingValue = 25, NotifyUserPowerSetting = 26, PowerInformationLevelUnused0 = 27, SystemMonitorHiberBootPowerOff = 28, SystemVideoState = 29, TraceApplicationPowerMessage = 30, TraceApplicationPowerMessageEnd = 31, ProcessorPerfStates = 32, ProcessorIdleStates = 33, ProcessorCap = 34, SystemWakeSource = 35, SystemHiberFileInformation = 36, TraceServicePowerMessage = 37, ProcessorLoad = 38, PowerShutdownNotification = 39, MonitorCapabilities = 40, SessionPowerInit = 41, SessionDisplayState = 42, PowerRequestCreate = 43, PowerRequestAction = 44, GetPowerRequestList = 45, ProcessorInformationEx = 46, NotifyUserModeLegacyPowerEvent = 47, GroupPark = 48, ProcessorIdleDomains = 49, WakeTimerList = 50, SystemHiberFileSize = 51, ProcessorIdleStatesHv = 52, ProcessorPerfStatesHv = 53, ProcessorPerfCapHv = 54, ProcessorSetIdle = 55, LogicalProcessorIdling = 56, UserPresence = 57, PowerSettingNotificationName = 58, GetPowerSettingValue = 59, IdleResiliency = 60, SessionRITState = 61, SessionConnectNotification = 62, SessionPowerCleanup = 63, SessionLockState = 64, SystemHiberbootState = 65, PlatformInformation = 66, PdcInvocation = 67, MonitorInvocation = 68, FirmwareTableInformationRegistered = 69, SetShutdownSelectedTime = 70, PowerInformationLevelMaximum = 71 }; enum _TOKEN_SECURITY_ATTRIBUTE_OPERATION { TOKEN_SECURITY_ATTRIBUTE_OPERATION_NONE = 0, TOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE_ALL = 1, TOKEN_SECURITY_ATTRIBUTE_OPERATION_ADD = 2, TOKEN_SECURITY_ATTRIBUTE_OPERATION_DELETE = 3, TOKEN_SECURITY_ATTRIBUTE_OPERATION_REPLACE = 4 }; enum WELL_KNOWN_SID_TYPE { WinNullSid = 0, WinWorldSid = 1, WinLocalSid = 2, WinCreatorOwnerSid = 3, WinCreatorGroupSid = 4, WinCreatorOwnerServerSid = 5, WinCreatorGroupServerSid = 6, WinNtAuthoritySid = 7, WinDialupSid = 8, WinNetworkSid = 9, WinBatchSid = 10, WinInteractiveSid = 11, WinServiceSid = 12, WinAnonymousSid = 13, WinProxySid = 14, WinEnterpriseControllersSid = 15, WinSelfSid = 16, WinAuthenticatedUserSid = 17, WinRestrictedCodeSid = 18, WinTerminalServerSid = 19, WinRemoteLogonIdSid = 20, WinLogonIdsSid = 21, WinLocalSystemSid = 22, WinLocalServiceSid = 23, WinNetworkServiceSid = 24, WinBuiltinDomainSid = 25, WinBuiltinAdministratorsSid = 26, WinBuiltinUsersSid = 27, WinBuiltinGuestsSid = 28, WinBuiltinPowerUsersSid = 29, WinBuiltinAccountOperatorsSid = 30, WinBuiltinSystemOperatorsSid = 31, WinBuiltinPrintOperatorsSid = 32, WinBuiltinBackupOperatorsSid = 33, WinBuiltinReplicatorSid = 34, WinBuiltinPreWindows2000CompatibleAccessSid = 35, WinBuiltinRemoteDesktopUsersSid = 36, WinBuiltinNetworkConfigurationOperatorsSid = 37, WinAccountAdministratorSid = 38, WinAccountGuestSid = 39, WinAccountKrbtgtSid = 40, WinAccountDomainAdminsSid = 41, WinAccountDomainUsersSid = 42, WinAccountDomainGuestsSid = 43, WinAccountComputersSid = 44, WinAccountControllersSid = 45, WinAccountCertAdminsSid = 46, WinAccountSchemaAdminsSid = 47, WinAccountEnterpriseAdminsSid = 48, WinAccountPolicyAdminsSid = 49, WinAccountRasAndIasServersSid = 50, WinNTLMAuthenticationSid = 51, WinDigestAuthenticationSid = 52, WinSChannelAuthenticationSid = 53, WinThisOrganizationSid = 54, WinOtherOrganizationSid = 55, WinBuiltinIncomingForestTrustBuildersSid = 56, WinBuiltinPerfMonitoringUsersSid = 57, WinBuiltinPerfLoggingUsersSid = 58, WinBuiltinAuthorizationAccessSid = 59, WinBuiltinTerminalServerLicenseServersSid = 60, WinBuiltinDCOMUsersSid = 61, WinBuiltinIUsersSid = 62, WinIUserSid = 63, WinBuiltinCryptoOperatorsSid = 64, WinUntrustedLabelSid = 65, WinLowLabelSid = 66, WinMediumLabelSid = 67, WinHighLabelSid = 68, WinSystemLabelSid = 69, WinWriteRestrictedCodeSid = 70, WinCreatorOwnerRightsSid = 71, WinCacheablePrincipalsGroupSid = 72, WinNonCacheablePrincipalsGroupSid = 73, WinEnterpriseReadonlyControllersSid = 74, WinAccountReadonlyControllersSid = 75, WinBuiltinEventLogReadersGroup = 76, WinNewEnterpriseReadonlyControllersSid = 77, WinBuiltinCertSvcDComAccessGroup = 78, WinMediumPlusLabelSid = 79, WinLocalLogonSid = 80, WinConsoleLogonSid = 81, WinThisOrganizationCertificateSid = 82, WinApplicationPackageAuthoritySid = 83, WinBuiltinAnyPackageSid = 84, WinCapabilityInternetClientSid = 85, WinCapabilityInternetClientServerSid = 86, WinCapabilityPrivateNetworkClientServerSid = 87, WinCapabilityPicturesLibrarySid = 88, WinCapabilityVideosLibrarySid = 89, WinCapabilityMusicLibrarySid = 90, WinCapabilityDocumentsLibrarySid = 91, WinCapabilitySharedUserCertificatesSid = 92, WinCapabilityDefaultWindowsCredentialsSid = 93, WinCapabilityRemovableStorageSid = 94, WinBuiltinRDSRemoteAccessServersSid = 95, WinBuiltinRDSEndpointServersSid = 96, WinBuiltinRDSManagementServersSid = 97, WinUserModeDriversSid = 98, WinBuiltinHyperVAdminsSid = 99 }; enum VARENUM { VT_EMPTY = 0, VT_NULL = 1, VT_I2 = 2, VT_I4 = 3, VT_R4 = 4, VT_R8 = 5, VT_CY = 6, VT_DATE = 7, VT_BSTR = 8, VT_DISPATCH = 9, VT_ERROR = 10, VT_BOOL = 11, VT_VARIANT = 12, VT_UNKNOWN = 13, VT_DECIMAL = 14, VT_I1 = 16, VT_UI1 = 17, VT_UI2 = 18, VT_UI4 = 19, VT_I8 = 20, VT_UI8 = 21, VT_INT = 22, VT_UINT = 23, VT_VOID = 24, VT_HRESULT = 25, VT_PTR = 26, VT_SAFEARRAY = 27, VT_CARRAY = 28, VT_USERDEFINED = 29, VT_LPSTR = 30, VT_LPWSTR = 31, VT_RECORD = 36, VT_INT_PTR = 37, VT_UINT_PTR = 38, VT_FILETIME = 64, VT_BLOB = 65, VT_STREAM = 66, VT_STORAGE = 67, VT_STREAMED_OBJECT = 68, VT_STORED_OBJECT = 69, VT_BLOB_OBJECT = 70, VT_CF = 71, VT_CLSID = 72, VT_VERSIONED_STREAM = 73, VT_BSTR_BLOB = 4095, VT_VECTOR = 4096, VT_ARRAY = 8192, VT_BYREF = 16384, = 32770 }; enum POWER_ACTION { PowerActionNone = 0, PowerActionReserved = 1, PowerActionSleep = 2, PowerActionHibernate = 3, PowerActionShutdown = 4, PowerActionShutdownReset = 5, PowerActionShutdownOff = 6, PowerActionWarmEject = 7 }; enum tagMSHLFLAGS { MSHLFLAGS_NORMAL = 0, MSHLFLAGS_TABLESTRONG = 1, MSHLFLAGS_TABLEWEAK = 2, MSHLFLAGS_NOPING = 4, MSHLFLAGS_RESERVED1 = 8, MSHLFLAGS_RESERVED2 = 16, MSHLFLAGS_RESERVED3 = 32, MSHLFLAGS_RESERVED4 = 64 }; enum _tagQUERYOPTION { QUERY_EXPIRATION_DATE = 1, QUERY_TIME_OF_LAST_CHANGE = 2, QUERY_CONTENT_ENCODING = 3, QUERY_CONTENT_TYPE = 4, QUERY_REFRESH = 5, QUERY_RECOMBINE = 6, QUERY_CAN_NAVIGATE = 7, QUERY_USES_NETWORK = 8, QUERY_IS_CACHED = 9, QUERY_IS_INSTALLEDENTRY = 10, QUERY_IS_CACHED_OR_MAPPED = 11, QUERY_USES_CACHE = 12, QUERY_IS_SECURE = 13, QUERY_IS_SAFE = 14, QUERY_USES_HISTORYFOLDER = 15, QUERY_IS_CACHED_AND_USABLE_OFFLINE = 16 }; enum _COPYFILE2_MESSAGE_TYPE { COPYFILE2_CALLBACK_NONE = 0, COPYFILE2_CALLBACK_CHUNK_STARTED = 1, COPYFILE2_CALLBACK_CHUNK_FINISHED = 2, COPYFILE2_CALLBACK_STREAM_STARTED = 3, COPYFILE2_CALLBACK_STREAM_FINISHED = 4, COPYFILE2_CALLBACK_POLL_CONTINUE = 5, COPYFILE2_CALLBACK_ERROR = 6, COPYFILE2_CALLBACK_MAX = 7 }; enum WMIDPREQUESTCODE { WMI_GET_ALL_DATA = 0, WMI_GET_SINGLE_INSTANCE = 1, WMI_SET_SINGLE_INSTANCE = 2, WMI_SET_SINGLE_ITEM = 3, WMI_ENABLE_EVENTS = 4, WMI_DISABLE_EVENTS = 5, WMI_ENABLE_COLLECTION = 6, WMI_DISABLE_COLLECTION = 7, WMI_REGINFO = 8, WMI_EXECUTE_METHOD = 9, WMI_CAPTURE_STATE = 10 }; enum SYSGEOTYPE { GEO_NATION = 1, GEO_LATITUDE = 2, GEO_LONGITUDE = 3, GEO_ISO2 = 4, GEO_ISO3 = 5, GEO_RFC1766 = 6, GEO_LCID = 7, GEO_FRIENDLYNAME = 8, GEO_OFFICIALNAME = 9, GEO_TIMEZONES = 10, GEO_OFFICIALLANGUAGES = 11, GEO_ISO_UN_NUMBER = 12, GEO_PARENT = 13 }; enum _DPFLTR_TYPE { DPFLTR_SYSTEM_ID = 0, DPFLTR_SMSS_ID = 1, DPFLTR_SETUP_ID = 2, DPFLTR_NTFS_ID = 3, DPFLTR_FSTUB_ID = 4, DPFLTR_CRASHDUMP_ID = 5, DPFLTR_CDAUDIO_ID = 6, DPFLTR_CDROM_ID = 7, DPFLTR_CLASSPNP_ID = 8, DPFLTR_DISK_ID = 9, DPFLTR_REDBOOK_ID = 10, DPFLTR_STORPROP_ID = 11, DPFLTR_SCSIPORT_ID = 12, DPFLTR_SCSIMINIPORT_ID = 13, DPFLTR_CONFIG_ID = 14, DPFLTR_I8042PRT_ID = 15, DPFLTR_SERMOUSE_ID = 16, DPFLTR_LSERMOUS_ID = 17, DPFLTR_KBDHID_ID = 18, DPFLTR_MOUHID_ID = 19, DPFLTR_KBDCLASS_ID = 20, DPFLTR_MOUCLASS_ID = 21, DPFLTR_TWOTRACK_ID = 22, DPFLTR_WMILIB_ID = 23, DPFLTR_ACPI_ID = 24, DPFLTR_AMLI_ID = 25, DPFLTR_HALIA64_ID = 26, DPFLTR_VIDEO_ID = 27, DPFLTR_SVCHOST_ID = 28, DPFLTR_VIDEOPRT_ID = 29, DPFLTR_TCPIP_ID = 30, DPFLTR_DMSYNTH_ID = 31, DPFLTR_NTOSPNP_ID = 32, DPFLTR_FASTFAT_ID = 33, DPFLTR_SAMSS_ID = 34, DPFLTR_PNPMGR_ID = 35, DPFLTR_NETAPI_ID = 36, DPFLTR_SCSERVER_ID = 37, DPFLTR_SCCLIENT_ID = 38, DPFLTR_SERIAL_ID = 39, DPFLTR_SERENUM_ID = 40, DPFLTR_UHCD_ID = 41, DPFLTR_RPCPROXY_ID = 42, DPFLTR_AUTOCHK_ID = 43, DPFLTR_DCOMSS_ID = 44, DPFLTR_UNIMODEM_ID = 45, DPFLTR_SIS_ID = 46, DPFLTR_FLTMGR_ID = 47, DPFLTR_WMICORE_ID = 48, DPFLTR_BURNENG_ID = 49, DPFLTR_IMAPI_ID = 50, DPFLTR_SXS_ID = 51, DPFLTR_FUSION_ID = 52, DPFLTR_IDLETASK_ID = 53, DPFLTR_SOFTPCI_ID = 54, DPFLTR_TAPE_ID = 55, DPFLTR_MCHGR_ID = 56, DPFLTR_IDEP_ID = 57, DPFLTR_PCIIDE_ID = 58, DPFLTR_FLOPPY_ID = 59, DPFLTR_FDC_ID = 60, DPFLTR_TERMSRV_ID = 61, DPFLTR_W32TIME_ID = 62, DPFLTR_PREFETCHER_ID = 63, DPFLTR_RSFILTER_ID = 64, DPFLTR_FCPORT_ID = 65, DPFLTR_PCI_ID = 66, DPFLTR_DMIO_ID = 67, DPFLTR_DMCONFIG_ID = 68, DPFLTR_DMADMIN_ID = 69, DPFLTR_WSOCKTRANSPORT_ID = 70, DPFLTR_VSS_ID = 71, DPFLTR_PNPMEM_ID = 72, DPFLTR_PROCESSOR_ID = 73, DPFLTR_DMSERVER_ID = 74, DPFLTR_SR_ID = 75, DPFLTR_INFINIBAND_ID = 76, DPFLTR_IHVDRIVER_ID = 77, DPFLTR_IHVVIDEO_ID = 78, DPFLTR_IHVAUDIO_ID = 79, DPFLTR_IHVNETWORK_ID = 80, DPFLTR_IHVSTREAMING_ID = 81, DPFLTR_IHVBUS_ID = 82, DPFLTR_HPS_ID = 83, DPFLTR_RTLTHREADPOOL_ID = 84, DPFLTR_LDR_ID = 85, DPFLTR_TCPIP6_ID = 86, DPFLTR_ISAPNP_ID = 87, DPFLTR_SHPC_ID = 88, DPFLTR_STORPORT_ID = 89, DPFLTR_STORMINIPORT_ID = 90, DPFLTR_PRINTSPOOLER_ID = 91, DPFLTR_VSSDYNDISK_ID = 92, DPFLTR_VERIFIER_ID = 93, DPFLTR_VDS_ID = 94, DPFLTR_VDSBAS_ID = 95, DPFLTR_VDSDYN_ID = 96, DPFLTR_VDSDYNDR_ID = 97, DPFLTR_VDSLDR_ID = 98, DPFLTR_VDSUTIL_ID = 99, DPFLTR_DFRGIFC_ID = 100, DPFLTR_DEFAULT_ID = 101, DPFLTR_MM_ID = 102, DPFLTR_DFSC_ID = 103, DPFLTR_WOW64_ID = 104, DPFLTR_ALPC_ID = 105, DPFLTR_WDI_ID = 106, DPFLTR_PERFLIB_ID = 107, DPFLTR_KTM_ID = 108, DPFLTR_IOSTRESS_ID = 109, DPFLTR_HEAP_ID = 110, DPFLTR_WHEA_ID = 111, DPFLTR_USERGDI_ID = 112, DPFLTR_MMCSS_ID = 113, DPFLTR_TPM_ID = 114, DPFLTR_THREADORDER_ID = 115, DPFLTR_ENVIRON_ID = 116, DPFLTR_EMS_ID = 117, DPFLTR_WDT_ID = 118, DPFLTR_FVEVOL_ID = 119, DPFLTR_NDIS_ID = 120, DPFLTR_NVCTRACE_ID = 121, DPFLTR_LUAFV_ID = 122, DPFLTR_APPCOMPAT_ID = 123, DPFLTR_USBSTOR_ID = 124, DPFLTR_SBP2PORT_ID = 125, DPFLTR_COVERAGE_ID = 126, DPFLTR_CACHEMGR_ID = 127, DPFLTR_MOUNTMGR_ID = 128, DPFLTR_CFR_ID = 129, DPFLTR_TXF_ID = 130, DPFLTR_KSECDD_ID = 131, DPFLTR_FLTREGRESS_ID = 132, DPFLTR_MPIO_ID = 133, DPFLTR_MSDSM_ID = 134, DPFLTR_UDFS_ID = 135, DPFLTR_PSHED_ID = 136, DPFLTR_STORVSP_ID = 137, DPFLTR_LSASS_ID = 138, DPFLTR_SSPICLI_ID = 139, DPFLTR_CNG_ID = 140, DPFLTR_EXFAT_ID = 141, DPFLTR_FILETRACE_ID = 142, DPFLTR_XSAVE_ID = 143, DPFLTR_SE_ID = 144, DPFLTR_DRIVEEXTENDER_ID = 145, DPFLTR_POWER_ID = 146, DPFLTR_CRASHDUMPXHCI_ID = 147, DPFLTR_GPIO_ID = 148, DPFLTR_ENDOFTABLE_ID = 149 }; enum _PS_ATTRIBUTE_NUM { PsAttributeParentProcess = 0, PsAttributeDebugObject = 1, PsAttributeToken = 2, PsAttributeClientId = 3, PsAttributeTebAddress = 4, PsAttributeImageName = 5, PsAttributeImageInfo = 6, PsAttributeMemoryReserve = 7, PsAttributePriorityClass = 8, PsAttributeErrorMode = 9, PsAttributeStdHandleInfo = 10, PsAttributeHandleList = 11, PsAttributeGroupAffinity = 12, PsAttributePreferredNode = 13, PsAttributeIdealProcessor = 14, PsAttributeUmsThread = 15, PsAttributeMitigationOptions = 16, PsAttributeSecurityCapabilities = 17, PsAttributeMax = 18 }; enum _PROCESSINFOCLASS { ProcessBasicInformation = 0, ProcessQuotaLimits = 1, ProcessIoCounters = 2, ProcessVmCounters = 3, ProcessTimes = 4, ProcessBasePriority = 5, ProcessRaisePriority = 6, ProcessDebugPort = 7, ProcessExceptionPort = 8, ProcessAccessToken = 9, ProcessLdtInformation = 10, ProcessLdtSize = 11, ProcessDefaultHardErrorMode = 12, ProcessIoPortHandlers = 13, ProcessPooledUsageAndLimits = 14, ProcessWorkingSetWatch = 15, ProcessUserModeIOPL = 16, ProcessEnableAlignmentFaultFixup = 17, ProcessPriorityClass = 18, ProcessWx86Information = 19, ProcessHandleCount = 20, ProcessAffinityMask = 21, ProcessPriorityBoost = 22, ProcessDeviceMap = 23, ProcessSessionInformation = 24, ProcessForegroundInformation = 25, ProcessWow64Information = 26, ProcessImageFileName = 27, ProcessLUIDDeviceMapsEnabled = 28, ProcessBreakOnTermination = 29, ProcessDebugObjectHandle = 30, ProcessDebugFlags = 31, ProcessHandleTracing = 32, ProcessIoPriority = 33, ProcessExecuteFlags = 34, ProcessTlsInformation = 35, ProcessCookie = 36, ProcessImageInformation = 37, ProcessCycleTime = 38, ProcessPagePriority = 39, ProcessInstrumentationCallback = 40, ProcessThreadStackAllocation = 41, ProcessWorkingSetWatchEx = 42, ProcessImageFileNameWin32 = 43, ProcessImageFileMapping = 44, ProcessAffinityUpdateMode = 45, ProcessMemoryAllocationMode = 46, ProcessGroupInformation = 47, ProcessTokenVirtualizationEnabled = 48, ProcessConsoleHostProcess = 49, ProcessWindowInformation = 50, ProcessHandleInformation = 51, ProcessMitigationPolicy = 52, ProcessDynamicFunctionTableInformation = 53, ProcessHandleCheckingMode = 54, ProcessKeepAliveCount = 55, ProcessRevokeFileHandles = 56, MaxProcessInfoClass = 57 }; enum _tagPARSEACTION { PARSE_CANONICALIZE = 1, PARSE_FRIENDLY = 2, PARSE_SECURITY_URL = 3, PARSE_ROOTDOCUMENT = 4, PARSE_DOCUMENT = 5, PARSE_ANCHOR = 6, PARSE_ENCODE_IS_UNESCAPE = 7, PARSE_DECODE_IS_ESCAPE = 8, PARSE_PATH_FROM_URL = 9, PARSE_URL_FROM_PATH = 10, PARSE_MIME = 11, PARSE_SERVER = 12, PARSE_SCHEMA = 13, PARSE_SITE = 14, PARSE_DOMAIN = 15, PARSE_LOCATION = 16, PARSE_SECURITY_DOMAIN = 17, PARSE_ESCAPE = 18, PARSE_UNESCAPE = 19 }; enum _SYSTEM_INFORMATION_CLASS { SystemBasicInformation = 0, SystemProcessorInformation = 1, SystemPerformanceInformation = 2, SystemTimeOfDayInformation = 3, SystemPathInformation = 4, SystemProcessInformation = 5, SystemCallCountInformation = 6, SystemDeviceInformation = 7, SystemProcessorPerformanceInformation = 8, SystemFlagsInformation = 9, SystemCallTimeInformation = 10, SystemModuleInformation = 11, SystemLocksInformation = 12, SystemStackTraceInformation = 13, SystemPagedPoolInformation = 14, SystemNonPagedPoolInformation = 15, SystemHandleInformation = 16, SystemObjectInformation = 17, SystemPageFileInformation = 18, SystemVdmInstemulInformation = 19, SystemVdmBopInformation = 20, SystemFileCacheInformation = 21, SystemPoolTagInformation = 22, SystemInterruptInformation = 23, SystemDpcBehaviorInformation = 24, SystemFullMemoryInformation = 25, SystemLoadGdiDriverInformation = 26, SystemUnloadGdiDriverInformation = 27, SystemTimeAdjustmentInformation = 28, SystemSummaryMemoryInformation = 29, SystemMirrorMemoryInformation = 30, SystemPerformanceTraceInformation = 31, SystemObsolete0 = 32, SystemExceptionInformation = 33, SystemCrashDumpStateInformation = 34, SystemKernelDebuggerInformation = 35, SystemContextSwitchInformation = 36, SystemRegistryQuotaInformation = 37, SystemExtendServiceTableInformation = 38, SystemPrioritySeperation = 39, SystemVerifierAddDriverInformation = 40, SystemVerifierRemoveDriverInformation = 41, SystemProcessorIdleInformation = 42, SystemLegacyDriverInformation = 43, SystemCurrentTimeZoneInformation = 44, SystemLookasideInformation = 45, SystemTimeSlipNotification = 46, SystemSessionCreate = 47, SystemSessionDetach = 48, SystemSessionInformation = 49, SystemRangeStartInformation = 50, SystemVerifierInformation = 51, SystemVerifierThunkExtend = 52, SystemSessionProcessInformation = 53, SystemLoadGdiDriverInSystemSpace = 54, SystemNumaProcessorMap = 55, SystemPrefetcherInformation = 56, SystemExtendedProcessInformation = 57, SystemRecommendedSharedDataAlignment = 58, SystemComPlusPackage = 59, SystemNumaAvailableMemory = 60, SystemProcessorPowerInformation = 61, SystemEmulationBasicInformation = 62, SystemEmulationProcessorInformation = 63, SystemExtendedHandleInformation = 64, SystemLostDelayedWriteInformation = 65, SystemBigPoolInformation = 66, SystemSessionPoolTagInformation = 67, SystemSessionMappedViewInformation = 68, SystemHotpatchInformation = 69, SystemObjectSecurityMode = 70, SystemWatchdogTimerHandler = 71, SystemWatchdogTimerInformation = 72, SystemLogicalProcessorInformation = 73, SystemWow64SharedInformationObsolete = 74, SystemRegisterFirmwareTableInformationHandler = 75, SystemFirmwareTableInformation = 76, SystemModuleInformationEx = 77, SystemVerifierTriageInformation = 78, SystemSuperfetchInformation = 79, SystemMemoryListInformation = 80, SystemFileCacheInformationEx = 81, SystemThreadPriorityClientIdInformation = 82, SystemProcessorIdleCycleTimeInformation = 83, SystemVerifierCancellationInformation = 84, SystemProcessorPowerInformationEx = 85, SystemRefTraceInformation = 86, SystemSpecialPoolInformation = 87, SystemProcessIdInformation = 88, SystemErrorPortInformation = 89, SystemBootEnvironmentInformation = 90, SystemHypervisorInformation = 91, SystemVerifierInformationEx = 92, SystemTimeZoneInformation = 93, SystemImageFileExecutionOptionsInformation = 94, SystemCoverageInformation = 95, SystemPrefetchPatchInformation = 96, SystemVerifierFaultsInformation = 97, SystemSystemPartitionInformation = 98, SystemSystemDiskInformation = 99, SystemProcessorPerformanceDistribution = 100, SystemNumaProximityNodeInformation = 101, SystemDynamicTimeZoneInformation = 102, SystemCodeIntegrityInformation = 103, SystemProcessorMicrocodeUpdateInformation = 104, SystemProcessorBrandString = 105, SystemVirtualAddressInformation = 106, SystemLogicalProcessorAndGroupInformation = 107, SystemProcessorCycleTimeInformation = 108, SystemStoreInformation = 109, SystemRegistryAppendString = 110, SystemAitSamplingValue = 111, SystemVhdBootInformation = 112, SystemCpuQuotaInformation = 113, SystemNativeBasicInformation = 114, SystemErrorPortTimeouts = 115, SystemLowPriorityIoInformation = 116, SystemBootEntropyInformation = 117, SystemVerifierCountersInformation = 118, SystemPagedPoolInformationEx = 119, SystemSystemPtesInformationEx = 120, SystemNodeDistanceInformation = 121, SystemAcpiAuditInformation = 122, SystemBasicPerformanceInformation = 123, SystemQueryPerformanceCounterInformation = 124, SystemSessionBigPoolInformation = 125, SystemBootGraphicsInformation = 126, SystemScrubPhysicalMemoryInformation = 127, SystemBadPageInformation = 128, SystemProcessorProfileControlArea = 129, SystemCombinePhysicalMemoryInformation = 130, SystemEntropyInterruptTimingCallback = 131, SystemConsoleInformation = 132, SystemPlatformBinaryInformation = 133, SystemThrottleNotificationInformation = 134, SystemHypervisorProcessorCountInformation = 135, SystemDeviceDataInformation = 136, SystemDeviceDataEnumerationInformation = 137, SystemMemoryTopologyInformation = 138, SystemMemoryChannelInformation = 139, SystemBootLogoInformation = 140, MaxSystemInfoClass = 141 }; enum DISPLAYCONFIG_SCALING { DISPLAYCONFIG_SCALING_IDENTITY = 1, DISPLAYCONFIG_SCALING_CENTERED = 2, DISPLAYCONFIG_SCALING_STRETCHED = 3, DISPLAYCONFIG_SCALING_ASPECTRATIOCENTEREDMAX = 4, DISPLAYCONFIG_SCALING_CUSTOM = 5, DISPLAYCONFIG_SCALING_PREFERRED = 128, DISPLAYCONFIG_SCALING_FORCE_UINT32 = -1 }; enum DISPLAYCONFIG_DEVICE_INFO_TYPE { DISPLAYCONFIG_DEVICE_INFO_GET_SOURCE_NAME = 1, DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_NAME = 2, DISPLAYCONFIG_DEVICE_INFO_GET_TARGET_PREFERRED_MODE = 3, DISPLAYCONFIG_DEVICE_INFO_GET_ADAPTER_NAME = 4, DISPLAYCONFIG_DEVICE_INFO_SET_TARGET_PERSISTENCE = 5, DISPLAYCONFIG_DEVICE_INFO_FORCE_UINT32 = -1 }; enum _PLUGPLAY_CONTROL_CLASS { PlugPlayControlEnumerateDevice = 0, PlugPlayControlRegisterNewDevice = 1, PlugPlayControlDeregisterDevice = 2, PlugPlayControlInitializeDevice = 3, PlugPlayControlStartDevice = 4, PlugPlayControlUnlockDevice = 5, PlugPlayControlQueryAndRemoveDevice = 6, PlugPlayControlUserResponse = 7, PlugPlayControlGenerateLegacyDevice = 8, PlugPlayControlGetInterfaceDeviceList = 9, PlugPlayControlProperty = 10, PlugPlayControlDeviceClassAssociation = 11, PlugPlayControlGetRelatedDevice = 12, PlugPlayControlGetInterfaceDeviceAlias = 13, PlugPlayControlDeviceStatus = 14, PlugPlayControlGetDeviceDepth = 15, PlugPlayControlQueryDeviceRelations = 16, PlugPlayControlTargetDeviceRelation = 17, PlugPlayControlQueryConflictList = 18, PlugPlayControlRetrieveDock = 19, PlugPlayControlResetDevice = 20, PlugPlayControlHaltDevice = 21, PlugPlayControlGetBlockedDriverList = 22, MaxPlugPlayControl = 23 }; enum ReplacesCorHdrNumericDefines { COMIMAGE_FLAGS_ILONLY = 1, COMIMAGE_FLAGS_32BITREQUIRED = 2, COMIMAGE_FLAGS_IL_LIBRARY = 4, COMIMAGE_FLAGS_STRONGNAMESIGNED = 8, COMIMAGE_FLAGS_NATIVE_ENTRYPOINT = 16, /* COMIMAGE_FLAGS_TRACKDEBUGDATA = Unavail */ }; enum _SYSTEM_VA_TYPE { SystemVaTypeAll = 0, SystemVaTypeNonPagedPool = 1, SystemVaTypePagedPool = 2, SystemVaTypeSystemCache = 3, SystemVaTypeSystemPtes = 4, SystemVaTypeSessionSpace = 5, SystemVaTypeMax = 6 }; enum _INTERFACE_TYPE { InterfaceTypeUndefined = -1, Internal = 0, Isa = 1, Eisa = 2, MicroChannel = 3, TurboChannel = 4, PCIBus = 5, VMEBus = 6, NuBus = 7, PCMCIABus = 8, CBus = 9, MPIBus = 10, MPSABus = 11, ProcessorInternal = 12, InternalPowerBus = 13, PNPISABus = 14, PNPBus = 15, Vmcs = 16, ACPIBus = 17, MaximumInterfaceType = 18 }; enum _KPROFILE_SOURCE { ProfileTime = 0, ProfileAlignmentFixup = 1, ProfileTotalIssues = 2, ProfilePipelineDry = 3, ProfileLoadInstructions = 4, ProfilePipelineFrozen = 5, ProfileBranchInstructions = 6, ProfileTotalNonissues = 7, ProfileDcacheMisses = 8, ProfileIcacheMisses = 9, ProfileCacheMisses = 10, ProfileBranchMispredictions = 11, ProfileStoreInstructions = 12, ProfileFpInstructions = 13, ProfileIntegerInstructions = 14, Profile2Issue = 15, Profile3Issue = 16, Profile4Issue = 17, ProfileSpecialInstructions = 18, ProfileTotalCycles = 19, ProfileIcacheIssues = 20, ProfileDcacheAccesses = 21, ProfileMemoryBarrierCycles = 22, ProfileLoadLinkedIssues = 23, ProfileMaximum = 24 }; enum __MIDL_IInternetSecurityManager_0001 { PUAF_DEFAULT = 0, PUAF_NOUI = 1, PUAF_ISFILE = 2, PUAF_WARN_IF_DENIED = 4, PUAF_FORCEUI_FOREGROUND = 8, PUAF_CHECK_TIFS = 16, PUAF_DONTCHECKBOXINDIALOG = 32, PUAF_TRUSTED = 64, PUAF_ACCEPT_WILDCARD_SCHEME = 128, PUAF_ENFORCERESTRICTED = 256, PUAF_NOSAVEDFILECHECK = 512, PUAF_REQUIRESAVEDFILECHECK = 1024, PUAF_DONT_USE_CACHE = 4096, PUAF_RESERVED1 = 8192, PUAF_RESERVED2 = 16384, /* PUAF_LMZ_UNLOCKED = Unavail */ }; enum PROXY_PHASE { PROXY_CALCSIZE = 0, PROXY_GETBUFFER = 1, PROXY_MARSHAL = 2, PROXY_SENDRECEIVE = 3, PROXY_UNMARSHAL = 4 }; enum _IDL_CS_CONVERT { IDL_CS_NO_CONVERT = 0, IDL_CS_IN_PLACE_CONVERT = 1, IDL_CS_NEW_BUFFER_CONVERT = 2 }; enum _BUS_DATA_TYPE { ConfigurationSpaceUndefined = -1, Cmos = 0, EisaConfiguration = 1, Pos = 2, CbusConfiguration = 3, PCIConfiguration = 4, VMEConfiguration = 5, NuBusConfiguration = 6, PCMCIAConfiguration = 7, MPIConfiguration = 8, MPSAConfiguration = 9, PNPISAConfiguration = 10, SgiInternalConfiguration = 11, MaximumBusDataType = 12 }; enum tagSTGC { STGC_DEFAULT = 0, STGC_OVERWRITE = 1, STGC_ONLYIFCURRENT = 2, STGC_DANGEROUSLYCOMMITMERELYTODISKCACHE = 4, STGC_CONSOLIDATE = 8 }; enum _RTL_PATH_TYPE { RtlPathTypeUnknown = 0, RtlPathTypeUncAbsolute = 1, RtlPathTypeDriveAbsolute = 2, RtlPathTypeDriveRelative = 3, RtlPathTypeRooted = 4, RtlPathTypeRelative = 5, RtlPathTypeLocalDevice = 6, RtlPathTypeRootLocalDevice = 7 }; enum _WORKER_FACTORY_CALLBACK_CLASS { WorkerFactoryCallbackNormal = 0, WorkerFactoryCallbackLongRunning = 1, WorkerFactoryCallbackIndependent = 2, WorkerFactoryCallbackDetectedUnrecoverableError = 3 }; enum SYSTEM_POWER_CONDITION { PoAc = 0, PoDc = 1, PoHot = 2, PoConditionMaximum = 3 }; enum _TRACE_QUERY_INFO_CLASS { TraceGuidQueryList = 0, TraceGuidQueryInfo = 1, TraceGuidQueryProcess = 2, TraceStackTracingInfo = 3, TraceSystemTraceEnableFlagsInfo = 4, TraceSampledProfileIntervalInfo = 5, TraceProfileSourceConfigInfo = 6, TraceProfileSourceListInfo = 7, TracePmcEventListInfo = 8, TracePmcCounterListInfo = 9, MaxTraceSetInfoClass = 10 }; enum tagTYPEKIND { TKIND_ENUM = 0, TKIND_RECORD = 1, TKIND_MODULE = 2, TKIND_INTERFACE = 3, TKIND_DISPATCH = 4, TKIND_COCLASS = 5, TKIND_ALIAS = 6, TKIND_UNION = 7, TKIND_MAX = 8 }; enum _MUTANT_INFORMATION_CLASS { MutantBasicInformation = 0, MutantOwnerInformation = 1 }; enum tagBINDSTATUS { BINDSTATUS_FINDINGRESOURCE = 1, BINDSTATUS_CONNECTING = 2, BINDSTATUS_REDIRECTING = 3, BINDSTATUS_BEGINDOWNLOADDATA = 4, BINDSTATUS_DOWNLOADINGDATA = 5, BINDSTATUS_ENDDOWNLOADDATA = 6, BINDSTATUS_BEGINDOWNLOADCOMPONENTS = 7, BINDSTATUS_INSTALLINGCOMPONENTS = 8, BINDSTATUS_ENDDOWNLOADCOMPONENTS = 9, BINDSTATUS_USINGCACHEDCOPY = 10, BINDSTATUS_SENDINGREQUEST = 11, BINDSTATUS_CLASSIDAVAILABLE = 12, BINDSTATUS_MIMETYPEAVAILABLE = 13, BINDSTATUS_CACHEFILENAMEAVAILABLE = 14, BINDSTATUS_BEGINSYNCOPERATION = 15, BINDSTATUS_ENDSYNCOPERATION = 16, BINDSTATUS_BEGINUPLOADDATA = 17, BINDSTATUS_UPLOADINGDATA = 18, BINDSTATUS_ENDUPLOADDATA = 19, BINDSTATUS_PROTOCOLCLASSID = 20, BINDSTATUS_ENCODING = 21, BINDSTATUS_VERIFIEDMIMETYPEAVAILABLE = 22, BINDSTATUS_CLASSINSTALLLOCATION = 23, BINDSTATUS_DECODING = 24, BINDSTATUS_LOADINGMIMEHANDLER = 25, BINDSTATUS_CONTENTDISPOSITIONATTACH = 26, BINDSTATUS_FILTERREPORTMIMETYPE = 27, BINDSTATUS_CLSIDCANINSTANTIATE = 28, BINDSTATUS_IUNKNOWNAVAILABLE = 29, BINDSTATUS_DIRECTBIND = 30, BINDSTATUS_RAWMIMETYPE = 31, BINDSTATUS_PROXYDETECTING = 32, BINDSTATUS_ACCEPTRANGES = 33, BINDSTATUS_COOKIE_SENT = 34, BINDSTATUS_COMPACT_POLICY_RECEIVED = 35, BINDSTATUS_COOKIE_SUPPRESSED = 36, BINDSTATUS_COOKIE_STATE_UNKNOWN = 37, BINDSTATUS_COOKIE_STATE_ACCEPT = 38, BINDSTATUS_COOKIE_STATE_REJECT = 39, BINDSTATUS_COOKIE_STATE_PROMPT = 40, BINDSTATUS_COOKIE_STATE_LEASH = 41, BINDSTATUS_COOKIE_STATE_DOWNGRADE = 42, BINDSTATUS_POLICY_HREF = 43, BINDSTATUS_P3P_HEADER = 44, BINDSTATUS_SESSION_COOKIE_RECEIVED = 45, BINDSTATUS_PERSISTENT_COOKIE_RECEIVED = 46, BINDSTATUS_SESSION_COOKIES_ALLOWED = 47, BINDSTATUS_CACHECONTROL = 48, BINDSTATUS_CONTENTDISPOSITIONFILENAME = 49, BINDSTATUS_MIMETEXTPLAINMISMATCH = 50, BINDSTATUS_PUBLISHERAVAILABLE = 51, BINDSTATUS_DISPLAYNAMEAVAILABLE = 52, BINDSTATUS_SSLUX_NAVBLOCKED = 53, BINDSTATUS_SERVER_MIMETYPEAVAILABLE = 54, BINDSTATUS_SNIFFED_CLASSIDAVAILABLE = 55, BINDSTATUS_64BIT_PROGRESS = 56, BINDSTATUS_LAST = 56, BINDSTATUS_RESERVED_0 = 57, BINDSTATUS_RESERVED_1 = 58, BINDSTATUS_RESERVED_2 = 59, BINDSTATUS_RESERVED_3 = 60, BINDSTATUS_RESERVED_4 = 61, BINDSTATUS_RESERVED_5 = 62, BINDSTATUS_RESERVED_6 = 63, BINDSTATUS_RESERVED_7 = 64, BINDSTATUS_RESERVED_8 = 65, BINDSTATUS_RESERVED_9 = 66, BINDSTATUS_LAST_PRIVATE = 66 }; enum __MIDL_IUri_0001 { Uri_PROPERTY_ABSOLUTE_URI = 0, Uri_PROPERTY_STRING_START = 0, Uri_PROPERTY_AUTHORITY = 1, Uri_PROPERTY_DISPLAY_URI = 2, Uri_PROPERTY_DOMAIN = 3, Uri_PROPERTY_EXTENSION = 4, Uri_PROPERTY_FRAGMENT = 5, Uri_PROPERTY_HOST = 6, Uri_PROPERTY_PASSWORD = 7, Uri_PROPERTY_PATH = 8, Uri_PROPERTY_PATH_AND_QUERY = 9, Uri_PROPERTY_QUERY = 10, Uri_PROPERTY_RAW_URI = 11, Uri_PROPERTY_SCHEME_NAME = 12, Uri_PROPERTY_USER_INFO = 13, Uri_PROPERTY_USER_NAME = 14, Uri_PROPERTY_STRING_LAST = 14, Uri_PROPERTY_HOST_TYPE = 15, Uri_PROPERTY_DWORD_START = 15, Uri_PROPERTY_PORT = 16, Uri_PROPERTY_SCHEME = 17, Uri_PROPERTY_ZONE = 18, Uri_PROPERTY_DWORD_LAST = 18 }; enum _JOURNAL_CHANGE_INFORMATION_CLASS { JournalCreateKey = 0, JournalDeleteKey = 1, JournalRenameKey = 2, JournalSetValue = 3, JournalDeleteValue = 4, JournalSetKeySecurity = 5, JournalSetKeyUserFlags = 6, JournalSetLastWriteTime = 7, JournalBeginTransaction = 8, JournalCommitTransaction = 9, JournalAbortTransaction = 10, MaxJournalChangeAction = 11 }; enum _TP_TRACE_TYPE { TpTraceThreadPriority = 1, TpTraceThreadAffinity = 2, MaxTpTraceType = 3 }; enum tagOLERENDER { OLERENDER_NONE = 0, OLERENDER_DRAW = 1, OLERENDER_FORMAT = 2, OLERENDER_ASIS = 3 }; /* enum tagMKREDUCE { MKRREDUCE_ONE = Unavail }; */ enum POWER_STATE_HANDLER_TYPE { PowerStateSleeping1 = 0, PowerStateSleeping2 = 1, PowerStateSleeping3 = 2, PowerStateSleeping4 = 3, PowerStateShutdownOff = 4, PowerStateShutdownReset = 5, PowerStateSleeping4Firmware = 6, PowerStateMaximum = 7 }; enum _tagINTERNETFEATURELIST { FEATURE_OBJECT_CACHING = 0, FEATURE_ZONE_ELEVATION = 1, FEATURE_MIME_HANDLING = 2, FEATURE_MIME_SNIFFING = 3, FEATURE_WINDOW_RESTRICTIONS = 4, FEATURE_WEBOC_POPUPMANAGEMENT = 5, FEATURE_BEHAVIORS = 6, FEATURE_DISABLE_MK_PROTOCOL = 7, FEATURE_LOCALMACHINE_LOCKDOWN = 8, FEATURE_SECURITYBAND = 9, FEATURE_RESTRICT_ACTIVEXINSTALL = 10, FEATURE_VALIDATE_NAVIGATE_URL = 11, FEATURE_RESTRICT_FILEDOWNLOAD = 12, FEATURE_ADDON_MANAGEMENT = 13, FEATURE_PROTOCOL_LOCKDOWN = 14, FEATURE_HTTP_USERNAME_PASSWORD_DISABLE = 15, FEATURE_SAFE_BINDTOOBJECT = 16, FEATURE_UNC_SAVEDFILECHECK = 17, FEATURE_GET_URL_DOM_FILEPATH_UNENCODED = 18, FEATURE_TABBED_BROWSING = 19, FEATURE_SSLUX = 20, FEATURE_DISABLE_NAVIGATION_SOUNDS = 21, FEATURE_DISABLE_LEGACY_COMPRESSION = 22, FEATURE_FORCE_ADDR_AND_STATUS = 23, FEATURE_XMLHTTP = 24, FEATURE_DISABLE_TELNET_PROTOCOL = 25, FEATURE_FEEDS = 26, FEATURE_BLOCK_INPUT_PROMPTS = 27, FEATURE_ENTRY_COUNT = 28 }; enum _DMA_WIDTH { Width8Bits = 0, Width16Bits = 1, Width32Bits = 2, Width64Bits = 3, WidthNoWrap = 4, MaximumDmaWidth = 5 }; enum __MIDL_IBindStatusCallback_0006 { BSCF_FIRSTDATANOTIFICATION = 1, BSCF_INTERMEDIATEDATANOTIFICATION = 2, BSCF_LASTDATANOTIFICATION = 4, BSCF_DATAFULLYAVAILABLE = 8, BSCF_AVAILABLEDATASIZEUNKNOWN = 16, BSCF_SKIPDRAINDATAFORFILEURLS = 32, BSCF_64BITLENGTHDOWNLOAD = 64 }; enum DISPLAYCONFIG_PIXELFORMAT { DISPLAYCONFIG_PIXELFORMAT_8BPP = 1, DISPLAYCONFIG_PIXELFORMAT_16BPP = 2, DISPLAYCONFIG_PIXELFORMAT_24BPP = 3, DISPLAYCONFIG_PIXELFORMAT_32BPP = 4, DISPLAYCONFIG_PIXELFORMAT_NONGDI = 5, DISPLAYCONFIG_PIXELFORMAT_FORCE_UINT32 = -1 }; enum TrustLevel { BaseTrust = 0, PartialTrust = 1, FullTrust = 2 }; enum tagBINDSTRING { BINDSTRING_HEADERS = 1, BINDSTRING_ACCEPT_MIMES = 2, BINDSTRING_EXTRA_URL = 3, BINDSTRING_LANGUAGE = 4, BINDSTRING_USERNAME = 5, BINDSTRING_PASSWORD = 6, BINDSTRING_UA_PIXELS = 7, BINDSTRING_UA_COLOR = 8, BINDSTRING_OS = 9, BINDSTRING_USER_AGENT = 10, BINDSTRING_ACCEPT_ENCODINGS = 11, BINDSTRING_POST_COOKIE = 12, BINDSTRING_POST_DATA_MIME = 13, BINDSTRING_URL = 14, BINDSTRING_IID = 15, BINDSTRING_FLAG_BIND_TO_OBJECT = 16, BINDSTRING_PTR_BIND_CONTEXT = 17, BINDSTRING_XDR_ORIGIN = 18, BINDSTRING_DOWNLOADPATH = 19, BINDSTRING_ROOTDOC_URL = 20, BINDSTRING_INITIAL_FILENAME = 21 }; enum tagORIENTATION_PREFERENCE { ORIENTATION_PREFERENCE_NONE = 0, ORIENTATION_PREFERENCE_LANDSCAPE = 1, ORIENTATION_PREFERENCE_PORTRAIT = 2, ORIENTATION_PREFERENCE_LANDSCAPE_FLIPPED = 4, ORIENTATION_PREFERENCE_PORTRAIT_FLIPPED = 8 }; enum _FP_IEEE_OPERATION_CODE { FpCodeUnspecified = 0, FpCodeAdd = 1, FpCodeSubtract = 2, FpCodeMultiply = 3, FpCodeDivide = 4, FpCodeSquareRoot = 5, FpCodeRemainder = 6, FpCodeCompare = 7, FpCodeConvert = 8, FpCodeRound = 9, FpCodeTruncate = 10, FpCodeFloor = 11, FpCodeCeil = 12, FpCodeAcos = 13, FpCodeAsin = 14, FpCodeAtan = 15, FpCodeAtan2 = 16, FpCodeCabs = 17, FpCodeCos = 18, FpCodeCosh = 19, FpCodeExp = 20, FpCodeFabs = 21, FpCodeFmod = 22, FpCodeFrexp = 23, FpCodeHypot = 24, FpCodeLdexp = 25, FpCodeLog = 26, FpCodeLog10 = 27, FpCodeModf = 28, FpCodePow = 29, FpCodeSin = 30, FpCodeSinh = 31, FpCodeTan = 32, FpCodeTanh = 33, FpCodeY0 = 34, FpCodeY1 = 35, FpCodeYn = 36 }; enum tagLIBFLAGS { LIBFLAG_FRESTRICTED = 1, LIBFLAG_FCONTROL = 2, LIBFLAG_FHIDDEN = 4, LIBFLAG_FHASDISKIMAGE = 8 }; enum _RTL_RXACT_OPERATION { RtlRXactOperationDelete = 1, RtlRXactOperationSetValue = 2, RtlRXactOperationDelAttribute = 3, RtlRXactOperationSetAttribute = 4 }; enum _IRQ_PRIORITY { IrqPriorityUndefined = 0, IrqPriorityLow = 1, IrqPriorityNormal = 2, IrqPriorityHigh = 3 }; enum PO_FIXED_WAKE_SOURCE_TYPE { FixedWakeSourcePowerButton = 0, FixedWakeSourceSleepButton = 1, FixedWakeSourceRtc = 2, FixedWakeSourceDozeToHibernate = 3 }; enum _THREADINFOCLASS { ThreadBasicInformation = 0, ThreadTimes = 1, ThreadPriority = 2, ThreadBasePriority = 3, ThreadAffinityMask = 4, ThreadImpersonationToken = 5, ThreadDescriptorTableEntry = 6, ThreadEnableAlignmentFaultFixup = 7, ThreadEventPair_Reusable = 8, ThreadQuerySetWin32StartAddress = 9, ThreadZeroTlsCell = 10, ThreadPerformanceCount = 11, ThreadAmILastThread = 12, ThreadIdealProcessor = 13, ThreadPriorityBoost = 14, ThreadSetTlsArrayAddress = 15, ThreadIsIoPending = 16, ThreadHideFromDebugger = 17, ThreadBreakOnTermination = 18, ThreadSwitchLegacyState = 19, ThreadIsTerminated = 20, ThreadLastSystemCall = 21, ThreadIoPriority = 22, ThreadCycleTime = 23, ThreadPagePriority = 24, ThreadActualBasePriority = 25, ThreadTebInformation = 26, ThreadCSwitchMon = 27, ThreadCSwitchPmu = 28, ThreadWow64Context = 29, ThreadGroupInformation = 30, ThreadUmsInformation = 31, ThreadCounterProfiling = 32, ThreadIdealProcessorEx = 33, ThreadCpuAccountingInformation = 34, ThreadSwitchStackCheck = 35, MaxThreadInfoClass = 36 }; enum _SE_AUDIT_OPERATION { AuditPrivilegeObject = 0, AuditPrivilegeService = 1, AuditAccessCheck = 2, AuditOpenObject = 3, AuditOpenObjectWithTransaction = 4, AuditCloseObject = 5, AuditDeleteObject = 6, AuditOpenObjectForDelete = 7, AuditOpenObjectForDeleteWithTransaction = 8, AuditCloseNonObject = 9, AuditOpenNonObject = 10, AuditObjectReference = 11, AuditHandleCreation = 12 }; enum _TOKEN_INFORMATION_CLASS { TokenUser = 1, TokenGroups = 2, TokenPrivileges = 3, TokenOwner = 4, TokenPrimaryGroup = 5, TokenDefaultDacl = 6, TokenSource = 7, TokenType = 8, TokenImpersonationLevel = 9, TokenStatistics = 10, TokenRestrictedSids = 11, TokenSessionId = 12, TokenGroupsAndPrivileges = 13, TokenSessionReference = 14, TokenSandBoxInert = 15, TokenAuditPolicy = 16, TokenOrigin = 17, TokenElevationType = 18, TokenLinkedToken = 19, TokenElevation = 20, TokenHasRestrictions = 21, TokenAccessInformation = 22, TokenVirtualizationAllowed = 23, TokenVirtualizationEnabled = 24, TokenIntegrityLevel = 25, TokenUIAccess = 26, TokenMandatoryPolicy = 27, TokenLogonSid = 28, TokenIsAppContainer = 29, TokenCapabilities = 30, TokenAppContainerSid = 31, TokenAppContainerNumber = 32, TokenUserClaimAttributes = 33, TokenDeviceClaimAttributes = 34, TokenRestrictedUserClaimAttributes = 35, TokenRestrictedDeviceClaimAttributes = 36, TokenDeviceGroups = 37, TokenRestrictedDeviceGroups = 38, TokenSecurityAttributes = 39, TokenIsRestricted = 40, MaxTokenInfoClass = 41 }; enum _SUITE_TYPE { SmallBusiness = 0, Enterprise = 1, BackOffice = 2, CommunicationServer = 3, TerminalServer = 4, SmallBusinessRestricted = 5, EmbeddedNT = 6, DataCenter = 7, SingleUserTS = 8, Personal = 9, Blade = 10, EmbeddedRestricted = 11, SecurityAppliance = 12, StorageServer = 13, ComputeServer = 14, WHServer = 15, MaxSuiteType = 16 }; enum tagMKSYS { MKSYS_NONE = 0, MKSYS_GENERICCOMPOSITE = 1, MKSYS_FILEMONIKER = 2, MKSYS_ANTIMONIKER = 3, MKSYS_ITEMMONIKER = 4, MKSYS_POINTERMONIKER = 5, MKSYS_CLASSMONIKER = 7, MKSYS_OBJREFMONIKER = 8, MKSYS_SESSIONMONIKER = 9, MKSYS_LUAMONIKER = 10 }; enum _BOOT_ENTROPY_SOURCE_ID { BootEntropySourceNone = 0, BootEntropySourceSeedfile = 1, BootEntropySourceExternal = 2, BootEntropySourceTpm = 3, BootEntropySourceRdrand = 4, BootEntropySourceTime = 5, BootEntropySourceAcpiOem0 = 6, BootEntropySourceUefi = 7, BootMaxEntropySources = 7 }; enum _FILE_INFO_BY_HANDLE_CLASS { FileBasicInfo = 0, FileStandardInfo = 1, FileNameInfo = 2, FileRenameInfo = 3, FileDispositionInfo = 4, FileAllocationInfo = 5, FileEndOfFileInfo = 6, FileStreamInfo = 7, FileCompressionInfo = 8, FileAttributeTagInfo = 9, FileIdBothDirectoryInfo = 10, FileIdBothDirectoryRestartInfo = 11, FileIoPriorityHintInfo = 12, FileRemoteProtocolInfo = 13, FileFullDirectoryInfo = 14, FileFullDirectoryRestartInfo = 15, FileStorageInfo = 16, FileAlignmentInfo = 17, MaximumFileInfoByHandleClass = 18 }; enum _WNF_USER_DELIVERY_STATE { WNF_USER_DELIVERY_STATE_READY = 0, WNF_USER_DELIVERY_STATE_CANCELLED = 1, WNF_USER_DELIVERY_STATE_IN_PROGRESS = 2, WNF_USER_DELIVERY_STATE_SUCCEEDED = 3, WNF_USER_DELIVERY_STATE_FAILED = 4, WNF_USER_DELIVERY_STATE_REQUIRES_RETRY = 5, WNF_USER_DELIVERY_STATE_COMPLETE = 6 }; enum _TIMER_INFORMATION_CLASS { TimerBasicInformation = 0 }; enum tagMSHCTX { MSHCTX_LOCAL = 0, MSHCTX_NOSHAREDMEM = 1, MSHCTX_DIFFERENTMACHINE = 2, MSHCTX_INPROC = 3, MSHCTX_CROSSCTX = 4 }; enum tagPOINTER_DEVICE_CURSOR_TYPE { POINTER_DEVICE_CURSOR_TYPE_UNKNOWN = 0, POINTER_DEVICE_CURSOR_TYPE_TIP = 1, POINTER_DEVICE_CURSOR_TYPE_ERASER = 2, POINTER_DEVICE_CURSOR_TYPE_MAX = -1 }; enum tagCOINIT { COINIT_APARTMENTTHREADED = 2, COINIT_MULTITHREADED = 0, COINIT_DISABLE_OLE1DDE = 4, COINIT_SPEED_OVER_MEMORY = 8 }; enum _PNP_VETO_TYPE { PNP_VetoTypeUnknown = 0, PNP_VetoLegacyDevice = 1, PNP_VetoPendingClose = 2, PNP_VetoWindowsApp = 3, PNP_VetoWindowsService = 4, PNP_VetoOutstandingOpen = 5, PNP_VetoDevice = 6, PNP_VetoDriver = 7, PNP_VetoIllegalDeviceRequest = 8, PNP_VetoInsufficientPower = 9, PNP_VetoNonDisableable = 10, PNP_VetoLegacyDriver = 11, PNP_VetoInsufficientRights = 12 }; enum _OBJECT_INFORMATION_CLASS { ObjectBasicInformation = 0, ObjectNameInformation = 1, ObjectTypeInformation = 2, ObjectTypesInformation = 3, ObjectHandleFlagInformation = 4, ObjectSessionInformation = 5, MaxObjectInfoClass = 6 }; enum _IO_SESSION_STATE { IoSessionStateCreated = 1, IoSessionStateInitialized = 2, IoSessionStateConnected = 3, IoSessionStateDisconnected = 4, IoSessionStateDisconnectedLoggedOn = 5, IoSessionStateLoggedOn = 6, IoSessionStateLoggedOff = 7, IoSessionStateTerminated = 8, IoSessionStateMax = 9 }; enum tagURLTEMPLATE { URLTEMPLATE_CUSTOM = 0, /* URLTEMPLATE_PREDEFINED_MIN = Unavail */ }; enum _PNP_QUERY_RELATION { PnpQueryEjectRelations = 0, PnpQueryRemovalRelations = 1, PnpQueryPowerRelations = 2, PnpQueryBusRelations = 3, PnpQueryTransportRelations = 4, MaxPnpQueryRelations = 5 }; enum _JOBOBJECTINFOCLASS { JobObjectBasicAccountingInformation = 1, JobObjectBasicLimitInformation = 2, JobObjectBasicProcessIdList = 3, JobObjectBasicUIRestrictions = 4, JobObjectSecurityLimitInformation = 5, JobObjectEndOfJobTimeInformation = 6, JobObjectAssociateCompletionPortInformation = 7, JobObjectBasicAndIoAccountingInformation = 8, JobObjectExtendedLimitInformation = 9, JobObjectJobSetInformation = 10, JobObjectGroupInformation = 11, JobObjectNotificationLimitInformation = 12, JobObjectLimitViolationInformation = 13, JobObjectGroupInformationEx = 14, JobObjectCpuRateControlInformation = 15, JobObjectCompletionFilter = 16, JobObjectCompletionCounter = 17, JobObjectFreezeInformation = 18, JobObjectExtendedAccountingInformation = 19, JobObjectWakeInformation = 20, JobObjectIdleAwareInformation = 21, JobObjectSchedulingRankBiasInformation = 22, JobObjectTimerVirtualizationInformation = 23, JobObjectCycleTimeNotification = 24, JobObjectReserved1Information = 18, JobObjectReserved2Information = 19, JobObjectReserved3Information = 20, JobObjectReserved4Information = 21, JobObjectReserved5Information = 22, JobObjectReserved6Information = 23, JobObjectReserved7Information = 24, MaxJobObjectInfoClass = 25 }; enum _COMPUTER_NAME_FORMAT { ComputerNameNetBIOS = 0, ComputerNameDnsHostname = 1, ComputerNameDnsDomain = 2, ComputerNameDnsFullyQualified = 3, ComputerNamePhysicalNetBIOS = 4, ComputerNamePhysicalDnsHostname = 5, ComputerNamePhysicalDnsDomain = 6, ComputerNamePhysicalDnsFullyQualified = 7, ComputerNameMax = 8 }; enum _IO_SESSION_EVENT { IoSessionEventIgnore = 0, IoSessionEventCreated = 1, IoSessionEventTerminated = 2, IoSessionEventConnected = 3, IoSessionEventDisconnected = 4, IoSessionEventLogon = 5, IoSessionEventLogoff = 6, IoSessionEventMax = 7 }; enum _FILE_INFORMATION_CLASS { FileDirectoryInformation = 1, FileFullDirectoryInformation = 2, FileBothDirectoryInformation = 3, FileBasicInformation = 4, FileStandardInformation = 5, FileInternalInformation = 6, FileEaInformation = 7, FileAccessInformation = 8, FileNameInformation = 9, FileRenameInformation = 10, FileLinkInformation = 11, FileNamesInformation = 12, FileDispositionInformation = 13, FilePositionInformation = 14, FileFullEaInformation = 15, FileModeInformation = 16, FileAlignmentInformation = 17, FileAllInformation = 18, FileAllocationInformation = 19, FileEndOfFileInformation = 20, FileAlternateNameInformation = 21, FileStreamInformation = 22, FilePipeInformation = 23, FilePipeLocalInformation = 24, FilePipeRemoteInformation = 25, FileMailslotQueryInformation = 26, FileMailslotSetInformation = 27, FileCompressionInformation = 28, FileObjectIdInformation = 29, FileCompletionInformation = 30, FileMoveClusterInformation = 31, FileQuotaInformation = 32, FileReparsePointInformation = 33, FileNetworkOpenInformation = 34, FileAttributeTagInformation = 35, FileTrackingInformation = 36, FileIdBothDirectoryInformation = 37, FileIdFullDirectoryInformation = 38, FileValidDataLengthInformation = 39, FileShortNameInformation = 40, FileIoCompletionNotificationInformation = 41, FileIoStatusBlockRangeInformation = 42, FileIoPriorityHintInformation = 43, FileSfioReserveInformation = 44, FileSfioVolumeInformation = 45, FileHardLinkInformation = 46, FileProcessIdsUsingFileInformation = 47, FileNormalizedNameInformation = 48, FileNetworkPhysicalNameInformation = 49, FileIdGlobalTxDirectoryInformation = 50, FileIsRemoteDeviceInformation = 51, FileAttributeCacheInformation = 52, FileNumaNodeInformation = 53, FileStandardLinkInformation = 54, FileRemoteProtocolInformation = 55, FileRenameInformationBypassAccessCheck = 56, FileLinkInformationBypassAccessCheck = 57, FileIntegrityStreamInformation = 58, FileVolumeNameInformation = 59, FileMaximumInformation = 60 }; enum _ALPC_PORT_INFORMATION_CLASS { AlpcBasicInformation = 0, AlpcPortInformation = 1, AlpcAssociateCompletionPortInformation = 2, AlpcConnectedSIDInformation = 3, AlpcServerInformation = 4, AlpcMessageZoneInformation = 5, AlpcRegisterCompletionListInformation = 6, AlpcUnregisterCompletionListInformation = 7, AlpcAdjustCompletionListConcurrencyCountInformation = 8, AlpcRegisterCallbackInformation = 9, AlpcCompletionListRundownInformation = 10 }; enum tagVARFLAGS { VARFLAG_FREADONLY = 1, VARFLAG_FSOURCE = 2, VARFLAG_FBINDABLE = 4, VARFLAG_FREQUESTEDIT = 8, VARFLAG_FDISPLAYBIND = 16, VARFLAG_FDEFAULTBIND = 32, VARFLAG_FHIDDEN = 64, VARFLAG_FRESTRICTED = 128, VARFLAG_FDEFAULTCOLLELEM = 256, VARFLAG_FUIDEFAULT = 512, VARFLAG_FNONBROWSABLE = 1024, VARFLAG_FREPLACEABLE = 2048, VARFLAG_FIMMEDIATEBIND = 4096 }; enum __MIDL_IBindStatusCallback_0002 { BINDINFOF_URLENCODESTGMEDDATA = 1, BINDINFOF_URLENCODEDEXTRAINFO = 2 }; enum _SC_STATUS_TYPE { SC_STATUS_PROCESS_INFO = 0 }; enum _FP__IEEE_FORMAT { FpFormatFp32 = 0, FpFormatFp64 = 1, FpFormatFp80 = 2, FpFormatFp128 = 3, FpFormatI16 = 4, FpFormatI32 = 5, FpFormatI64 = 6, FpFormatU16 = 7, FpFormatU32 = 8, FpFormatU64 = 9, FpFormatCompare = 10, FpFormatString = 11 }; enum _LEARNING_MODE_LOG_LEVEL { LearningModeLogLevelPassive = 0, LearningModeLogLevelNormalApc = 1, LearningModeLogLevelSpecialApc = 2, LearningModeLogLevelMax = 3 }; enum DISPLAYCONFIG_SCANLINE_ORDERING { DISPLAYCONFIG_SCANLINE_ORDERING_UNSPECIFIED = 0, DISPLAYCONFIG_SCANLINE_ORDERING_PROGRESSIVE = 1, DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED = 2, DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_UPPERFIELDFIRST = 2, DISPLAYCONFIG_SCANLINE_ORDERING_INTERLACED_LOWERFIELDFIRST = 3, DISPLAYCONFIG_SCANLINE_ORDERING_FORCE_UINT32 = -1 }; enum _CM_SERVICE_NODE_TYPE { DriverType = 1, FileSystemType = 2, Win32ServiceOwnProcess = 16, Win32ServiceShareProcess = 32, AdapterType = 4, RecognizerType = 8 }; enum _APTTYPE { APTTYPE_CURRENT = -1, APTTYPE_STA = 0, APTTYPE_MTA = 1, APTTYPE_NA = 2, APTTYPE_MAINSTA = 3 }; enum _CM_SERVICE_LOAD_TYPE { BootLoad = 0, SystemLoad = 1, AutoLoad = 2, DemandLoad = 3, DisableLoad = 4 }; enum _THREAD_INFORMATION_CLASS { ThreadMemoryPriority = 0, ThreadInformationClassMax = 1 }; enum _SID_NAME_USE { SidTypeUser = 1, SidTypeGroup = 2, SidTypeDomain = 3, SidTypeAlias = 4, SidTypeWellKnownGroup = 5, SidTypeDeletedAccount = 6, SidTypeInvalid = 7, SidTypeUnknown = 8, SidTypeComputer = 9, SidTypeLabel = 10 }; enum tagFUNCFLAGS { FUNCFLAG_FRESTRICTED = 1, FUNCFLAG_FSOURCE = 2, FUNCFLAG_FBINDABLE = 4, FUNCFLAG_FREQUESTEDIT = 8, FUNCFLAG_FDISPLAYBIND = 16, FUNCFLAG_FDEFAULTBIND = 32, FUNCFLAG_FHIDDEN = 64, FUNCFLAG_FUSESGETLASTERROR = 128, FUNCFLAG_FDEFAULTCOLLELEM = 256, FUNCFLAG_FUIDEFAULT = 512, FUNCFLAG_FNONBROWSABLE = 1024, FUNCFLAG_FREPLACEABLE = 2048, FUNCFLAG_FIMMEDIATEBIND = 4096 }; enum tagOLEMISC { OLEMISC_RECOMPOSEONRESIZE = 1, OLEMISC_ONLYICONIC = 2, OLEMISC_INSERTNOTREPLACE = 4, OLEMISC_STATIC = 8, OLEMISC_CANTLINKINSIDE = 16, OLEMISC_CANLINKBYOLE1 = 32, OLEMISC_ISLINKOBJECT = 64, OLEMISC_INSIDEOUT = 128, OLEMISC_ACTIVATEWHENVISIBLE = 256, OLEMISC_RENDERINGISDEVICEINDEPENDENT = 512, OLEMISC_INVISIBLEATRUNTIME = 1024, OLEMISC_ALWAYSRUN = 2048, OLEMISC_ACTSLIKEBUTTON = 4096, OLEMISC_ACTSLIKELABEL = 8192, OLEMISC_NOUIACTIVATE = 16384, = 32770 }; enum _THREAD_UMS_INFORMATION_COMMAND { UmsInformationCommandInvalid = 0, UmsInformationCommandAttach = 1, UmsInformationCommandDetach = 2 }; enum tagGLOBALOPT_EH_VALUES { COMGLB_EXCEPTION_HANDLE = 0, COMGLB_EXCEPTION_DONOT_HANDLE_FATAL = 1, COMGLB_EXCEPTION_DONOT_HANDLE = 1, COMGLB_EXCEPTION_DONOT_HANDLE_ANY = 2 }; enum tagXMLEMEM_TYPE { XMLELEMTYPE_ELEMENT = 0, XMLELEMTYPE_TEXT = 1, XMLELEMTYPE_COMMENT = 2, XMLELEMTYPE_DOCUMENT = 3, XMLELEMTYPE_DTD = 4, XMLELEMTYPE_PI = 5, XMLELEMTYPE_OTHER = 6 }; enum _MEMORY_INFORMATION_CLASS { MemoryBasicInformation = 0, MemoryWorkingSetInformation = 1, MemoryMappedFilenameInformation = 2, MemoryRegionInformation = 3, MemoryWorkingSetExInformation = 4 }; enum _tagPI_FLAGS { PI_PARSE_URL = 1, PI_FILTER_MODE = 2, PI_FORCE_ASYNC = 4, PI_USE_WORKERTHREAD = 8, PI_MIMEVERIFICATION = 16, PI_CLSIDLOOKUP = 32, PI_DATAPROGRESS = 64, PI_SYNCHRONOUS = 128, PI_APARTMENTTHREADED = 256, PI_CLASSINSTALL = 512, PI_PASSONBINDCTX = 8192, = 32770 }; enum _SECTION_INFORMATION_CLASS { SectionBasicInformation = 0, SectionImageInformation = 1, SectionRelocationInformation = 2, MaxSectionInfoClass = 3 }; enum IMPORT_OBJECT_NAME_TYPE { IMPORT_OBJECT_ORDINAL = 0, IMPORT_OBJECT_NAME = 1, IMPORT_OBJECT_NAME_NO_PREFIX = 2, IMPORT_OBJECT_NAME_UNDECORATE = 3 }; enum XLAT_SIDE { XLAT_SERVER = 1, XLAT_CLIENT = 2 }; enum _DEVICE_POWER_STATE { PowerDeviceUnspecified = 0, PowerDeviceD0 = 1, PowerDeviceD1 = 2, PowerDeviceD2 = 3, PowerDeviceD3 = 4, PowerDeviceMaximum = 5 }; enum _TRANSACTIONMANAGER_INFORMATION_CLASS { TransactionManagerBasicInformation = 0, TransactionManagerLogInformation = 1, TransactionManagerLogPathInformation = 2, TransactionManagerRecoveryInformation = 4, TransactionManagerOnlineProbeInformation = 3, TransactionManagerOldestTransactionInformation = 5 }; /* enum { LdrpNoDevice = 0, LdrpWebDAV = 1, LdrpRemote = 2, LdrpAnyDevice = -1, LdrpAnyDevice2bit = 3 }; */ enum _NT_PRODUCT_TYPE { NtProductWinNt = 1, NtProductLanManNt = 2, NtProductServer = 3 }; enum _COPYFILE2_COPY_PHASE { COPYFILE2_PHASE_NONE = 0, COPYFILE2_PHASE_PREPARE_SOURCE = 1, COPYFILE2_PHASE_PREPARE_DEST = 2, COPYFILE2_PHASE_READ_SOURCE = 3, COPYFILE2_PHASE_WRITE_DESTINATION = 4, COPYFILE2_PHASE_SERVER_COPY = 5, COPYFILE2_PHASE_NAMEGRAFT_COPY = 6, COPYFILE2_PHASE_MAX = 7 }; enum __MIDL_IBindStatusCallback_0003 { BINDF_ASYNCHRONOUS = 1, BINDF_ASYNCSTORAGE = 2, BINDF_NOPROGRESSIVERENDERING = 4, BINDF_OFFLINEOPERATION = 8, BINDF_GETNEWESTVERSION = 16, BINDF_NOWRITECACHE = 32, BINDF_NEEDFILE = 64, BINDF_PULLDATA = 128, BINDF_IGNORESECURITYPROBLEM = 256, BINDF_RESYNCHRONIZE = 512, BINDF_HYPERLINK = 1024, BINDF_NO_UI = 2048, BINDF_SILENTOPERATION = 4096, BINDF_PRAGMA_NO_CACHE = 8192, BINDF_GETCLASSOBJECT = 16384, = 32770 }; enum _RTL_GENERIC_COMPARE_RESULTS { GenericLessThan = 0, GenericGreaterThan = 1, GenericEqual = 2 }; enum tagCOWAIT_FLAGS { COWAIT_WAITALL = 1, COWAIT_ALERTABLE = 2, COWAIT_INPUTAVAILABLE = 4, COWAIT_DISPATCH_CALLS = 8, COWAIT_DISPATCH_WINDOW_MESSAGES = 16, REAL_COWAIT_ENABLECALLREENTRANCY = 8, COWAIT_ENABLEWINDOWMESSAGES = 16, COWAIT_ENABLECALLREENTRANCY = 24 }; enum _AUDIT_EVENT_TYPE { AuditEventObjectAccess = 0, AuditEventDirectoryServiceAccess = 1 }; enum tagDOMNodeType { NODE_INVALID = 0, NODE_ELEMENT = 1, NODE_ATTRIBUTE = 2, NODE_TEXT = 3, NODE_CDATA_SECTION = 4, NODE_ENTITY_REFERENCE = 5, NODE_ENTITY = 6, NODE_PROCESSING_INSTRUCTION = 7, NODE_COMMENT = 8, NODE_DOCUMENT = 9, NODE_DOCUMENT_TYPE = 10, NODE_DOCUMENT_FRAGMENT = 11, NODE_NOTATION = 12 }; enum _TRANSACTION_INFORMATION_CLASS { TransactionBasicInformation = 0, TransactionPropertiesInformation = 1, TransactionEnlistmentInformation = 2, TransactionSuperiorEnlistmentInformation = 3, TransactionBindInformation = 4, TransactionDTCPrivateInformation = 5 }; enum _PLUGPLAY_EVENT_CATEGORY { HardwareProfileChangeEvent = 0, TargetDeviceChangeEvent = 1, DeviceClassChangeEvent = 2, CustomDeviceEvent = 3, DeviceInstallEvent = 4, DeviceArrivalEvent = 5, VetoEvent = 6, BlockedDriverEvent = 7, InvalidIDEvent = 8, DevicePropertyChangeEvent = 9, DeviceInstanceRemovalEvent = 10, DeviceInstanceStartedEvent = 11, MaxPlugEventCategory = 12 }; enum tagCALLCONV { CC_FASTCALL = 0, CC_CDECL = 1, CC_MSCPASCAL = 2, CC_PASCAL = 2, CC_MACPASCAL = 3, CC_STDCALL = 4, CC_FPFASTCALL = 5, CC_SYSCALL = 6, CC_MPWCDECL = 7, CC_MPWPASCAL = 8, CC_MAX = 9 }; enum tagSTATFLAG { STATFLAG_DEFAULT = 0, STATFLAG_NONAME = 1, STATFLAG_NOOPEN = 2 }; enum tagRpcCallType { rctInvalid = 0, rctNormal = 1, rctTraining = 2, rctGuaranteed = 3 }; enum _IRQ_DEVICE_POLICY { IrqPolicyMachineDefault = 0, IrqPolicyAllCloseProcessors = 1, IrqPolicyOneCloseProcessor = 2, IrqPolicyAllProcessorsInMachine = 3, IrqPolicySpecifiedProcessors = 4, IrqPolicySpreadMessagesAcrossAllProcessors = 5 }; enum _LDR_DDAG_STATE { LdrModulesMerged = -1, LdrModulesInitError = -1, LdrModulesSnapError = -1, LdrModulesUnloaded = -1, LdrModulesUnloading = -1, LdrModulesPlaceHolder = 0, LdrModulesMapping = 1, LdrModulesMapped = 2, LdrModulesWaitingForDependencies = 3, LdrModulesSnapping = 4, LdrModulesSnapped = 5, LdrModulesCondensed = 6, LdrModulesReadyToInit = 7, LdrModulesInitializing = 8, LdrModulesReadyToRun = 9 }; enum _ACTIVATION_CONTEXT_INFO_CLASS { ActivationContextBasicInformation = 1, ActivationContextDetailedInformation = 2, AssemblyDetailedInformationInActivationContext = 3, FileInformationInAssemblyOfAssemblyInActivationContext = 4, RunlevelInformationInActivationContext = 5, CompatibilityInformationInActivationContext = 6, ActivationContextManifestResourceName = 7, MaxActivationContextInfoClass = 8, AssemblyDetailedInformationInActivationContxt = 3, FileInformationInAssemblyOfAssemblyInActivationContxt = 4 }; enum __MIDL_ICodeInstall_0001 { CIP_DISK_FULL = 0, CIP_ACCESS_DENIED = 1, CIP_NEWER_VERSION_EXISTS = 2, CIP_OLDER_VERSION_EXISTS = 3, CIP_NAME_CONFLICT = 4, CIP_TRUST_VERIFICATION_COMPONENT_MISSING = 5, CIP_EXE_SELF_REGISTERATION_TIMEOUT = 6, CIP_UNSAFE_TO_ABORT = 7, CIP_NEED_REBOOT = 8, CIP_NEED_REBOOT_UI_PERMISSION = 9 }; /* enum __MIDL_IBindStatusCallback_0005 { BINDINFO_OPTIONS_WININETFLAG = Unavail }; */ enum _SYSTEM_MEMORY_LIST_COMMAND { MemoryCaptureAccessedBits = 0, MemoryCaptureAndResetAccessedBits = 1, MemoryEmptyWorkingSets = 2, MemoryFlushModifiedList = 3, MemoryPurgeStandbyList = 4, MemoryPurgeLowPriorityStandbyList = 5, MemoryCommandMax = 6 }; enum _FSINFOCLASS { FileFsVolumeInformation = 1, FileFsLabelInformation = 2, FileFsSizeInformation = 3, FileFsDeviceInformation = 4, FileFsAttributeInformation = 5, FileFsControlInformation = 6, FileFsFullSizeInformation = 7, FileFsObjectIdInformation = 8, FileFsDriverPathInformation = 9, FileFsVolumeFlagsInformation = 10, FileFsSectorSizeInformation = 11, FileFsMaximumInformation = 12 }; enum _PROCESS_MITIGATION_POLICY { ProcessDEPPolicy = 0, ProcessASLRPolicy = 1, ProcessStackCheckPolicy = 2, ProcessStrictHandleCheckPolicy = 3, ProcessSystemCallDisablePolicy = 4, MaxProcessMitigationPolicy = 5 }; enum _WATCHDOG_HANDLER_ACTION { WdActionSetTimeoutValue = 0, WdActionQueryTimeoutValue = 1, WdActionResetTimer = 2, WdActionStopTimer = 3, WdActionStartTimer = 4, WdActionSetTriggerAction = 5, WdActionQueryTriggerAction = 6, WdActionQueryState = 7, WdActionSleep = 8, WdActionWake = 9, WdActionMarkHiberPhase = 10 }; enum _WORKERFACTORYINFOCLASS { WorkerFactoryTimeout = 0, WorkerFactoryRetryTimeout = 1, WorkerFactoryIdleTimeout = 2, WorkerFactoryBindingCount = 3, WorkerFactoryThreadMinimum = 4, WorkerFactoryThreadMaximum = 5, WorkerFactoryPaused = 6, WorkerFactoryBasicInformation = 7, WorkerFactoryAdjustThreadGoal = 8, WorkerFactoryCallbackType = 9, WorkerFactoryStackInformation = 10, MaxWorkerFactoryInfoClass = 11 }; enum PO_WAKE_SOURCE_TYPE { DeviceWakeSourceType = 0, FixedWakeSourceType = 1, TimerWakeSourceType = 2 }; enum _RPC_NOTIFICATIONS { RpcNotificationCallNone = 0, RpcNotificationClientDisconnect = 1, RpcNotificationCallCancel = 2 }; enum tagVARKIND { VAR_PERINSTANCE = 0, VAR_STATIC = 1, VAR_CONST = 2, VAR_DISPATCH = 3 }; enum _DEP_SYSTEM_POLICY_TYPE { DEPPolicyAlwaysOff = 0, DEPPolicyAlwaysOn = 1, DEPPolicyOptIn = 2, DEPPolicyOptOut = 3, DEPTotalPolicyCount = 4 }; enum tagEOLE_AUTHENTICATION_CAPABILITIES { EOAC_NONE = 0, EOAC_MUTUAL_AUTH = 1, EOAC_STATIC_CLOAKING = 32, EOAC_DYNAMIC_CLOAKING = 64, EOAC_ANY_AUTHORITY = 128, EOAC_MAKE_FULLSIC = 256, EOAC_DEFAULT = 2048, EOAC_SECURE_REFS = 2, EOAC_ACCESS_CONTROL = 4, EOAC_APPID = 8, EOAC_DYNAMIC = 16, EOAC_REQUIRE_FULLSIC = 512, EOAC_AUTO_IMPERSONATE = 1024, EOAC_NO_CUSTOM_MARSHAL = 8192, EOAC_DISABLE_AAA = 4096 }; enum _KEY_SET_INFORMATION_CLASS { KeyWriteTimeInformation = 0, KeyWow64FlagsInformation = 1, KeyControlFlagsInformation = 2, KeySetVirtualizationInformation = 3, KeySetDebugInformation = 4, KeySetHandleTagsInformation = 5, MaxKeySetInfoClass = 6 }; enum DISPLAYCONFIG_VIDEO_OUTPUT_TECHNOLOGY { DISPLAYCONFIG_OUTPUT_TECHNOLOGY_OTHER = -1, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HD15 = 0, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SVIDEO = 1, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPOSITE_VIDEO = 2, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_COMPONENT_VIDEO = 3, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DVI = 4, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_HDMI = 5, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_LVDS = 6, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_D_JPN = 8, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDI = 9, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EXTERNAL = 10, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_DISPLAYPORT_EMBEDDED = 11, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EXTERNAL = 12, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_UDI_EMBEDDED = 13, DISPLAYCONFIG_OUTPUT_TECHNOLOGY_SDTVDONGLE = 14, = 32771 }; enum VERIFIER_MODE { VERIFIER_MODE_UNUSED = 0, VERIFIER_MODE_TRIAGE = 1, VERIFIER_MODE_FIELD = 2, VERIFIER_MODE_LOGO = 3, VERIFIER_MODE_TEST = 4 }; enum _SHRINK_VOLUME_REQUEST_TYPES { ShrinkPrepare = 1, ShrinkCommit = 2, ShrinkAbort = 3 }; enum __MIDL_IBindStatusCallbackEx_0001 { BINDF2_DISABLEBASICOVERHTTP = 1, BINDF2_DISABLEAUTOCOOKIEHANDLING = 2, BINDF2_READ_DATA_GREATER_THAN_4GB = 4, BINDF2_DISABLE_HTTP_REDIRECT_XSECURITYID = 8, BINDF2_SETDOWNLOADMODE = 32, BINDF2_DISABLE_HTTP_REDIRECT_CACHING = 64, /* BINDF2_RESERVED_E = Unavail */ }; enum _RTL_UMS_SCHEDULER_REASON { UmsSchedulerStartup = 0, UmsSchedulerThreadBlocked = 1, UmsSchedulerThreadYield = 2 }; enum _KTMOBJECT_TYPE { KTMOBJECT_TRANSACTION = 0, KTMOBJECT_TRANSACTION_MANAGER = 1, KTMOBJECT_RESOURCE_MANAGER = 2, KTMOBJECT_ENLISTMENT = 3, KTMOBJECT_INVALID = 4 }; enum _SE_LEARNING_MODE_DATA_TYPE { SeLearningModeInvalidType = 0, SeLearningModeSettings = 1, SeLearningModeMax = 2 }; enum tagPOINTER_DEVICE_TYPE { POINTER_DEVICE_TYPE_INTEGRATED_PEN = 1, POINTER_DEVICE_TYPE_EXTERNAL_PEN = 2, POINTER_DEVICE_TYPE_TOUCH = 3, POINTER_DEVICE_TYPE_MAX = -1 }; enum _TABLE_SEARCH_RESULT { TableEmptyTree = 0, TableFoundNode = 1, TableInsertAsLeft = 2, TableInsertAsRight = 3 }; enum _SYSTEM_POWER_STATE { PowerSystemUnspecified = 0, PowerSystemWorking = 1, PowerSystemSleeping1 = 2, PowerSystemSleeping2 = 3, PowerSystemSleeping3 = 4, PowerSystemHibernate = 5, PowerSystemShutdown = 6, PowerSystemMaximum = 7 }; enum tagCLSCTX { CLSCTX_INPROC_SERVER = 1, CLSCTX_INPROC_HANDLER = 2, CLSCTX_LOCAL_SERVER = 4, CLSCTX_INPROC_SERVER16 = 8, CLSCTX_REMOTE_SERVER = 16, CLSCTX_INPROC_HANDLER16 = 32, CLSCTX_RESERVED1 = 64, CLSCTX_RESERVED2 = 128, CLSCTX_RESERVED3 = 256, CLSCTX_RESERVED4 = 512, CLSCTX_NO_CODE_DOWNLOAD = 1024, CLSCTX_RESERVED5 = 2048, CLSCTX_NO_CUSTOM_MARSHAL = 4096, CLSCTX_ENABLE_CODE_DOWNLOAD = 8192, CLSCTX_NO_FAILURE_LOG = 16384, = 32770 }; enum _WNF_STATE_NAME_INFORMATION { WnfInfoStateNameExist = 0, WnfInfoSubscribersPresent = 1, WnfInfoIsQuiescent = 2 }; enum _SHUTDOWN_ACTION { ShutdownNoReboot = 0, ShutdownReboot = 1, ShutdownPowerOff = 2 }; enum tagOLECLOSE { OLECLOSE_SAVEIFDIRTY = 0, OLECLOSE_NOSAVE = 1, OLECLOSE_PROMPTSAVE = 2 }; enum tagExtendedErrorParamTypes { eeptAnsiString = 1, eeptUnicodeString = 2, eeptLongVal = 3, eeptShortVal = 4, eeptPointerVal = 5, eeptNone = 6, eeptBinary = 7 }; enum __MIDL_IInternetZoneManager_0002 { ZAFLAGS_CUSTOM_EDIT = 1, ZAFLAGS_ADD_SITES = 2, ZAFLAGS_REQUIRE_VERIFICATION = 4, ZAFLAGS_INCLUDE_PROXY_OVERRIDE = 8, ZAFLAGS_INCLUDE_INTRANET_SITES = 16, ZAFLAGS_NO_UI = 32, ZAFLAGS_SUPPORTS_VERIFICATION = 64, ZAFLAGS_UNC_AS_INTRANET = 128, ZAFLAGS_DETECT_INTRANET = 256, /* ZAFLAGS_USE_LOCKED_ZONES = Unavail */ }; enum _FINDEX_SEARCH_OPS { FindExSearchNameMatch = 0, FindExSearchLimitToDirectories = 1, FindExSearchLimitToDevices = 2, FindExSearchMaxSearchOp = 3 }; enum _PORT_INFORMATION_CLASS { PortBasicInformation = 0, PortDumpInformation = 1 }; enum tagINPUT_MESSAGE_DEVICE_TYPE { IMDT_UNAVAILABLE = 0, IMDT_KEYBOARD = 1, IMDT_MOUSE = 2, IMDT_TOUCH = 4, IMDT_PEN = 8 }; enum tagSYSKIND { SYS_WIN16 = 0, SYS_WIN32 = 1, SYS_MAC = 2, SYS_WIN64 = 3 }; enum _HARDERROR_RESPONSE_OPTION { OptionAbortRetryIgnore = 0, OptionOk = 1, OptionOkCancel = 2, OptionRetryCancel = 3, OptionYesNo = 4, OptionYesNoCancel = 5, OptionShutdownSystem = 6, OptionOkNoWait = 7, OptionCancelTryContinue = 8 }; enum DISPLAYCONFIG_TOPOLOGY_ID { DISPLAYCONFIG_TOPOLOGY_INTERNAL = 1, DISPLAYCONFIG_TOPOLOGY_CLONE = 2, DISPLAYCONFIG_TOPOLOGY_EXTEND = 4, DISPLAYCONFIG_TOPOLOGY_EXTERNAL = 8, DISPLAYCONFIG_TOPOLOGY_FORCE_UINT32 = -1 }; enum _PROCESS_INFORMATION_CLASS { ProcessMemoryPriority = 0, ProcessInformationClassMax = 1 }; enum tagApplicationType { ServerApplication = 0, LibraryApplication = 1 }; enum __MIDL_IUri_0002 { Uri_HOST_UNKNOWN = 0, Uri_HOST_DNS = 1, Uri_HOST_IPV4 = 2, Uri_HOST_IPV6 = 3, Uri_HOST_IDN = 4 }; enum tagDESCKIND { DESCKIND_NONE = 0, DESCKIND_FUNCDESC = 1, DESCKIND_VARDESC = 2, DESCKIND_TYPECOMP = 3, DESCKIND_IMPLICITAPPOBJ = 4, DESCKIND_MAX = 5 }; enum tagPENDINGTYPE { PENDINGTYPE_TOPLEVEL = 1, PENDINGTYPE_NESTED = 2 }; enum _MANDATORY_LEVEL { MandatoryLevelUntrusted = 0, MandatoryLevelLow = 1, MandatoryLevelMedium = 2, MandatoryLevelHigh = 3, MandatoryLevelSystem = 4, MandatoryLevelSecureProcess = 5, MandatoryLevelCount = 6 }; enum _SYSTEM_PIXEL_FORMAT { SystemPixelFormatUnknown = 0, SystemPixelFormatR8G8B8 = 1, SystemPixelFormatR8G8B8X8 = 2, SystemPixelFormatB8G8R8 = 3, SystemPixelFormatB8G8R8X8 = 4 }; enum tagGLOBALOPT_PROPERTIES { COMGLB_EXCEPTION_HANDLING = 1, COMGLB_APPID = 2, COMGLB_RPC_THREADPOOL_SETTING = 3, COMGLB_RO_SETTINGS = 4 }; enum __MIDL_IInternetSecurityManager_0002 { PUAFOUT_DEFAULT = 0, PUAFOUT_ISLOCKZONEPOLICY = 1 }; enum __MIDL_IBindStatusCallback_0004 { URL_ENCODING_NONE = 0, /* URL_ENCODING_ENABLE_UTF8 = Unavail */ }; enum STUB_PHASE { STUB_UNMARSHAL = 0, STUB_CALL_SERVER = 1, STUB_MARSHAL = 2, STUB_CALL_SERVER_NO_HRESULT = 3 }; enum _KEY_INFORMATION_CLASS { KeyBasicInformation = 0, KeyNodeInformation = 1, KeyFullInformation = 2, KeyNameInformation = 3, KeyCachedInformation = 4, KeyFlagsInformation = 5, KeyVirtualizationInformation = 6, KeyHandleTagsInformation = 7, MaxKeyInfoClass = 8 }; enum _REG_ACTION { KeyAdded = 0, KeyRemoved = 1, KeyModified = 2 }; enum _BOOT_ENTROPY_SOURCE_RESULT_CODE { BootEntropySourceStructureUninitialized = 0, BootEntropySourceDisabledByPolicy = 1, BootEntropySourceNotPresent = 2, BootEntropySourceError = 3, BootEntropySourceSuccess = 4 }; enum IMPORT_OBJECT_TYPE { IMPORT_OBJECT_CODE = 0, IMPORT_OBJECT_DATA = 1, IMPORT_OBJECT_CONST = 2 }; enum _CSV_INTERNAL_CONTROL_OP { CsvInternalControlPrefetchRetrievalPointers = 0, CsvInternalControlQueryRetrievalPointers = 1, CsvInternalControlStartRedirectFile = 2, CsvInternalControlStopRedirectFile = 3, CsvInternalControlQueryRedirectState = 4, CsvInternalControlQueryFileStatistic = 5 }; enum tagFUNCKIND { FUNC_VIRTUAL = 0, FUNC_PUREVIRTUAL = 1, FUNC_NONVIRTUAL = 2, FUNC_STATIC = 3, FUNC_DISPATCH = 4 }; enum _TRANSACTION_OUTCOME { TransactionOutcomeUndetermined = 1, TransactionOutcomeCommitted = 2, TransactionOutcomeAborted = 3 }; enum tagADVF { ADVF_NODATA = 1, ADVF_PRIMEFIRST = 2, ADVF_ONLYONCE = 4, ADVF_DATAONSTOP = 64, ADVFCACHE_NOHANDLER = 8, ADVFCACHE_FORCEBUILTIN = 16, ADVFCACHE_ONSAVE = 32 }; enum tagSTGTY { STGTY_STORAGE = 1, STGTY_STREAM = 2, STGTY_LOCKBYTES = 3, STGTY_PROPERTY = 4 }; enum _CM_SHARE_DISPOSITION { CmResourceShareUndetermined = 0, CmResourceShareDeviceExclusive = 1, CmResourceShareDriverExclusive = 2, CmResourceShareShared = 3 }; enum tagShutdownType { IdleShutdown = 0, ForcedShutdown = 1 }; enum tagRpcCallClientLocality { rcclInvalid = 0, rcclLocal = 1, rcclRemote = 2, rcclClientUnknownLocality = 3 }; enum tagDATADIR { DATADIR_GET = 1, DATADIR_SET = 2 }; enum tagPOINTER_INPUT_TYPE { PT_POINTER = 1, PT_TOUCH = 2, PT_PEN = 3, PT_MOUSE = 4 }; enum _COVERAGE_REQUEST_CODES { CoverageAllModules = 0, CoverageSearchByHash = 1, CoverageSearchByName = 2 }; enum _IO_PRIORITY_HINT { IoPriorityVeryLow = 0, IoPriorityLow = 1, IoPriorityNormal = 2, IoPriorityHigh = 3, IoPriorityCritical = 4, MaxIoPriorityTypes = 5 }; enum _APTTYPEQUALIFIER { APTTYPEQUALIFIER_NONE = 0, APTTYPEQUALIFIER_IMPLICIT_MTA = 1, APTTYPEQUALIFIER_NA_ON_MTA = 2, APTTYPEQUALIFIER_NA_ON_STA = 3, APTTYPEQUALIFIER_NA_ON_IMPLICIT_MTA = 4, APTTYPEQUALIFIER_NA_ON_MAINSTA = 5, APTTYPEQUALIFIER_APPLICATION_STA = 6 }; enum _FINDEX_INFO_LEVELS { FindExInfoStandard = 0, FindExInfoBasic = 1, FindExInfoMaxInfoLevel = 2 }; enum tagTYMED { TYMED_HGLOBAL = 1, TYMED_FILE = 2, TYMED_ISTREAM = 4, TYMED_ISTORAGE = 8, TYMED_GDI = 16, TYMED_MFPICT = 32, TYMED_ENHMF = 64, TYMED_NULL = 0 }; enum _DEBUG_CONTROL_SPACE_ITEM { DEBUG_CONTROL_SPACE_PCR = 0, DEBUG_CONTROL_SPACE_PRCB = 1, DEBUG_CONTROL_SPACE_KSPECIAL = 2, DEBUG_CONTROL_SPACE_THREAD = 3, DEBUG_CONTROL_SPACE_MAXIMUM = 4 }; enum _SECURITY_IMPERSONATION_LEVEL { SecurityAnonymous = 0, SecurityIdentification = 1, SecurityImpersonation = 2, SecurityDelegation = 3 }; enum _CM_ERROR_CONTROL_TYPE { IgnoreError = 0, NormalError = 1, SevereError = 2, CriticalError = 3 }; enum _TOKEN_ELEVATION_TYPE { TokenElevationTypeDefault = 1, TokenElevationTypeFull = 2, TokenElevationTypeLimited = 3 }; enum _HARDERROR_RESPONSE { ResponseReturnToCaller = 0, ResponseNotHandled = 1, ResponseAbort = 2, ResponseCancel = 3, ResponseIgnore = 4, ResponseNo = 5, ResponseOk = 6, ResponseRetry = 7, ResponseYes = 8, ResponseTryAgain = 9, ResponseContinue = 10 }; enum tagUSERCLASSTYPE { USERCLASSTYPE_FULL = 1, USERCLASSTYPE_SHORT = 2, USERCLASSTYPE_APPNAME = 3 }; enum tagSF_TYPE { SF_ERROR = 10, SF_I1 = 16, SF_I2 = 2, SF_I4 = 3, SF_I8 = 20, SF_BSTR = 8, SF_UNKNOWN = 13, SF_DISPATCH = 9, SF_VARIANT = 12, SF_RECORD = 36, €SF_HAVEIID = 32770 }; enum tagAR_STATE { AR_ENABLED = 0, AR_DISABLED = 1, AR_SUPPRESSED = 2, AR_REMOTESESSION = 4, AR_MULTIMON = 8, AR_NOSENSOR = 16, AR_NOT_SUPPORTED = 32 }; enum _RESOURCEMANAGER_INFORMATION_CLASS { ResourceManagerBasicInformation = 0, ResourceManagerCompletionInformation = 1 }; enum _DMA_SPEED { Compatible = 0, TypeA = 1, TypeB = 2, TypeC = 3, TypeF = 4, MaximumDmaSpeed = 5 }; enum _QUERY_FILE_LAYOUT_FILTER_TYPE { QUERY_FILE_LAYOUT_FILTER_TYPE_NONE = 0, QUERY_FILE_LAYOUT_FILTER_TYPE_CLUSTERS = 1, QUERY_FILE_LAYOUT_FILTER_TYPE_FILEID = 2, QUERY_FILE_LAYOUT_NUM_FILTER_TYPES = 3 }; enum _TIMER_SET_INFORMATION_CLASS { TimerSetCoalescableTimer = 0, MaxTimerInfoClass = 1 }; enum tagSTGMOVE { STGMOVE_MOVE = 0, STGMOVE_COPY = 1, STGMOVE_SHALLOWCOPY = 2 }; enum _IRQ_GROUP_POLICY { GroupAffinityAllGroupZero = 0, GroupAffinityDontCare = 1 }; enum _GET_FILEEX_INFO_LEVELS { GetFileExInfoStandard = 0, GetFileExMaxInfoLevel = 1 }; enum RTL_BSD_ITEM_TYPE { RtlBsdItemVersionNumber = 0, RtlBsdItemProductType = 1, RtlBsdItemAabEnabled = 2, RtlBsdItemAabTimeout = 3, RtlBsdItemBootGood = 4, RtlBsdItemBootShutdown = 5, RtlBsdSleepInProgress = 6, RtlBsdPowerTransition = 7, RtlBsdItemBootAttemptCount = 8, RtlBsdItemMax = 9 }; enum _PS_WAKE_REASON { PsWakeReasonUser = 0, PsWakeReasonDevice = 1, PsWakeReasonKernel = 2, PsWakeReasonPower = 3, PsMaxWakeReasons = 4 }; enum DeploymentRequestOption { DefaultOption = 0, RegisterForProgress = 1 }; enum _FP_IEEE_COMPARE_RESULT { FpCompareEqual = 0, FpCompareGreater = 1, FpCompareLess = 2, FpCompareUnordered = 3 }; enum _tagOIBDG_FLAGS { OIBDG_APARTMENTTHREADED = 256, OIBDG_DATAONLY = 4096 }; enum _TP_CALLBACK_PRIORITY { TP_CALLBACK_PRIORITY_HIGH = 0, TP_CALLBACK_PRIORITY_NORMAL = 1, TP_CALLBACK_PRIORITY_LOW = 2, TP_CALLBACK_PRIORITY_INVALID = 3, TP_CALLBACK_PRIORITY_COUNT = 3 }; enum tagURLZONE { URLZONE_INVALID = -1, URLZONE_PREDEFINED_MIN = 0, URLZONE_LOCAL_MACHINE = 0, URLZONE_INTRANET = 1, URLZONE_TRUSTED = 2, URLZONE_INTERNET = 3, URLZONE_UNTRUSTED = 4, URLZONE_PREDEFINED_MAX = 999, URLZONE_USER_MIN = 1000, URLZONE_USER_MAX = 10000 }; enum RpcProxyPerfCounters { RpcCurrentUniqueUser = 1, RpcBackEndConnectionAttempts = 2, RpcBackEndConnectionFailed = 3, RpcRequestsPerSecond = 4, RpcIncomingConnections = 5, RpcIncomingBandwidth = 6, RpcOutgoingBandwidth = 7, RpcAttemptedLbsDecisions = 8, RpcFailedLbsDecisions = 9, RpcAttemptedLbsMessages = 10, RpcFailedLbsMessages = 11, RpcLastCounter = 12 }; enum tagFEEDBACK_TYPE { FEEDBACK_TOUCH_CONTACTVISUALIZATION = 1, FEEDBACK_PEN_BARRELVISUALIZATION = 2, FEEDBACK_PEN_TAP = 3, FEEDBACK_PEN_DOUBLETAP = 4, FEEDBACK_PEN_PRESSANDHOLD = 5, FEEDBACK_PEN_RIGHTTAP = 6, FEEDBACK_TOUCH_TAP = 7, FEEDBACK_TOUCH_DOUBLETAP = 8, FEEDBACK_TOUCH_PRESSANDHOLD = 9, FEEDBACK_TOUCH_RIGHTTAP = 10, FEEDBACK_GESTURE_PRESSANDTAP = 11, FEEDBACK_MAX = -1 }; enum tagDVASPECT { DVASPECT_CONTENT = 1, DVASPECT_THUMBNAIL = 2, DVASPECT_ICON = 4, DVASPECT_DOCPRINT = 8 }; enum PS_CREATE_STATE { PsCreateInitialState = 0, PsCreateFailOnFileOpen = 1, PsCreateFailOnSectionCreate = 2, PsCreateFailExeFormat = 3, PsCreateFailMachineMismatch = 4, PsCreateFailExeName = 5, PsCreateSuccess = 6, PsCreateMaximumStates = 7 }; enum POWER_USER_PRESENCE_TYPE { UserNotPresent = 0, UserPresent = 1, UserUnknown = 255 }; enum _RPC_ASYNC_EVENT { RpcCallComplete = 0, RpcSendComplete = 1, RpcReceiveComplete = 2, RpcClientDisconnect = 3, RpcClientCancel = 4 }; enum _RTL_STACK_TRACE_DATABASE_CONTROL { BackTraceDatabaseCreate = 0, BackTraceDatabaseDelete = 1, BackTraceDatabaseFlush = 2, BackTraceDatabaseMaxControl = 3 }; enum tagTYSPEC { TYSPEC_CLSID = 0, TYSPEC_FILEEXT = 1, TYSPEC_MIMETYPE = 2, TYSPEC_FILENAME = 3, TYSPEC_PROGID = 4, TYSPEC_PACKAGENAME = 5, TYSPEC_OBJECTID = 6 }; enum _RTL_UMS_THREAD_INFO_CLASS { UmsThreadInvalidInfoClass = 0, UmsThreadUserContext = 1, UmsThreadPriority = 2, UmsThreadAffinity = 3, UmsThreadTeb = 4, UmsThreadIsSuspended = 5, UmsThreadIsTerminated = 6, UmsThreadMaxInfoClass = 7 }; enum _POWER_PLATFORM_ROLE { PlatformRoleUnspecified = 0, PlatformRoleDesktop = 1, PlatformRoleMobile = 2, PlatformRoleWorkstation = 3, PlatformRoleEnterpriseServer = 4, PlatformRoleSOHOServer = 5, PlatformRoleAppliancePC = 6, PlatformRolePerformanceServer = 7, PlatformRoleSlate = 8, PlatformRoleMaximum = 9 }; enum _ACCESS_REASON_TYPE { AccessReasonNone = 0, /* AccessReasonAllowedAce = Unavail */ }; enum tagLOCKTYPE { LOCK_WRITE = 1, LOCK_EXCLUSIVE = 2, LOCK_ONLYONCE = 4 }; enum _JOURNAL_INFORMATION_CLASS { JournalAbsoluteInformation = 0, JournalClientInformation = 1, MaxJournalInformation = 2 }; enum PIDMSI_STATUS_VALUE { PIDMSI_STATUS_NORMAL = 0, PIDMSI_STATUS_NEW = 1, PIDMSI_STATUS_PRELIM = 2, PIDMSI_STATUS_DRAFT = 3, PIDMSI_STATUS_INPROGRESS = 4, PIDMSI_STATUS_EDIT = 5, PIDMSI_STATUS_REVIEW = 6, PIDMSI_STATUS_PROOF = 7, PIDMSI_STATUS_FINAL = 8, PIDMSI_STATUS_OTHER = 32767 }; enum __MIDL_IMonikerProp_0001 { MIMETYPEPROP = 0, USE_SRC_URL = 1, CLASSIDPROP = 2, TRUSTEDDOWNLOADPROP = 3, POPUPLEVELPROP = 4 }; enum tagINVOKEKIND { INVOKE_FUNC = 1, INVOKE_PROPERTYGET = 2, INVOKE_PROPERTYPUT = 4, INVOKE_PROPERTYPUTREF = 8 }; enum _WNF_STATE_NAME_LIFETIME { WnfWellKnownStateName = 0, WnfPermanentStateName = 1, WnfPersistentStateName = 2, WnfTemporaryStateName = 3 }; enum _USER_MARSHAL_CB_TYPE { USER_MARSHAL_CB_BUFFER_SIZE = 0, USER_MARSHAL_CB_MARSHALL = 1, USER_MARSHAL_CB_UNMARSHALL = 2, USER_MARSHAL_CB_FREE = 3 }; enum SYSGEOCLASS { GEOCLASS_NATION = 16, GEOCLASS_REGION = 14, GEOCLASS_ALL = 0 }; enum COMPARTMENT_ID { UNSPECIFIED_COMPARTMENT_ID = 0, DEFAULT_COMPARTMENT_ID = 1 }; enum _JOBOBJECT_RATE_CONTROL_TOLERANCE_INTERVAL { ToleranceIntervalShort = 1, ToleranceIntervalMedium = 2, ToleranceIntervalLong = 3 }; enum _UNWIND_OP_CODES { UWOP_PUSH_NONVOL = 0, UWOP_ALLOC_LARGE = 1, UWOP_ALLOC_SMALL = 2, UWOP_SET_FPREG = 3, UWOP_SAVE_NONVOL = 4, UWOP_SAVE_NONVOL_FAR = 5, UWOP_EPILOG = 6, UWOP_SPARE_CODE = 7, UWOP_SAVE_XMM128 = 8, UWOP_SAVE_XMM128_FAR = 9, UWOP_PUSH_MACHFRAME = 10 }; enum _NORM_FORM { NormalizationOther = 0, NormalizationC = 1, NormalizationD = 2, NormalizationKC = 5, NormalizationKD = 6 }; enum tagCOMSD { SD_LAUNCHPERMISSIONS = 0, SD_ACCESSPERMISSIONS = 1, SD_LAUNCHRESTRICTIONS = 2, SD_ACCESSRESTRICTIONS = 3 }; enum tagRpcLocalAddressFormat { rlafInvalid = 0, rlafIPv4 = 1, rlafIPv6 = 2 }; enum _ALTERNATIVE_ARCHITECTURE_TYPE { StandardDesign = 0, NEC98x86 = 1, EndAlternatives = 2 }; enum tagGLOBALOPT_RPCTP_VALUES { COMGLB_RPC_THREADPOOL_SETTING_DEFAULT_POOL = 0, COMGLB_RPC_THREADPOOL_SETTING_PRIVATE_POOL = 1 }; enum _EVENT_INFORMATION_CLASS { EventBasicInformation = 0 }; enum tagGLOBALOPT_RO_FLAGS { COMGLB_STA_MODALLOOP_REMOVE_TOUCH_MESSAGES = 1, COMGLB_STA_MODALLOOP_SHARED_QUEUE_REMOVE_INPUT_MESSAGES = 2, COMGLB_STA_MODALLOOP_SHARED_QUEUE_DONOT_REMOVE_INPUT_MESSAGES = 4 }; enum _PS_STD_HANDLE_STATE { PsNeverDuplicate = 0, PsRequestDuplicate = 1, PsAlwaysDuplicate = 2, PsMaxStdHandleStates = 3 }; enum RPC_ADDRESS_CHANGE_TYPE { PROTOCOL_NOT_LOADED = 1, PROTOCOL_LOADED = 2, PROTOCOL_ADDRESS_CHANGE = 3 }; enum _LOGICAL_PROCESSOR_RELATIONSHIP { RelationProcessorCore = 0, RelationNumaNode = 1, RelationCache = 2, RelationProcessorPackage = 3, RelationGroup = 4, ÿÿRelationAll = 32770 }; enum _REQUESTER_TYPE { KernelRequester = 0, UserProcessRequester = 1, UserSharedServiceRequester = 2 }; enum _TP_LOG_LEVEL { TP_LOG_LEVEL_ERROR = 0, TP_LOG_LEVEL_WARNING = 1, TP_LOG_LEVEL_INFO = 2, TP_LOG_LEVEL_TRACE_ENTER = 3, TP_LOG_LEVEL_TRACE_LEAVE = 4 }; enum CWMO_FLAGS { CWMO_DISPATCH_CALLS = 1, CWMO_DISPATCH_WINDOW_MESSAGES = 2, REAL_CWMO_ENABLE_CALL_REENTRANCY = 1, CWMO_ENABLE_WINDOW_MESSAGES = 2, CWMO_ENABLE_CALL_REENTRANCY = 3 }; enum RecoveryMode { PushButtonReset = 0, Upgrade = 1 }; enum tagCHANGEKIND { CHANGEKIND_ADDMEMBER = 0, CHANGEKIND_DELETEMEMBER = 1, CHANGEKIND_SETNAMES = 2, CHANGEKIND_SETDOCUMENTATION = 3, CHANGEKIND_GENERAL = 4, CHANGEKIND_INVALIDATE = 5, CHANGEKIND_CHANGEFAILED = 6, CHANGEKIND_MAX = 7 }; enum __MIDL_IBindStatusCallback_0001 { BINDVERB_GET = 0, BINDVERB_POST = 1, BINDVERB_PUT = 2, BINDVERB_CUSTOM = 3, BINDVERB_RESERVED1 = 4 }; enum _PROCESSOR_CACHE_TYPE { CacheUnified = 0, CacheInstruction = 1, CacheData = 2, CacheTrace = 3 }; enum DISPLAYCONFIG_ROTATION { DISPLAYCONFIG_ROTATION_IDENTITY = 1, DISPLAYCONFIG_ROTATION_ROTATE90 = 2, DISPLAYCONFIG_ROTATION_ROTATE180 = 3, DISPLAYCONFIG_ROTATION_ROTATE270 = 4, DISPLAYCONFIG_ROTATION_FORCE_UINT32 = -1 }; enum _MEMORY_RESERVE_TYPE { MemoryReserveUserApc = 0, MemoryReserveIoCompletion = 1, MemoryReserveTypeMax = 2 }; enum _FUNCTION_TABLE_TYPE { RF_SORTED = 0, RF_UNSORTED = 1, RF_CALLBACK = 2, RF_KERNEL_DYNAMIC = 3 }; enum ACTCTX_COMPATIBILITY_ELEMENT_TYPE { ACTCTX_COMPATIBILITY_ELEMENT_TYPE_UNKNOWN = 0, ACTCTX_COMPATIBILITY_ELEMENT_TYPE_OS = 1, ACTCTX_COMPATIBILITY_ELEMENT_TYPE_MITIGATION = 2 }; enum tagBINDSPEED { BINDSPEED_INDEFINITE = 1, BINDSPEED_MODERATE = 2, BINDSPEED_IMMEDIATE = 3 }; enum _EVENT_TYPE { NotificationEvent = 0, SynchronizationEvent = 1 }; enum _ERROR_SEVERITY_VALUE { ErrorRecoverable = 0, ErrorFatal = 1, ErrorCorrected = 2, ErrorOthers = 3 }; enum _USER_ACTIVITY_PRESENCE { PowerUserPresent = 0, PowerUserNotPresent = 1, PowerUserInactive = 2, PowerUserMaximum = 3, PowerUserInvalid = 3 }; enum PackageManagerInternal::DeploymentRequestState { RequestCreated = 0, RequestQueued = 1, RequestProcessing = 2, RequestProcessed = 3 }; enum tagSTDMSHLFLAGS { SMEXF_SERVER = 1, SMEXF_HANDLER = 2 }; enum _FILE_ID_TYPE { FileIdType = 0, ObjectIdType = 1, MaximumFileIdType = 2 }; enum tagOLEWHICHMK { OLEWHICHMK_CONTAINER = 1, OLEWHICHMK_OBJREL = 2, OLEWHICHMK_OBJFULL = 3 }; enum tagRPCOPT_PROPERTIES { COMBND_RPCTIMEOUT = 1, COMBND_SERVER_LOCALITY = 2 }; enum _EXCEPTION_DISPOSITION { ExceptionContinueExecution = 0, ExceptionContinueSearch = 1, ExceptionNestedException = 2, ExceptionCollidedUnwind = 3 }; enum _LINK_TRACKING_INFORMATION_TYPE { NtfsLinkTrackingInformation = 0, DfsLinkTrackingInformation = 1 }; enum _TIMER_TYPE { NotificationTimer = 0, SynchronizationTimer = 1 }; enum tagSTREAM_SEEK { STREAM_SEEK_SET = 0, STREAM_SEEK_CUR = 1, STREAM_SEEK_END = 2 }; enum tagCALLTYPE { CALLTYPE_TOPLEVEL = 1, CALLTYPE_NESTED = 2, CALLTYPE_ASYNC = 3, CALLTYPE_TOPLEVEL_CALLPENDING = 4, CALLTYPE_ASYNC_CALLPENDING = 5 }; enum _STREAM_INFO_LEVELS { FindStreamInfoStandard = 0, FindStreamInfoMaxInfoLevel = 1 }; enum _tagPSUACTION { PSU_DEFAULT = 1, PSU_SECURITY_URL_ONLY = 2 }; enum _SE_SIGNING_LEVEL { SE_SIGNING_LEVEL_UNCHECKED = 0, SE_SIGNING_LEVEL_PROTECTED_PROCESS = 1, SE_SIGNING_LEVEL_UNSIGNED = 2, SE_SIGNING_LEVEL_AUTHENTICODE = 4, SE_SIGNING_LEVEL_DRM_PROTECTED = 5, SE_SIGNING_LEVEL_WINDOWS = 6, SE_SIGNING_LEVEL_WINDOWS_PROTECTED = 7 }; enum _ENLISTMENT_INFORMATION_CLASS { EnlistmentBasicInformation = 0, EnlistmentRecoveryInformation = 1, EnlistmentCrmInformation = 2 }; enum tagOLEGETMONIKER { OLEGETMONIKER_ONLYIFTHERE = 1, OLEGETMONIKER_FORCEASSIGN = 2, OLEGETMONIKER_UNASSIGN = 3, OLEGETMONIKER_TEMPFORUSER = 4 }; enum _SYSTEM_CRASH_DUMP_CONFIGURATION_CLASS { SystemCrashDumpDisable = 0, SystemCrashDumpReconfigure = 1, SystemCrashDumpInitializationComplete = 2 }; enum _PROCESS_TLS_INFORMATION_TYPE { ProcessTlsReplaceIndex = 0, ProcessTlsReplaceVector = 1, MaxProcessTlsOperation = 2 }; enum ACTCTX_REQUESTED_RUN_LEVEL { ACTCTX_RUN_LEVEL_UNSPECIFIED = 0, ACTCTX_RUN_LEVEL_AS_INVOKER = 1, ACTCTX_RUN_LEVEL_HIGHEST_AVAILABLE = 2, ACTCTX_RUN_LEVEL_REQUIRE_ADMIN = 3, ACTCTX_RUN_LEVEL_NUMBERS = 4 }; enum _HARDWARE_COUNTER_TYPE { PMCCounter = 0, MaxHardwareCounterType = 1 }; enum tagREGKIND { REGKIND_DEFAULT = 0, REGKIND_REGISTER = 1, REGKIND_NONE = 2 }; enum tagOLECONTF { OLECONTF_EMBEDDINGS = 1, OLECONTF_LINKS = 2, OLECONTF_OTHERS = 4, OLECONTF_ONLYUSER = 8, OLECONTF_ONLYIFRUNNING = 16 }; enum _EXCEPTION_LOG_TYPE { LogExceptionEmpty = 0, LogExceptionDispatch = 1, LogExceptionHandler = 2 }; enum _MEMORY_RESOURCE_NOTIFICATION_TYPE { LowMemoryResourceNotification = 0, HighMemoryResourceNotification = 1, PendingBadMemoryNotification = 2 }; enum _MEMORY_WORKING_SET_EX_LOCATION { MemoryLocationInvalid = 0, MemoryLocationResident = 1, MemoryLocationPagefile = 2, MemoryLocationReserved = 3 }; enum _EVENT_INFO_CLASS { EventProviderBinaryTrackInfo = 0, MaxEventInfo = 1 }; enum _PRIORITY_HINT { IoPriorityHintVeryLow = 0, IoPriorityHintLow = 1, IoPriorityHintNormal = 2, MaximumIoPriorityHintType = 3 }; enum _HEAP_INFORMATION_CLASS { HeapCompatibilityInformation = 0, HeapEnableTerminationOnCorruption = 1, HeapExtendedInformation = 2,  = 32771 }; enum tagEXTCONN { EXTCONN_STRONG = 1, EXTCONN_WEAK = 2, EXTCONN_CALLABLE = 4 }; enum _FP__IEEE_ROUNDING_MODE { FpRoundNearest = 0, FpRoundMinusInfinity = 1, FpRoundPlusInfinity = 2, FpRoundChopped = 3 }; enum tagREGCLS { REGCLS_SINGLEUSE = 0, REGCLS_MULTIPLEUSE = 1, REGCLS_MULTI_SEPARATE = 2, REGCLS_SUSPENDED = 4, REGCLS_SURROGATE = 8 }; enum ApplicabilityState { NotInstallable = 0, Installable = 1, Installed = 2, RequiresReinstall = 3 }; enum _RPC_NOTIFICATION_TYPES { RpcNotificationTypeNone = 0, RpcNotificationTypeEvent = 1, RpcNotificationTypeApc = 2, RpcNotificationTypeIoc = 3, RpcNotificationTypeHwnd = 4, RpcNotificationTypeCallback = 5 }; enum SYSNLS_FUNCTION { COMPARE_STRING = 1 }; enum IMAGE_AUX_SYMBOL_TYPE { IMAGE_AUX_SYMBOL_TYPE_TOKEN_DEF = 1 }; enum _WNF_DATA_SCOPE { WnfDataScopeSystem = 0, WnfDataScopeSession = 1, WnfDataScopeUser = 2, WnfDataScopeProcess = 3 }; enum tagRPCOPT_SERVER_LOCALITY_VALUES { SERVER_LOCALITY_PROCESS_LOCAL = 0, SERVER_LOCALITY_MACHINE_LOCAL = 1, SERVER_LOCALITY_REMOTE = 2 }; enum _SEMAPHORE_INFORMATION_CLASS { SemaphoreBasicInformation = 0 }; enum _POWER_STATE_TYPE { SystemPowerState = 0, DevicePowerState = 1 }; enum _ACL_INFORMATION_CLASS { AclRevisionInformation = 1, AclSizeInformation = 2 }; enum _MONITOR_DISPLAY_STATE { PowerMonitorOff = 0, PowerMonitorOn = 1, PowerMonitorDim = 2 }; enum _RPC_HTTP_REDIRECTOR_STAGE { RPCHTTP_RS_REDIRECT = 1, RPCHTTP_RS_ACCESS_1 = 2, RPCHTTP_RS_SESSION = 3, RPCHTTP_RS_ACCESS_2 = 4, RPCHTTP_RS_INTERFACE = 5 }; enum tagBIND_FLAGS { BIND_MAYBOTHERUSER = 1, BIND_JUSTTESTEXISTENCE = 2 }; enum _WATCHDOG_INFORMATION_CLASS { WdInfoTimeoutValue = 0, WdInfoResetTimer = 1, WdInfoStopTimer = 2, WdInfoStartTimer = 3, WdInfoTriggerAction = 4, WdInfoState = 5 }; enum _KEY_VALUE_INFORMATION_CLASS { KeyValueBasicInformation = 0, KeyValueFullInformation = 1, KeyValuePartialInformation = 2, KeyValueFullInformationAlign64 = 3, KeyValuePartialInformationAlign64 = 4, MaxKeyValueInfoClass = 5 }; enum DISPLAYCONFIG_MODE_INFO_TYPE { DISPLAYCONFIG_MODE_INFO_TYPE_SOURCE = 1, DISPLAYCONFIG_MODE_INFO_TYPE_TARGET = 2, DISPLAYCONFIG_MODE_INFO_TYPE_FORCE_UINT32 = -1 }; enum tagOLEUPDATE { OLEUPDATE_ALWAYS = 1, OLEUPDATE_ONCALL = 3 }; enum _SC_ACTION_TYPE { SC_ACTION_NONE = 0, SC_ACTION_RESTART = 1, SC_ACTION_REBOOT = 2, SC_ACTION_RUN_COMMAND = 3 }; enum tagOLEVERBATTRIB { OLEVERBATTRIB_NEVERDIRTIES = 1, OLEVERBATTRIB_ONCONTAINERMENU = 2 }; enum _TOKEN_TYPE { TokenPrimary = 1, TokenImpersonation = 2 }; enum Windows::Management::Deployment::PackageState { PackageState_Normal = 0, PackageState_LicenseInvalid = 1, PackageState_Modified = 2, PackageState_Tampered = 3 }; enum Windows::Management::Deployment::PackageInstallState { PackageInstallState_NotInstalled = 0, PackageInstallState_Staged = 1, PackageInstallState_Installed = 2 }; enum Windows::Management::Deployment::DeploymentOptions { DeploymentOptions_None = 0, DeploymentOptions_ForceApplicationShutdown = 1, DeploymentOptions_DevelopmentMode = 2 }; enum Windows::Management::Deployment::DeploymentProgressState { DeploymentProgressState_Queued = 0, DeploymentProgressState_Processing = 1 }; enum Windows::System::ProcessorArchitecture { ProcessorArchitecture_X86 = 0, ProcessorArchitecture_Arm = 5, ProcessorArchitecture_X64 = 9, ProcessorArchitecture_Neutral = 11, ÿÿProcessorArchitecture_Unknown = 32770 }; enum Windows::Graphics::Imaging::PngFilterMode { PngFilterMode_Automatic = 0, PngFilterMode_None = 1, PngFilterMode_Sub = 2, PngFilterMode_Up = 3, PngFilterMode_Average = 4, PngFilterMode_Paeth = 5, PngFilterMode_Adaptive = 6 }; enum Windows::Graphics::Imaging::ExifOrientationMode { ExifOrientationMode_IgnoreExifOrientation = 0, ExifOrientationMode_RespectExifOrientation = 1 }; enum Windows::Graphics::Imaging::TiffCompressionMode { TiffCompressionMode_Automatic = 0, TiffCompressionMode_None = 1, TiffCompressionMode_Ccitt3 = 2, TiffCompressionMode_Ccitt4 = 3, TiffCompressionMode_Lzw = 4, TiffCompressionMode_Rle = 5, TiffCompressionMode_Zip = 6, TiffCompressionMode_LzwhDifferencing = 7 }; enum Windows::Graphics::Imaging::BitmapRotation { BitmapRotation_None = 0, BitmapRotation_Clockwise90Degrees = 1, BitmapRotation_Clockwise180Degrees = 2, BitmapRotation_Clockwise270Degrees = 3 }; enum Windows::Graphics::Imaging::BitmapCodecEnumerationFilter { BitmapCodecEnumerationFilter_None = 0, BitmapCodecEnumerationFilter_WindowsProvided = 1 }; enum Windows::Graphics::Imaging::BitmapPixelFormat { BitmapPixelFormat_Unknown = 0, BitmapPixelFormat_Rgba16 = 12, BitmapPixelFormat_Rgba8 = 30 }; enum Windows::Graphics::Imaging::JpegSubsamplingMode { JpegSubsamplingMode_Default = 0, JpegSubsamplingMode_Y4Cb2Cr0 = 1, JpegSubsamplingMode_Y4Cb2Cr2 = 2, JpegSubsamplingMode_Y4Cb4Cr4 = 3 }; enum Windows::Graphics::Imaging::BitmapInterpolationMode { BitmapInterpolationMode_NearestNeighbor = 0, BitmapInterpolationMode_Linear = 1, BitmapInterpolationMode_Cubic = 2, BitmapInterpolationMode_Fant = 3 }; enum Windows::Graphics::Imaging::BitmapFlip { BitmapFlip_None = 0, BitmapFlip_Horizontal = 1, BitmapFlip_Vertical = 2 }; enum Windows::Graphics::Imaging::BitmapAlphaMode { BitmapAlphaMode_Premultiplied = 0, BitmapAlphaMode_Straight = 1, BitmapAlphaMode_Ignore = 2 }; enum Windows::Graphics::Imaging::ColorManagementMode { ColorManagementMode_DoNotColorManage = 0, ColorManagementMode_ColorManageToSRgb = 1 }; enum Windows::Graphics::Display::ResolutionScale { ResolutionScale_Scale100Percent = 0, ResolutionScale_Scale140Percent = 1, ResolutionScale_Scale180Percent = 2 }; enum Windows::Graphics::Display::DisplayOrientations { DisplayOrientations_None = 0, DisplayOrientations_Landscape = 1, DisplayOrientations_Portrait = 2, DisplayOrientations_LandscapeFlipped = 4, DisplayOrientations_PortraitFlipped = 8 }; enum Windows::Foundation::PropertyType { PropertyType_Empty = 0, PropertyType_UInt8 = 1, PropertyType_Int16 = 2, PropertyType_UInt16 = 3, PropertyType_Int32 = 4, PropertyType_UInt32 = 5, PropertyType_Int64 = 6, PropertyType_UInt64 = 7, PropertyType_Single = 8, PropertyType_Double = 9, PropertyType_Char16 = 10, PropertyType_Boolean = 11, PropertyType_String = 12, PropertyType_Inspectable = 13, PropertyType_DateTime = 14, PropertyType_TimeSpan = 15, PropertyType_Guid = 16, PropertyType_Point = 17, PropertyType_Size = 18, PropertyType_Rect = 19, PropertyType_OtherType = 20, PropertyType_UInt8Array = 1025, PropertyType_Int16Array = 1026, PropertyType_UInt16Array = 1027, PropertyType_Int32Array = 1028, PropertyType_UInt32Array = 1029, PropertyType_Int64Array = 1030, PropertyType_UInt64Array = 1031, PropertyType_SingleArray = 1032, PropertyType_DoubleArray = 1033, PropertyType_Char16Array = 1034, PropertyType_BooleanArray = 1035, PropertyType_StringArray = 1036, PropertyType_InspectableArray = 1037, PropertyType_DateTimeArray = 1038, PropertyType_TimeSpanArray = 1039, PropertyType_GuidArray = 1040, PropertyType_PointArray = 1041, PropertyType_SizeArray = 1042, PropertyType_RectArray = 1043, PropertyType_OtherTypeArray = 1044 }; enum Windows::Foundation::Diagnostics::ErrorOptions { ErrorOptions_None = 0, ErrorOptions_SuppressExceptions = 1, ErrorOptions_ForceExceptions = 2, ErrorOptions_UseSetErrorInfo = 4, ErrorOptions_SuppressSetErrorInfo = 8 }; enum Windows::Storage::FileAttributes { FileAttributes_Normal = 0, FileAttributes_ReadOnly = 1, FileAttributes_Directory = 16, FileAttributes_Archive = 32, FileAttributes_Temporary = 256 }; enum Windows::Storage::StorageDeleteOption { StorageDeleteOption_LocationBasedRecycleBinBehavior = 0, StorageDeleteOption_TryMoveToRecycleBin = 1, StorageDeleteOption_PermanentDelete = 2 }; enum Windows::Storage::CreationCollisionOption { CreationCollisionOption_GenerateUniqueName = 0, CreationCollisionOption_ReplaceExisting = 1, CreationCollisionOption_FailIfExists = 2, CreationCollisionOption_OpenIfExists = 3 }; enum Windows::Storage::StorageItemTypes { StorageItemTypes_None = 0, StorageItemTypes_File = 1, StorageItemTypes_Folder = 2 }; enum Windows::Storage::FileAccessMode { FileAccessMode_Read = 0, FileAccessMode_ReadWrite = 1, FileAccessMode_ReadWriteUnsafe = 2, FileAccessMode_ReadWriteNoCopyOnWrite = 3 }; enum Windows::Storage::NameCollisionOption { NameCollisionOption_GenerateUniqueName = 0, NameCollisionOption_ReplaceExisting = 1, NameCollisionOption_FailIfExists = 2 }; enum Windows::Storage::FileProperties::ThumbnailOptions { ThumbnailOptions_None = 0, ThumbnailOptions_ReturnOnlyIfCached = 1, ThumbnailOptions_ResizeThumbnail = 2, ThumbnailOptions_ScaleForPPI = 4 }; enum Windows::Storage::FileProperties::ThumbnailMode { ThumbnailMode_PicturesView = 0, ThumbnailMode_VideosView = 1, ThumbnailMode_MusicView = 2, ThumbnailMode_DocumentsView = 3, ThumbnailMode_ListView = 4, ThumbnailMode_SingleItem = 5 }; enum Windows::Storage::Streams::InputStreamOptions { InputStreamOptions_None = 0, InputStreamOptions_Partial = 1, InputStreamOptions_ReadAhead = 2 }; enum Windows::Storage::Search::CommonFolderQuery { CommonFolderQuery_DefaultQuery = 0, CommonFolderQuery_GroupByYear = 1, CommonFolderQuery_GroupByMonth = 2, CommonFolderQuery_GroupByArtist = 3, CommonFolderQuery_GroupByAlbum = 4, CommonFolderQuery_GroupByAlbumArtist = 5, CommonFolderQuery_GroupByComposer = 6, CommonFolderQuery_GroupByGenre = 7, CommonFolderQuery_GroupByPublishedYear = 8, CommonFolderQuery_GroupByRating = 9, CommonFolderQuery_GroupByTag = 10, CommonFolderQuery_GroupByAuthor = 11, CommonFolderQuery_GroupByType = 12 }; enum Windows::Storage::Search::IndexerOption { IndexerOption_UseIndexerWhenAvailable = 0, IndexerOption_OnlyUseIndexer = 1, IndexerOption_DoNotUseIndexer = 2 }; enum Windows::Storage::Search::DateStackOption { DateStackOption_None = 0, DateStackOption_Year = 1, DateStackOption_Month = 2 }; enum Windows::Storage::Search::IndexedState { IndexedState_Unknown = 0, IndexedState_NotIndexed = 1, IndexedState_PartiallyIndexed = 2, IndexedState_FullyIndexed = 3 }; enum Windows::Storage::Search::CommonFileQuery { CommonFileQuery_DefaultQuery = 0, CommonFileQuery_OrderByName = 1, CommonFileQuery_OrderByTitle = 2, CommonFileQuery_OrderByMusicInfo = 3, CommonFileQuery_OrderBySearchRank = 4, CommonFileQuery_OrderByDate = 5 }; enum Windows::Storage::Search::FolderDepth { FolderDepth_Shallow = 0, FolderDepth_Deep = 1 }; enum Windows::Storage::Pickers::PickerLocationId { PickerLocationId_DocumentsLibrary = 0, PickerLocationId_ComputerFolder = 1, PickerLocationId_Desktop = 2, PickerLocationId_Downloads = 3, PickerLocationId_HomeGroup = 4, PickerLocationId_MusicLibrary = 5, PickerLocationId_PicturesLibrary = 6, PickerLocationId_VideosLibrary = 7 }; enum Windows::Storage::Pickers::PickerViewMode { PickerViewMode_List = 0, PickerViewMode_Thumbnail = 1 }; enum _FIRMWARE_TYPE { FirmwareTypeUnknown = 0, FirmwareTypeBios = 1, FirmwareTypeUefi = 2, FirmwareTypeMax = 3 }; enum tagOLELINKBIND { OLELINKBIND_EVENIFCLASSDIFF = 1 }; enum _POWER_REQUEST_TYPE { PowerRequestDisplayRequired = 0, PowerRequestSystemRequired = 1, PowerRequestAwayModeRequired = 2, PowerRequestExecutionRequired = 3 }; enum __MIDL_IInternetSecurityManager_0003 { SZM_CREATE = 0, SZM_DELETE = 1 }; enum _THDTYPE { THDTYPE_BLOCKMESSAGES = 0, THDTYPE_PROCESSMESSAGES = 1 }; enum _JOBOBJECT_RATE_CONTROL_TOLERANCE { ToleranceLow = 1, ToleranceMedium = 2, ToleranceHigh = 3 }; enum Common::FATAL_FAILURE_REASON_TYPE { FATAL_FAILURE_REASON_UNKNOWN = 1, FATAL_FAILURE_UNEXPECTED_API_FAILURE = 2, FATAL_FAILURE_UNEXPECTED_CASE = 3, FATAL_FAILURE_REASON_INTERNAL_ERROR = 4 }; enum Common::Deployment::DeploymentOperation { InvalidOperation = 0, AddOperation = 1, RemoveOperation = 2, UpdateOperation = 3, StageOperation = 4, DeStageOperation = 5, RegisterOperation = 6, AllUserAddOperation = 7, AllUserRemoveOperation = 8, GetSortedRegisterPackageOperation = 9, FixStagedPackagesOperation = 10, DeletePackageFilesOperation = 11 }; enum Common::Deployment::PackageStagingAction { None = 0, AddPackageAndUserAcl = 1, AddPackageAcl = 2, RemoveUserAcl = 3, RemovePackageAcl = 4, RemovePackageAclAndMetadataDirectory = 5, Stage = 6, Update = 7, Remove = 8 }; enum Common::Deployment::RegistrationState { Unregistered = 0, Registered = 1 }; enum Common::Deployment::ProcessorArchitecture { X86 = 0, X64 = 9, Arm = 5, Neutral = 11 }; enum Common::Deployment::VersionRule { Specific = 0, Range = 1, Unbounded = 2, SpecificMajorUnboundedMinor = 3 }; enum Common::Deployment::SignatureOrigin { Unknown = 0, AppStore = 1, Windows = 2 }; enum Common::Deployment::DeploymentOptions { DefaultOption = 0, ForceApplicationShutdownOption = 1, DevelopmentModeOption = 2, RepositoryRecoveryOption = 4 }; enum Common::Deployment::PackageType { Normal = 0, Framework = 1 }; enum _URLZONEREG { URLZONEREG_DEFAULT = 0, URLZONEREG_HKLM = 1, URLZONEREG_HKCU = 2 }; enum tagDCOM_CALL_STATE { DCOM_NONE = 0, DCOM_CALL_COMPLETE = 1, DCOM_CALL_CANCELED = 2 }; enum _ATOM_INFORMATION_CLASS { AtomBasicInformation = 0, AtomTableInformation = 1 }; enum __MIDL_IInternetZoneManager_0001 { MAX_ZONE_PATH = 260, MAX_ZONE_DESCRIPTION = 200 }; enum _SYSTEM_FIRMWARE_TABLE_ACTION { SystemFirmwareTable_Enumerate = 0, SystemFirmwareTable_Get = 1 }; enum PIPE_ATTRIBUTE_TYPE { PipeAttribute = 0, PipeConnectionAttribute = 1, PipeHandleAttribute = 2 }; enum _WAIT_TYPE { WaitAll = 0, WaitAny = 1, WaitNotification = 2 }; enum RO_INIT_TYPE { RO_INIT_SINGLETHREADED = 0, RO_INIT_MULTITHREADED = 1 }; enum tagPENDINGMSG { PENDINGMSG_CANCELCALL = 0, PENDINGMSG_WAITNOPROCESS = 1, PENDINGMSG_WAITDEFPROCESS = 2 }; enum _COPYFILE2_MESSAGE_ACTION { COPYFILE2_PROGRESS_CONTINUE = 0, COPYFILE2_PROGRESS_CANCEL = 1, COPYFILE2_PROGRESS_STOP = 2, COPYFILE2_PROGRESS_QUIET = 3, COPYFILE2_PROGRESS_PAUSE = 4 }; enum _TP_DEBUG_CLASS { TP_DEBUG_CLASS_POOL = 0 }; enum _SECTION_INHERIT { ViewShare = 1, ViewUnmap = 2 }; enum __MIDL_IAuthenticateEx_0001 { AUTHENTICATEF_PROXY = 1, AUTHENTICATEF_BASIC = 2, AUTHENTICATEF_HTTP = 4 }; enum tagMEMCTX { MEMCTX_TASK = 1, MEMCTX_SHARED = 2, MEMCTX_MACSYSTEM = 3, MEMCTX_UNKNOWN = -1, MEMCTX_SAME = -1 }; enum _SC_EVENT_TYPE { SC_EVENT_DATABASE_CHANGE = 0, SC_EVENT_PROPERTY_CHANGE = 1, SC_EVENT_STATUS_CHANGE = 2 }; enum _WOW64_FUNCTION_CODE64 { WOW64_FUNCTION_NOP = 0, WOW64_FUNCTION_QUERY_PROCESS_DEBUG_INFO = 1, WOW64_FUNCTION_MAXIMUM = 2 }; enum tagSERVERCALL { SERVERCALL_ISHANDLED = 0, SERVERCALL_REJECTED = 1, SERVERCALL_RETRYLATER = 2 }; enum tagINPUT_MESSAGE_ORIGIN_ID { IMO_UNAVAILABLE = 0, IMO_HARDWARE = 1, IMO_INJECTED = 2, IMO_SYSTEM = 4 }; enum _TRANSACTION_STATE { TransactionStateNormal = 1, TransactionStateIndoubt = 2, TransactionStateCommittedNotify = 3 }; enum tagCOINITBASE { COINITBASE_MULTITHREADED = 0 }; enum tagDISCARDCACHE { DISCARDCACHE_SAVEIFDIRTY = 0, DISCARDCACHE_NOSAVE = 1 }; enum _ALPC_MESSAGE_INFORMATION_CLASS { AlpcMessageSidInformation = 0, AlpcMessageTokenModifiedIdInformation = 1 }; enum _IO_COMPLETION_INFORMATION_CLASS { IoCompletionBasicInformation = 0 }; enum _SC_ENUM_TYPE { SC_ENUM_PROCESS_INFO = 0 }; enum MCA_EXCEPTION_TYPE { HAL_MCE_RECORD = 0, HAL_MCA_RECORD = 1 }; enum LATENCY_TIME { LT_DONT_CARE = 0, LT_LOWEST_LATENCY = 1 }; enum PackageRepository::VisibilityState { NotVisible = 0, Staged = 1, Installed = 2, InProgress = 3 }; enum Microsoft::WRL::ModuleType { InProc = 1, OutOfProc = 2, DisableCaching = 4, InProcDisableCaching = 5, OutOfProcDisableCaching = 6 }; enum Microsoft::WRL::FactoryCacheFlags { FactoryCacheDefault = 0, FactoryCacheEnabled = 1, FactoryCacheDisabled = 2 }; enum Microsoft::WRL::AsyncResultType { SingleResult = 1, MultipleResults = 2 }; enum Microsoft::WRL::RuntimeClassType { WinRt = 1, ClassicCom = 2, WinRtClassicComMix = 3, InhibitWeakReference = 4, Delegate = 2 }; enum Microsoft::WRL::Details::AsyncStatusInternal { _Created = 0, _Started = 1, _Completed = 2, _Cancelled = 3, _Error = 4, _Closed = 5, _Undefined = 6 }; enum Windows::Foundation::AsyncStatus { Created = 0, Started = 1, Completed = 2, Canceled = 3, Error = 4 }; struct tagEMRTRANSPARENTBLT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long cxDest; /* +0x0020 */ long cyDest; /* +0x0024 */ unsigned long dwRop; /* +0x0028 */ long xSrc; /* +0x002c */ long ySrc; /* +0x0030 */ unsigned char xformSrc[24]; /* +0x0034 b6 18 00 00 */ unsigned long crBkColorSrc; /* +0x004c */ unsigned long iUsageSrc; /* +0x0050 */ unsigned long offBmiSrc; /* +0x0054 */ unsigned long cbBmiSrc; /* +0x0058 */ unsigned long offBitsSrc; /* +0x005c */ unsigned long cbBitsSrc; /* +0x0060 */ long cxSrc; /* +0x0064 */ long cySrc; /* +0x0068 */ }; struct _SERVICE_PRESHUTDOWN_INFO { unsigned long dwPreshutdownTimeout; /* +0x0000 */ }; struct tagIDLDESC { unsigned long long dwReserved; /* +0x0000 */ unsigned short wIDLFlags; /* +0x0008 */ }; struct _CM_DISK_GEOMETRY_DEVICE_DATA { unsigned long BytesPerSector; /* +0x0000 */ unsigned long NumberOfCylinders; /* +0x0004 */ unsigned long SectorsPerTrack; /* +0x0008 */ unsigned long NumberOfHeads; /* +0x000c */ }; struct _PLUGPLAY_CONTROL_CONFLICT_DATA { unsigned char DeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned char ResourceList[8]; /* +0x0010 c3 18 00 00 */ unsigned long ResourceListSize; /* +0x0018 */ unsigned char ConflictBuffer[8]; /* +0x0020 c5 18 00 00 */ unsigned long ConflictBufferSize; /* +0x0028 */ unsigned long Flags; /* +0x002c */ long Status; /* +0x0030 */ }; struct _FOUR_PART_VERSION { unsigned long long Version64; /* +0x0000 */ }; struct _FOUR_PART_VERSION:: { unsigned short Revision; /* +0x0000 */ unsigned short Build; /* +0x0002 */ unsigned short Minor; /* +0x0004 */ unsigned short Major; /* +0x0006 */ }; struct _FOUR_PART_VERSION:: { unsigned long BuildAndRevision; /* +0x0000 */ unsigned long MajorAndMinor; /* +0x0004 */ }; struct tagCBTACTIVATESTRUCT { unsigned char fMouse[8]; /* +0x0000 74 00 00 00 */ unsigned char hWndActive[8]; /* +0x0008 97 13 00 00 */ }; struct _NETRESOURCEW { unsigned long dwScope; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned long dwDisplayType; /* +0x0008 */ unsigned long dwUsage; /* +0x000c */ unsigned char lpLocalName[8]; /* +0x0010 71 06 00 00 */ unsigned char lpRemoteName[8]; /* +0x0018 71 06 00 00 */ unsigned char lpComment[8]; /* +0x0020 71 06 00 00 */ unsigned char lpProvider[8]; /* +0x0028 71 06 00 00 */ }; struct _DWORD_BLOB { unsigned long clSize; /* +0x0000 */ unsigned char alData[4]; /* +0x0004 d4 18 00 00 */ }; struct tagRemHGLOBAL { long fNullHGlobal; /* +0x0000 */ unsigned long cbData; /* +0x0004 */ unsigned char data[4]; /* +0x0008 d7 18 00 00 */ }; struct _UNICODE_STRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned char Buffer[8]; /* +0x0008 71 06 00 00 */ }; struct _RTL_SPLAY_LINKS { unsigned char Parent[8]; /* +0x0000 de 18 00 00 */ unsigned char LeftChild[8]; /* +0x0008 de 18 00 00 */ unsigned char RightChild[8]; /* +0x0010 de 18 00 00 */ }; struct _QUERY_SERVICE_CONFIGW { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwStartType; /* +0x0004 */ unsigned long dwErrorControl; /* +0x0008 */ unsigned char lpBinaryPathName[8]; /* +0x0010 71 06 00 00 */ unsigned char lpLoadOrderGroup[8]; /* +0x0018 71 06 00 00 */ unsigned long dwTagId; /* +0x0020 */ unsigned char lpDependencies[8]; /* +0x0028 71 06 00 00 */ unsigned char lpServiceStartName[8]; /* +0x0030 71 06 00 00 */ unsigned char lpDisplayName[8]; /* +0x0038 71 06 00 00 */ }; struct _FILE_INITIATE_REPAIR_OUTPUT_BUFFER { unsigned long long Hint1; /* +0x0000 */ unsigned long long Hint2; /* +0x0008 */ unsigned long long Clsn; /* +0x0010 */ long Status; /* +0x0018 */ }; struct _BOOT_ENTROPY_SOURCE_NT_RESULT { unsigned char SourceId[8]; /* +0x0000 29 16 00 00 */ unsigned long long Policy; /* +0x0008 */ unsigned char ResultCode[4]; /* +0x0010 f9 16 00 00 */ long ResultStatus; /* +0x0014 */ unsigned long long Time; /* +0x0018 */ unsigned long EntropyLength; /* +0x0020 */ unsigned char EntropyData[68]; /* +0x0024 eb 18 00 00 */ }; struct _MM_COMBINEDPAGE_IDENTITY { unsigned char PfnIdentity[24]; /* +0x0000 ee 18 00 00 */ /* unsigned char SharedInitial[0]; +0x0018 ef 18 00 00 */ unsigned long long ProtoPte; /* +0x0018 */ }; struct _PROCESS_HEAP_ENTRY { void *lpData; /* +0x0000 */ unsigned long cbData; /* +0x0008 */ unsigned char cbOverhead; /* +0x000c */ unsigned char iRegionIndex; /* +0x000d */ unsigned short wFlags; /* +0x000e */ /* unsigned char Block[0]; +0x0010 f4 18 00 00 */ unsigned char Region[24]; /* +0x0010 f5 18 00 00 */ }; struct _PROCESS_HEAP_ENTRY:::: { unsigned long dwCommittedSize; /* +0x0000 */ unsigned long dwUnCommittedSize; /* +0x0004 */ void *lpFirstBlock; /* +0x0008 */ void *lpLastBlock; /* +0x0010 */ }; struct _PROCESS_HEAP_ENTRY:::: { void *hMem; /* +0x0000 */ unsigned char dwReserved[16]; /* +0x0008 fa 18 00 00 */ }; struct tagMETHODDATA { unsigned char szName[8]; /* +0x0000 71 06 00 00 */ unsigned char ppdata[8]; /* +0x0008 02 19 00 00 */ long dispid; /* +0x0010 */ unsigned char iMeth[4]; /* +0x0014 75 00 00 00 */ unsigned char cc[4]; /* +0x0018 8d 16 00 00 */ unsigned char cArgs[4]; /* +0x001c 75 00 00 00 */ unsigned short wFlags; /* +0x0020 */ unsigned short vtReturn; /* +0x0022 */ }; struct _GUID { unsigned long Data1; /* +0x0000 */ unsigned short Data2; /* +0x0004 */ unsigned short Data3; /* +0x0006 */ unsigned char Data4[8]; /* +0x0008 fb 10 00 00 */ }; struct _SID_AND_ATTRIBUTES { void *Sid; /* +0x0000 */ unsigned long Attributes; /* +0x0008 */ }; struct _FILE_IO_COMPLETION_INFORMATION { void *KeyContext; /* +0x0000 */ void *ApcContext; /* +0x0008 */ unsigned char IoStatusBlock[16]; /* +0x0010 0b 19 00 00 */ }; struct _SYSTEM_THREAD_INFORMATION { unsigned char KernelTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char UserTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char CreateTime[8]; /* +0x0010 0e 19 00 00 */ unsigned long WaitTime; /* +0x0018 */ void *StartAddress; /* +0x0020 */ unsigned char ClientId[16]; /* +0x0028 0f 19 00 00 */ long Priority; /* +0x0038 */ long BasePriority; /* +0x003c */ unsigned long ContextSwitches; /* +0x0040 */ unsigned long ThreadState; /* +0x0044 */ unsigned long WaitReason; /* +0x0048 */ }; struct _MEMORY_BASIC_INFORMATION64 { unsigned long long BaseAddress; /* +0x0000 */ unsigned long long AllocationBase; /* +0x0008 */ unsigned long AllocationProtect; /* +0x0010 */ unsigned long __alignment1; /* +0x0014 */ unsigned long long RegionSize; /* +0x0018 */ unsigned long State; /* +0x0020 */ unsigned long Protect; /* +0x0024 */ unsigned long Type; /* +0x0028 */ unsigned long __alignment2; /* +0x002c */ }; struct _SINGLE_LIST_ENTRY32 { unsigned long Next; /* +0x0000 */ }; struct _Wx86TIB { unsigned long Size; /* +0x0000 */ unsigned long InitialPc; /* +0x0004 */ void *StackBase; /* +0x0008 */ void *StackLimit; /* +0x000c */ void *DeallocationStack; /* +0x0010 */ unsigned long LogFlags; /* +0x0014 */ unsigned long InitialSp; /* +0x0018 */ unsigned char SimulationCount; /* +0x001c */ unsigned char InCpuSimulation; /* +0x001d */ unsigned char EmulateInitialPc; /* +0x001e */ unsigned char Initialized; /* +0x001f */ unsigned char ExceptionList[4]; /* +0x0020 1b 19 00 00 */ void *CpuContext; /* +0x0024 */ unsigned char InitialExceptionContext[4]; /* +0x0028 1d 19 00 00 */ void *pCallersRIID; /* +0x002c */ void *pCallersUnknown; /* +0x0030 */ unsigned long Flags; /* +0x0034 */ void *SelfRegDllName; /* +0x0038 */ void *SelfRegDllHandle; /* +0x003c */ }; struct _SYSTEM_SESSION_BIGPOOL_INFORMATION { unsigned long long NextEntryOffset; /* +0x0000 */ unsigned long SessionId; /* +0x0008 */ unsigned long Count; /* +0x000c */ unsigned char AllocatedInfo[24]; /* +0x0010 23 19 00 00 */ }; struct tagRemHMETAFILEPICT { long mm; /* +0x0000 */ long xExt; /* +0x0004 */ long yExt; /* +0x0008 */ unsigned long cbData; /* +0x000c */ unsigned char data[4]; /* +0x0010 d7 18 00 00 */ }; struct _SE_ACCESS_REPLY { unsigned long Size; /* +0x0000 */ unsigned long ResultListCount; /* +0x0004 */ unsigned long *GrantedAccess; /* +0x0008 */ long *AccessStatus; /* +0x0010 */ unsigned char AccessReason[8]; /* +0x0018 43 19 00 00 */ unsigned char Privileges[8]; /* +0x0020 46 19 00 00 */ }; struct _SYSTEM_POWER_STATE_CONTEXT { /* unsigned char Reserved1[0]; +0x0000 49 19 00 00 */ /* unsigned char TargetSystemState[0]; +0x0000 4a 19 00 00 */ /* unsigned char EffectiveSystemState[0]; +0x0000 4b 19 00 00 */ /* unsigned char CurrentSystemState[0]; +0x0000 4c 19 00 00 */ /* unsigned char IgnoreHibernationPath[0]; +0x0000 4d 19 00 00 */ /* unsigned char PseudoTransition[0]; +0x0000 4e 19 00 00 */ /* unsigned char Reserved2[0]; +0x0000 4f 19 00 00 */ unsigned long ContextAsUlong; /* +0x0000 */ }; struct _PROCESSOR_POWER_POLICY { unsigned long Revision; /* +0x0000 */ unsigned char DynamicThrottle; /* +0x0004 */ unsigned char Spare[3]; /* +0x0005 52 19 00 00 */ /* unsigned char DisableCStates[0]; +0x0008 53 19 00 00 */ unsigned char Reserved[4]; /* +0x0008 54 19 00 00 */ unsigned long PolicyCount; /* +0x000c */ unsigned char Policy[60]; /* +0x0010 56 19 00 00 */ }; struct tagTOGGLEKEYS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ }; struct _FULL_PTR_XLAT_TABLES { void *RefIdToPointer; /* +0x0000 */ void *PointerToRefId; /* +0x0008 */ unsigned long NextRefId; /* +0x0010 */ unsigned char XlatSide[4]; /* +0x0014 73 16 00 00 */ }; struct _EXCEPTION_RECORD { long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned char ExceptionRecord[8]; /* +0x0008 64 19 00 00 */ void *ExceptionAddress; /* +0x0010 */ unsigned long NumberParameters; /* +0x0018 */ unsigned char ExceptionInformation[120]; /* +0x0020 65 19 00 00 */ }; struct DISPLAYCONFIG_SOURCE_MODE { unsigned char width[4]; /* +0x0000 75 00 00 00 */ unsigned char height[4]; /* +0x0004 75 00 00 00 */ unsigned char pixelFormat[4]; /* +0x0008 0d 16 00 00 */ unsigned char position[8]; /* +0x000c 6a 19 00 00 */ }; struct _PROCESS_DYNAMIC_FUNCTION_TABLE_INFORMATION { unsigned char DynamicFunctionTable[8]; /* +0x0000 73 19 00 00 */ unsigned char Remove; /* +0x0008 */ }; struct tagNMHDR { unsigned char hwndFrom[8]; /* +0x0000 97 13 00 00 */ unsigned long long idFrom; /* +0x0008 */ unsigned char code[8]; /* +0x0010 75 00 00 00 */ }; struct _currencyfmtW { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[8]; /* +0x0008 75 00 00 00 */ unsigned char lpDecimalSep[8]; /* +0x0010 71 06 00 00 */ unsigned char lpThousandSep[8]; /* +0x0018 71 06 00 00 */ unsigned char NegativeOrder[4]; /* +0x0020 75 00 00 00 */ unsigned char PositiveOrder[4]; /* +0x0024 75 00 00 00 */ unsigned char lpCurrencySymbol[8]; /* +0x0028 71 06 00 00 */ }; struct CO_MTA_USAGE_COOKIE__ { unsigned char unused[4]; /* +0x0000 74 00 00 00 */ }; struct _ACTIVATION_CONTEXT_QUERY_INDEX { unsigned long ulAssemblyIndex; /* +0x0000 */ unsigned long ulFileIndexInAssembly; /* +0x0004 */ }; struct _UNWIND_INFO { /* unsigned char Version[0]; +0x0000 8f 19 00 00 */ unsigned char Flags[1]; /* +0x0000 90 19 00 00 */ unsigned char SizeOfProlog; /* +0x0001 */ unsigned char CountOfCodes; /* +0x0002 */ /* unsigned char FrameRegister[0]; +0x0003 91 19 00 00 */ unsigned char FrameOffset[1]; /* +0x0003 92 19 00 00 */ unsigned char UnwindCode[2]; /* +0x0004 94 19 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE { void *pValue; /* +0x0000 */ unsigned long ValueLength; /* +0x0008 */ }; struct _COVERAGE_MODULE_INFO { unsigned long ModuleInfoSize; /* +0x0000 */ unsigned long IsBinaryLoaded; /* +0x0004 */ unsigned char ModulePathName[16]; /* +0x0008 c1 18 00 00 */ unsigned long CoverageSectionSize; /* +0x0018 */ unsigned char CoverageSection[4]; /* +0x001c d7 18 00 00 */ }; struct _SYSTEM_PREFETCH_PATCH_INFORMATION { unsigned long PrefetchPatchCount; /* +0x0000 */ }; struct tagRAWHID { unsigned long dwSizeHid; /* +0x0000 */ unsigned long dwCount; /* +0x0004 */ unsigned char bRawData[4]; /* +0x0008 d7 18 00 00 */ }; struct _FILE_FS_VOLUME_INFORMATION { unsigned char VolumeCreationTime[8]; /* +0x0000 0e 19 00 00 */ unsigned long VolumeSerialNumber; /* +0x0008 */ unsigned long VolumeLabelLength; /* +0x000c */ unsigned char SupportsObjects; /* +0x0010 */ unsigned char VolumeLabel[6]; /* +0x0012 ab 19 00 00 */ }; struct _EFI_DRIVER_ENTRY_LIST { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char DriverEntry[20]; /* +0x0004 ae 19 00 00 */ }; struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO { unsigned short UniqueProcessId; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned char ObjectTypeIndex; /* +0x0004 */ unsigned char HandleAttributes; /* +0x0005 */ unsigned short HandleValue; /* +0x0006 */ void *Object; /* +0x0008 */ unsigned long GrantedAccess; /* +0x0010 */ }; struct _COMMCONFIG { unsigned long dwSize; /* +0x0000 */ unsigned short wVersion; /* +0x0004 */ unsigned short wReserved; /* +0x0006 */ unsigned char dcb[28]; /* +0x0008 b5 19 00 00 */ unsigned long dwProviderSubType; /* +0x0024 */ unsigned long dwProviderOffset; /* +0x0028 */ unsigned long dwProviderSize; /* +0x002c */ unsigned char wcProviderData[4]; /* +0x0030 ab 19 00 00 */ }; struct tagEMREXTCREATEFONTINDIRECTW { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihFont; /* +0x0008 */ unsigned char elfw[320]; /* +0x000c ba 19 00 00 */ }; struct tagRPC_CALL_ATTRIBUTES_V1_A { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned char *ServerPrincipalName; /* +0x0010 */ unsigned long ClientPrincipalNameBufferLength; /* +0x0018 */ unsigned char *ClientPrincipalName; /* +0x0020 */ unsigned long AuthenticationLevel; /* +0x0028 */ unsigned long AuthenticationService; /* +0x002c */ unsigned char NullSession[8]; /* +0x0030 74 00 00 00 */ }; struct _PROCESS_FOREGROUND_BACKGROUND { unsigned char Foreground; /* +0x0000 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_LEV1_ENTRY { unsigned long EntryLength; /* +0x0000 */ unsigned long DependencyTypeFlags; /* +0x0004 */ unsigned long ProviderSpecificFlags; /* +0x0008 */ unsigned char VirtualStorageType[20]; /* +0x000c c5 19 00 00 */ }; struct _GENERATE_NAME_CONTEXT { unsigned short Checksum; /* +0x0000 */ unsigned char ChecksumInserted; /* +0x0002 */ unsigned char NameLength; /* +0x0003 */ unsigned char NameBuffer[16]; /* +0x0004 c8 19 00 00 */ unsigned long ExtensionLength; /* +0x0014 */ unsigned char ExtensionBuffer[8]; /* +0x0018 c9 19 00 00 */ unsigned long LastIndexValue; /* +0x0020 */ }; struct _HEAP_EXTENDED_INFORMATION { void *Process; /* +0x0000 */ unsigned long long Heap; /* +0x0008 */ unsigned long Level; /* +0x0010 */ unsigned char CallbackRoutine[8]; /* +0x0018 d0 19 00 00 */ void *CallbackContext; /* +0x0020 */ /* unsigned char ProcessHeapInformation[0]; +0x0028 d1 19 00 00 */ unsigned char HeapInformation[48]; /* +0x0028 16 19 00 00 */ }; struct tagEMROFFSETCLIPRGN { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char ptlOffset[8]; /* +0x0008 6a 19 00 00 */ }; struct tagSCROLLINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char nMin[4]; /* +0x0008 74 00 00 00 */ unsigned char nMax[4]; /* +0x000c 74 00 00 00 */ unsigned char nPage[4]; /* +0x0010 75 00 00 00 */ unsigned char nPos[4]; /* +0x0014 74 00 00 00 */ unsigned char nTrackPos[4]; /* +0x0018 74 00 00 00 */ }; struct tagREGISTERWORDW { unsigned char lpReading[8]; /* +0x0000 71 06 00 00 */ unsigned char lpWord[8]; /* +0x0008 71 06 00 00 */ }; struct _UNWIND_HISTORY_TABLE { unsigned long Count; /* +0x0000 */ unsigned char LocalHint; /* +0x0004 */ unsigned char GlobalHint; /* +0x0005 */ unsigned char Search; /* +0x0006 */ unsigned char Once; /* +0x0007 */ unsigned long long LowAddress; /* +0x0008 */ unsigned long long HighAddress; /* +0x0010 */ unsigned char Entry[192]; /* +0x0018 fd 19 00 00 */ }; struct _BOOT_ENTRY_LIST { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char BootEntry[32]; /* +0x0004 87 19 00 00 */ }; struct _KCRM_MARSHAL_HEADER { unsigned long VersionMajor; /* +0x0000 */ unsigned long VersionMinor; /* +0x0004 */ unsigned long NumProtocols; /* +0x0008 */ unsigned long Unused; /* +0x000c */ }; struct tagPOLYTEXTA { unsigned char x[4]; /* +0x0000 74 00 00 00 */ unsigned char y[4]; /* +0x0004 74 00 00 00 */ unsigned char n[8]; /* +0x0008 75 00 00 00 */ unsigned char lpstr[8]; /* +0x0010 4f 10 00 00 */ unsigned char uiFlags[4]; /* +0x0018 75 00 00 00 */ unsigned char rcl[20]; /* +0x001c 06 1a 00 00 */ unsigned char pdx[8]; /* +0x0030 74 06 00 00 */ }; struct _LUTF8_STRING { unsigned long long Length; /* +0x0000 */ unsigned long long MaximumLength; /* +0x0008 */ unsigned char *Buffer; /* +0x0010 */ }; struct _IO_RESOURCE_DESCRIPTOR { unsigned char Option; /* +0x0000 */ unsigned char Type; /* +0x0001 */ unsigned char ShareDisposition; /* +0x0002 */ unsigned char Spare1; /* +0x0003 */ unsigned short Flags; /* +0x0004 */ unsigned short Spare2; /* +0x0006 */ }; struct tagMINMAXINFO { unsigned char ptReserved[8]; /* +0x0000 1b 1a 00 00 */ unsigned char ptMaxSize[8]; /* +0x0008 1b 1a 00 00 */ unsigned char ptMaxPosition[8]; /* +0x0010 1b 1a 00 00 */ unsigned char ptMinTrackSize[8]; /* +0x0018 1b 1a 00 00 */ unsigned char ptMaxTrackSize[8]; /* +0x0020 1b 1a 00 00 */ }; struct _SERVICE_TABLE_ENTRYW { unsigned char lpServiceName[8]; /* +0x0000 71 06 00 00 */ unsigned char lpServiceProc[8]; /* +0x0008 20 1a 00 00 */ }; struct _JOBOBJECT_END_OF_JOB_TIME_INFORMATION { unsigned long EndOfJobTimeAction; /* +0x0000 */ }; struct _FILE_MAILSLOT_QUERY_INFORMATION { unsigned long MaximumMessageSize; /* +0x0000 */ unsigned long MailslotQuota; /* +0x0004 */ unsigned long NextMessageSize; /* +0x0008 */ unsigned long MessagesAvailable; /* +0x000c */ unsigned char ReadTimeout[8]; /* +0x0010 0e 19 00 00 */ }; struct _ENCRYPTED_DATA_INFO { unsigned long long StartingFileOffset; /* +0x0000 */ unsigned long OutputBufferOffset; /* +0x0008 */ unsigned long BytesWithinFileSize; /* +0x000c */ unsigned long BytesWithinValidDataLength; /* +0x0010 */ unsigned short CompressionFormat; /* +0x0014 */ unsigned char DataUnitShift; /* +0x0016 */ unsigned char ChunkShift; /* +0x0017 */ unsigned char ClusterShift; /* +0x0018 */ unsigned char EncryptionFormat; /* +0x0019 */ unsigned short NumberOfDataBlocks; /* +0x001a */ unsigned char DataBlockSize[4]; /* +0x001c d4 18 00 00 */ }; struct _MUILANGUAGES { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short MaxNumLanguages; /* +0x0004 */ unsigned short NumLanguages; /* +0x0006 */ unsigned short NumInstalledLanguages; /* +0x0008 */ unsigned char LangInfos[8]; /* +0x0010 48 1a 00 00 */ }; struct _HEAP_PERFORMANCE_COUNTERS_INFORMATION { unsigned long Size; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned long HeapIndex; /* +0x0008 */ unsigned long LastHeapIndex; /* +0x000c */ unsigned long long BaseAddress; /* +0x0010 */ unsigned long long ReserveSize; /* +0x0018 */ unsigned long long CommitSize; /* +0x0020 */ unsigned long SegmentCount; /* +0x0028 */ unsigned long long LargeUCRMemory; /* +0x0030 */ unsigned long UCRLength; /* +0x0038 */ unsigned long long AllocatedSpace; /* +0x0040 */ unsigned long long FreeSpace; /* +0x0048 */ unsigned long FreeListLength; /* +0x0050 */ unsigned long Contention; /* +0x0054 */ unsigned long VirtualBlocks; /* +0x0058 */ unsigned long CommitRate; /* +0x005c */ unsigned long DecommitRate; /* +0x0060 */ }; struct tagDEBUGHOOKINFO { unsigned long idThread; /* +0x0000 */ unsigned long idThreadInstaller; /* +0x0004 */ long long lParam; /* +0x0008 */ unsigned long long wParam; /* +0x0010 */ unsigned char code[8]; /* +0x0018 74 00 00 00 */ }; struct _PLUGPLAY_CONTROL_RELATED_DEVICE_DATA { unsigned char TargetDeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned long Relation; /* +0x0010 */ unsigned char RelatedDeviceInstance[8]; /* +0x0018 71 06 00 00 */ unsigned long RelatedDeviceInstanceLength; /* +0x0020 */ }; struct _MUILANGINFO { unsigned short Flags; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned short LangId; /* +0x0004 */ short LangNameIndex; /* +0x0006 */ unsigned short FallbackTypes; /* +0x0008 */ short NeutralLangSpec; /* +0x000a */ unsigned char FallbackSpecs[8]; /* +0x000c 70 1a 00 00 */ unsigned char AlternateCodePage[8]; /* +0x0014 70 1a 00 00 */ }; struct _CREATEFILE2_EXTENDED_PARAMETERS { unsigned long dwSize; /* +0x0000 */ unsigned long dwFileAttributes; /* +0x0004 */ unsigned long dwFileFlags; /* +0x0008 */ unsigned long dwSecurityQosFlags; /* +0x000c */ unsigned char lpSecurityAttributes[8]; /* +0x0010 74 1a 00 00 */ void *hTemplateFile; /* +0x0018 */ }; struct _RTL_DYNAMIC_HASH_TABLE_ENTRY { unsigned char Linkage[16]; /* +0x0000 7d 1a 00 00 */ unsigned long long Signature; /* +0x0010 */ }; struct tagRGBTRIPLE { unsigned char rgbtBlue; /* +0x0000 */ unsigned char rgbtGreen; /* +0x0001 */ unsigned char rgbtRed; /* +0x0002 */ }; struct _TXFS_CREATE_MINIVERSION_INFO { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureLength; /* +0x0002 */ unsigned long BaseVersion; /* +0x0004 */ unsigned short MiniVersion; /* +0x0008 */ }; struct _VARIABLE_NAME { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char VendorGuid[16]; /* +0x0004 6b 10 00 00 */ unsigned char Name[4]; /* +0x0014 ab 19 00 00 */ }; struct _SYSTEM_POOLTAG_INFORMATION { unsigned long Count; /* +0x0000 */ unsigned char TagInfo[40]; /* +0x0008 89 1a 00 00 */ }; struct _SYSDBG_CONTROL_SPACE { unsigned long long Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ unsigned long Processor; /* +0x0014 */ }; struct Microsoft::WRL::Details::CreatorMap { unsigned char factoryCreator[40]; /* +0x0000 8e 1c 00 00 */ }; struct Microsoft::WRL::Details::CreatorMap:: { /* unsigned char clsid[0]; +0x0000 96 1c 00 00 */ unsigned char getRuntimeName[8]; /* +0x0000 98 1c 00 00 */ }; struct Microsoft::WRL::Details::FactoryCache { unsigned char factory[16]; /* +0x0000 23 1c 00 00 */ }; struct Microsoft::WRL::Details::FactoryCache:: { /* unsigned char winrt[0]; +0x0000 52 1c 00 00 */ unsigned long com; /* +0x0000 */ }; struct Microsoft::WRL::Details::BoolStruct { unsigned char Member[4]; /* +0x0000 74 00 00 00 */ }; struct _TOKEN_CONTROL { unsigned char TokenId[8]; /* +0x0000 90 1e 00 00 */ unsigned char AuthenticationId[8]; /* +0x0008 90 1e 00 00 */ unsigned char ModifiedId[8]; /* +0x0010 90 1e 00 00 */ unsigned char TokenSource[16]; /* +0x0018 91 1e 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTES_INFORMATION { unsigned short Version; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned long AttributeCount; /* +0x0004 */ }; struct _FAT_STATISTICS { unsigned long CreateHits; /* +0x0000 */ unsigned long SuccessfulCreates; /* +0x0004 */ unsigned long FailedCreates; /* +0x0008 */ unsigned long NonCachedReads; /* +0x000c */ unsigned long NonCachedReadBytes; /* +0x0010 */ unsigned long NonCachedWrites; /* +0x0014 */ unsigned long NonCachedWriteBytes; /* +0x0018 */ unsigned long NonCachedDiskReads; /* +0x001c */ unsigned long NonCachedDiskWrites; /* +0x0020 */ }; struct tagREGISTERWORDA { char *lpReading; /* +0x0000 */ char *lpWord; /* +0x0008 */ }; struct _SYSTEM_PROCESS_INFORMATION_EXTENSION { unsigned char DiskCounters[40]; /* +0x0000 a1 1e 00 00 */ unsigned long Flags; /* +0x0028 */ /* unsigned char HasStrongId[0]; +0x0028 53 19 00 00 */ unsigned char Spare[8]; /* +0x0028 54 19 00 00 */ }; struct _JOURNAL_SET_KEY_SECURITY_INFORMATION { unsigned char Action[8]; /* +0x0000 fd 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 c1 18 00 00 */ unsigned long OldSecurityDescriptorLength; /* +0x0028 */ void *OldSecurityDescriptor; /* +0x0030 */ unsigned long NewSecurityDescriptorLength; /* +0x0038 */ void *NewSecurityDescriptor; /* +0x0040 */ }; struct tagABORTPATH { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ }; struct _SYSDBG_VIRTUAL { void *Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ }; struct tagCREATESTRUCTW { void *lpCreateParams; /* +0x0000 */ unsigned char hInstance[8]; /* +0x0008 4e 1a 00 00 */ unsigned char hMenu[8]; /* +0x0010 b5 1e 00 00 */ unsigned char hwndParent[8]; /* +0x0018 97 13 00 00 */ unsigned char cy[4]; /* +0x0020 74 00 00 00 */ unsigned char cx[4]; /* +0x0024 74 00 00 00 */ unsigned char y[4]; /* +0x0028 74 00 00 00 */ unsigned char x[4]; /* +0x002c 74 00 00 00 */ long style; /* +0x0030 */ unsigned char lpszName[8]; /* +0x0038 27 10 00 00 */ unsigned char lpszClass[8]; /* +0x0040 27 10 00 00 */ unsigned long dwExStyle; /* +0x0048 */ }; struct _s__CatchableTypeArray { unsigned char nCatchableTypes[4]; /* +0x0000 74 00 00 00 */ /* unsigned char arrayOfCatchableTypes[0]; +0x0004 c1 1e 00 00 */ }; struct _STRING64 { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned long long Buffer; /* +0x0008 */ }; struct _UNWIND_CODE { unsigned char CodeOffset; /* +0x0000 */ /* unsigned char UnwindOp[0]; +0x0001 91 19 00 00 */ unsigned char OpInfo[1]; /* +0x0001 92 19 00 00 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_LEV2_ENTRY { unsigned long EntryLength; /* +0x0000 */ unsigned long DependencyTypeFlags; /* +0x0004 */ unsigned long ProviderSpecificFlags; /* +0x0008 */ unsigned char VirtualStorageType[20]; /* +0x000c c5 19 00 00 */ unsigned long AncestorLevel; /* +0x0020 */ unsigned long HostVolumeNameOffset; /* +0x0024 */ unsigned long HostVolumeNameSize; /* +0x0028 */ unsigned long DependentVolumeNameOffset; /* +0x002c */ unsigned long DependentVolumeNameSize; /* +0x0030 */ unsigned long RelativePathOffset; /* +0x0034 */ unsigned long RelativePathSize; /* +0x0038 */ unsigned long DependentDeviceNameOffset; /* +0x003c */ unsigned long DependentDeviceNameSize; /* +0x0040 */ }; struct _CSV_NAMESPACE_INFO { unsigned long Version; /* +0x0000 */ unsigned long DeviceNumber; /* +0x0004 */ unsigned char StartingOffset[8]; /* +0x0008 0e 19 00 00 */ unsigned long SectorSize; /* +0x0010 */ }; struct _SYSTEM_VERIFIER_ISSUE { unsigned long long IssueType; /* +0x0000 */ void *Address; /* +0x0008 */ unsigned char Parameters[16]; /* +0x0010 d1 1e 00 00 */ }; struct _CPTABLEINFO { unsigned short CodePage; /* +0x0000 */ unsigned short MaximumCharacterSize; /* +0x0002 */ unsigned short DefaultChar; /* +0x0004 */ unsigned short UniDefaultChar; /* +0x0006 */ unsigned short TransDefaultChar; /* +0x0008 */ unsigned short TransUniDefaultChar; /* +0x000a */ unsigned short DBCSCodePage; /* +0x000c */ unsigned char LeadByte[18]; /* +0x000e d6 1e 00 00 */ unsigned short *MultiByteTable; /* +0x0020 */ void *WideCharTable; /* +0x0028 */ unsigned short *DBCSRanges; /* +0x0030 */ unsigned short *DBCSOffsets; /* +0x0038 */ }; struct _RECTL { long left; /* +0x0000 */ long top; /* +0x0004 */ long right; /* +0x0008 */ long bottom; /* +0x000c */ }; struct tagCABSTR { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 2a 10 00 00 */ }; struct _SYSTEM_LEGACY_DRIVER_INFORMATION { unsigned long VetoType; /* +0x0000 */ unsigned char VetoList[16]; /* +0x0008 c1 18 00 00 */ }; struct tagMULTIKEYHELPW { unsigned long mkSize; /* +0x0000 */ unsigned char mkKeylist[2]; /* +0x0004 71 00 00 00 */ unsigned char szKeyphrase[2]; /* +0x0006 ab 19 00 00 */ }; struct tagRemHENHMETAFILE { unsigned long cbData; /* +0x0000 */ unsigned char data[4]; /* +0x0004 d7 18 00 00 */ }; enum PackageRepository::IVisibilityTable::SortOrder { SortByUserSidPackageKey = 0 }; struct _TIME_DYNAMIC_ZONE_INFORMATION { long Bias; /* +0x0000 */ unsigned char StandardName[64]; /* +0x0004 89 1f 00 00 */ unsigned char StandardDate[16]; /* +0x0044 8a 1f 00 00 */ long StandardBias; /* +0x0054 */ unsigned char DaylightName[64]; /* +0x0058 89 1f 00 00 */ unsigned char DaylightDate[16]; /* +0x0098 8a 1f 00 00 */ long DaylightBias; /* +0x00a8 */ unsigned char TimeZoneKeyName[256]; /* +0x00ac 8b 1f 00 00 */ unsigned char DynamicDaylightTimeDisabled; /* +0x01ac */ }; struct tagEMRFRAMERGN { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long cbRgnData; /* +0x0018 */ unsigned long ihBrush; /* +0x001c */ unsigned char szlStroke[8]; /* +0x0020 8e 1f 00 00 */ unsigned char RgnData[4]; /* +0x0028 d7 18 00 00 */ }; struct _wireSAFEARR_BRECORD { unsigned long Size; /* +0x0000 */ unsigned char aRecord[8]; /* +0x0008 97 1f 00 00 */ }; struct _TRACE_GUID_PROPERTIES { unsigned char Guid[16]; /* +0x0000 6b 10 00 00 */ unsigned long GuidType; /* +0x0010 */ unsigned long LoggerId; /* +0x0014 */ unsigned long EnableLevel; /* +0x0018 */ unsigned long EnableFlags; /* +0x001c */ unsigned char IsEnable; /* +0x0020 */ }; struct _TRANSACTION_ENLISTMENTS_INFORMATION { unsigned long NumberOfEnlistments; /* +0x0000 */ unsigned char EnlistmentPair[32]; /* +0x0004 a3 1f 00 00 */ }; struct _CREATE_PROCESS_DEBUG_INFO { void *hFile; /* +0x0000 */ void *hProcess; /* +0x0008 */ void *hThread; /* +0x0010 */ void *lpBaseOfImage; /* +0x0018 */ unsigned long dwDebugInfoFileOffset; /* +0x0020 */ unsigned long nDebugInfoSize; /* +0x0024 */ void *lpThreadLocalBase; /* +0x0028 */ unsigned char lpStartAddress[8]; /* +0x0030 a7 1f 00 00 */ void *lpImageName; /* +0x0038 */ unsigned short fUnicode; /* +0x0040 */ }; struct _SMALL_RECT { short Left; /* +0x0000 */ short Top; /* +0x0002 */ short Right; /* +0x0004 */ short Bottom; /* +0x0006 */ }; struct _ACE_HEADER { unsigned char AceType; /* +0x0000 */ unsigned char AceFlags; /* +0x0001 */ unsigned short AceSize; /* +0x0002 */ }; struct _THREAD_BASIC_INFORMATION { long ExitStatus; /* +0x0000 */ unsigned char TebBaseAddress[8]; /* +0x0008 b4 1f 00 00 */ unsigned char ClientId[16]; /* +0x0010 0f 19 00 00 */ unsigned long long AffinityMask; /* +0x0020 */ long Priority; /* +0x0028 */ long BasePriority; /* +0x002c */ }; struct _RTL_UMS_SCHEDULER_STARTUP_INFO { unsigned long UmsVersion; /* +0x0000 */ unsigned char CompletionList[8]; /* +0x0008 b8 1f 00 00 */ unsigned char SchedulerProc[8]; /* +0x0010 bb 1f 00 00 */ void *SchedulerParam; /* +0x0018 */ }; struct tagEMRPOLYPOLYLINE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long nPolys; /* +0x0018 */ unsigned long cptl; /* +0x001c */ unsigned char aPolyCounts[4]; /* +0x0020 d4 18 00 00 */ unsigned char aptl[8]; /* +0x0024 c1 1f 00 00 */ }; struct tagUSEROBJECTFLAGS { unsigned char fInherit[4]; /* +0x0000 74 00 00 00 */ unsigned char fReserved[4]; /* +0x0004 74 00 00 00 */ unsigned long dwFlags; /* +0x0008 */ }; struct _NON_PAGED_DEBUG_INFO { unsigned short Signature; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned long Size; /* +0x0004 */ unsigned short Machine; /* +0x0008 */ unsigned short Characteristics; /* +0x000a */ unsigned long TimeDateStamp; /* +0x000c */ unsigned long CheckSum; /* +0x0010 */ unsigned long SizeOfImage; /* +0x0014 */ unsigned long long ImageBase; /* +0x0018 */ }; struct _ALPC_PORT_MESSAGE_ZONE_INFORMATION { void *Buffer; /* +0x0000 */ unsigned long Size; /* +0x0008 */ }; struct _SCRUB_DATA_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long MaximumIos; /* +0x0004 */ unsigned char Reserved[8]; /* +0x0008 cc 1f 00 00 */ unsigned char ResumeContext[816]; /* +0x0010 cd 1f 00 00 */ }; struct _FILE_FS_DRIVER_PATH_INFORMATION { unsigned char DriverInPath; /* +0x0000 */ unsigned long DriverNameLength; /* +0x0004 */ unsigned char DriverName[4]; /* +0x0008 ab 19 00 00 */ }; struct _userHENHMETAFILE { long fContext; /* +0x0000 */ }; struct _userHENHMETAFILE::__MIDL_IWinTypes_0006 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 de 1f 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _NLSTABLEINFO { unsigned char OemTableInfo[64]; /* +0x0000 f0 1f 00 00 */ unsigned char AnsiTableInfo[64]; /* +0x0040 f0 1f 00 00 */ unsigned short *UpperCaseTable; /* +0x0080 */ unsigned short *LowerCaseTable; /* +0x0088 */ }; struct _USER_MARSHAL_ROUTINE_QUADRUPLE { unsigned char pfnBufferSize[8]; /* +0x0000 f5 1f 00 00 */ unsigned char pfnMarshall[8]; /* +0x0008 f8 1f 00 00 */ unsigned char pfnUnmarshall[8]; /* +0x0010 f8 1f 00 00 */ unsigned char pfnFree[8]; /* +0x0018 fb 1f 00 00 */ }; struct _tagpropertykey { unsigned char fmtid[16]; /* +0x0000 6b 10 00 00 */ unsigned long pid; /* +0x0010 */ }; struct _JOBOBJECT_JOBSET_INFORMATION { unsigned long MemberLevel; /* +0x0000 */ }; struct _SYSTEM_OBJECTTYPE_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long NumberOfObjects; /* +0x0004 */ unsigned long NumberOfHandles; /* +0x0008 */ unsigned long TypeIndex; /* +0x000c */ unsigned long InvalidAttributes; /* +0x0010 */ unsigned char GenericMapping[16]; /* +0x0014 02 20 00 00 */ unsigned long ValidAccessMask; /* +0x0024 */ unsigned long PoolType; /* +0x0028 */ unsigned char SecurityRequired; /* +0x002c */ unsigned char WaitableObject; /* +0x002d */ unsigned char TypeName[16]; /* +0x0030 c1 18 00 00 */ }; struct _PLUGPLAY_CONTROL_INTERFACE_ALIAS_DATA { unsigned char SymbolicLinkName[16]; /* +0x0000 c1 18 00 00 */ unsigned char AliasClassGuid[8]; /* +0x0010 26 1c 00 00 */ unsigned char AliasSymbolicLinkName[8]; /* +0x0018 71 06 00 00 */ unsigned long AliasSymbolicLinkNameLength; /* +0x0020 */ }; struct _RTL_HEAP_ENTRY { unsigned long long Size; /* +0x0000 */ unsigned short Flags; /* +0x0008 */ unsigned short AllocatorBackTraceIndex; /* +0x000a */ }; struct _FINDFIRSTACTIVATIONCONTEXTSECTION { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char ExtensionGuid[8]; /* +0x0008 96 1c 00 00 */ unsigned long Id; /* +0x0010 */ unsigned long Depth; /* +0x0014 */ unsigned long OutFlags; /* +0x0018 */ }; struct DISPLAYCONFIG_PATH_SOURCE_INFO { unsigned char adapterId[8]; /* +0x0000 90 1e 00 00 */ unsigned char id[4]; /* +0x0008 75 00 00 00 */ unsigned char modeInfoIdx[4]; /* +0x000c 75 00 00 00 */ unsigned char statusFlags[4]; /* +0x0010 75 00 00 00 */ }; struct tagRAWINPUT { unsigned char header[48]; /* +0x0000 0e 20 00 00 */ }; struct _SET_PURGE_FAILURE_MODE_INPUT { unsigned long Flags; /* +0x0000 */ }; struct CM_Power_Data_s { unsigned long PD_Size; /* +0x0000 */ unsigned char PD_MostRecentPowerState[4]; /* +0x0004 75 16 00 00 */ unsigned long PD_Capabilities; /* +0x0008 */ unsigned long PD_D1Latency; /* +0x000c */ unsigned long PD_D2Latency; /* +0x0010 */ unsigned long PD_D3Latency; /* +0x0014 */ unsigned char PD_PowerStateMapping[28]; /* +0x0018 17 20 00 00 */ unsigned char PD_DeepestSystemWake[4]; /* +0x0034 c5 16 00 00 */ }; struct tagANIMATIONINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iMinAnimate[4]; /* +0x0004 74 00 00 00 */ }; struct _VIDEOPARAMETERS { unsigned char Guid[16]; /* +0x0000 6b 10 00 00 */ unsigned long dwOffset; /* +0x0010 */ unsigned long dwCommand; /* +0x0014 */ unsigned long dwFlags; /* +0x0018 */ unsigned long dwMode; /* +0x001c */ unsigned long dwTVStandard; /* +0x0020 */ unsigned long dwAvailableModes; /* +0x0024 */ unsigned long dwAvailableTVStandard; /* +0x0028 */ unsigned long dwFlickerFilter; /* +0x002c */ unsigned long dwOverScanX; /* +0x0030 */ unsigned long dwOverScanY; /* +0x0034 */ unsigned long dwMaxUnscaledX; /* +0x0038 */ unsigned long dwMaxUnscaledY; /* +0x003c */ unsigned long dwPositionX; /* +0x0040 */ unsigned long dwPositionY; /* +0x0044 */ unsigned long dwBrightness; /* +0x0048 */ unsigned long dwContrast; /* +0x004c */ unsigned long dwCPType; /* +0x0050 */ unsigned long dwCPCommand; /* +0x0054 */ unsigned long dwCPStandard; /* +0x0058 */ unsigned long dwCPKey; /* +0x005c */ unsigned long bCP_APSTriggerBits; /* +0x0060 */ unsigned char bOEMCopyProtection[256]; /* +0x0064 86 13 00 00 */ }; struct _GROUP_RELATIONSHIP { unsigned short MaximumGroupCount; /* +0x0000 */ unsigned short ActiveGroupCount; /* +0x0002 */ unsigned char Reserved[20]; /* +0x0004 a4 10 00 00 */ unsigned char GroupInfo[48]; /* +0x0018 22 20 00 00 */ }; struct _RTL_TRACE_BLOCK { unsigned long Magic; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long Size; /* +0x0008 */ unsigned long long UserCount; /* +0x0010 */ unsigned long long UserSize; /* +0x0018 */ void *UserContext; /* +0x0020 */ unsigned char Next[8]; /* +0x0028 26 20 00 00 */ unsigned char Trace[8]; /* +0x0030 1a 10 00 00 */ }; struct tagBITMAPCOREINFO { unsigned char bmciHeader[12]; /* +0x0000 29 20 00 00 */ unsigned char bmciColors[4]; /* +0x000c 2b 20 00 00 */ }; struct tagPIXELFORMATDESCRIPTOR { unsigned short nSize; /* +0x0000 */ unsigned short nVersion; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned char iPixelType; /* +0x0008 */ unsigned char cColorBits; /* +0x0009 */ unsigned char cRedBits; /* +0x000a */ unsigned char cRedShift; /* +0x000b */ unsigned char cGreenBits; /* +0x000c */ unsigned char cGreenShift; /* +0x000d */ unsigned char cBlueBits; /* +0x000e */ unsigned char cBlueShift; /* +0x000f */ unsigned char cAlphaBits; /* +0x0010 */ unsigned char cAlphaShift; /* +0x0011 */ unsigned char cAccumBits; /* +0x0012 */ unsigned char cAccumRedBits; /* +0x0013 */ unsigned char cAccumGreenBits; /* +0x0014 */ unsigned char cAccumBlueBits; /* +0x0015 */ unsigned char cAccumAlphaBits; /* +0x0016 */ unsigned char cDepthBits; /* +0x0017 */ unsigned char cStencilBits; /* +0x0018 */ unsigned char cAuxBuffers; /* +0x0019 */ unsigned char iLayerType; /* +0x001a */ unsigned char bReserved; /* +0x001b */ unsigned long dwLayerMask; /* +0x001c */ unsigned long dwVisibleMask; /* +0x0020 */ unsigned long dwDamageMask; /* +0x0024 */ }; struct tagEMRFILLPATH { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ }; struct _FLOAT128 { long long LowPart; /* +0x0000 */ long long HighPart; /* +0x0008 */ }; struct _STRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ char *Buffer; /* +0x0008 */ }; struct tagEMRFILLRGN { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long cbRgnData; /* +0x0018 */ unsigned long ihBrush; /* +0x001c */ unsigned char RgnData[4]; /* +0x0020 d7 18 00 00 */ }; struct _PS_MEMORY_RESERVE { void *ReserveAddress; /* +0x0000 */ unsigned long long ReserveSize; /* +0x0008 */ }; struct _SYSTEM_SET_TIME_ADJUST_INFORMATION { unsigned long TimeAdjustment; /* +0x0000 */ unsigned char Enable; /* +0x0004 */ }; struct _SERVICE_NOTIFY_2A { unsigned long dwVersion; /* +0x0000 */ unsigned char pfnNotifyCallback[8]; /* +0x0008 21 11 00 00 */ void *pContext; /* +0x0010 */ unsigned long dwNotificationStatus; /* +0x0018 */ unsigned char ServiceStatus[36]; /* +0x001c 55 20 00 00 */ unsigned long dwNotificationTriggered; /* +0x0040 */ char *pszServiceNames; /* +0x0048 */ }; struct _FILE_PIPE_ASSIGN_EVENT_BUFFER { void *EventHandle; /* +0x0000 */ unsigned long KeyValue; /* +0x0008 */ }; struct _MEMORY_BASIC_INFORMATION32 { unsigned long BaseAddress; /* +0x0000 */ unsigned long AllocationBase; /* +0x0004 */ unsigned long AllocationProtect; /* +0x0008 */ unsigned long RegionSize; /* +0x000c */ unsigned long State; /* +0x0010 */ unsigned long Protect; /* +0x0014 */ unsigned long Type; /* +0x0018 */ }; struct tagTEXTMETRICA { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar; /* +0x002c */ unsigned char tmLastChar; /* +0x002d */ unsigned char tmDefaultChar; /* +0x002e */ unsigned char tmBreakChar; /* +0x002f */ unsigned char tmItalic; /* +0x0030 */ unsigned char tmUnderlined; /* +0x0031 */ unsigned char tmStruckOut; /* +0x0032 */ unsigned char tmPitchAndFamily; /* +0x0033 */ unsigned char tmCharSet; /* +0x0034 */ }; struct _RDR_CALLOUT_STATE { long LastError; /* +0x0000 */ void *LastEEInfo; /* +0x0008 */ unsigned char LastCalledStage[8]; /* +0x0010 f5 17 00 00 */ unsigned short *ServerName; /* +0x0018 */ unsigned short *ServerPort; /* +0x0020 */ unsigned short *RemoteUser; /* +0x0028 */ unsigned short *AuthType; /* +0x0030 */ unsigned char ResourceTypePresent; /* +0x0038 */ unsigned char SessionIdPresent; /* +0x0039 */ unsigned char InterfacePresent; /* +0x003a */ unsigned char ResourceType[16]; /* +0x003c 6b 10 00 00 */ unsigned char SessionId[16]; /* +0x004c 6b 10 00 00 */ unsigned char Interface[20]; /* +0x005c 6d 20 00 00 */ void *CertContext; /* +0x0070 */ }; struct _POINTL { long x; /* +0x0000 */ long y; /* +0x0004 */ }; struct _OFSTRUCT { unsigned char cBytes; /* +0x0000 */ unsigned char fFixedDisk; /* +0x0001 */ unsigned short nErrCode; /* +0x0002 */ unsigned short Reserved1; /* +0x0004 */ unsigned short Reserved2; /* +0x0006 */ unsigned char szPathName[128]; /* +0x0008 76 20 00 00 */ }; struct DISPLAYCONFIG_RATIONAL { unsigned char Numerator[4]; /* +0x0000 75 00 00 00 */ unsigned char Denominator[4]; /* +0x0004 75 00 00 00 */ }; struct _MAT2 { unsigned char eM11[4]; /* +0x0000 7b 20 00 00 */ unsigned char eM12[4]; /* +0x0004 7b 20 00 00 */ unsigned char eM21[4]; /* +0x0008 7b 20 00 00 */ unsigned char eM22[4]; /* +0x000c 7b 20 00 00 */ }; struct _PROTOGON_STATISTICS { unsigned long Unused; /* +0x0000 */ }; struct _MCA_EXCEPTION { unsigned long VersionNumber; /* +0x0000 */ unsigned char ExceptionType[4]; /* +0x0004 9f 18 00 00 */ unsigned char TimeStamp[8]; /* +0x0008 0e 19 00 00 */ unsigned long ProcessorNumber; /* +0x0010 */ unsigned long Reserved1; /* +0x0014 */ }; struct tagEMRNAMEDESCAPE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char iEscape[4]; /* +0x0008 74 00 00 00 */ unsigned char cbDriver[4]; /* +0x000c 74 00 00 00 */ unsigned char cbEscData[4]; /* +0x0010 74 00 00 00 */ unsigned char EscData[4]; /* +0x0014 d7 18 00 00 */ }; struct _TOKEN_MANDATORY_LABEL { unsigned char Label[16]; /* +0x0000 8e 20 00 00 */ }; struct _OUTPUT_DEBUG_STRING_INFO { char *lpDebugStringData; /* +0x0000 */ unsigned short fUnicode; /* +0x0008 */ unsigned short nDebugStringLength; /* +0x000a */ }; struct tagFUNCDESC { long memid; /* +0x0000 */ long *lprgscode; /* +0x0008 */ unsigned char lprgelemdescParam[8]; /* +0x0010 a8 20 00 00 */ unsigned char funckind[4]; /* +0x0018 ff 16 00 00 */ unsigned char invkind[4]; /* +0x001c 65 17 00 00 */ unsigned char callconv[4]; /* +0x0020 8d 16 00 00 */ short cParams; /* +0x0024 */ short cParamsOpt; /* +0x0026 */ short oVft; /* +0x0028 */ short cScodes; /* +0x002a */ unsigned char elemdescFunc[32]; /* +0x0030 a7 20 00 00 */ unsigned short wFuncFlags; /* +0x0050 */ }; struct _SE_PACKAGE_CAPABILITY_INFO { unsigned long Remaining; /* +0x0000 */ unsigned long PackageGrantedAccess; /* +0x0004 */ unsigned long CapabilityGrantedAccess; /* +0x0008 */ unsigned long UserGroupsRemaining; /* +0x000c */ unsigned char PackagesPresent; /* +0x0010 */ unsigned char PackageMatch; /* +0x0011 */ unsigned char CapabilityMatch; /* +0x0012 */ unsigned char LogPermissiveFailure; /* +0x0013 */ }; struct _UNIVERSAL_NAME_INFOW { unsigned char lpUniversalName[8]; /* +0x0000 71 06 00 00 */ }; struct _WORD_BLOB { unsigned long clSize; /* +0x0000 */ unsigned char asData[4]; /* +0x0004 b1 20 00 00 */ }; struct _IMAGE_OPTIONAL_HEADER64 { unsigned short Magic; /* +0x0000 */ unsigned char MajorLinkerVersion; /* +0x0002 */ unsigned char MinorLinkerVersion; /* +0x0003 */ unsigned long SizeOfCode; /* +0x0004 */ unsigned long SizeOfInitializedData; /* +0x0008 */ unsigned long SizeOfUninitializedData; /* +0x000c */ unsigned long AddressOfEntryPoint; /* +0x0010 */ unsigned long BaseOfCode; /* +0x0014 */ unsigned long long ImageBase; /* +0x0018 */ unsigned long SectionAlignment; /* +0x0020 */ unsigned long FileAlignment; /* +0x0024 */ unsigned short MajorOperatingSystemVersion; /* +0x0028 */ unsigned short MinorOperatingSystemVersion; /* +0x002a */ unsigned short MajorImageVersion; /* +0x002c */ unsigned short MinorImageVersion; /* +0x002e */ unsigned short MajorSubsystemVersion; /* +0x0030 */ unsigned short MinorSubsystemVersion; /* +0x0032 */ unsigned long Win32VersionValue; /* +0x0034 */ unsigned long SizeOfImage; /* +0x0038 */ unsigned long SizeOfHeaders; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned short Subsystem; /* +0x0044 */ unsigned short DllCharacteristics; /* +0x0046 */ unsigned long long SizeOfStackReserve; /* +0x0048 */ unsigned long long SizeOfStackCommit; /* +0x0050 */ unsigned long long SizeOfHeapReserve; /* +0x0058 */ unsigned long long SizeOfHeapCommit; /* +0x0060 */ unsigned long LoaderFlags; /* +0x0068 */ unsigned long NumberOfRvaAndSizes; /* +0x006c */ unsigned char DataDirectory[128]; /* +0x0070 b5 20 00 00 */ }; struct _DRIVER_VERIFIER_THUNK_PAIRS { unsigned char PristineRoutine[8]; /* +0x0000 bb 20 00 00 */ unsigned char NewRoutine[8]; /* +0x0008 bb 20 00 00 */ }; struct _SYSTEM_VERIFIER_TRIAGE_INFORMATION { unsigned long ActionTaken; /* +0x0000 */ unsigned char CrashData[40]; /* +0x0008 be 20 00 00 */ unsigned long VerifierMode; /* +0x0030 */ unsigned long VerifierFlags; /* +0x0034 */ unsigned char VerifierTargets[512]; /* +0x0038 bf 20 00 00 */ }; struct _JOURNAL_RENAME_KEY_INFORMATION { unsigned char Action[8]; /* +0x0000 fd 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 c1 18 00 00 */ unsigned char KeyKeyName[16]; /* +0x0028 c1 18 00 00 */ }; struct tagEMRSETVIEWPORTEXTEX { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char szlExtent[8]; /* +0x0008 8e 1f 00 00 */ }; struct tagTRACKMOUSEEVENT { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndTrack[8]; /* +0x0008 97 13 00 00 */ unsigned long dwHoverTime; /* +0x0010 */ }; struct tagCOMBOBOXINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcItem[16]; /* +0x0004 06 1a 00 00 */ unsigned char rcButton[16]; /* +0x0014 06 1a 00 00 */ unsigned long stateButton; /* +0x0024 */ unsigned char hwndCombo[8]; /* +0x0028 97 13 00 00 */ unsigned char hwndItem[8]; /* +0x0030 97 13 00 00 */ unsigned char hwndList[8]; /* +0x0038 97 13 00 00 */ }; struct _RPC_SECURITY_QOS_V2_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _RPC_SECURITY_QOS_V2_A:: { unsigned char HttpCredentials[8]; /* +0x0000 d1 20 00 00 */ }; struct _FILE_PIPE_LOCAL_INFORMATION { unsigned long NamedPipeType; /* +0x0000 */ unsigned long NamedPipeConfiguration; /* +0x0004 */ unsigned long MaximumInstances; /* +0x0008 */ unsigned long CurrentInstances; /* +0x000c */ unsigned long InboundQuota; /* +0x0010 */ unsigned long ReadDataAvailable; /* +0x0014 */ unsigned long OutboundQuota; /* +0x0018 */ unsigned long WriteQuotaAvailable; /* +0x001c */ unsigned long NamedPipeState; /* +0x0020 */ unsigned long NamedPipeEnd; /* +0x0024 */ }; struct _MUILANGLIST { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short NumLanguages; /* +0x0004 */ unsigned short MaxNumLanguages; /* +0x0006 */ unsigned char bUseUseMachineConfigList; /* +0x0008 */ unsigned char RegInfo[8]; /* +0x0010 e0 20 00 00 */ unsigned char Languages[8]; /* +0x0018 e2 20 00 00 */ unsigned long long ullMask; /* +0x0020 */ unsigned char uConsoleFlag[4]; /* +0x0028 75 00 00 00 */ unsigned char Checksum[20]; /* +0x002c e3 20 00 00 */ }; struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA { unsigned long Size; /* +0x0000 */ unsigned long DataFormatVersion; /* +0x0004 */ void *Data; /* +0x0008 */ unsigned long Length; /* +0x0010 */ void *SectionGlobalData; /* +0x0018 */ unsigned long SectionGlobalDataLength; /* +0x0020 */ void *SectionBase; /* +0x0028 */ unsigned long SectionTotalLength; /* +0x0030 */ unsigned char ActivationContext[8]; /* +0x0038 e7 20 00 00 */ unsigned long AssemblyRosterIndex; /* +0x0040 */ unsigned long Flags; /* +0x0044 */ unsigned char AssemblyMetadata[40]; /* +0x0048 e8 20 00 00 */ }; struct _BY_HANDLE_FILE_INFORMATION { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 0d 10 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 0d 10 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 0d 10 00 00 */ unsigned long dwVolumeSerialNumber; /* +0x001c */ unsigned long nFileSizeHigh; /* +0x0020 */ unsigned long nFileSizeLow; /* +0x0024 */ unsigned long nNumberOfLinks; /* +0x0028 */ unsigned long nFileIndexHigh; /* +0x002c */ unsigned long nFileIndexLow; /* +0x0030 */ }; struct tagCACLSID { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 26 1c 00 00 */ }; struct _PROCESSOR_IDLE_STATE { unsigned char StateType; /* +0x0000 */ unsigned long StateFlags; /* +0x0004 */ unsigned long HardwareLatency; /* +0x0008 */ unsigned long Power; /* +0x000c */ unsigned long long Context; /* +0x0010 */ unsigned char Handler[8]; /* +0x0018 f7 20 00 00 */ }; struct _EVENTLOGRECORD { unsigned long Length; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned long RecordNumber; /* +0x0008 */ unsigned long TimeGenerated; /* +0x000c */ unsigned long TimeWritten; /* +0x0010 */ unsigned long EventID; /* +0x0014 */ unsigned short EventType; /* +0x0018 */ unsigned short NumStrings; /* +0x001a */ unsigned short EventCategory; /* +0x001c */ unsigned short ReservedFlags; /* +0x001e */ unsigned long ClosingRecordNumber; /* +0x0020 */ unsigned long StringOffset; /* +0x0024 */ unsigned long UserSidLength; /* +0x0028 */ unsigned long UserSidOffset; /* +0x002c */ unsigned long DataLength; /* +0x0030 */ unsigned long DataOffset; /* +0x0034 */ }; struct _PLUGPLAY_CUSTOM_NOTIFICATION { unsigned char HeaderInfo[24]; /* +0x0000 fe 20 00 00 */ void *FileObject; /* +0x0018 */ long NameBufferOffset; /* +0x0020 */ unsigned char CustomDataBuffer[4]; /* +0x0024 d7 18 00 00 */ }; struct _UNICODE_PREFIX_TABLE_ENTRY { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[8]; /* +0x0008 06 21 00 00 */ unsigned char CaseMatch[8]; /* +0x0010 06 21 00 00 */ unsigned char Links[24]; /* +0x0018 dd 18 00 00 */ unsigned char Prefix[8]; /* +0x0030 07 21 00 00 */ }; struct tagSTYLESTRUCT { unsigned long styleOld; /* +0x0000 */ unsigned long styleNew; /* +0x0004 */ }; struct _cpinfoexW { unsigned char MaxCharSize[4]; /* +0x0000 75 00 00 00 */ unsigned char DefaultChar[2]; /* +0x0004 0c 21 00 00 */ unsigned char LeadByte[12]; /* +0x0006 d6 1e 00 00 */ unsigned char UnicodeDefaultChar[2]; /* +0x0012 71 00 00 00 */ unsigned char CodePage[4]; /* +0x0014 75 00 00 00 */ unsigned char CodePageName[520]; /* +0x0018 0d 21 00 00 */ }; struct tagCADBL { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 41 06 00 00 */ }; struct _SYSTEM_SPECIAL_POOL_INFORMATION { unsigned long PoolTag; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ }; struct _COVERAGE_MODULE_REQUEST { unsigned char RequestType[24]; /* +0x0000 11 17 00 00 */ }; struct _RTL_PROCESS_VERIFIER_OPTIONS { unsigned long SizeStruct; /* +0x0000 */ unsigned long Option; /* +0x0004 */ unsigned char OptionData[4]; /* +0x0008 d7 18 00 00 */ }; struct _tagSOFTDISTINFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned long dwAdState; /* +0x0008 */ unsigned char szTitle[8]; /* +0x0010 71 06 00 00 */ unsigned char szAbstract[8]; /* +0x0018 71 06 00 00 */ unsigned char szHREF[8]; /* +0x0020 71 06 00 00 */ unsigned long dwInstalledVersionMS; /* +0x0028 */ unsigned long dwInstalledVersionLS; /* +0x002c */ unsigned long dwUpdateVersionMS; /* +0x0030 */ unsigned long dwUpdateVersionLS; /* +0x0034 */ unsigned long dwAdvertisedVersionMS; /* +0x0038 */ unsigned long dwAdvertisedVersionLS; /* +0x003c */ unsigned long dwReserved; /* +0x0040 */ }; struct _RTL_UMS_CONTEXT { unsigned char Link[16]; /* +0x0000 21 21 00 00 */ unsigned char Context[1232]; /* +0x0010 1c 19 00 00 */ void *Teb; /* +0x04e0 */ void *UserContext; /* +0x04e8 */ /* unsigned char ScheduledThread[0]; +0x04f0 22 21 00 00 */ /* unsigned char Suspended[0]; +0x04f0 23 21 00 00 */ /* unsigned char VolatileContext[0]; +0x04f0 24 21 00 00 */ /* unsigned char Terminated[0]; +0x04f0 25 21 00 00 */ /* unsigned char DebugActive[0]; +0x04f0 26 21 00 00 */ /* unsigned char RunningOnSelfThread[0]; +0x04f0 27 21 00 00 */ /* unsigned char DenyRunningOnSelfThread[0]; +0x04f0 28 21 00 00 */ unsigned char Flags[8]; /* +0x04f0 0f 1c 00 00 */ /* unsigned char KernelUpdateLock[0]; +0x04f8 2a 21 00 00 */ /* unsigned char PrimaryClientID[0]; +0x04f8 2b 21 00 00 */ unsigned char ContextLock[8]; /* +0x04f8 29 21 00 00 */ unsigned char PrimaryUmsContext[8]; /* +0x0500 2d 21 00 00 */ unsigned long SwitchCount; /* +0x0508 */ unsigned long KernelYieldCount; /* +0x050c */ unsigned long MixedYieldCount; /* +0x0510 */ unsigned long YieldCount; /* +0x0514 */ }; struct XSAVE_CPU_INFO { unsigned char Processor; /* +0x0000 */ unsigned short Family; /* +0x0002 */ unsigned short Model; /* +0x0004 */ unsigned short Stepping; /* +0x0006 */ unsigned short ExtendedModel; /* +0x0008 */ unsigned long ExtendedFamily; /* +0x000c */ unsigned long long MicrocodeVersion; /* +0x0010 */ unsigned long Reserved; /* +0x0018 */ }; struct _OBJECT_DIRECTORY_INFORMATION { unsigned char Name[16]; /* +0x0000 c1 18 00 00 */ unsigned char TypeName[16]; /* +0x0010 c1 18 00 00 */ }; struct _JOURNAL_CLIENT_INFORMATION { unsigned char StartTimeStamp[8]; /* +0x0000 0e 19 00 00 */ unsigned char CurrentTimeStamp[8]; /* +0x0008 0e 19 00 00 */ unsigned long long RecordsToProcess; /* +0x0010 */ unsigned long RelativeFillLevel; /* +0x0018 */ }; struct _TP_TASK { unsigned char Callbacks[8]; /* +0x0000 3b 21 00 00 */ unsigned long NumaNode; /* +0x0008 */ unsigned char IdealProcessor; /* +0x000c */ unsigned char ListEntry[16]; /* +0x0010 7d 1a 00 00 */ }; struct tagEMRMODIFYWORLDTRANSFORM { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char xform[24]; /* +0x0008 b6 18 00 00 */ unsigned long iMode; /* +0x0020 */ }; struct SChannelHookCallInfo { unsigned char iid[16]; /* +0x0000 6b 10 00 00 */ unsigned long cbSize; /* +0x0010 */ unsigned char uCausality[16]; /* +0x0014 6b 10 00 00 */ unsigned long dwServerPid; /* +0x0024 */ unsigned long iMethod; /* +0x0028 */ void *pObject; /* +0x0030 */ }; struct _RTL_BITMAP { unsigned long SizeOfBitMap; /* +0x0000 */ unsigned long *Buffer; /* +0x0008 */ }; struct tagEXTLOGFONTA { unsigned char elfLogFont[60]; /* +0x0000 51 20 00 00 */ unsigned char elfFullName[64]; /* +0x003c eb 18 00 00 */ unsigned char elfStyle[32]; /* +0x007c 9b 14 00 00 */ unsigned long elfVersion; /* +0x009c */ unsigned long elfStyleSize; /* +0x00a0 */ unsigned long elfMatch; /* +0x00a4 */ unsigned long elfReserved; /* +0x00a8 */ unsigned char elfVendorId[4]; /* +0x00ac a3 10 00 00 */ unsigned long elfCulture; /* +0x00b0 */ unsigned char elfPanose[12]; /* +0x00b4 4b 21 00 00 */ }; struct _tagPROTOCOLDATA { unsigned long grfFlags; /* +0x0000 */ unsigned long dwState; /* +0x0004 */ void *pData; /* +0x0008 */ unsigned long cbData; /* +0x0010 */ }; struct _ACTIVATION_CONTEXT_STACK { unsigned char ActiveFrame[8]; /* +0x0000 53 21 00 00 */ unsigned char FrameListCache[16]; /* +0x0008 7d 1a 00 00 */ unsigned long Flags; /* +0x0018 */ unsigned long NextCookieSequenceNumber; /* +0x001c */ unsigned long StackId; /* +0x0020 */ }; struct _FILE_FULL_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 0e 19 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 0e 19 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 0e 19 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 0e 19 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ unsigned char FileName[4]; /* +0x0044 ab 19 00 00 */ }; struct _FILE_REPARSE_POINT_INFORMATION { long long FileReference; /* +0x0000 */ unsigned long Tag; /* +0x0008 */ }; struct _RTL_STACK_CONTEXT_ENTRY { unsigned long long Address; /* +0x0000 */ unsigned long long Data; /* +0x0008 */ }; struct _TRIPLE_LIST_ITERATOR { unsigned char List[8]; /* +0x0000 61 21 00 00 */ unsigned char NextEntry[8]; /* +0x0008 c5 20 00 00 */ unsigned char ActiveList; /* +0x0010 */ unsigned char ProbeReads; /* +0x0011 */ unsigned char ReturnDataOffset; /* +0x0012 */ unsigned char Wow64List; /* +0x0013 */ }; struct _ICONINFOEXW { unsigned long cbSize; /* +0x0000 */ unsigned char fIcon[4]; /* +0x0004 74 00 00 00 */ unsigned long xHotspot; /* +0x0008 */ unsigned long yHotspot; /* +0x000c */ unsigned char hbmMask[8]; /* +0x0010 67 21 00 00 */ unsigned char hbmColor[8]; /* +0x0018 67 21 00 00 */ unsigned short wResID; /* +0x0020 */ unsigned char szModName[520]; /* +0x0022 0d 21 00 00 */ unsigned char szResName[526]; /* +0x022a 0d 21 00 00 */ }; struct _EVENT_DESCRIPTOR { unsigned short Id; /* +0x0000 */ unsigned char Version; /* +0x0002 */ unsigned char Channel; /* +0x0003 */ unsigned char Level; /* +0x0004 */ unsigned char Opcode; /* +0x0005 */ unsigned short Task; /* +0x0006 */ unsigned long long Keyword; /* +0x0008 */ }; struct _PO_WAKE_SOURCE_TIMER { unsigned char Header[8]; /* +0x0000 6e 21 00 00 */ unsigned char Reason[40]; /* +0x0008 6f 21 00 00 */ }; struct _CM_PNP_BIOS_INSTALLATION_CHECK { unsigned char Signature[4]; /* +0x0000 a3 10 00 00 */ unsigned char Revision; /* +0x0004 */ unsigned char Length; /* +0x0005 */ unsigned short ControlField; /* +0x0006 */ unsigned char Checksum; /* +0x0008 */ unsigned long EventFlagAddress; /* +0x0009 */ unsigned short RealModeEntryOffset; /* +0x000d */ unsigned short RealModeEntrySegment; /* +0x000f */ unsigned short ProtectedModeEntryOffset; /* +0x0011 */ unsigned long ProtectedModeCodeBaseAddress; /* +0x0013 */ unsigned long OemDeviceId; /* +0x0017 */ unsigned short RealModeDataBaseAddress; /* +0x001b */ unsigned long ProtectedModeDataBaseAddress; /* +0x001d */ }; struct localeinfo_struct { unsigned char locinfo[8]; /* +0x0000 75 21 00 00 */ unsigned char mbcinfo[8]; /* +0x0008 77 21 00 00 */ }; struct _XSAVE_AREA_HEADER { unsigned long long Mask; /* +0x0000 */ unsigned char Reserved[56]; /* +0x0008 7a 21 00 00 */ }; struct _PROCESS_TLS_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long OperationType; /* +0x0004 */ unsigned long ThreadDataCount; /* +0x0008 */ unsigned long TlsIndex; /* +0x000c */ unsigned long PreviousCount; /* +0x000c */ unsigned char ThreadData[24]; /* +0x0010 7e 21 00 00 */ }; struct tagEMRCREATECOLORSPACEW { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihCS; /* +0x0008 */ unsigned char lcs[588]; /* +0x000c 81 21 00 00 */ unsigned long dwFlags; /* +0x0258 */ unsigned long cbData; /* +0x025c */ unsigned char Data[4]; /* +0x0260 d7 18 00 00 */ }; struct _SERVICE_REQUIRED_PRIVILEGES_INFOW { unsigned char pmszRequiredPrivileges[8]; /* +0x0000 71 06 00 00 */ }; struct tagBIND_OPTS { unsigned long cbStruct; /* +0x0000 */ unsigned long grfFlags; /* +0x0004 */ unsigned long grfMode; /* +0x0008 */ unsigned long dwTickCountDeadline; /* +0x000c */ }; struct _SYSTEM_ACPI_AUDIT_INFORMATION { unsigned long RsdpCount; /* +0x0000 */ /* unsigned char SameRsdt[0]; +0x0004 53 19 00 00 */ /* unsigned char SlicPresent[0]; +0x0004 e3 21 00 00 */ unsigned char SlicDifferent[4]; /* +0x0004 e4 21 00 00 */ }; struct _TRANSACTION_SUPERIOR_ENLISTMENT_INFORMATION { unsigned char SuperiorEnlistmentPair[32]; /* +0x0000 a2 1f 00 00 */ }; struct tagEMRLINETO { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char ptl[8]; /* +0x0008 6a 19 00 00 */ }; struct _SERVICE_TRIGGER_SPECIFIC_DATA_ITEM { unsigned long dwDataType; /* +0x0000 */ unsigned long cbData; /* +0x0004 */ unsigned char *pData; /* +0x0008 */ }; struct _MOF_FIELD { unsigned long long DataPtr; /* +0x0000 */ unsigned long Length; /* +0x0008 */ unsigned long DataType; /* +0x000c */ }; struct _IMAGE_RESOURCE_DIRECTORY_ENTRY { /* unsigned char NameOffset[0]; +0x0000 f2 21 00 00 */ /* unsigned char NameIsString[0]; +0x0000 f3 21 00 00 */ unsigned long Name; /* +0x0000 */ unsigned short Id; /* +0x0000 */ unsigned long OffsetToData; /* +0x0004 */ /* unsigned char OffsetToDirectory[0]; +0x0004 f2 21 00 00 */ unsigned char DataIsDirectory[4]; /* +0x0004 f3 21 00 00 */ }; struct tagEMRROUNDRECT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBox[16]; /* +0x0008 b5 18 00 00 */ unsigned char szlCorner[8]; /* +0x0018 8e 1f 00 00 */ }; struct tagRPC_CALL_ATTRIBUTES_V2_W { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned short *ServerPrincipalName; /* +0x0010 */ unsigned long ClientPrincipalNameBufferLength; /* +0x0018 */ unsigned short *ClientPrincipalName; /* +0x0020 */ unsigned long AuthenticationLevel; /* +0x0028 */ unsigned long AuthenticationService; /* +0x002c */ unsigned char NullSession[4]; /* +0x0030 74 00 00 00 */ unsigned char KernelModeCaller[4]; /* +0x0034 74 00 00 00 */ unsigned long ProtocolSequence; /* +0x0038 */ unsigned char IsClientLocal[4]; /* +0x003c 0b 17 00 00 */ void *ClientPID; /* +0x0040 */ unsigned long CallStatus; /* +0x0048 */ unsigned char CallType[4]; /* +0x004c 91 16 00 00 */ unsigned char CallLocalAddress[8]; /* +0x0050 fe 21 00 00 */ unsigned short OpNum; /* +0x0058 */ unsigned char InterfaceUuid[20]; /* +0x005c 6b 10 00 00 */ }; struct _IMAGE_NT_HEADERS64 { unsigned long Signature; /* +0x0000 */ unsigned char FileHeader[20]; /* +0x0004 01 22 00 00 */ unsigned char OptionalHeader[240]; /* +0x0018 02 22 00 00 */ }; struct _POWER_SESSION_WINLOGON { unsigned long SessionId; /* +0x0000 */ unsigned char Console; /* +0x0004 */ unsigned char Locked; /* +0x0005 */ }; struct _UNLOAD_DLL_DEBUG_INFO { void *lpBaseOfDll; /* +0x0000 */ }; struct tagEMRPOLYLINE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long cptl; /* +0x0018 */ unsigned char aptl[8]; /* +0x001c c1 1f 00 00 */ }; struct _IO_SESSION_CONNECT_INFO { unsigned long SessionId; /* +0x0000 */ unsigned char LocalSession; /* +0x0004 */ }; struct _CONSOLE_READCONSOLE_CONTROL { unsigned long nLength; /* +0x0000 */ unsigned long nInitialChars; /* +0x0004 */ unsigned long dwCtrlWakeupMask; /* +0x0008 */ unsigned long dwControlKeyState; /* +0x000c */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_A { unsigned char TransportCredentials[8]; /* +0x0000 1f 22 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned char *ServerCertificateSubject; /* +0x0020 */ }; struct _RIP_INFO { unsigned long dwError; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ }; struct tagCWPRETSTRUCT { long long lResult; /* +0x0000 */ long long lParam; /* +0x0008 */ unsigned long long wParam; /* +0x0010 */ unsigned char message[8]; /* +0x0018 75 00 00 00 */ unsigned char hwnd[8]; /* +0x0020 97 13 00 00 */ }; struct tagKBDLLHOOKSTRUCT { unsigned long vkCode; /* +0x0000 */ unsigned long scanCode; /* +0x0004 */ unsigned long flags; /* +0x0008 */ unsigned long time; /* +0x000c */ unsigned long long dwExtraInfo; /* +0x0010 */ }; struct _FILE_LEVEL_TRIM_RANGE { unsigned long long Offset; /* +0x0000 */ unsigned long long Length; /* +0x0008 */ }; struct _REQUEST_OPLOCK_INPUT_BUFFER { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureLength; /* +0x0002 */ unsigned long RequestedOplockLevel; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ }; struct _PHYSICAL_CHANNEL_RUN { unsigned long NodeNumber; /* +0x0000 */ unsigned long ChannelNumber; /* +0x0004 */ unsigned long long BasePage; /* +0x0008 */ unsigned long long PageCount; /* +0x0010 */ unsigned long long Flags; /* +0x0018 */ }; struct _PLUGPLAY_CONTROL_USER_RESPONSE_DATA { unsigned long Response; /* +0x0000 */ unsigned char VetoType[4]; /* +0x0004 37 16 00 00 */ unsigned char VetoName[8]; /* +0x0008 71 06 00 00 */ unsigned long VetoNameLength; /* +0x0010 */ }; struct _NETINFOSTRUCT { unsigned long cbStructure; /* +0x0000 */ unsigned long dwProviderVersion; /* +0x0004 */ unsigned long dwStatus; /* +0x0008 */ unsigned long dwCharacteristics; /* +0x000c */ unsigned long long dwHandle; /* +0x0010 */ unsigned short wNetType; /* +0x0018 */ unsigned long dwPrinters; /* +0x001c */ unsigned long dwDrives; /* +0x0020 */ }; struct _MIDL_SYNTAX_INFO { unsigned char TransferSyntax[24]; /* +0x0000 6d 20 00 00 */ unsigned char DispatchTable[8]; /* +0x0018 5d 22 00 00 */ unsigned char ProcString[8]; /* +0x0020 5e 22 00 00 */ unsigned char FmtStringOffset[8]; /* +0x0028 60 22 00 00 */ unsigned char TypeString[8]; /* +0x0030 5e 22 00 00 */ unsigned char aUserMarshalQuadruple[8]; /* +0x0038 3d 11 00 00 */ unsigned long long pReserved1; /* +0x0040 */ unsigned long long pReserved2; /* +0x0048 */ }; struct _ACCESS_ALLOWED_CALLBACK_OBJECT_ACE { unsigned char Header[4]; /* +0x0000 63 22 00 00 */ unsigned long Mask; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned char ObjectType[16]; /* +0x000c 6b 10 00 00 */ unsigned char InheritedObjectType[16]; /* +0x001c 6b 10 00 00 */ unsigned long SidStart; /* +0x002c */ }; struct _FILE_ZERO_DATA_INFORMATION { unsigned char FileOffset[8]; /* +0x0000 0e 19 00 00 */ unsigned char BeyondFinalZero[8]; /* +0x0008 0e 19 00 00 */ }; struct _OVERLAPPED_ENTRY { unsigned long long lpCompletionKey; /* +0x0000 */ unsigned char lpOverlapped[8]; /* +0x0008 73 22 00 00 */ unsigned long long Internal; /* +0x0010 */ unsigned long dwNumberOfBytesTransferred; /* +0x0018 */ }; struct tagEMRSELECTPALETTE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihPal; /* +0x0008 */ }; struct _NDR_USER_MARSHAL_INFO_LEVEL1 { void *Buffer; /* +0x0000 */ unsigned long BufferSize; /* +0x0008 */ unsigned char pfnAllocate[8]; /* +0x0010 1e 11 00 00 */ unsigned char pfnFree[8]; /* +0x0018 21 11 00 00 */ unsigned char pRpcChannelBuffer[8]; /* +0x0020 7e 22 00 00 */ unsigned char Reserved[40]; /* +0x0028 be 20 00 00 */ }; struct _GDI_OBJECT { unsigned long ObjectType; /* +0x0000 */ }; struct _CONTEXT { unsigned long long P1Home; /* +0x0000 */ unsigned long long P2Home; /* +0x0008 */ unsigned long long P3Home; /* +0x0010 */ unsigned long long P4Home; /* +0x0018 */ unsigned long long P5Home; /* +0x0020 */ unsigned long long P6Home; /* +0x0028 */ unsigned long ContextFlags; /* +0x0030 */ unsigned long MxCsr; /* +0x0034 */ unsigned short SegCs; /* +0x0038 */ unsigned short SegDs; /* +0x003a */ unsigned short SegEs; /* +0x003c */ unsigned short SegFs; /* +0x003e */ unsigned short SegGs; /* +0x0040 */ unsigned short SegSs; /* +0x0042 */ unsigned long EFlags; /* +0x0044 */ unsigned long long Dr0; /* +0x0048 */ unsigned long long Dr1; /* +0x0050 */ unsigned long long Dr2; /* +0x0058 */ unsigned long long Dr3; /* +0x0060 */ unsigned long long Dr6; /* +0x0068 */ unsigned long long Dr7; /* +0x0070 */ unsigned long long Rax; /* +0x0078 */ unsigned long long Rcx; /* +0x0080 */ unsigned long long Rdx; /* +0x0088 */ unsigned long long Rbx; /* +0x0090 */ unsigned long long Rsp; /* +0x0098 */ unsigned long long Rbp; /* +0x00a0 */ unsigned long long Rsi; /* +0x00a8 */ unsigned long long Rdi; /* +0x00b0 */ unsigned long long R8; /* +0x00b8 */ unsigned long long R9; /* +0x00c0 */ unsigned long long R10; /* +0x00c8 */ unsigned long long R11; /* +0x00d0 */ unsigned long long R12; /* +0x00d8 */ unsigned long long R13; /* +0x00e0 */ unsigned long long R14; /* +0x00e8 */ unsigned long long R15; /* +0x00f0 */ unsigned long long Rip; /* +0x00f8 */ /* unsigned char FltSave[0]; +0x0100 84 22 00 00 */ unsigned char Header[32]; /* +0x0100 86 22 00 00 */ unsigned char Legacy[128]; /* +0x0120 87 22 00 00 */ unsigned char Xmm0[16]; /* +0x01a0 85 22 00 00 */ unsigned char Xmm1[16]; /* +0x01b0 85 22 00 00 */ unsigned char Xmm2[16]; /* +0x01c0 85 22 00 00 */ unsigned char Xmm3[16]; /* +0x01d0 85 22 00 00 */ unsigned char Xmm4[16]; /* +0x01e0 85 22 00 00 */ unsigned char Xmm5[16]; /* +0x01f0 85 22 00 00 */ unsigned char Xmm6[16]; /* +0x0200 85 22 00 00 */ unsigned char Xmm7[16]; /* +0x0210 85 22 00 00 */ unsigned char Xmm8[16]; /* +0x0220 85 22 00 00 */ unsigned char Xmm9[16]; /* +0x0230 85 22 00 00 */ unsigned char Xmm10[16]; /* +0x0240 85 22 00 00 */ unsigned char Xmm11[16]; /* +0x0250 85 22 00 00 */ unsigned char Xmm12[16]; /* +0x0260 85 22 00 00 */ unsigned char Xmm13[16]; /* +0x0270 85 22 00 00 */ unsigned char Xmm14[16]; /* +0x0280 85 22 00 00 */ unsigned char Xmm15[112]; /* +0x0290 85 22 00 00 */ unsigned char VectorRegister[416]; /* +0x0300 88 22 00 00 */ unsigned long long VectorControl; /* +0x04a0 */ unsigned long long DebugControl; /* +0x04a8 */ unsigned long long LastBranchToRip; /* +0x04b0 */ unsigned long long LastBranchFromRip; /* +0x04b8 */ unsigned long long LastExceptionToRip; /* +0x04c0 */ unsigned long long LastExceptionFromRip; /* +0x04c8 */ }; struct _JOBOBJECT_LIMIT_VIOLATION_INFORMATION { unsigned long LimitFlags; /* +0x0000 */ unsigned long ViolationLimitFlags; /* +0x0004 */ unsigned long long IoReadBytes; /* +0x0008 */ unsigned long long IoReadBytesLimit; /* +0x0010 */ unsigned long long IoWriteBytes; /* +0x0018 */ unsigned long long IoWriteBytesLimit; /* +0x0020 */ unsigned char PerJobUserTime[8]; /* +0x0028 0e 19 00 00 */ unsigned char PerJobUserTimeLimit[8]; /* +0x0030 0e 19 00 00 */ unsigned long long JobMemory; /* +0x0038 */ unsigned long long JobMemoryLimit; /* +0x0040 */ unsigned char RateControlTolerance[4]; /* +0x0048 5b 18 00 00 */ unsigned char RateControlToleranceLimit[4]; /* +0x004c 6f 17 00 00 */ }; struct _ENCRYPTION_BUFFER { unsigned long EncryptionOperation; /* +0x0000 */ unsigned char Private[4]; /* +0x0004 d7 18 00 00 */ }; struct _SYSTEM_POWER_STATE_DISABLE_REASON { unsigned char AffectedState[8]; /* +0x0000 fb 10 00 00 */ unsigned long PowerReasonCode; /* +0x0008 */ unsigned long PowerReasonLength; /* +0x000c */ }; struct _PLUGPLAY_CONTROL_DEPTH_DATA { unsigned char DeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned long DeviceDepth; /* +0x0010 */ }; struct _RPC_SECURITY_QOS_V3_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _RPC_BINDING_HANDLE_OPTIONS_V1 { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ComTimeout; /* +0x0008 */ unsigned long CallTimeout; /* +0x000c */ }; struct tagCAUB { unsigned long cElems; /* +0x0000 */ unsigned char *pElems; /* +0x0008 */ }; struct _OLESTREAMVTBL { unsigned char Get[8]; /* +0x0000 ba 22 00 00 */ unsigned char Put[8]; /* +0x0008 bd 22 00 00 */ }; struct _PROCESSOR_POWER_POLICY_INFO { unsigned long TimeCheck; /* +0x0000 */ unsigned long DemoteLimit; /* +0x0004 */ unsigned long PromoteLimit; /* +0x0008 */ unsigned char DemotePercent; /* +0x000c */ unsigned char PromotePercent; /* +0x000d */ unsigned char Spare[2]; /* +0x000e 0c 21 00 00 */ /* unsigned char AllowDemotion[0]; +0x0010 53 19 00 00 */ /* unsigned char AllowPromotion[0]; +0x0010 e3 21 00 00 */ unsigned char Reserved[4]; /* +0x0010 c0 22 00 00 */ }; struct _WOW64_CONTEXT { unsigned long ContextFlags; /* +0x0000 */ unsigned long Dr0; /* +0x0004 */ unsigned long Dr1; /* +0x0008 */ unsigned long Dr2; /* +0x000c */ unsigned long Dr3; /* +0x0010 */ unsigned long Dr6; /* +0x0014 */ unsigned long Dr7; /* +0x0018 */ unsigned char FloatSave[112]; /* +0x001c c3 22 00 00 */ unsigned long SegGs; /* +0x008c */ unsigned long SegFs; /* +0x0090 */ unsigned long SegEs; /* +0x0094 */ unsigned long SegDs; /* +0x0098 */ unsigned long Edi; /* +0x009c */ unsigned long Esi; /* +0x00a0 */ unsigned long Ebx; /* +0x00a4 */ unsigned long Edx; /* +0x00a8 */ unsigned long Ecx; /* +0x00ac */ unsigned long Eax; /* +0x00b0 */ unsigned long Ebp; /* +0x00b4 */ unsigned long Eip; /* +0x00b8 */ unsigned long SegCs; /* +0x00bc */ unsigned long EFlags; /* +0x00c0 */ unsigned long Esp; /* +0x00c4 */ unsigned long SegSs; /* +0x00c8 */ unsigned char ExtendedRegisters[512]; /* +0x00cc c4 22 00 00 */ }; struct tagDRAWTEXTPARAMS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iTabLength[4]; /* +0x0004 74 00 00 00 */ unsigned char iLeftMargin[4]; /* +0x0008 74 00 00 00 */ unsigned char iRightMargin[4]; /* +0x000c 74 00 00 00 */ unsigned char uiLengthDrawn[4]; /* +0x0010 75 00 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1 { unsigned long Name; /* +0x0000 */ unsigned short ValueType; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned long ValueCount; /* +0x000c */ }; struct _XSAVE_POLICY { unsigned long Version; /* +0x0000 */ unsigned long Size; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long MaxSaveAreaLength; /* +0x000c */ unsigned long long FeatureBitmask; /* +0x0010 */ unsigned long NumberOfFeatures; /* +0x0018 */ unsigned char Features[16]; /* +0x0020 d4 22 00 00 */ }; struct _HARDWARE_COUNTER_DATA { unsigned char Type[4]; /* +0x0000 c9 17 00 00 */ unsigned long Reserved; /* +0x0004 */ unsigned long long Value; /* +0x0008 */ }; struct _SECURITY_ATTRIBUTES { unsigned long nLength; /* +0x0000 */ void *lpSecurityDescriptor; /* +0x0008 */ unsigned char bInheritHandle[8]; /* +0x0010 74 00 00 00 */ }; struct _MIDL_STUB_DESC { void *RpcInterfaceInformation; /* +0x0000 */ unsigned char pfnAllocate[8]; /* +0x0008 1e 11 00 00 */ unsigned char pfnFree[136]; /* +0x0010 21 11 00 00 */ }; struct _UNWIND_CODE:: { unsigned char OffsetLow; /* +0x0000 */ /* unsigned char UnwindOp[0]; +0x0001 91 19 00 00 */ unsigned char OffsetHigh[1]; /* +0x0001 92 19 00 00 */ }; struct _FILE_FS_PERSISTENT_VOLUME_INFORMATION { unsigned long VolumeFlags; /* +0x0000 */ unsigned long FlagMask; /* +0x0004 */ unsigned long Version; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _PROCESSOR_RELATIONSHIP { unsigned char Flags; /* +0x0000 */ unsigned char Reserved[21]; /* +0x0001 0e 23 00 00 */ unsigned short GroupCount; /* +0x0016 */ unsigned char GroupMask[16]; /* +0x0018 10 23 00 00 */ }; struct _SYSTEM_SPCALL2_INFORMATION { void *InputData; /* +0x0000 */ void *OutputData; /* +0x0008 */ unsigned long InputDataSize; /* +0x0010 */ unsigned long OutputDataSize; /* +0x0014 */ long Status; /* +0x0018 */ }; struct _GLYPHMETRICSFLOAT { unsigned char gmfBlackBoxX[4]; /* +0x0000 40 00 00 00 */ unsigned char gmfBlackBoxY[4]; /* +0x0004 40 00 00 00 */ unsigned char gmfptGlyphOrigin[8]; /* +0x0008 17 23 00 00 */ unsigned char gmfCellIncX[4]; /* +0x0010 40 00 00 00 */ unsigned char gmfCellIncY[4]; /* +0x0014 40 00 00 00 */ }; struct _RUNTIME_FUNCTION { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long UnwindData; /* +0x0008 */ }; struct _SYSTEM_ALARM_CALLBACK_ACE { unsigned char Header[4]; /* +0x0000 63 22 00 00 */ unsigned long Mask; /* +0x0004 */ unsigned long SidStart; /* +0x0008 */ }; struct _TOKEN_DEFAULT_DACL { unsigned char DefaultDacl[8]; /* +0x0000 1f 23 00 00 */ }; struct _FILE_FS_CONTROL_INFORMATION { unsigned char FreeSpaceStartFiltering[8]; /* +0x0000 0e 19 00 00 */ unsigned char FreeSpaceThreshold[8]; /* +0x0008 0e 19 00 00 */ unsigned char FreeSpaceStopFiltering[8]; /* +0x0010 0e 19 00 00 */ unsigned char DefaultQuotaThreshold[8]; /* +0x0018 0e 19 00 00 */ unsigned char DefaultQuotaLimit[8]; /* +0x0020 0e 19 00 00 */ unsigned long FileSystemControlFlags; /* +0x0028 */ }; struct tagFONTSIGNATURE { unsigned char fsUsb[16]; /* +0x0000 2b 23 00 00 */ unsigned char fsCsb[8]; /* +0x0010 cc 1f 00 00 */ }; struct _s__RTTICompleteObjectLocator2 { unsigned long signature; /* +0x0000 */ unsigned long offset; /* +0x0004 */ unsigned long cdOffset; /* +0x0008 */ unsigned char pTypeDescriptor[8]; /* +0x000c 32 23 00 00 */ unsigned char pClassDescriptor[8]; /* +0x0014 35 23 00 00 */ unsigned char pSelf[8]; /* +0x001c 38 23 00 00 */ }; struct _RTL_UMS_COMPLETION_LIST { unsigned char ThreadListHead[8]; /* +0x0000 40 23 00 00 */ void *CompletionEvent; /* +0x0008 */ unsigned long CompletionFlags; /* +0x0010 */ unsigned char InternalListHead[8]; /* +0x0018 21 21 00 00 */ }; struct tagACTCTXA { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpSource[8]; /* +0x0008 4f 10 00 00 */ unsigned short wProcessorArchitecture; /* +0x0010 */ unsigned short wLangId; /* +0x0012 */ unsigned char lpAssemblyDirectory[8]; /* +0x0018 4f 10 00 00 */ unsigned char lpResourceName[8]; /* +0x0020 4f 10 00 00 */ unsigned char lpApplicationName[8]; /* +0x0028 4f 10 00 00 */ unsigned char hModule[8]; /* +0x0030 4e 1a 00 00 */ }; struct _RTL_PERTHREAD_CURDIR { unsigned char CurrentDirectories[8]; /* +0x0000 7f 20 00 00 */ unsigned char ImageName[8]; /* +0x0008 07 21 00 00 */ void *Environment; /* +0x0010 */ }; struct _SERVICE_DELAYED_AUTO_START_INFO { unsigned char fDelayedAutostart[4]; /* +0x0000 74 00 00 00 */ }; struct tagOBJECTDESCRIPTOR { unsigned long cbSize; /* +0x0000 */ unsigned char clsid[16]; /* +0x0004 6b 10 00 00 */ unsigned long dwDrawAspect; /* +0x0014 */ unsigned char sizel[8]; /* +0x0018 8e 1f 00 00 */ unsigned char pointl[8]; /* +0x0020 6a 19 00 00 */ unsigned long dwStatus; /* +0x0028 */ unsigned long dwFullUserTypeName; /* +0x002c */ unsigned long dwSrcOfCopy; /* +0x0030 */ }; struct _SYSTEM_SYSTEM_PARTITION_INFORMATION { unsigned char SystemPartition[16]; /* +0x0000 c1 18 00 00 */ }; struct _SYSTEM_INFO { unsigned long dwOemId; /* +0x0000 */ unsigned short wProcessorArchitecture; /* +0x0000 */ unsigned short wReserved; /* +0x0002 */ unsigned long dwPageSize; /* +0x0004 */ void *lpMinimumApplicationAddress; /* +0x0008 */ void *lpMaximumApplicationAddress; /* +0x0010 */ unsigned long long dwActiveProcessorMask; /* +0x0018 */ unsigned long dwNumberOfProcessors; /* +0x0020 */ unsigned long dwProcessorType; /* +0x0024 */ unsigned long dwAllocationGranularity; /* +0x0028 */ unsigned short wProcessorLevel; /* +0x002c */ unsigned short wProcessorRevision; /* +0x002e */ }; struct _IO_COMPLETION_BASIC_INFORMATION { long Depth; /* +0x0000 */ }; struct _RTL_USER_PROCESS_INFORMATION { unsigned long Length; /* +0x0000 */ void *Process; /* +0x0008 */ void *Thread; /* +0x0010 */ unsigned char ClientId[16]; /* +0x0018 0f 19 00 00 */ unsigned char ImageInformation[64]; /* +0x0028 63 23 00 00 */ }; struct _SYSTEM_WATCHDOG_TIMER_INFORMATION { unsigned char WdInfoClass[4]; /* +0x0000 f9 17 00 00 */ unsigned long DataValue; /* +0x0004 */ }; struct _SYSTEM_BOOT_ENVIRONMENT_INFORMATION { unsigned char BootIdentifier[16]; /* +0x0000 6b 10 00 00 */ unsigned char FirmwareType[8]; /* +0x0010 51 18 00 00 */ unsigned long long BootFlags; /* +0x0018 */ }; struct val_context { unsigned char valuelen[8]; /* +0x0000 74 00 00 00 */ void *value_context; /* +0x0008 */ void *val_buff_ptr; /* +0x0010 */ }; struct _CLIENT_CALL_RETURN { void *Pointer; /* +0x0000 */ long long Simple; /* +0x0000 */ }; struct tagCACY { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 76 23 00 00 */ }; struct _PLUGPLAY_NOTIFY_HDR { unsigned short Version; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned char Event[16]; /* +0x0004 6b 10 00 00 */ }; struct _SHRINK_VOLUME_INFORMATION { unsigned char ShrinkRequestType[8]; /* +0x0000 b7 16 00 00 */ unsigned long long Flags; /* +0x0008 */ long long NewNumberOfSectors; /* +0x0010 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX { unsigned char Relationship[4]; /* +0x0000 85 17 00 00 */ unsigned long Size; /* +0x0004 */ /* unsigned char Processor[0]; +0x0008 99 23 00 00 */ /* unsigned char NumaNode[0]; +0x0008 9a 23 00 00 */ /* unsigned char Cache[0]; +0x0008 9b 23 00 00 */ unsigned char Group[72]; /* +0x0008 9c 23 00 00 */ }; struct LIST_ENTRY32 { unsigned long Flink; /* +0x0000 */ unsigned long Blink; /* +0x0004 */ }; struct _XSAVE_FORMAT { unsigned short ControlWord; /* +0x0000 */ unsigned short StatusWord; /* +0x0002 */ unsigned char TagWord; /* +0x0004 */ unsigned char Reserved1; /* +0x0005 */ unsigned short ErrorOpcode; /* +0x0006 */ unsigned long ErrorOffset; /* +0x0008 */ unsigned short ErrorSelector; /* +0x000c */ unsigned short Reserved2; /* +0x000e */ unsigned long DataOffset; /* +0x0010 */ unsigned short DataSelector; /* +0x0014 */ unsigned short Reserved3; /* +0x0016 */ unsigned long MxCsr; /* +0x0018 */ unsigned long MxCsr_Mask; /* +0x001c */ unsigned char FloatRegisters[128]; /* +0x0020 87 22 00 00 */ unsigned char XmmRegisters[256]; /* +0x00a0 b4 23 00 00 */ unsigned char Reserved4[96]; /* +0x01a0 b5 23 00 00 */ }; struct _IMAGE_FUNCTION_ENTRY64 { unsigned long long StartingAddress; /* +0x0000 */ unsigned long long EndingAddress; /* +0x0008 */ unsigned long long EndOfPrologue; /* +0x0010 */ unsigned long long UnwindInfoAddress; /* +0x0010 */ }; struct _EXIT_THREAD_DEBUG_INFO { unsigned long dwExitCode; /* +0x0000 */ }; struct _ENUM_SERVICE_STATUS_PROCESSA { char *lpServiceName; /* +0x0000 */ char *lpDisplayName; /* +0x0008 */ unsigned char ServiceStatusProcess[40]; /* +0x0010 55 20 00 00 */ }; struct _GENERIC_BINDING_ROUTINE_PAIR { unsigned char pfnBind[8]; /* +0x0000 c0 23 00 00 */ unsigned char pfnUnbind[8]; /* +0x0008 21 13 00 00 */ }; struct _COMPOUND_ACCESS_ALLOWED_ACE { unsigned char Header[4]; /* +0x0000 63 22 00 00 */ unsigned long Mask; /* +0x0004 */ unsigned short CompoundAceType; /* +0x0008 */ unsigned short Reserved; /* +0x000a */ unsigned long SidStart; /* +0x000c */ }; struct _LDR_SERVICE_TAG_RECORD { unsigned char Next[8]; /* +0x0000 c8 23 00 00 */ unsigned long ServiceTag; /* +0x0008 */ }; struct _PROCESS_HEAP_INFORMATION { unsigned long long ReserveSize; /* +0x0000 */ unsigned long long CommitSize; /* +0x0008 */ unsigned long NumberOfHeaps; /* +0x0010 */ unsigned long long FirstHeapInformationOffset; /* +0x0018 */ }; struct _SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM:: { unsigned char CustomStateId[8]; /* +0x0000 d4 23 00 00 */ }; struct _SERVICE_CUSTOM_SYSTEM_STATE_CHANGE_DATA_ITEM:::: { unsigned long DataOffset; /* +0x0000 */ unsigned char Data[4]; /* +0x0004 d7 18 00 00 */ }; struct _SERVICE_STATUS_PROCESS { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwCurrentState; /* +0x0004 */ unsigned long dwControlsAccepted; /* +0x0008 */ unsigned long dwWin32ExitCode; /* +0x000c */ unsigned long dwServiceSpecificExitCode; /* +0x0010 */ unsigned long dwCheckPoint; /* +0x0014 */ unsigned long dwWaitHint; /* +0x0018 */ unsigned long dwProcessId; /* +0x001c */ unsigned long dwServiceFlags; /* +0x0020 */ }; struct _SYSTEM_PROCESSOR_IDLE_CYCLE_TIME_INFORMATION { unsigned long long CycleTime; /* +0x0000 */ }; struct _SERVICE_USERMODEREBOOT_INFO { unsigned long dwFlags; /* +0x0000 */ unsigned long eLowestRunLevel; /* +0x0004 */ unsigned long eHighestRunLevel; /* +0x0008 */ }; struct _QUOTA_LIMITS { unsigned long long PagedPoolLimit; /* +0x0000 */ unsigned long long NonPagedPoolLimit; /* +0x0008 */ unsigned long long MinimumWorkingSetSize; /* +0x0010 */ unsigned long long MaximumWorkingSetSize; /* +0x0018 */ unsigned long long PagefileLimit; /* +0x0020 */ unsigned char TimeLimit[8]; /* +0x0028 0e 19 00 00 */ }; struct _PORT_VIEW { unsigned long Length; /* +0x0000 */ void *SectionHandle; /* +0x0008 */ unsigned long SectionOffset; /* +0x0010 */ unsigned long long ViewSize; /* +0x0018 */ void *ViewBase; /* +0x0020 */ void *ViewRemoteBase; /* +0x0028 */ }; struct tagSERIALKEYSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpszActivePort[8]; /* +0x0008 71 06 00 00 */ unsigned char lpszPort[8]; /* +0x0010 71 06 00 00 */ unsigned char iBaudRate[4]; /* +0x0018 75 00 00 00 */ unsigned char iPortState[4]; /* +0x001c 75 00 00 00 */ unsigned char iActive[8]; /* +0x0020 75 00 00 00 */ }; struct _OBJECT_ATTRIBUTES32 { unsigned long Length; /* +0x0000 */ unsigned long RootDirectory; /* +0x0004 */ unsigned long ObjectName; /* +0x0008 */ unsigned long Attributes; /* +0x000c */ unsigned long SecurityDescriptor; /* +0x0010 */ unsigned long SecurityQualityOfService; /* +0x0014 */ }; struct _TOKEN_LINKED_TOKEN { void *LinkedToken; /* +0x0000 */ }; struct _NUMA_NODE_RELATIONSHIP { unsigned long NodeNumber; /* +0x0000 */ unsigned char Reserved[20]; /* +0x0004 a4 10 00 00 */ unsigned char GroupMask[16]; /* +0x0018 0f 23 00 00 */ }; struct _ACTIVATION_CONTEXT_ASSEMBLY_DETAILED_INFORMATION { unsigned long ulFlags; /* +0x0000 */ unsigned long ulEncodedAssemblyIdentityLength; /* +0x0004 */ unsigned long ulManifestPathType; /* +0x0008 */ unsigned long ulManifestPathLength; /* +0x000c */ unsigned char liManifestLastWriteTime[8]; /* +0x0010 0e 19 00 00 */ unsigned long ulPolicyPathType; /* +0x0018 */ unsigned long ulPolicyPathLength; /* +0x001c */ unsigned char liPolicyLastWriteTime[8]; /* +0x0020 0e 19 00 00 */ unsigned long ulMetadataSatelliteRosterIndex; /* +0x0028 */ unsigned long ulManifestVersionMajor; /* +0x002c */ unsigned long ulManifestVersionMinor; /* +0x0030 */ unsigned long ulPolicyVersionMajor; /* +0x0034 */ unsigned long ulPolicyVersionMinor; /* +0x0038 */ unsigned long ulAssemblyDirectoryNameLength; /* +0x003c */ unsigned char lpAssemblyEncodedAssemblyIdentity[8]; /* +0x0040 27 10 00 00 */ unsigned char lpAssemblyManifestPath[8]; /* +0x0048 27 10 00 00 */ unsigned char lpAssemblyPolicyPath[8]; /* +0x0050 27 10 00 00 */ unsigned char lpAssemblyDirectoryName[8]; /* +0x0058 27 10 00 00 */ unsigned long ulFileCount; /* +0x0060 */ }; struct tagTouchPredictionParameters { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char dwLatency[4]; /* +0x0004 75 00 00 00 */ unsigned char dwSampleTime[4]; /* +0x0008 75 00 00 00 */ unsigned char bUseHWTimeStamp[4]; /* +0x000c 75 00 00 00 */ }; struct _FLAGGED_BYTE_BLOB { unsigned long fFlags; /* +0x0000 */ unsigned long clSize; /* +0x0004 */ unsigned char abData[4]; /* +0x0008 d7 18 00 00 */ }; struct _ALPC_PORT_ASSOCIATE_COMPLETION_PORT { void *CompletionKey; /* +0x0000 */ void *CompletionPort; /* +0x0008 */ }; struct tagDROPSTRUCT { unsigned char hwndSource[8]; /* +0x0000 97 13 00 00 */ unsigned char hwndSink[8]; /* +0x0008 97 13 00 00 */ unsigned long wFmt; /* +0x0010 */ unsigned long long dwData; /* +0x0018 */ unsigned char ptDrop[8]; /* +0x0020 1b 1a 00 00 */ unsigned long dwControlData; /* +0x0028 */ }; struct _TOKEN_GROUPS_AND_PRIVILEGES { unsigned long SidCount; /* +0x0000 */ unsigned long SidLength; /* +0x0004 */ unsigned char Sids[8]; /* +0x0008 55 24 00 00 */ unsigned long RestrictedSidCount; /* +0x0010 */ unsigned long RestrictedSidLength; /* +0x0014 */ unsigned char RestrictedSids[8]; /* +0x0018 55 24 00 00 */ unsigned long PrivilegeCount; /* +0x0020 */ unsigned long PrivilegeLength; /* +0x0024 */ unsigned char Privileges[8]; /* +0x0028 01 1a 00 00 */ unsigned char AuthenticationId[8]; /* +0x0030 90 1e 00 00 */ }; struct _FILE_ATTRIBUTE_CACHE_PAIR { unsigned char Name[200]; /* +0x0000 5a 24 00 00 */ unsigned char Value[12]; /* +0x00c8 5b 24 00 00 */ }; struct _CM_EISA_SLOT_INFORMATION { unsigned char ReturnCode; /* +0x0000 */ unsigned char ReturnFlags; /* +0x0001 */ unsigned char MajorRevision; /* +0x0002 */ unsigned char MinorRevision; /* +0x0003 */ unsigned short Checksum; /* +0x0004 */ unsigned char NumberFunctions; /* +0x0006 */ unsigned char FunctionInformation; /* +0x0007 */ unsigned long CompressedId; /* +0x0008 */ }; struct _RTL_BITMAP_RUN { unsigned long StartingIndex; /* +0x0000 */ unsigned long NumberOfBits; /* +0x0004 */ }; struct _FILE_ALIGNMENT_INFO { unsigned long AlignmentRequirement; /* +0x0000 */ }; struct tagMSLLHOOKSTRUCT { unsigned char pt[8]; /* +0x0000 1b 1a 00 00 */ unsigned long mouseData; /* +0x0008 */ unsigned long flags; /* +0x000c */ unsigned long time; /* +0x0010 */ unsigned long long dwExtraInfo; /* +0x0018 */ }; struct tagMDICREATESTRUCTA { unsigned char szClass[8]; /* +0x0000 4f 10 00 00 */ unsigned char szTitle[8]; /* +0x0008 4f 10 00 00 */ void *hOwner; /* +0x0010 */ unsigned char x[4]; /* +0x0018 74 00 00 00 */ unsigned char y[4]; /* +0x001c 74 00 00 00 */ unsigned char cx[4]; /* +0x0020 74 00 00 00 */ unsigned char cy[4]; /* +0x0024 74 00 00 00 */ unsigned long style; /* +0x0028 */ long long lParam; /* +0x0030 */ }; struct _RPC_SECURITY_QOS_V2_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _RPC_SECURITY_QOS_V2_W:: { unsigned char HttpCredentials[8]; /* +0x0000 6f 24 00 00 */ }; struct _SYSTEM_VERIFIER_INFORMATION_EX { unsigned long VerifyMode; /* +0x0000 */ unsigned long OptionChanges; /* +0x0004 */ unsigned char PreviousBucketName[16]; /* +0x0008 c1 18 00 00 */ unsigned long IrpCancelTimeoutMsec; /* +0x0018 */ unsigned long VerifierExtensionEnabled; /* +0x001c */ unsigned char Reserved[8]; /* +0x0020 d4 18 00 00 */ }; struct _KEY_BASIC_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 0e 19 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long NameLength; /* +0x000c */ unsigned char Name[8]; /* +0x0010 ab 19 00 00 */ }; struct _RTL_AVL_ENTRY { unsigned char BalancedLinks[32]; /* +0x0000 79 24 00 00 */ long long UserData; /* +0x0020 */ }; struct tagEXTLOGPEN { unsigned long elpPenStyle; /* +0x0000 */ unsigned long elpWidth; /* +0x0004 */ unsigned char elpBrushStyle[4]; /* +0x0008 75 00 00 00 */ unsigned long elpColor; /* +0x000c */ unsigned long long elpHatch; /* +0x0010 */ unsigned long elpNumEntries; /* +0x0018 */ unsigned char elpStyleEntry[4]; /* +0x001c d4 18 00 00 */ }; struct _MUISTRINGPOOL { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short MaxNumStrings; /* +0x0004 */ unsigned short NumStrings; /* +0x0006 */ unsigned short MaxNumCharsInPool; /* +0x0008 */ unsigned short NumCharsInPool; /* +0x000a */ short *Strings; /* +0x0010 */ unsigned char Pool[8]; /* +0x0018 71 06 00 00 */ }; struct _ACTIVATION_CONTEXT_ASSEMBLY_DATA { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char AssemblyName[8]; /* +0x0008 27 10 00 00 */ unsigned long AssemblyNameLength; /* +0x0010 */ unsigned long HashAlgorithm; /* +0x0014 */ unsigned long PseudoKey; /* +0x0018 */ }; struct _OUTLINETEXTMETRICA { unsigned char otmSize[4]; /* +0x0000 75 00 00 00 */ unsigned char otmTextMetrics[56]; /* +0x0004 85 24 00 00 */ unsigned char otmFiller; /* +0x003c */ unsigned char otmPanoseNumber[11]; /* +0x003d 4b 21 00 00 */ unsigned char otmfsSelection[4]; /* +0x0048 75 00 00 00 */ unsigned char otmfsType[4]; /* +0x004c 75 00 00 00 */ unsigned char otmsCharSlopeRise[4]; /* +0x0050 74 00 00 00 */ unsigned char otmsCharSlopeRun[4]; /* +0x0054 74 00 00 00 */ unsigned char otmItalicAngle[4]; /* +0x0058 74 00 00 00 */ unsigned char otmEMSquare[4]; /* +0x005c 75 00 00 00 */ unsigned char otmAscent[4]; /* +0x0060 74 00 00 00 */ unsigned char otmDescent[4]; /* +0x0064 74 00 00 00 */ unsigned char otmLineGap[4]; /* +0x0068 75 00 00 00 */ unsigned char otmsCapEmHeight[4]; /* +0x006c 75 00 00 00 */ unsigned char otmsXHeight[4]; /* +0x0070 75 00 00 00 */ unsigned char otmrcFontBox[16]; /* +0x0074 06 1a 00 00 */ unsigned char otmMacAscent[4]; /* +0x0084 74 00 00 00 */ unsigned char otmMacDescent[4]; /* +0x0088 74 00 00 00 */ unsigned char otmMacLineGap[4]; /* +0x008c 75 00 00 00 */ unsigned char otmusMinimumPPEM[4]; /* +0x0090 75 00 00 00 */ unsigned char otmptSubscriptSize[8]; /* +0x0094 1b 1a 00 00 */ unsigned char otmptSubscriptOffset[8]; /* +0x009c 1b 1a 00 00 */ unsigned char otmptSuperscriptSize[8]; /* +0x00a4 1b 1a 00 00 */ unsigned char otmptSuperscriptOffset[8]; /* +0x00ac 1b 1a 00 00 */ unsigned char otmsStrikeoutSize[4]; /* +0x00b4 75 00 00 00 */ unsigned char otmsStrikeoutPosition[4]; /* +0x00b8 74 00 00 00 */ unsigned char otmsUnderscoreSize[4]; /* +0x00bc 74 00 00 00 */ unsigned char otmsUnderscorePosition[8]; /* +0x00c0 74 00 00 00 */ char *otmpFamilyName; /* +0x00c8 */ char *otmpFaceName; /* +0x00d0 */ char *otmpStyleName; /* +0x00d8 */ char *otmpFullName; /* +0x00e0 */ }; struct _userCLIPFORMAT { long fContext; /* +0x0000 */ }; struct _PS_CPU_QUOTA_QUERY_ENTRY { unsigned long SessionId; /* +0x0000 */ unsigned long Weight; /* +0x0004 */ }; struct _SYSTEM_SESSION_MAPPED_VIEW_INFORMATION { unsigned long long NextEntryOffset; /* +0x0000 */ unsigned long SessionId; /* +0x0008 */ unsigned long ViewFailures; /* +0x000c */ unsigned long long NumberOfBytesAvailable; /* +0x0010 */ unsigned long long NumberOfBytesAvailableContiguous; /* +0x0018 */ }; struct _FILE_OBJECTID_BUFFER { unsigned char ObjectId[16]; /* +0x0000 2d 11 00 00 */ unsigned char BirthVolumeId[16]; /* +0x0010 2d 11 00 00 */ unsigned char BirthObjectId[16]; /* +0x0020 2d 11 00 00 */ /* unsigned char DomainId[-32]; +0x0030 2d 11 00 00 */ unsigned char ExtendedInfo[48]; /* +0x0010 98 24 00 00 */ }; struct _TXFS_SAVEPOINT_INFORMATION { void *KtmTransaction; /* +0x0000 */ unsigned long ActionCode; /* +0x0008 */ unsigned long SavepointId; /* +0x000c */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_REQUEST { unsigned long RequestLevel; /* +0x0000 */ unsigned long RequestFlags; /* +0x0004 */ }; struct _ATOM_BASIC_INFORMATION { unsigned short UsageCount; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned short NameLength; /* +0x0004 */ unsigned char Name[2]; /* +0x0006 ab 19 00 00 */ }; struct _SL_APPX_CACHE_VALUE_DESCRIPTOR { unsigned char HashedName[32]; /* +0x0000 9b 14 00 00 */ unsigned long long Expiration; /* +0x0020 */ unsigned long DataSize; /* +0x0028 */ unsigned char Data[4]; /* +0x002c d7 18 00 00 */ }; struct _RASTERIZER_STATUS { short nSize; /* +0x0000 */ short wFlags; /* +0x0002 */ short nLanguageID; /* +0x0004 */ }; struct tagEMRPOLYTEXTOUTA { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long iGraphicsMode; /* +0x0018 */ unsigned char exScale[4]; /* +0x001c 40 00 00 00 */ unsigned char eyScale[4]; /* +0x0020 40 00 00 00 */ long cStrings; /* +0x0024 */ unsigned char aemrtext[40]; /* +0x0028 aa 24 00 00 */ }; struct _FSCTL_OFFLOAD_WRITE_OUTPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long LengthWritten; /* +0x0008 */ }; struct _SL_APPX_CACHE { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long DataSize; /* +0x0008 */ unsigned long long DataCheckSum; /* +0x0010 */ unsigned char Descriptors[48]; /* +0x0018 b6 24 00 00 */ }; struct _MESSAGE_RESOURCE_BLOCK { unsigned long LowId; /* +0x0000 */ unsigned long HighId; /* +0x0004 */ unsigned long OffsetToEntries; /* +0x0008 */ }; struct _RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_EXTENDED { unsigned long long Size; /* +0x0000 */ unsigned long Format; /* +0x0008 */ unsigned char Frame[24]; /* +0x0010 52 21 00 00 */ void *Extra1; /* +0x0028 */ void *Extra2; /* +0x0030 */ void *Extra3; /* +0x0038 */ void *Extra4; /* +0x0040 */ }; struct tagBITMAPINFOHEADER { unsigned long biSize; /* +0x0000 */ long biWidth; /* +0x0004 */ long biHeight; /* +0x0008 */ unsigned short biPlanes; /* +0x000c */ unsigned short biBitCount; /* +0x000e */ unsigned long biCompression; /* +0x0010 */ unsigned long biSizeImage; /* +0x0014 */ long biXPelsPerMeter; /* +0x0018 */ long biYPelsPerMeter; /* +0x001c */ unsigned long biClrUsed; /* +0x0020 */ unsigned long biClrImportant; /* +0x0024 */ }; struct _SE_AUDIT_INFO { unsigned long Size; /* +0x0000 */ unsigned char AuditType[4]; /* +0x0004 85 16 00 00 */ unsigned char AuditOperation[4]; /* +0x0008 21 16 00 00 */ unsigned long AuditFlags; /* +0x000c */ unsigned char SubsystemName[16]; /* +0x0010 c1 18 00 00 */ unsigned char ObjectTypeName[16]; /* +0x0020 c1 18 00 00 */ unsigned char ObjectName[16]; /* +0x0030 c1 18 00 00 */ void *HandleId; /* +0x0040 */ unsigned char TransactionId[8]; /* +0x0048 26 1c 00 00 */ unsigned char OperationId[8]; /* +0x0050 d2 24 00 00 */ unsigned char ObjectCreation; /* +0x0058 */ unsigned char GenerateOnClose; /* +0x0059 */ }; struct _JOBOBJECT_EXTENDED_ACCOUNTING_INFORMATION { unsigned char BasicInfo[48]; /* +0x0000 d5 24 00 00 */ unsigned char IoInfo[48]; /* +0x0030 d6 24 00 00 */ unsigned char DiskIoInfo[40]; /* +0x0060 a1 1e 00 00 */ unsigned long long ContextSwitches; /* +0x0088 */ unsigned char TotalCycleTime[8]; /* +0x0090 0e 19 00 00 */ }; struct _SYSTEM_POOLTAG { /* unsigned char Tag[0]; +0x0000 a3 10 00 00 */ unsigned long TagUlong; /* +0x0000 */ unsigned long PagedAllocs; /* +0x0004 */ unsigned long PagedFrees; /* +0x0008 */ unsigned long long PagedUsed; /* +0x0010 */ unsigned long NonPagedAllocs; /* +0x0018 */ unsigned long NonPagedFrees; /* +0x001c */ unsigned long long NonPagedUsed; /* +0x0020 */ }; struct _RC_CONFIG { unsigned long dwSignature; /* +0x0000 */ unsigned long dwLength; /* +0x0004 */ unsigned long dwRCConfigVersion; /* +0x0008 */ unsigned long dwFilePathType; /* +0x000c */ unsigned long dwFileType; /* +0x0010 */ unsigned long dwSystemAttributes; /* +0x0014 */ unsigned long dwUltimateFallbackLocation; /* +0x0018 */ unsigned char dwServiceCheckSum[16]; /* +0x001c 2b 23 00 00 */ unsigned char dwChecksum[16]; /* +0x002c 2b 23 00 00 */ unsigned long dwReserved1; /* +0x003c */ unsigned long dwReserved2; /* +0x0040 */ unsigned long dwMUIFileNameOffset; /* +0x0044 */ unsigned long dwMUIFileNameLength; /* +0x0048 */ unsigned long dwMUIFilePathOffset; /* +0x004c */ unsigned long dwMUIFilePathLength; /* +0x0050 */ unsigned long dwMainResNameTypesOffset; /* +0x0054 */ unsigned long dwMainResNameTypesLength; /* +0x0058 */ unsigned long dwMainResIDTypesOffset; /* +0x005c */ unsigned long dwMainResIDTypesLength; /* +0x0060 */ unsigned long dwMUIResNameTypesOffset; /* +0x0064 */ unsigned long dwMUIResNameTypesLength; /* +0x0068 */ unsigned long dwMUIResIDTypesOffset; /* +0x006c */ unsigned long dwMUIResIDTypesLength; /* +0x0070 */ unsigned long dwLanguageOffset; /* +0x0074 */ unsigned long dwLanguageLength; /* +0x0078 */ unsigned long dwUltimateFallbackLanguageOffset; /* +0x007c */ unsigned long dwUltimateFallbackLanguageLength; /* +0x0080 */ }; struct tagEMRSTRETCHDIBITS { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long xSrc; /* +0x0020 */ long ySrc; /* +0x0024 */ long cxSrc; /* +0x0028 */ long cySrc; /* +0x002c */ unsigned long offBmiSrc; /* +0x0030 */ unsigned long cbBmiSrc; /* +0x0034 */ unsigned long offBitsSrc; /* +0x0038 */ unsigned long cbBitsSrc; /* +0x003c */ unsigned long iUsageSrc; /* +0x0040 */ unsigned long dwRop; /* +0x0044 */ long cxDest; /* +0x0048 */ long cyDest; /* +0x004c */ }; struct __GENERIC_BINDING_INFO { void *pObj; /* +0x0000 */ unsigned char Size[8]; /* +0x0008 75 00 00 00 */ unsigned char pfnBind[8]; /* +0x0010 c0 23 00 00 */ unsigned char pfnUnbind[8]; /* +0x0018 21 13 00 00 */ }; struct _WNF_DELIVERY_DESCRIPTOR { unsigned char StateName[8]; /* +0x0000 9f 19 00 00 */ unsigned long ChangeStamp; /* +0x0008 */ unsigned long DeliveryFlag; /* +0x000c */ unsigned long DeliveryState; /* +0x0010 */ unsigned long ReliableRetryDelay; /* +0x0014 */ unsigned long BatchRetry; /* +0x0018 */ unsigned long StateDataSize; /* +0x001c */ unsigned long EventMask; /* +0x0020 */ unsigned char TypeId[16]; /* +0x0024 03 25 00 00 */ unsigned long StateDataOffset; /* +0x0034 */ }; struct _TRIVERTEX { long x; /* +0x0000 */ long y; /* +0x0004 */ unsigned short Red; /* +0x0008 */ unsigned short Green; /* +0x000a */ unsigned short Blue; /* +0x000c */ unsigned short Alpha; /* +0x000e */ }; struct _PUBLIC_OBJECT_BASIC_INFORMATION { unsigned long Attributes; /* +0x0000 */ unsigned long GrantedAccess; /* +0x0004 */ unsigned long HandleCount; /* +0x0008 */ unsigned long PointerCount; /* +0x000c */ unsigned char Reserved[40]; /* +0x0010 47 25 00 00 */ }; struct _FSCTL_OFFLOAD_READ_OUTPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long TransferLength; /* +0x0008 */ unsigned char Token[512]; /* +0x0010 c4 22 00 00 */ }; struct _SYSTEM_PROCESSOR_INFORMATION { unsigned short ProcessorArchitecture; /* +0x0000 */ unsigned short ProcessorLevel; /* +0x0002 */ unsigned short ProcessorRevision; /* +0x0004 */ unsigned short MaximumProcessors; /* +0x0006 */ unsigned long ProcessorFeatureBits; /* +0x0008 */ }; struct _MEMORY_BASIC_INFORMATION { void *BaseAddress; /* +0x0000 */ void *AllocationBase; /* +0x0008 */ unsigned long AllocationProtect; /* +0x0010 */ unsigned long long RegionSize; /* +0x0018 */ unsigned long State; /* +0x0020 */ unsigned long Protect; /* +0x0024 */ unsigned long Type; /* +0x0028 */ }; struct DISPLAYCONFIG_TARGET_DEVICE_NAME_FLAGS { /* unsigned char friendlyNameFromEdid[0]; +0x0000 52 25 00 00 */ /* unsigned char friendlyNameForced[0]; +0x0000 53 25 00 00 */ /* unsigned char edidIdsValid[0]; +0x0000 54 25 00 00 */ /* unsigned char reserved[0]; +0x0000 55 25 00 00 */ unsigned char value[4]; /* +0x0000 75 00 00 00 */ }; struct _OUTLINETEXTMETRICW { unsigned char otmSize[4]; /* +0x0000 75 00 00 00 */ unsigned char otmTextMetrics[60]; /* +0x0004 58 25 00 00 */ unsigned char otmFiller; /* +0x0040 */ unsigned char otmPanoseNumber[11]; /* +0x0041 4b 21 00 00 */ unsigned char otmfsSelection[4]; /* +0x004c 75 00 00 00 */ unsigned char otmfsType[4]; /* +0x0050 75 00 00 00 */ unsigned char otmsCharSlopeRise[4]; /* +0x0054 74 00 00 00 */ unsigned char otmsCharSlopeRun[4]; /* +0x0058 74 00 00 00 */ unsigned char otmItalicAngle[4]; /* +0x005c 74 00 00 00 */ unsigned char otmEMSquare[4]; /* +0x0060 75 00 00 00 */ unsigned char otmAscent[4]; /* +0x0064 74 00 00 00 */ unsigned char otmDescent[4]; /* +0x0068 74 00 00 00 */ unsigned char otmLineGap[4]; /* +0x006c 75 00 00 00 */ unsigned char otmsCapEmHeight[4]; /* +0x0070 75 00 00 00 */ unsigned char otmsXHeight[4]; /* +0x0074 75 00 00 00 */ unsigned char otmrcFontBox[16]; /* +0x0078 06 1a 00 00 */ unsigned char otmMacAscent[4]; /* +0x0088 74 00 00 00 */ unsigned char otmMacDescent[4]; /* +0x008c 74 00 00 00 */ unsigned char otmMacLineGap[4]; /* +0x0090 75 00 00 00 */ unsigned char otmusMinimumPPEM[4]; /* +0x0094 75 00 00 00 */ unsigned char otmptSubscriptSize[8]; /* +0x0098 1b 1a 00 00 */ unsigned char otmptSubscriptOffset[8]; /* +0x00a0 1b 1a 00 00 */ unsigned char otmptSuperscriptSize[8]; /* +0x00a8 1b 1a 00 00 */ unsigned char otmptSuperscriptOffset[8]; /* +0x00b0 1b 1a 00 00 */ unsigned char otmsStrikeoutSize[4]; /* +0x00b8 75 00 00 00 */ unsigned char otmsStrikeoutPosition[4]; /* +0x00bc 74 00 00 00 */ unsigned char otmsUnderscoreSize[4]; /* +0x00c0 74 00 00 00 */ unsigned char otmsUnderscorePosition[4]; /* +0x00c4 74 00 00 00 */ char *otmpFamilyName; /* +0x00c8 */ char *otmpFaceName; /* +0x00d0 */ char *otmpStyleName; /* +0x00d8 */ char *otmpFullName; /* +0x00e0 */ }; struct tagRAWKEYBOARD { unsigned short MakeCode; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned short Reserved; /* +0x0004 */ unsigned short VKey; /* +0x0006 */ unsigned char Message[4]; /* +0x0008 75 00 00 00 */ unsigned long ExtraInformation; /* +0x000c */ }; struct _SYSTEM_BIGPOOL_ENTRY { void *VirtualAddress; /* +0x0000 */ unsigned char NonPaged[8]; /* +0x0000 ef 18 00 00 */ unsigned long long SizeInBytes; /* +0x0008 */ /* unsigned char Tag[0]; +0x0010 a3 10 00 00 */ unsigned long TagUlong; /* +0x0010 */ }; struct _RTL_CRITICAL_SECTION_DEBUG64 { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned long long CriticalSection; /* +0x0008 */ unsigned char ProcessLocksList[16]; /* +0x0010 65 25 00 00 */ unsigned long EntryCount; /* +0x0020 */ unsigned long ContentionCount; /* +0x0024 */ unsigned char Spare[8]; /* +0x0028 cc 1f 00 00 */ }; struct _DOCINFOA { unsigned char cbSize[8]; /* +0x0000 74 00 00 00 */ unsigned char lpszDocName[8]; /* +0x0008 4f 10 00 00 */ unsigned char lpszOutput[8]; /* +0x0010 4f 10 00 00 */ unsigned char lpszDatatype[8]; /* +0x0018 4f 10 00 00 */ unsigned long fwType; /* +0x0020 */ }; struct tagEMRSELECTCLIPPATH { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long iMode; /* +0x0008 */ }; struct _DEFERRED_REPAIR_EXTENT { unsigned char VolumeByteOffset[8]; /* +0x0000 0e 19 00 00 */ unsigned long Length; /* +0x0008 */ unsigned long RepairFlags; /* +0x000c */ }; struct _SYSTEM_MEMORY_TOPOLOGY_INFORMATION { unsigned long long NumberOfRuns; /* +0x0000 */ unsigned long NumberOfNodes; /* +0x0008 */ unsigned long NumberOfChannels; /* +0x000c */ unsigned char Run[32]; /* +0x0010 74 25 00 00 */ }; struct tagICEXYZTRIPLE { unsigned char ciexyzRed[12]; /* +0x0000 79 25 00 00 */ unsigned char ciexyzGreen[12]; /* +0x000c 79 25 00 00 */ unsigned char ciexyzBlue[12]; /* +0x0018 79 25 00 00 */ }; struct _RPC_BINDING_HANDLE_SECURITY_V1_W { unsigned long Version; /* +0x0000 */ unsigned short *ServerPrincName; /* +0x0008 */ unsigned long AuthnLevel; /* +0x0010 */ unsigned long AuthnSvc; /* +0x0014 */ unsigned char AuthIdentity[8]; /* +0x0018 7e 25 00 00 */ unsigned char SecurityQos[8]; /* +0x0020 80 25 00 00 */ }; struct _TOKEN_SOURCE { unsigned char SourceName[8]; /* +0x0000 83 25 00 00 */ unsigned char SourceIdentifier[8]; /* +0x0008 90 1e 00 00 */ }; struct _KERNEL_USER_TIMES { unsigned char CreateTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char ExitTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char KernelTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char UserTime[8]; /* +0x0018 0e 19 00 00 */ }; struct _DECRYPTION_STATUS_BUFFER { unsigned char NoEncryptedStreams; /* +0x0000 */ }; struct _SYSTEM_HANDLE_INFORMATION_EX { unsigned long long NumberOfHandles; /* +0x0000 */ unsigned long long Reserved; /* +0x0008 */ unsigned char Handles[40]; /* +0x0010 9e 25 00 00 */ }; struct _BLENDFUNCTION { unsigned char BlendOp; /* +0x0000 */ unsigned char BlendFlags; /* +0x0001 */ unsigned char SourceConstantAlpha; /* +0x0002 */ unsigned char AlphaFormat; /* +0x0003 */ }; struct _SERVICE_RUNLEVEL_INFO { unsigned long eLowestRunLevel; /* +0x0000 */ }; struct _RPC_PROTSEQ_VECTORW { unsigned char Count[8]; /* +0x0000 75 00 00 00 */ unsigned char Protseq[8]; /* +0x0008 a7 25 00 00 */ }; struct __PUBLIC_OBJECT_TYPE_INFORMATION { unsigned char TypeName[16]; /* +0x0000 c1 18 00 00 */ unsigned char Reserved[88]; /* +0x0010 d5 25 00 00 */ }; struct _SD_CHANGE_MACHINE_SID_INPUT { unsigned short CurrentMachineSIDOffset; /* +0x0000 */ unsigned short CurrentMachineSIDLength; /* +0x0002 */ unsigned short NewMachineSIDOffset; /* +0x0004 */ unsigned short NewMachineSIDLength; /* +0x0006 */ }; struct tagGESTURECONFIG { unsigned long dwID; /* +0x0000 */ unsigned long dwWant; /* +0x0004 */ unsigned long dwBlock; /* +0x0008 */ }; struct _PS_ATTRIBUTE { unsigned long long Attribute; /* +0x0000 */ unsigned long long Size; /* +0x0008 */ unsigned long long Value; /* +0x0010 */ void *ValuePtr; /* +0x0010 */ unsigned long long *ReturnLength; /* +0x0018 */ }; struct _FILE_SFIO_RESERVE_INFORMATION { unsigned long RequestsPerPeriod; /* +0x0000 */ unsigned long Period; /* +0x0004 */ unsigned char RetryFailures; /* +0x0008 */ unsigned char Discardable; /* +0x0009 */ unsigned long RequestSize; /* +0x000c */ unsigned long NumOutstandingRequests; /* +0x0010 */ }; struct _MEMORY_WORKING_SET_BLOCK { /* unsigned char Protection[0]; +0x0000 04 26 00 00 */ /* unsigned char ShareCount[0]; +0x0000 05 26 00 00 */ /* unsigned char Shared[0]; +0x0000 06 26 00 00 */ /* unsigned char Node[0]; +0x0000 07 26 00 00 */ unsigned char VirtualPage[8]; /* +0x0000 08 26 00 00 */ }; struct _TRANSACTION_BIND_INFORMATION { void *TmHandle; /* +0x0000 */ }; struct _FILE_SET_SPARSE_BUFFER { unsigned char SetSparse; /* +0x0000 */ }; struct _PLUGPLAY_CONTROL_STATUS_DATA { unsigned char DeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned long Operation; /* +0x0010 */ unsigned long DeviceStatus; /* +0x0014 */ unsigned long DeviceProblem; /* +0x0018 */ unsigned long Flags; /* +0x001c */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_INFORMATION { unsigned char IdleTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char KernelTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char UserTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char DpcTime[8]; /* +0x0018 0e 19 00 00 */ unsigned char InterruptTime[8]; /* +0x0020 0e 19 00 00 */ unsigned long InterruptCount; /* +0x0028 */ }; struct _SYSTEM_PROCESSOR_IDLE_INFORMATION { unsigned long long IdleTime; /* +0x0000 */ unsigned long long C1Time; /* +0x0008 */ unsigned long long C2Time; /* +0x0010 */ unsigned long long C3Time; /* +0x0018 */ unsigned long C1Transitions; /* +0x0020 */ unsigned long C2Transitions; /* +0x0024 */ unsigned long C3Transitions; /* +0x0028 */ unsigned long Padding; /* +0x002c */ }; struct tagENUMTEXTMETRICA { unsigned char etmNewTextMetricEx[96]; /* +0x0000 37 26 00 00 */ unsigned char etmAxesList[392]; /* +0x0060 38 26 00 00 */ }; struct _FIBER { void *FiberData; /* +0x0000 */ unsigned char ExceptionList[8]; /* +0x0008 3d 26 00 00 */ void *StackBase; /* +0x0010 */ void *StackLimit; /* +0x0018 */ void *DeallocationStack; /* +0x0020 */ unsigned char FiberContext[1232]; /* +0x0030 1c 19 00 00 */ unsigned char Wx86Tib[8]; /* +0x0500 3f 26 00 00 */ unsigned char ActivationContextStackPointer[8]; /* +0x0508 41 26 00 00 */ void *FlsData; /* +0x0510 */ unsigned long GuaranteedStackBytes; /* +0x0518 */ unsigned short TebFlags; /* +0x051c */ unsigned short ReservedPad; /* +0x051e */ }; struct _KAFFINITY_EX { unsigned short Count; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned long Reserved; /* +0x0004 */ unsigned char Bitmap[64]; /* +0x0008 4b 26 00 00 */ }; struct _ASSEMBLY_FILE_DETAILED_INFORMATION { unsigned long ulFlags; /* +0x0000 */ unsigned long ulFilenameLength; /* +0x0004 */ unsigned long ulPathLength; /* +0x0008 */ unsigned char lpFileName[8]; /* +0x0010 27 10 00 00 */ unsigned char lpFilePath[8]; /* +0x0018 27 10 00 00 */ }; struct _RTL_SRWLOCK { /* unsigned char Locked[0]; +0x0000 ef 18 00 00 */ /* unsigned char Waiting[0]; +0x0000 50 26 00 00 */ /* unsigned char Waking[0]; +0x0000 51 26 00 00 */ /* unsigned char MultipleShared[0]; +0x0000 52 26 00 00 */ /* unsigned char Shared[0]; +0x0000 53 26 00 00 */ unsigned long long Value; /* +0x0000 */ void *Ptr; /* +0x0000 */ }; struct _SERVICE_NOTIFY_2W { unsigned long dwVersion; /* +0x0000 */ unsigned char pfnNotifyCallback[8]; /* +0x0008 21 11 00 00 */ void *pContext; /* +0x0010 */ unsigned long dwNotificationStatus; /* +0x0018 */ unsigned char ServiceStatus[36]; /* +0x001c 55 20 00 00 */ unsigned long dwNotificationTriggered; /* +0x0040 */ unsigned char pszServiceNames[8]; /* +0x0048 71 06 00 00 */ }; struct _FILE_COMPLETION_INFORMATION { void *Port; /* +0x0000 */ void *Key; /* +0x0008 */ }; struct _KEY_VIRTUALIZATION_INFORMATION { /* unsigned char VirtualizationCandidate[0]; +0x0000 53 19 00 00 */ /* unsigned char VirtualizationEnabled[0]; +0x0000 e3 21 00 00 */ /* unsigned char VirtualTarget[0]; +0x0000 e4 21 00 00 */ /* unsigned char VirtualStore[0]; +0x0000 68 26 00 00 */ /* unsigned char VirtualSource[0]; +0x0000 69 26 00 00 */ unsigned char Reserved[4]; /* +0x0000 6a 26 00 00 */ }; struct _STARTUPINFOEXW { unsigned char StartupInfo[104]; /* +0x0000 ed 20 00 00 */ unsigned char lpAttributeList[8]; /* +0x0068 6e 26 00 00 */ }; struct tagEMR { unsigned long iType; /* +0x0000 */ unsigned long nSize; /* +0x0004 */ }; struct tagEMRCREATEDIBPATTERNBRUSHPT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihBrush; /* +0x0008 */ unsigned long iUsage; /* +0x000c */ unsigned long offBmi; /* +0x0010 */ unsigned long cbBmi; /* +0x0014 */ unsigned long offBits; /* +0x0018 */ unsigned long cbBits; /* +0x001c */ }; struct tagRemSTGMEDIUM { unsigned long tymed; /* +0x0000 */ unsigned long dwHandleType; /* +0x0004 */ unsigned long pData; /* +0x0008 */ unsigned long pUnkForRelease; /* +0x000c */ unsigned long cbData; /* +0x0010 */ unsigned char data[4]; /* +0x0014 d7 18 00 00 */ }; struct _KTMOBJECT_CURSOR { unsigned char LastQuery[16]; /* +0x0000 6b 10 00 00 */ unsigned long ObjectIdCount; /* +0x0010 */ unsigned char ObjectIds[16]; /* +0x0014 7c 26 00 00 */ }; struct _RTL_QUERY_REGISTRY_TABLE { unsigned char QueryRoutine[8]; /* +0x0000 81 26 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned char Name[8]; /* +0x0010 71 06 00 00 */ void *EntryContext; /* +0x0018 */ unsigned long DefaultType; /* +0x0020 */ void *DefaultData; /* +0x0028 */ unsigned long DefaultLength; /* +0x0030 */ }; struct tagPOINTS { short x; /* +0x0000 */ short y; /* +0x0002 */ }; struct tagINPUT { unsigned long type; /* +0x0000 */ /* unsigned char mi[0]; +0x0008 86 26 00 00 */ /* unsigned char ki[0]; +0x0008 87 26 00 00 */ unsigned char hi[32]; /* +0x0008 88 26 00 00 */ }; struct _EISA_MEMORY_TYPE { /* unsigned char ReadWrite[0]; +0x0000 94 26 00 00 */ /* unsigned char Cached[0]; +0x0000 95 26 00 00 */ /* unsigned char Reserved0[0]; +0x0000 96 26 00 00 */ /* unsigned char Type[0]; +0x0000 97 26 00 00 */ /* unsigned char Shared[0]; +0x0000 98 26 00 00 */ /* unsigned char Reserved1[0]; +0x0000 99 26 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 9a 26 00 00 */ }; struct _RTL_TRACE_ENUMERATE { unsigned char Database[8]; /* +0x0000 9e 26 00 00 */ unsigned long Index; /* +0x0008 */ unsigned char Block[8]; /* +0x0010 26 20 00 00 */ }; struct _FILE_LEVEL_TRIM_OUTPUT { unsigned long NumRangesProccessed; /* +0x0000 */ }; struct _KCRM_PROTOCOL_BLOB { unsigned char ProtocolId[16]; /* +0x0000 6b 10 00 00 */ unsigned long StaticInfoLength; /* +0x0010 */ unsigned long TransactionIdInfoLength; /* +0x0014 */ unsigned long Unused1; /* +0x0018 */ unsigned long Unused2; /* +0x001c */ }; struct _FILE_ACCESS_INFORMATION { unsigned long AccessFlags; /* +0x0000 */ }; struct tagEXTLOGFONTW { unsigned char elfLogFont[92]; /* +0x0000 46 20 00 00 */ unsigned char elfFullName[128]; /* +0x005c b7 26 00 00 */ unsigned char elfStyle[64]; /* +0x00dc 89 1f 00 00 */ unsigned long elfVersion; /* +0x011c */ unsigned long elfStyleSize; /* +0x0120 */ unsigned long elfMatch; /* +0x0124 */ unsigned long elfReserved; /* +0x0128 */ unsigned char elfVendorId[4]; /* +0x012c a3 10 00 00 */ unsigned long elfCulture; /* +0x0130 */ unsigned char elfPanose[12]; /* +0x0134 4b 21 00 00 */ }; struct tagPOINTFX { unsigned char x[4]; /* +0x0000 7b 20 00 00 */ unsigned char y[4]; /* +0x0004 7b 20 00 00 */ }; struct _API_SET_VALUE_ENTRY { unsigned long NameOffset; /* +0x0000 */ unsigned long NameLength; /* +0x0004 */ unsigned long ValueOffset; /* +0x0008 */ unsigned long ValueLength; /* +0x000c */ }; struct _DMA_CONFIGURATION_BYTE1 { /* unsigned char Reserved0[0]; +0x0000 de 26 00 00 */ /* unsigned char TransferSize[0]; +0x0000 df 26 00 00 */ /* unsigned char Timing[0]; +0x0000 e0 26 00 00 */ unsigned char Reserved1[1]; /* +0x0000 e1 26 00 00 */ }; struct _COMMPROP { unsigned short wPacketLength; /* +0x0000 */ unsigned short wPacketVersion; /* +0x0002 */ unsigned long dwServiceMask; /* +0x0004 */ unsigned long dwReserved1; /* +0x0008 */ unsigned long dwMaxTxQueue; /* +0x000c */ unsigned long dwMaxRxQueue; /* +0x0010 */ unsigned long dwMaxBaud; /* +0x0014 */ unsigned long dwProvSubType; /* +0x0018 */ unsigned long dwProvCapabilities; /* +0x001c */ unsigned long dwSettableParams; /* +0x0020 */ unsigned long dwSettableBaud; /* +0x0024 */ unsigned short wSettableData; /* +0x0028 */ unsigned short wSettableStopParity; /* +0x002a */ unsigned long dwCurrentTxQueue; /* +0x002c */ unsigned long dwCurrentRxQueue; /* +0x0030 */ unsigned long dwProvSpec1; /* +0x0034 */ unsigned long dwProvSpec2; /* +0x0038 */ unsigned char wcProvChar[4]; /* +0x003c ab 19 00 00 */ }; struct _LDR_DATA_TABLE_ENTRY32 { unsigned char InLoadOrderLinks[8]; /* +0x0000 ee 26 00 00 */ unsigned char InMemoryOrderLinks[8]; /* +0x0008 ee 26 00 00 */ unsigned char InInitializationOrderLinks[8]; /* +0x0010 ee 26 00 00 */ unsigned long DllBase; /* +0x0018 */ unsigned long EntryPoint; /* +0x001c */ unsigned long SizeOfImage; /* +0x0020 */ unsigned char FullDllName[8]; /* +0x0024 f1 20 00 00 */ unsigned char BaseDllName[8]; /* +0x002c f1 20 00 00 */ unsigned long Flags; /* +0x0034 */ unsigned short LoadCount; /* +0x0038 */ unsigned short TlsIndex; /* +0x003a */ /* unsigned char HashLinks[0]; +0x003c ee 26 00 00 */ unsigned long SectionPointer; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned long TimeDateStamp; /* +0x0044 */ unsigned long LoadedImports; /* +0x0044 */ }; struct _FILE_QUOTA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long SidLength; /* +0x0004 */ unsigned char ChangeTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char QuotaUsed[8]; /* +0x0010 0e 19 00 00 */ unsigned char QuotaThreshold[8]; /* +0x0018 0e 19 00 00 */ unsigned char QuotaLimit[8]; /* +0x0020 0e 19 00 00 */ unsigned char Sid[16]; /* +0x0028 f1 26 00 00 */ }; struct _PLUGPLAY_CONTROL_CONFLICT_LIST { unsigned long Reserved1; /* +0x0000 */ unsigned long Reserved2; /* +0x0004 */ unsigned long ConflictsCounted; /* +0x0008 */ unsigned long ConflictsListed; /* +0x000c */ unsigned long RequiredBufferSize; /* +0x0010 */ unsigned char ConflictEntry[40]; /* +0x0018 f5 26 00 00 */ }; struct _WIN32_MEMORY_RANGE_ENTRY { void *VirtualAddress; /* +0x0000 */ unsigned long long NumberOfBytes; /* +0x0008 */ }; struct tagPAINTSTRUCT { unsigned char hdc[8]; /* +0x0000 06 27 00 00 */ unsigned char fErase[4]; /* +0x0008 74 00 00 00 */ unsigned char rcPaint[16]; /* +0x000c 06 1a 00 00 */ unsigned char fRestore[4]; /* +0x001c 74 00 00 00 */ unsigned char fIncUpdate[4]; /* +0x0020 74 00 00 00 */ unsigned char rgbReserved[36]; /* +0x0024 9b 14 00 00 */ }; struct _DISCDLGSTRUCTA { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[8]; /* +0x0008 97 13 00 00 */ char *lpLocalName; /* +0x0010 */ char *lpRemoteName; /* +0x0018 */ unsigned long dwFlags; /* +0x0020 */ }; struct _DCB { unsigned long DCBlength; /* +0x0000 */ unsigned long BaudRate; /* +0x0004 */ /* unsigned char fBinary[0]; +0x0008 53 19 00 00 */ /* unsigned char fParity[0]; +0x0008 e3 21 00 00 */ /* unsigned char fOutxCtsFlow[0]; +0x0008 e4 21 00 00 */ /* unsigned char fOutxDsrFlow[0]; +0x0008 68 26 00 00 */ /* unsigned char fDtrControl[0]; +0x0008 15 27 00 00 */ /* unsigned char fDsrSensitivity[0]; +0x0008 16 27 00 00 */ /* unsigned char fTXContinueOnXoff[0]; +0x0008 17 27 00 00 */ /* unsigned char fOutX[0]; +0x0008 18 27 00 00 */ /* unsigned char fInX[0]; +0x0008 19 27 00 00 */ /* unsigned char fErrorChar[0]; +0x0008 1a 27 00 00 */ /* unsigned char fNull[0]; +0x0008 1b 27 00 00 */ /* unsigned char fRtsControl[0]; +0x0008 1c 27 00 00 */ /* unsigned char fAbortOnError[0]; +0x0008 1d 27 00 00 */ unsigned char fDummy2[4]; /* +0x0008 1e 27 00 00 */ unsigned short wReserved; /* +0x000c */ unsigned short XonLim; /* +0x000e */ unsigned short XoffLim; /* +0x0010 */ unsigned char ByteSize; /* +0x0012 */ unsigned char Parity; /* +0x0013 */ unsigned char StopBits; /* +0x0014 */ char XonChar; /* +0x0015 */ char XoffChar; /* +0x0016 */ char ErrorChar; /* +0x0017 */ char EofChar; /* +0x0018 */ char EvtChar; /* +0x0019 */ unsigned short wReserved1; /* +0x001a */ }; struct _SINGLE_LIST_ENTRY { unsigned char Next[8]; /* +0x0000 40 23 00 00 */ }; struct tagEMREXCLUDECLIPRECT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclClip[16]; /* +0x0008 b5 18 00 00 */ }; struct tagEMRSETDIBITSTODEVICE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long xSrc; /* +0x0020 */ long ySrc; /* +0x0024 */ long cxSrc; /* +0x0028 */ long cySrc; /* +0x002c */ unsigned long offBmiSrc; /* +0x0030 */ unsigned long cbBmiSrc; /* +0x0034 */ unsigned long offBitsSrc; /* +0x0038 */ unsigned long cbBitsSrc; /* +0x003c */ unsigned long iUsageSrc; /* +0x0040 */ unsigned long iStartScan; /* +0x0044 */ unsigned long cScans; /* +0x0048 */ }; struct _HEAP_INFORMATION { unsigned long long Address; /* +0x0000 */ unsigned long Mode; /* +0x0008 */ unsigned long long ReserveSize; /* +0x0010 */ unsigned long long CommitSize; /* +0x0018 */ unsigned long long FirstRegionInformationOffset; /* +0x0020 */ unsigned long long NextHeapInformationOffset; /* +0x0028 */ }; struct _RPC_SECURITY_QOS_V3_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct tagEXCEPINFO { unsigned short wCode; /* +0x0000 */ unsigned short wReserved; /* +0x0002 */ unsigned char bstrSource[8]; /* +0x0008 71 06 00 00 */ unsigned char bstrDescription[8]; /* +0x0010 71 06 00 00 */ unsigned char bstrHelpFile[8]; /* +0x0018 71 06 00 00 */ unsigned long dwHelpContext; /* +0x0020 */ void *pvReserved; /* +0x0028 */ unsigned char pfnDeferredFillIn[8]; /* +0x0030 42 27 00 00 */ long scode; /* +0x0038 */ }; struct _WIN32_FIND_DATAW { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 0d 10 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 0d 10 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 0d 10 00 00 */ unsigned long nFileSizeHigh; /* +0x001c */ unsigned long nFileSizeLow; /* +0x0020 */ unsigned long dwReserved0; /* +0x0024 */ unsigned long dwReserved1; /* +0x0028 */ unsigned char cFileName[520]; /* +0x002c 0d 21 00 00 */ unsigned char cAlternateFileName[28]; /* +0x0234 46 27 00 00 */ }; struct _KLDR_DATA_TABLE_ENTRY { unsigned char InLoadOrderLinks[16]; /* +0x0000 7d 1a 00 00 */ void *ExceptionTable; /* +0x0010 */ unsigned long ExceptionTableSize; /* +0x0018 */ void *GpValue; /* +0x0020 */ unsigned char NonPagedDebugInfo[8]; /* +0x0028 4e 27 00 00 */ void *DllBase; /* +0x0030 */ void *EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 c1 18 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 c1 18 00 00 */ unsigned long Flags; /* +0x0068 */ unsigned short LoadCount; /* +0x006c */ unsigned short __Unused5; /* +0x006e */ void *SectionPointer; /* +0x0070 */ unsigned long CheckSum; /* +0x0078 */ unsigned long CoverageSectionSize; /* +0x007c */ void *CoverageSection; /* +0x0080 */ void *LoadedImports; /* +0x0088 */ void *PatchInformation; /* +0x0090 */ unsigned long SizeOfImageNotRounded; /* +0x0098 */ unsigned long TimeDateStamp; /* +0x009c */ }; struct _WNF_STATE_NAME { unsigned char Data[8]; /* +0x0000 cc 1f 00 00 */ }; struct _GRADIENT_TRIANGLE { unsigned long Vertex1; /* +0x0000 */ unsigned long Vertex2; /* +0x0004 */ unsigned long Vertex3; /* +0x0008 */ }; struct _MODEMSETTINGS { unsigned long dwActualSize; /* +0x0000 */ unsigned long dwRequiredSize; /* +0x0004 */ unsigned long dwDevSpecificOffset; /* +0x0008 */ unsigned long dwDevSpecificSize; /* +0x000c */ unsigned long dwCallSetupFailTimer; /* +0x0010 */ unsigned long dwInactivityTimeout; /* +0x0014 */ unsigned long dwSpeakerVolume; /* +0x0018 */ unsigned long dwSpeakerMode; /* +0x001c */ unsigned long dwPreferredModemOptions; /* +0x0020 */ unsigned long dwNegotiatedModemOptions; /* +0x0024 */ unsigned long dwNegotiatedDCERate; /* +0x0028 */ unsigned char abVariablePortion[4]; /* +0x002c d7 18 00 00 */ }; struct _IO_ERROR_LOG_MESSAGE { unsigned short Type; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned short DriverNameLength; /* +0x0004 */ unsigned char TimeStamp[8]; /* +0x0008 0e 19 00 00 */ unsigned long DriverNameOffset; /* +0x0010 */ unsigned char EntryData[48]; /* +0x0018 59 27 00 00 */ }; struct _CM_RESOURCE_LIST { unsigned long Count; /* +0x0000 */ unsigned char List[36]; /* +0x0004 5f 27 00 00 */ }; struct _PLUGPLAY_CONTROL_INTERFACE_LIST_DATA { unsigned char DeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned char InterfaceGuid[8]; /* +0x0010 26 1c 00 00 */ unsigned char InterfaceList[8]; /* +0x0018 71 06 00 00 */ unsigned long InterfaceListSize; /* +0x0020 */ unsigned long Flags; /* +0x0024 */ }; struct _FILETIME { unsigned long dwLowDateTime; /* +0x0000 */ unsigned long dwHighDateTime; /* +0x0004 */ }; struct _LOOKUP_STREAM_FROM_CLUSTER_OUTPUT { unsigned long Offset; /* +0x0000 */ unsigned long NumberOfMatches; /* +0x0004 */ unsigned long BufferSizeRequired; /* +0x0008 */ }; struct _CACHE_RELATIONSHIP { unsigned char Level; /* +0x0000 */ unsigned char Associativity; /* +0x0001 */ unsigned short LineSize; /* +0x0002 */ unsigned long CacheSize; /* +0x0004 */ unsigned char Type[4]; /* +0x0008 93 17 00 00 */ unsigned char Reserved[20]; /* +0x000c a4 10 00 00 */ unsigned char GroupMask[16]; /* +0x0020 0f 23 00 00 */ }; struct _NDR_CS_SIZE_CONVERT_ROUTINES { unsigned char pfnNetSize[8]; /* +0x0000 79 27 00 00 */ unsigned char pfnToNetCs[8]; /* +0x0008 7c 27 00 00 */ unsigned char pfnLocalSize[8]; /* +0x0010 79 27 00 00 */ unsigned char pfnFromNetCs[8]; /* +0x0018 7f 27 00 00 */ }; struct _IMAGE_ROM_HEADERS { unsigned char FileHeader[20]; /* +0x0000 01 22 00 00 */ unsigned char OptionalHeader[56]; /* +0x0014 82 27 00 00 */ }; struct _LDR_ENUM_RESOURCE_ENTRY:: { unsigned long long NameOrId; /* +0x0000 */ /* unsigned char Name[0]; +0x0000 8a 27 00 00 */ unsigned short Id; /* +0x0000 */ unsigned short NameIsPresent; /* +0x0002 */ }; struct tagSCROLLBARINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcScrollBar[16]; /* +0x0004 06 1a 00 00 */ unsigned char dxyLineButton[4]; /* +0x0014 74 00 00 00 */ unsigned char xyThumbTop[4]; /* +0x0018 74 00 00 00 */ unsigned char xyThumbBottom[4]; /* +0x001c 74 00 00 00 */ unsigned char reserved[4]; /* +0x0020 74 00 00 00 */ unsigned char rgstate[24]; /* +0x0024 8d 27 00 00 */ }; struct _KNONVOLATILE_CONTEXT_POINTERS { /* unsigned char FloatingContext[0]; +0x0000 91 27 00 00 */ unsigned char Xmm0[8]; /* +0x0000 90 27 00 00 */ unsigned char Xmm1[8]; /* +0x0008 90 27 00 00 */ unsigned char Xmm2[8]; /* +0x0010 90 27 00 00 */ unsigned char Xmm3[8]; /* +0x0018 90 27 00 00 */ unsigned char Xmm4[8]; /* +0x0020 90 27 00 00 */ unsigned char Xmm5[8]; /* +0x0028 90 27 00 00 */ unsigned char Xmm6[8]; /* +0x0030 90 27 00 00 */ unsigned char Xmm7[8]; /* +0x0038 90 27 00 00 */ unsigned char Xmm8[8]; /* +0x0040 90 27 00 00 */ unsigned char Xmm9[8]; /* +0x0048 90 27 00 00 */ unsigned char Xmm10[8]; /* +0x0050 90 27 00 00 */ unsigned char Xmm11[8]; /* +0x0058 90 27 00 00 */ unsigned char Xmm12[8]; /* +0x0060 90 27 00 00 */ unsigned char Xmm13[8]; /* +0x0068 90 27 00 00 */ unsigned char Xmm14[8]; /* +0x0070 90 27 00 00 */ unsigned char Xmm15[8]; /* +0x0078 90 27 00 00 */ /* unsigned char IntegerContext[0]; +0x0080 92 27 00 00 */ unsigned long long *Rax; /* +0x0080 */ unsigned long long *Rcx; /* +0x0088 */ unsigned long long *Rdx; /* +0x0090 */ unsigned long long *Rbx; /* +0x0098 */ unsigned long long *Rsp; /* +0x00a0 */ unsigned long long *Rbp; /* +0x00a8 */ unsigned long long *Rsi; /* +0x00b0 */ unsigned long long *Rdi; /* +0x00b8 */ unsigned long long *R8; /* +0x00c0 */ unsigned long long *R9; /* +0x00c8 */ unsigned long long *R10; /* +0x00d0 */ unsigned long long *R11; /* +0x00d8 */ unsigned long long *R12; /* +0x00e0 */ unsigned long long *R13; /* +0x00e8 */ unsigned long long *R14; /* +0x00f0 */ unsigned long long *R15; /* +0x00f8 */ }; struct _IMAGE_DEBUG_DIRECTORY { unsigned long Characteristics; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long Type; /* +0x000c */ unsigned long SizeOfData; /* +0x0010 */ unsigned long AddressOfRawData; /* +0x0014 */ unsigned long PointerToRawData; /* +0x0018 */ }; struct _SYSTEM_PROCESSOR_MICROCODE_UPDATE_INFORMATION { unsigned long Operation; /* +0x0000 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_A { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ProtocolSequence; /* +0x0008 */ unsigned char *NetworkAddress; /* +0x0010 */ unsigned char *StringEndpoint; /* +0x0018 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_A:: { unsigned char *Reserved; /* +0x0000 */ }; struct _TOKEN_USER { unsigned char User[16]; /* +0x0000 8e 20 00 00 */ }; struct _MUILANGCFGLIST { unsigned char TotalSize[4]; /* +0x0000 75 00 00 00 */ unsigned short NumLanguages; /* +0x0004 */ unsigned short MaxNumLanguages; /* +0x0006 */ unsigned char LanguageConfigs[8]; /* +0x0008 ad 27 00 00 */ }; struct tagVARDESC { long memid; /* +0x0000 */ unsigned char lpstrSchema[8]; /* +0x0008 71 06 00 00 */ unsigned long oInst; /* +0x0010 */ unsigned char lpvarValue[8]; /* +0x0010 a6 21 00 00 */ unsigned char elemdescVar[32]; /* +0x0018 a7 20 00 00 */ unsigned short wVarFlags; /* +0x0038 */ unsigned char varkind[4]; /* +0x003c ab 16 00 00 */ }; struct tagEMRANGLEARC { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char ptlCenter[8]; /* +0x0008 6a 19 00 00 */ unsigned long nRadius; /* +0x0010 */ unsigned char eStartAngle[4]; /* +0x0014 40 00 00 00 */ unsigned char eSweepAngle[4]; /* +0x0018 40 00 00 00 */ }; struct _EVENT_TRACE { unsigned char Header[48]; /* +0x0000 c4 27 00 00 */ unsigned long InstanceId; /* +0x0030 */ unsigned long ParentInstanceId; /* +0x0034 */ unsigned char ParentGuid[16]; /* +0x0038 6b 10 00 00 */ void *MofData; /* +0x0048 */ unsigned long MofLength; /* +0x0050 */ unsigned long ClientContext; /* +0x0054 */ unsigned char BufferContext[4]; /* +0x0054 c5 27 00 00 */ }; struct _VM_COUNTERS { unsigned long long PeakVirtualSize; /* +0x0000 */ unsigned long long VirtualSize; /* +0x0008 */ unsigned long PageFaultCount; /* +0x0010 */ unsigned long long PeakWorkingSetSize; /* +0x0018 */ unsigned long long WorkingSetSize; /* +0x0020 */ unsigned long long QuotaPeakPagedPoolUsage; /* +0x0028 */ unsigned long long QuotaPagedPoolUsage; /* +0x0030 */ unsigned long long QuotaPeakNonPagedPoolUsage; /* +0x0038 */ unsigned long long QuotaNonPagedPoolUsage; /* +0x0040 */ unsigned long long PagefileUsage; /* +0x0048 */ unsigned long long PeakPagefileUsage; /* +0x0050 */ }; struct _SL_KMEM_CACHE { unsigned long TotalSize; /* +0x0000 */ unsigned long SizeOfData; /* +0x0004 */ unsigned long SignatureSize; /* +0x0008 */ unsigned long Flags; /* +0x000c */ unsigned long Version; /* +0x0010 */ unsigned char Descriptors[20]; /* +0x0014 cd 27 00 00 */ }; struct tagEMRSETARCDIRECTION { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long iArcDirection; /* +0x0008 */ }; struct _FILE_PIPE_EVENT_BUFFER { unsigned long NamedPipeState; /* +0x0000 */ unsigned long EntryType; /* +0x0004 */ unsigned long ByteCount; /* +0x0008 */ unsigned long KeyValue; /* +0x000c */ unsigned long NumberRequests; /* +0x0010 */ }; struct _SECTION_IMAGE_INFORMATION32 { unsigned long TransferAddress; /* +0x0000 */ unsigned long ZeroBits; /* +0x0004 */ unsigned long MaximumStackSize; /* +0x0008 */ unsigned long CommittedStackSize; /* +0x000c */ unsigned long SubSystemType; /* +0x0010 */ unsigned short SubSystemMinorVersion; /* +0x0014 */ unsigned short SubSystemMajorVersion; /* +0x0016 */ unsigned long SubSystemVersion; /* +0x0014 */ unsigned long GpValue; /* +0x0018 */ unsigned short ImageCharacteristics; /* +0x001c */ unsigned short DllCharacteristics; /* +0x001e */ unsigned short Machine; /* +0x0020 */ unsigned char ImageContainsCode; /* +0x0022 */ unsigned char ImageFlags; /* +0x0023 */ /* unsigned char ComPlus[0]; +0x0023 94 26 00 00 */ /* unsigned char ImageDynamicallyRelocated[0]; +0x0023 95 26 00 00 */ unsigned char Reserved[1]; /* +0x0023 dd 27 00 00 */ unsigned long LoaderFlags; /* +0x0024 */ unsigned long ImageFileSize; /* +0x0028 */ unsigned long CheckSum; /* +0x002c */ }; struct _RTL_RB_TREE { unsigned char Root[8]; /* +0x0000 e3 27 00 00 */ unsigned char Min[8]; /* +0x0008 e3 27 00 00 */ }; struct _CONNECTDLGSTRUCTA { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[8]; /* +0x0008 97 13 00 00 */ unsigned char lpConnRes[8]; /* +0x0010 3c 26 00 00 */ unsigned long dwFlags; /* +0x0018 */ unsigned long dwDevNum; /* +0x001c */ }; struct _POWER_USER_PRESENCE { unsigned char UserPresence[4]; /* +0x0000 4f 17 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_FQBN_VALUE { unsigned long long Version; /* +0x0000 */ unsigned char Name[16]; /* +0x0008 c1 18 00 00 */ }; struct _THREAD_TLS_INFORMATION { unsigned long Flags; /* +0x0000 */ void *NewTlsData; /* +0x0008 */ void *OldTlsData; /* +0x0008 */ void *ThreadId; /* +0x0010 */ }; struct _THREAD_LAST_SYSCALL_INFORMATION { void *FirstArgument; /* +0x0000 */ unsigned short SystemCallNumber; /* +0x0008 */ }; struct _RTL_PROCESS_LOCK_INFORMATION { void *Address; /* +0x0000 */ unsigned short Type; /* +0x0008 */ unsigned short CreatorBackTraceIndex; /* +0x000a */ void *OwningThread; /* +0x0010 */ long LockCount; /* +0x0018 */ unsigned long ContentionCount; /* +0x001c */ unsigned long EntryCount; /* +0x0020 */ long RecursionCount; /* +0x0024 */ unsigned long NumberOfWaitingShared; /* +0x0028 */ unsigned long NumberOfWaitingExclusive; /* +0x002c */ }; struct _EXCEPTION_DEBUG_INFO { unsigned char ExceptionRecord[152]; /* +0x0000 63 19 00 00 */ unsigned long dwFirstChance; /* +0x0098 */ }; struct tagNEWTEXTMETRICEXA { unsigned char ntmTm[72]; /* +0x0000 18 28 00 00 */ unsigned char ntmFontSig[24]; /* +0x0048 19 28 00 00 */ }; struct _FP_64 { unsigned char W[8]; /* +0x0000 cc 1f 00 00 */ }; struct _REPARSE_POINT_INFORMATION { unsigned short ReparseDataLength; /* +0x0000 */ unsigned short UnparsedNameLength; /* +0x0002 */ }; struct _SL_KMEM_CACHE_VALUE_DESCRIPTOR { unsigned short Size; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ unsigned short Type; /* +0x0004 */ unsigned short DataLength; /* +0x0006 */ unsigned long Attributes; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ unsigned char Name[4]; /* +0x0010 ab 19 00 00 */ }; struct _SECTIONBASICINFO { void *BaseAddress; /* +0x0000 */ unsigned long AllocationAttributes; /* +0x0008 */ unsigned char MaximumSize[8]; /* +0x0010 0e 19 00 00 */ }; struct _TRANSACTION_LIST_ENTRY { unsigned char UOW[16]; /* +0x0000 6b 10 00 00 */ }; struct _MCGEN_TRACE_CONTEXT { unsigned long long RegistrationHandle; /* +0x0000 */ unsigned long long Logger; /* +0x0008 */ unsigned long long MatchAnyKeyword; /* +0x0010 */ unsigned long long MatchAllKeyword; /* +0x0018 */ unsigned long Flags; /* +0x0020 */ unsigned long IsEnabled; /* +0x0024 */ unsigned char Level; /* +0x0028 */ unsigned char Reserve; /* +0x0029 */ unsigned short EnableBitsCount; /* +0x002a */ unsigned long *EnableBitMask; /* +0x0030 */ unsigned char EnableKeyWords[8]; /* +0x0038 4c 28 00 00 */ unsigned char EnableLevel[8]; /* +0x0040 5e 22 00 00 */ }; struct _THREAD_PERFORMANCE_DATA { unsigned short Size; /* +0x0000 */ unsigned short Version; /* +0x0002 */ unsigned char ProcessorNumber[4]; /* +0x0004 4f 28 00 00 */ unsigned long ContextSwitches; /* +0x0008 */ unsigned long HwCountersCount; /* +0x000c */ unsigned char UpdateCount[8]; /* +0x0010 29 21 00 00 */ unsigned long long WaitReasonBitMap; /* +0x0018 */ unsigned long long HardwareCounters; /* +0x0020 */ unsigned char CycleTime[24]; /* +0x0028 50 28 00 00 */ unsigned char HwCounters[384]; /* +0x0040 51 28 00 00 */ }; struct _FILESYSTEM_STATISTICS { unsigned short FileSystemType; /* +0x0000 */ unsigned short Version; /* +0x0002 */ unsigned long SizeOfCompleteStructure; /* +0x0004 */ unsigned long UserFileReads; /* +0x0008 */ unsigned long UserFileReadBytes; /* +0x000c */ unsigned long UserDiskReads; /* +0x0010 */ unsigned long UserFileWrites; /* +0x0014 */ unsigned long UserFileWriteBytes; /* +0x0018 */ unsigned long UserDiskWrites; /* +0x001c */ unsigned long MetaDataReads; /* +0x0020 */ unsigned long MetaDataReadBytes; /* +0x0024 */ unsigned long MetaDataDiskReads; /* +0x0028 */ unsigned long MetaDataWrites; /* +0x002c */ unsigned long MetaDataWriteBytes; /* +0x0030 */ unsigned long MetaDataDiskWrites; /* +0x0034 */ }; struct tagACCEL { unsigned char fVirt; /* +0x0000 */ unsigned short key; /* +0x0002 */ unsigned short cmd; /* +0x0004 */ }; struct _MEMORY_WORKING_SET_EX_BLOCK { /* unsigned char Valid[0]; +0x0000 ef 18 00 00 */ /* unsigned char ShareCount[0]; +0x0000 5a 28 00 00 */ /* unsigned char Win32Protection[0]; +0x0000 5b 28 00 00 */ /* unsigned char Shared[0]; +0x0000 5c 28 00 00 */ /* unsigned char Node[0]; +0x0000 5d 28 00 00 */ /* unsigned char Locked[0]; +0x0000 5e 28 00 00 */ /* unsigned char LargePage[0]; +0x0000 5f 28 00 00 */ /* unsigned char Priority[0]; +0x0000 60 28 00 00 */ /* unsigned char Reserved[0]; +0x0000 61 28 00 00 */ /* unsigned char Bad[0]; +0x0000 62 28 00 00 */ /* unsigned char ReservedUlong[0]; +0x0000 63 28 00 00 */ unsigned char Invalid[8]; /* +0x0000 64 28 00 00 */ }; struct tagLOGFONTW { long lfHeight; /* +0x0000 */ long lfWidth; /* +0x0004 */ long lfEscapement; /* +0x0008 */ long lfOrientation; /* +0x000c */ long lfWeight; /* +0x0010 */ unsigned char lfItalic; /* +0x0014 */ unsigned char lfUnderline; /* +0x0015 */ unsigned char lfStrikeOut; /* +0x0016 */ unsigned char lfCharSet; /* +0x0017 */ unsigned char lfOutPrecision; /* +0x0018 */ unsigned char lfClipPrecision; /* +0x0019 */ unsigned char lfQuality; /* +0x001a */ unsigned char lfPitchAndFamily; /* +0x001b */ unsigned char lfFaceName[64]; /* +0x001c 89 1f 00 00 */ }; struct tagEMRARC { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBox[16]; /* +0x0008 b5 18 00 00 */ unsigned char ptlStart[8]; /* +0x0018 6a 19 00 00 */ unsigned char ptlEnd[8]; /* +0x0020 6a 19 00 00 */ }; struct tagCOPYDATASTRUCT { unsigned long long dwData; /* +0x0000 */ unsigned long cbData; /* +0x0008 */ void *lpData; /* +0x0010 */ }; struct tagMINIMIZEDMETRICS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iWidth[4]; /* +0x0004 74 00 00 00 */ unsigned char iHorzGap[4]; /* +0x0008 74 00 00 00 */ unsigned char iVertGap[4]; /* +0x000c 74 00 00 00 */ unsigned char iArrange[4]; /* +0x0010 74 00 00 00 */ }; struct tagINPUT_MESSAGE_SOURCE { unsigned char deviceType[4]; /* +0x0000 d7 16 00 00 */ unsigned char originId[4]; /* +0x0004 91 18 00 00 */ }; struct _SCOPE_TABLE { unsigned long Count; /* +0x0000 */ }; struct _SCOPE_TABLE:: { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long HandlerAddress; /* +0x0008 */ unsigned long JumpTarget; /* +0x000c */ }; struct _IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long ExceptionHandler; /* +0x0008 */ unsigned long HandlerData; /* +0x000c */ unsigned long PrologEndAddress; /* +0x0010 */ }; struct _SYSTEM_BASIC_PERFORMANCE_INFORMATION { unsigned long long AvailablePages; /* +0x0000 */ unsigned long long CommittedPages; /* +0x0008 */ unsigned long long CommitLimit; /* +0x0010 */ unsigned long long PeakCommitment; /* +0x0018 */ }; struct _EISA_IRQ_CONFIGURATION { unsigned char ConfigurationByte[1]; /* +0x0000 84 28 00 00 */ unsigned char Reserved; /* +0x0001 */ }; struct _RESOURCEMANAGER_BASIC_INFORMATION { unsigned char ResourceManagerId[16]; /* +0x0000 6b 10 00 00 */ unsigned long DescriptionLength; /* +0x0010 */ unsigned char Description[4]; /* +0x0014 ab 19 00 00 */ }; struct tagHELPWININFOA { unsigned char wStructSize[4]; /* +0x0000 74 00 00 00 */ unsigned char x[4]; /* +0x0004 74 00 00 00 */ unsigned char y[4]; /* +0x0008 74 00 00 00 */ unsigned char dx[4]; /* +0x000c 74 00 00 00 */ unsigned char dy[4]; /* +0x0010 74 00 00 00 */ unsigned char wMax[4]; /* +0x0014 74 00 00 00 */ unsigned char rgchMember[4]; /* +0x0018 89 28 00 00 */ }; struct _TRIPLE_LIST { /* unsigned char ControlBits[0]; +0x0000 8e 28 00 00 */ unsigned char CombinedControlBits[8]; /* +0x0000 0f 1c 00 00 */ unsigned char Head[32]; /* +0x0008 c4 20 00 00 */ unsigned char Tail[24]; /* +0x0028 8f 28 00 00 */ unsigned char RemoveCallback[8]; /* +0x0040 e8 27 00 00 */ void *RemoveContext; /* +0x0048 */ unsigned char PendingHead[8]; /* +0x0050 c5 20 00 00 */ unsigned char PendingTailPtr[8]; /* +0x0058 90 28 00 00 */ unsigned long PendingListIndex; /* +0x0060 */ }; struct _TRIPLE_LIST:::: { /* unsigned char SwitchSelectorBit0[0]; +0x0000 22 21 00 00 */ /* unsigned char ActiveListBit0[0]; +0x0000 23 21 00 00 */ /* unsigned char OverflowActiveListBit0[0]; +0x0000 24 21 00 00 */ /* unsigned char SwitchSelectorBit1[0]; +0x0000 25 21 00 00 */ /* unsigned char ActiveListBit1[0]; +0x0000 26 21 00 00 */ /* unsigned char OverflowActiveListBit1[0]; +0x0000 27 21 00 00 */ /* unsigned char ReaderDidTheSwitch[0]; +0x0000 28 21 00 00 */ /* unsigned char Reserved[0]; +0x0000 93 28 00 00 */ /* unsigned char ReaderBusy[0]; +0x0000 94 28 00 00 */ /* unsigned char UpdateReady[0]; +0x0000 95 28 00 00 */ unsigned char OverflowUpdateReady[4]; /* +0x0000 96 28 00 00 */ }; struct _RTLP_PROCESS_REFLECTION_REFLECTION_INFORMATION { void *ReflectionProcessHandle; /* +0x0000 */ void *ReflectionThreadHandle; /* +0x0008 */ unsigned char ReflectionClientId[16]; /* +0x0010 0f 19 00 00 */ }; struct _COMPATIBILITY_CONTEXT_ELEMENT { unsigned char Id[16]; /* +0x0000 6b 10 00 00 */ unsigned char Type[4]; /* +0x0010 9b 17 00 00 */ }; struct tagARRAYDESC { unsigned char tdescElem[16]; /* +0x0000 d2 28 00 00 */ unsigned short cDims; /* +0x0010 */ unsigned char rgbounds[12]; /* +0x0014 d4 28 00 00 */ }; struct _IMAGE_NT_HEADERS { unsigned long Signature; /* +0x0000 */ unsigned char FileHeader[20]; /* +0x0004 01 22 00 00 */ unsigned char OptionalHeader[224]; /* +0x0018 6f 25 00 00 */ }; struct tagENUMLOGFONTEXDVA { unsigned char elfEnumLogfontEx[188]; /* +0x0000 d9 28 00 00 */ unsigned char elfDesignVector[72]; /* +0x00bc da 28 00 00 */ }; struct _SYSTEM_BOOT_GRAPHICS_INFORMATION { unsigned char FrameBuffer[8]; /* +0x0000 0e 19 00 00 */ unsigned long Width; /* +0x0008 */ unsigned long Height; /* +0x000c */ unsigned long PixelStride; /* +0x0010 */ unsigned long Flags; /* +0x0014 */ unsigned char Format[8]; /* +0x0018 eb 16 00 00 */ }; struct _SYSDBG_IO_SPACE { unsigned long long Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ unsigned char InterfaceType[4]; /* +0x0014 df 15 00 00 */ unsigned long BusNumber; /* +0x0018 */ unsigned long AddressSpace; /* +0x001c */ }; struct tagTEXTMETRICW { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar[2]; /* +0x002c 71 00 00 00 */ unsigned char tmLastChar[2]; /* +0x002e 71 00 00 00 */ unsigned char tmDefaultChar[2]; /* +0x0030 71 00 00 00 */ unsigned char tmBreakChar[2]; /* +0x0032 71 00 00 00 */ unsigned char tmItalic; /* +0x0034 */ unsigned char tmUnderlined; /* +0x0035 */ unsigned char tmStruckOut; /* +0x0036 */ unsigned char tmPitchAndFamily; /* +0x0037 */ unsigned char tmCharSet; /* +0x0038 */ }; struct _SCRUB_DATA_OUTPUT { unsigned long Flags; /* +0x0000 */ unsigned long ExtentCount; /* +0x0004 */ unsigned long Status; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ unsigned char ResumeContext[816]; /* +0x0010 cd 1f 00 00 */ unsigned char Extents[16]; /* +0x0340 e8 28 00 00 */ }; struct _OSVERSIONINFOW { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[256]; /* +0x0014 8b 1f 00 00 */ }; struct _LARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ long HighPart; /* +0x0004 */ }; struct _SYSTEM_POOL_INFORMATION { unsigned long long TotalSize; /* +0x0000 */ void *FirstEntry; /* +0x0008 */ unsigned short EntryOverhead; /* +0x0010 */ unsigned char PoolTagPresent; /* +0x0012 */ unsigned char Spare0; /* +0x0013 */ unsigned long NumberOfEntries; /* +0x0014 */ unsigned char Entries[16]; /* +0x0018 f5 28 00 00 */ }; struct _HEAP_SUMMARY { unsigned long cb; /* +0x0000 */ unsigned long long cbAllocated; /* +0x0008 */ unsigned long long cbCommitted; /* +0x0010 */ unsigned long long cbReserved; /* +0x0018 */ unsigned long long cbMaxReserve; /* +0x0020 */ }; struct _COMM_FAULT_OFFSETS { short CommOffset; /* +0x0000 */ short FaultOffset; /* +0x0002 */ }; struct _SYSTEM_PROCESS_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long NumberOfThreads; /* +0x0004 */ unsigned char WorkingSetPrivateSize[8]; /* +0x0008 0e 19 00 00 */ unsigned long HardFaultCount; /* +0x0010 */ unsigned long NumberOfThreadsHighWatermark; /* +0x0014 */ unsigned long long CycleTime; /* +0x0018 */ unsigned char CreateTime[8]; /* +0x0020 0e 19 00 00 */ unsigned char UserTime[8]; /* +0x0028 0e 19 00 00 */ unsigned char KernelTime[8]; /* +0x0030 0e 19 00 00 */ unsigned char ImageName[16]; /* +0x0038 c1 18 00 00 */ long BasePriority; /* +0x0048 */ void *UniqueProcessId; /* +0x0050 */ void *InheritedFromUniqueProcessId; /* +0x0058 */ unsigned long HandleCount; /* +0x0060 */ unsigned long SessionId; /* +0x0064 */ unsigned long long UniqueProcessKey; /* +0x0068 */ unsigned long long PeakVirtualSize; /* +0x0070 */ unsigned long long VirtualSize; /* +0x0078 */ unsigned long PageFaultCount; /* +0x0080 */ unsigned long long PeakWorkingSetSize; /* +0x0088 */ unsigned long long WorkingSetSize; /* +0x0090 */ unsigned long long QuotaPeakPagedPoolUsage; /* +0x0098 */ unsigned long long QuotaPagedPoolUsage; /* +0x00a0 */ unsigned long long QuotaPeakNonPagedPoolUsage; /* +0x00a8 */ unsigned long long QuotaNonPagedPoolUsage; /* +0x00b0 */ unsigned long long PagefileUsage; /* +0x00b8 */ unsigned long long PeakPagefileUsage; /* +0x00c0 */ unsigned long long PrivatePageCount; /* +0x00c8 */ unsigned char ReadOperationCount[8]; /* +0x00d0 0e 19 00 00 */ unsigned char WriteOperationCount[8]; /* +0x00d8 0e 19 00 00 */ unsigned char OtherOperationCount[8]; /* +0x00e0 0e 19 00 00 */ unsigned char ReadTransferCount[8]; /* +0x00e8 0e 19 00 00 */ unsigned char WriteTransferCount[8]; /* +0x00f0 0e 19 00 00 */ unsigned char OtherTransferCount[8]; /* +0x00f8 0e 19 00 00 */ }; struct _KEY_VALUE_ENTRY { unsigned char ValueName[8]; /* +0x0000 07 21 00 00 */ unsigned long DataLength; /* +0x0008 */ unsigned long DataOffset; /* +0x000c */ unsigned long Type; /* +0x0010 */ }; struct _REPAIR_COPIES_INPUT { unsigned long Flags; /* +0x0000 */ unsigned char FileOffset[8]; /* +0x0008 0e 19 00 00 */ unsigned long Length; /* +0x0010 */ unsigned long SourceCopy; /* +0x0014 */ unsigned long NumberOfRepairCopies; /* +0x0018 */ unsigned char RepairCopies[4]; /* +0x001c d4 18 00 00 */ }; struct _PEBS_DS_SAVE_AREA { unsigned long long BtsBufferBase; /* +0x0000 */ unsigned long long BtsIndex; /* +0x0008 */ unsigned long long BtsAbsoluteMaximum; /* +0x0010 */ unsigned long long BtsInterruptThreshold; /* +0x0018 */ unsigned long long PebsBufferBase; /* +0x0020 */ unsigned long long PebsIndex; /* +0x0028 */ unsigned long long PebsAbsoluteMaximum; /* +0x0030 */ unsigned long long PebsInterruptThreshold; /* +0x0038 */ unsigned long long PebsCounterReset0; /* +0x0040 */ unsigned long long PebsCounterReset1; /* +0x0048 */ unsigned long long PebsCounterReset2; /* +0x0050 */ unsigned long long PebsCounterReset3; /* +0x0058 */ }; struct _EFI_DRIVER_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Id; /* +0x0008 */ unsigned long FriendlyNameOffset; /* +0x000c */ unsigned long DriverFilePathOffset; /* +0x0010 */ }; struct _RTL_AVL_TABLE { unsigned char BalancedRoot[32]; /* +0x0000 79 24 00 00 */ void *OrderedPointer; /* +0x0020 */ unsigned long WhichOrderedElement; /* +0x0028 */ unsigned long NumberGenericTableElements; /* +0x002c */ unsigned long DepthOfTree; /* +0x0030 */ unsigned char RestartKey[8]; /* +0x0038 23 29 00 00 */ unsigned long DeleteCount; /* +0x0040 */ unsigned char CompareRoutine[8]; /* +0x0048 25 29 00 00 */ unsigned char AllocateRoutine[8]; /* +0x0050 44 24 00 00 */ unsigned char FreeRoutine[8]; /* +0x0058 28 29 00 00 */ void *TableContext; /* +0x0060 */ }; struct tagTITLEBARINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcTitleBar[16]; /* +0x0004 06 1a 00 00 */ unsigned char rgstate[24]; /* +0x0014 8d 27 00 00 */ }; struct _RPC_IF_ID { unsigned char Uuid[16]; /* +0x0000 6b 10 00 00 */ unsigned short VersMajor; /* +0x0010 */ unsigned short VersMinor; /* +0x0012 */ }; struct _PLUGPLAY_CONTROL_CONFLICT_ENTRY { unsigned long DeviceInstance; /* +0x0000 */ unsigned long DeviceFlags; /* +0x0004 */ unsigned long ResourceType; /* +0x0008 */ unsigned long long ResourceStart; /* +0x0010 */ unsigned long long ResourceEnd; /* +0x0018 */ unsigned long ResourceFlags; /* +0x0020 */ }; struct _FILE_NETWORK_OPEN_INFORMATION { unsigned char CreationTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char LastAccessTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char LastWriteTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char ChangeTime[8]; /* +0x0018 0e 19 00 00 */ unsigned char AllocationSize[8]; /* +0x0020 0e 19 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 0e 19 00 00 */ unsigned long FileAttributes; /* +0x0030 */ }; struct _PO_WAKE_SOURCE_INFO { unsigned long Count; /* +0x0000 */ unsigned char Offsets[4]; /* +0x0004 d4 18 00 00 */ }; struct _userHMETAFILE { long fContext; /* +0x0000 */ }; struct _RTL_DEBUG_INFORMATION32 { unsigned long SectionHandleClient; /* +0x0000 */ unsigned long ViewBaseClient; /* +0x0004 */ unsigned long ViewBaseTarget; /* +0x0008 */ unsigned long ViewBaseDelta; /* +0x000c */ unsigned long EventPairClient; /* +0x0010 */ unsigned long EventPairTarget; /* +0x0014 */ unsigned long TargetProcessId; /* +0x0018 */ unsigned long TargetThreadHandle; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long OffsetFree; /* +0x0024 */ unsigned long CommitSize; /* +0x0028 */ unsigned long ViewSize; /* +0x002c */ unsigned long Modules; /* +0x0030 */ unsigned long ModulesEx; /* +0x0030 */ unsigned long BackTraces; /* +0x0034 */ unsigned long Heaps; /* +0x0038 */ unsigned long Locks; /* +0x003c */ unsigned long SpecificHeap; /* +0x0040 */ unsigned long TargetProcessHandle; /* +0x0044 */ unsigned long VerifierOptions; /* +0x0048 */ unsigned long ProcessHeap; /* +0x004c */ unsigned long CriticalSectionHandle; /* +0x0050 */ unsigned long CriticalSectionOwnerThread; /* +0x0054 */ unsigned char Reserved[16]; /* +0x0058 2b 23 00 00 */ }; struct tagAXISINFOW { long axMinValue; /* +0x0000 */ long axMaxValue; /* +0x0004 */ unsigned char axAxisName[32]; /* +0x0008 49 29 00 00 */ }; struct tagRemFORMATETC { unsigned long cfFormat; /* +0x0000 */ unsigned long ptd; /* +0x0004 */ unsigned long dwAspect; /* +0x0008 */ long lindex; /* +0x000c */ unsigned long tymed; /* +0x0010 */ }; struct _TP_DIRECT { unsigned char Task[32]; /* +0x0000 8c 28 00 00 */ unsigned long long Lock; /* +0x0020 */ unsigned char IoCompletionInformationList[16]; /* +0x0028 7d 1a 00 00 */ unsigned char Callback[8]; /* +0x0038 54 29 00 00 */ unsigned long NumaNode; /* +0x0040 */ unsigned char IdealProcessor; /* +0x0044 */ }; struct _RTL_CRITICAL_SECTION64 { unsigned long long DebugInfo; /* +0x0000 */ long LockCount; /* +0x0008 */ long RecursionCount; /* +0x000c */ unsigned long long OwningThread; /* +0x0010 */ unsigned long long LockSemaphore; /* +0x0018 */ unsigned long long SpinCount; /* +0x0020 */ }; struct tagENUMLOGFONTA { unsigned char elfLogFont[60]; /* +0x0000 51 20 00 00 */ unsigned char elfFullName[64]; /* +0x003c eb 18 00 00 */ unsigned char elfStyle[32]; /* +0x007c 9b 14 00 00 */ }; struct tagMOUSEHOOKSTRUCT { unsigned char pt[8]; /* +0x0000 1b 1a 00 00 */ unsigned char hwnd[8]; /* +0x0008 97 13 00 00 */ unsigned char wHitTestCode[8]; /* +0x0010 75 00 00 00 */ unsigned long long dwExtraInfo; /* +0x0018 */ }; struct _PO_WAKE_SOURCE_FIXED { unsigned char Header[8]; /* +0x0000 6e 21 00 00 */ unsigned char FixedWakeSourceType[4]; /* +0x0008 1d 16 00 00 */ }; struct _SYSTEM_PREFETCH_STATS { unsigned long DemandFilePageCount; /* +0x0000 */ unsigned long DemandFileIOCount; /* +0x0004 */ unsigned long TrickleFilePageCount; /* +0x0008 */ unsigned long TrickleFileIOCount; /* +0x000c */ unsigned long DemandPrivatePageCount; /* +0x0010 */ unsigned long DemandPrivateIOCount; /* +0x0014 */ unsigned long TricklePrivatePageCount; /* +0x0018 */ unsigned long TricklePrivateIOCount; /* +0x001c */ }; struct tagMOUSEKEYS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iMaxSpeed; /* +0x0008 */ unsigned long iTimeToMaxSpeed; /* +0x000c */ unsigned long iCtrlSpeed; /* +0x0010 */ unsigned long dwReserved1; /* +0x0014 */ unsigned long dwReserved2; /* +0x0018 */ }; struct _PEB_LDR_DATA { unsigned long Length; /* +0x0000 */ unsigned char Initialized; /* +0x0004 */ void *SsHandle; /* +0x0008 */ unsigned char InLoadOrderModuleList[16]; /* +0x0010 7d 1a 00 00 */ unsigned char InMemoryOrderModuleList[16]; /* +0x0020 7d 1a 00 00 */ unsigned char InInitializationOrderModuleList[16]; /* +0x0030 7d 1a 00 00 */ void *EntryInProgress; /* +0x0040 */ unsigned char ShutdownInProgress; /* +0x0048 */ void *ShutdownThreadId; /* +0x0050 */ }; struct _MUICCENTRY { unsigned char lCultureNameOffset[4]; /* +0x0000 75 00 00 00 */ unsigned char ulCultureID[4]; /* +0x0004 75 00 00 00 */ unsigned long ulLanguageType; /* +0x0008 */ unsigned char pNeutralCulture[8]; /* +0x0010 72 29 00 00 */ unsigned char lBaseLanguageIndices[32]; /* +0x0018 73 29 00 00 */ unsigned char lParentLanguageIndices[16]; /* +0x0038 74 29 00 00 */ }; struct _RPC_POLICY { unsigned char Length[4]; /* +0x0000 75 00 00 00 */ unsigned long EndpointFlags; /* +0x0004 */ unsigned long NICFlags; /* +0x0008 */ }; struct _FILE_QUERY_SPARING_BUFFER { unsigned long SparingUnitBytes; /* +0x0000 */ unsigned char SoftwareSparing; /* +0x0004 */ unsigned long TotalSpareBlocks; /* +0x0008 */ unsigned long FreeSpareBlocks; /* +0x000c */ }; struct _SYSTEM_CONSOLE_INFORMATION { /* unsigned char DriverLoaded[0]; +0x0000 53 19 00 00 */ unsigned char Spare[4]; /* +0x0000 54 19 00 00 */ }; struct _TRIPLE_LIST_ENTRY { unsigned char Flink[24]; /* +0x0000 8f 28 00 00 */ unsigned char Blink[8]; /* +0x0018 c5 20 00 00 */ }; struct _JOBOBJECT_SECURITY_LIMIT_INFORMATION { unsigned long SecurityLimitFlags; /* +0x0000 */ void *JobToken; /* +0x0008 */ unsigned char SidsToDisable[8]; /* +0x0010 88 29 00 00 */ unsigned char PrivilegesToDelete[8]; /* +0x0018 8a 29 00 00 */ unsigned char RestrictedSids[8]; /* +0x0020 88 29 00 00 */ }; struct _JOBOBJECT_CPU_RATE_CONTROL_INFORMATION { unsigned long ControlFlags; /* +0x0000 */ unsigned long CpuRate; /* +0x0004 */ unsigned long Weight; /* +0x0004 */ }; struct tagAXISINFOA { long axMinValue; /* +0x0000 */ long axMaxValue; /* +0x0004 */ unsigned char axAxisName[16]; /* +0x0008 2d 11 00 00 */ }; struct _IMAGE_CE_RUNTIME_FUNCTION_ENTRY { unsigned long FuncStart; /* +0x0000 */ /* unsigned char PrologLen[0]; +0x0004 49 19 00 00 */ /* unsigned char FuncLen[0]; +0x0004 98 29 00 00 */ /* unsigned char ThirtyTwoBit[0]; +0x0004 99 29 00 00 */ unsigned char ExceptionFlag[4]; /* +0x0004 f3 21 00 00 */ }; struct _SYSTEM_WORKINGSET_ENTRY { unsigned long UniqueProcessId; /* +0x0000 */ unsigned long SessionId; /* +0x0000 */ unsigned long long WorkingSetPageCount; /* +0x0008 */ unsigned long long CommitPageCount; /* +0x0010 */ unsigned long long PagedPoolPageCount; /* +0x0018 */ unsigned long long VirtualSizeInPages; /* +0x0018 */ unsigned long long PrivateWorkingSetPageCount; /* +0x0020 */ }; struct tagSERIALKEYSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ char *lpszActivePort; /* +0x0008 */ char *lpszPort; /* +0x0010 */ unsigned char iBaudRate[4]; /* +0x0018 75 00 00 00 */ unsigned char iPortState[4]; /* +0x001c 75 00 00 00 */ unsigned char iActive[8]; /* +0x0020 75 00 00 00 */ }; struct _NDR_CS_ROUTINES { unsigned char pSizeConvertRoutines[8]; /* +0x0000 a8 29 00 00 */ unsigned char pTagGettingRoutines[8]; /* +0x0008 ac 29 00 00 */ }; struct tagCY { unsigned long Lo; /* +0x0000 */ long Hi; /* +0x0004 */ long long int64; /* +0x0000 */ }; struct _EVENT_FILTER_HEADER { unsigned short Id; /* +0x0000 */ unsigned char Version; /* +0x0002 */ unsigned char Reserved[5]; /* +0x0003 ba 29 00 00 */ unsigned long long InstanceId; /* +0x0008 */ unsigned long Size; /* +0x0010 */ unsigned long NextOffset; /* +0x0014 */ }; struct _wireSAFEARR_HAVEIID { unsigned long Size; /* +0x0000 */ unsigned char apUnknown[8]; /* +0x0008 85 1c 00 00 */ unsigned char iid[16]; /* +0x0010 6b 10 00 00 */ }; struct ANON_OBJECT_HEADER { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned char ClassID[16]; /* +0x000c 6b 10 00 00 */ unsigned long SizeOfData; /* +0x001c */ }; struct _TXFS_ROLLFORWARD_REDO_INFORMATION { unsigned char LastVirtualClock[8]; /* +0x0000 0e 19 00 00 */ unsigned long long LastRedoLsn; /* +0x0008 */ unsigned long long HighestRecoveryLsn; /* +0x0010 */ unsigned long Flags; /* +0x0018 */ }; struct _RTL_CRITICAL_SECTION_DEBUG { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned char CriticalSection[8]; /* +0x0008 0a 1b 00 00 */ unsigned char ProcessLocksList[16]; /* +0x0010 7d 1a 00 00 */ unsigned long EntryCount; /* +0x0020 */ unsigned long ContentionCount; /* +0x0024 */ unsigned long Flags; /* +0x0028 */ unsigned short CreatorBackTraceIndexHigh; /* +0x002c */ unsigned short SpareUSHORT; /* +0x002e */ }; struct _BYTE_BLOB { unsigned long clSize; /* +0x0000 */ unsigned char abData[4]; /* +0x0004 d7 18 00 00 */ }; struct tagEMREXTESCAPE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char iEscape[4]; /* +0x0008 74 00 00 00 */ unsigned char cbEscData[4]; /* +0x000c 74 00 00 00 */ unsigned char EscData[4]; /* +0x0010 d7 18 00 00 */ }; struct tagEVENTMSG { unsigned char message[4]; /* +0x0000 75 00 00 00 */ unsigned char paramL[4]; /* +0x0004 75 00 00 00 */ unsigned char paramH[4]; /* +0x0008 75 00 00 00 */ unsigned long time; /* +0x000c */ unsigned char hwnd[8]; /* +0x0010 97 13 00 00 */ }; struct _SID_IDENTIFIER_AUTHORITY { unsigned char Value[6]; /* +0x0000 ec 29 00 00 */ }; struct _FILE_FS_FULL_SIZE_INFORMATION { unsigned char TotalAllocationUnits[8]; /* +0x0000 0e 19 00 00 */ unsigned char CallerAvailableAllocationUnits[8]; /* +0x0008 0e 19 00 00 */ unsigned char ActualAvailableAllocationUnits[8]; /* +0x0010 0e 19 00 00 */ unsigned long SectorsPerAllocationUnit; /* +0x0018 */ unsigned long BytesPerSector; /* +0x001c */ }; struct _SYSTEM_PROCESS_ID_INFORMATION { void *ProcessId; /* +0x0000 */ unsigned char ImageName[16]; /* +0x0008 c1 18 00 00 */ }; struct _SYSTEM_PREFETCH_OPTIONS { /* unsigned char LowerPriority[0]; +0x0000 53 19 00 00 */ /* unsigned char VirtualOffsets[0]; +0x0000 e3 21 00 00 */ /* unsigned char TrickleIOs[0]; +0x0000 e4 21 00 00 */ /* unsigned char SkipInStorePages[0]; +0x0000 68 26 00 00 */ /* unsigned char PrefetchFilesByVa[0]; +0x0000 69 26 00 00 */ /* unsigned char Spare[0]; +0x0000 24 2a 00 00 */ unsigned char ScenarioType[4]; /* +0x0000 25 2a 00 00 */ }; struct _IMAGE_VXD_HEADER { unsigned short e32_magic; /* +0x0000 */ unsigned char e32_border; /* +0x0002 */ unsigned char e32_worder; /* +0x0003 */ unsigned long e32_level; /* +0x0004 */ unsigned short e32_cpu; /* +0x0008 */ unsigned short e32_os; /* +0x000a */ unsigned long e32_ver; /* +0x000c */ unsigned long e32_mflags; /* +0x0010 */ unsigned long e32_mpages; /* +0x0014 */ unsigned long e32_startobj; /* +0x0018 */ unsigned long e32_eip; /* +0x001c */ unsigned long e32_stackobj; /* +0x0020 */ unsigned long e32_esp; /* +0x0024 */ unsigned long e32_pagesize; /* +0x0028 */ unsigned long e32_lastpagesize; /* +0x002c */ unsigned long e32_fixupsize; /* +0x0030 */ unsigned long e32_fixupsum; /* +0x0034 */ unsigned long e32_ldrsize; /* +0x0038 */ unsigned long e32_ldrsum; /* +0x003c */ unsigned long e32_objtab; /* +0x0040 */ unsigned long e32_objcnt; /* +0x0044 */ unsigned long e32_objmap; /* +0x0048 */ unsigned long e32_itermap; /* +0x004c */ unsigned long e32_rsrctab; /* +0x0050 */ unsigned long e32_rsrccnt; /* +0x0054 */ unsigned long e32_restab; /* +0x0058 */ unsigned long e32_enttab; /* +0x005c */ unsigned long e32_dirtab; /* +0x0060 */ unsigned long e32_dircnt; /* +0x0064 */ unsigned long e32_fpagetab; /* +0x0068 */ unsigned long e32_frectab; /* +0x006c */ unsigned long e32_impmod; /* +0x0070 */ unsigned long e32_impmodcnt; /* +0x0074 */ unsigned long e32_impproc; /* +0x0078 */ unsigned long e32_pagesum; /* +0x007c */ unsigned long e32_datapage; /* +0x0080 */ unsigned long e32_preload; /* +0x0084 */ unsigned long e32_nrestab; /* +0x0088 */ unsigned long e32_cbnrestab; /* +0x008c */ unsigned long e32_nressum; /* +0x0090 */ unsigned long e32_autodata; /* +0x0094 */ unsigned long e32_debuginfo; /* +0x0098 */ unsigned long e32_debuglen; /* +0x009c */ unsigned long e32_instpreload; /* +0x00a0 */ unsigned long e32_instdemand; /* +0x00a4 */ unsigned long e32_heapsize; /* +0x00a8 */ unsigned char e32_res3[12]; /* +0x00ac d6 1e 00 00 */ unsigned long e32_winresoff; /* +0x00b8 */ unsigned long e32_winreslen; /* +0x00bc */ unsigned short e32_devid; /* +0x00c0 */ unsigned short e32_ddkver; /* +0x00c2 */ }; struct _CACHE_DESCRIPTOR { unsigned char Level; /* +0x0000 */ unsigned char Associativity; /* +0x0001 */ unsigned short LineSize; /* +0x0002 */ unsigned long Size; /* +0x0004 */ unsigned char Type[4]; /* +0x0008 93 17 00 00 */ }; struct _MIDL_STUB_DESC:: { /* unsigned char pAutoHandle[0]; +0x0000 1a 10 00 00 */ /* unsigned char pPrimitiveHandle[0]; +0x0000 1a 10 00 00 */ unsigned char pGenericBindingInfo[8]; /* +0x0000 54 2a 00 00 */ }; struct tagDEC { unsigned short wReserved; /* +0x0000 */ unsigned char scale; /* +0x0002 */ unsigned char sign; /* +0x0003 */ unsigned short signscale; /* +0x0002 */ unsigned long Hi32; /* +0x0004 */ unsigned long Lo32; /* +0x0008 */ unsigned long Mid32; /* +0x000c */ unsigned long long Lo64; /* +0x0008 */ }; struct _FILE_MAKE_COMPATIBLE_BUFFER { unsigned char CloseDisc; /* +0x0000 */ }; struct _TRANSACTIONMANAGER_BASIC_INFORMATION { unsigned char TmIdentity[16]; /* +0x0000 6b 10 00 00 */ unsigned char VirtualClock[8]; /* +0x0010 0e 19 00 00 */ }; struct _CM_MCA_POS_DATA { unsigned short AdapterId; /* +0x0000 */ unsigned char PosData1; /* +0x0002 */ unsigned char PosData2; /* +0x0003 */ unsigned char PosData3; /* +0x0004 */ unsigned char PosData4; /* +0x0005 */ }; struct _WIN32_FILE_ATTRIBUTE_DATA { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 0d 10 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 0d 10 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 0d 10 00 00 */ unsigned long nFileSizeHigh; /* +0x001c */ unsigned long nFileSizeLow; /* +0x0020 */ }; struct _FILE_STORAGE_INFO { unsigned long LogicalBytesPerSector; /* +0x0000 */ unsigned long PhysicalBytesPerSectorForAtomicity; /* +0x0004 */ unsigned long PhysicalBytesPerSectorForPerformance; /* +0x0008 */ unsigned long FileSystemEffectivePhysicalBytesPerSectorForAtomicity; /* +0x000c */ unsigned long Flags; /* +0x0010 */ unsigned long ByteOffsetForSectorAlignment; /* +0x0014 */ unsigned long ByteOffsetForPartitionAlignment; /* +0x0018 */ }; struct _FILE_MAILSLOT_SET_INFORMATION { unsigned char ReadTimeout[8]; /* +0x0000 12 20 00 00 */ }; struct _RTL_DYNAMIC_HASH_TABLE { unsigned long Flags; /* +0x0000 */ unsigned long Shift; /* +0x0004 */ unsigned long TableSize; /* +0x0008 */ unsigned long Pivot; /* +0x000c */ unsigned long DivisorMask; /* +0x0010 */ unsigned long NumEntries; /* +0x0014 */ unsigned long NonEmptyBuckets; /* +0x0018 */ unsigned long NumEnumerators; /* +0x001c */ void *Directory; /* +0x0020 */ }; struct _DOCINFOW { unsigned char cbSize[8]; /* +0x0000 74 00 00 00 */ unsigned char lpszDocName[8]; /* +0x0008 27 10 00 00 */ unsigned char lpszOutput[8]; /* +0x0010 27 10 00 00 */ unsigned char lpszDatatype[8]; /* +0x0018 27 10 00 00 */ unsigned long fwType; /* +0x0020 */ }; struct _SYSTEM_DEVICE_DATA_INFORMATION { unsigned char DeviceId[16]; /* +0x0000 c1 18 00 00 */ unsigned char DataName[16]; /* +0x0010 c1 18 00 00 */ unsigned long DataType; /* +0x0020 */ unsigned long DataBufferLength; /* +0x0024 */ void *DataBuffer; /* +0x0028 */ }; struct _RTL_BARRIER { unsigned char Barrier[4]; /* +0x0000 0f 1c 00 00 */ long LeftBarrier; /* +0x0004 */ unsigned char WaitEvent[16]; /* +0x0008 86 2a 00 00 */ long TotalProcessors; /* +0x0018 */ unsigned long Spins; /* +0x001c */ unsigned char DUMMYRESERVEDSTRUCTNAME[32]; /* +0x0000 87 2a 00 00 */ }; struct _RTL_BARRIER:::: { unsigned long Reserved1; /* +0x0000 */ unsigned long Reserved2; /* +0x0004 */ unsigned char Reserved3[16]; /* +0x0008 d1 1e 00 00 */ unsigned long Reserved4; /* +0x0018 */ unsigned long Reserved5; /* +0x001c */ }; struct _OSVERSIONINFOEXA { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[128]; /* +0x0014 76 20 00 00 */ unsigned short wServicePackMajor; /* +0x0094 */ unsigned short wServicePackMinor; /* +0x0096 */ unsigned short wSuiteMask; /* +0x0098 */ unsigned char wProductType; /* +0x009a */ unsigned char wReserved; /* +0x009b */ }; struct _IMAGE_OPTIONAL_HEADER { unsigned short Magic; /* +0x0000 */ unsigned char MajorLinkerVersion; /* +0x0002 */ unsigned char MinorLinkerVersion; /* +0x0003 */ unsigned long SizeOfCode; /* +0x0004 */ unsigned long SizeOfInitializedData; /* +0x0008 */ unsigned long SizeOfUninitializedData; /* +0x000c */ unsigned long AddressOfEntryPoint; /* +0x0010 */ unsigned long BaseOfCode; /* +0x0014 */ unsigned long BaseOfData; /* +0x0018 */ unsigned long ImageBase; /* +0x001c */ unsigned long SectionAlignment; /* +0x0020 */ unsigned long FileAlignment; /* +0x0024 */ unsigned short MajorOperatingSystemVersion; /* +0x0028 */ unsigned short MinorOperatingSystemVersion; /* +0x002a */ unsigned short MajorImageVersion; /* +0x002c */ unsigned short MinorImageVersion; /* +0x002e */ unsigned short MajorSubsystemVersion; /* +0x0030 */ unsigned short MinorSubsystemVersion; /* +0x0032 */ unsigned long Win32VersionValue; /* +0x0034 */ unsigned long SizeOfImage; /* +0x0038 */ unsigned long SizeOfHeaders; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned short Subsystem; /* +0x0044 */ unsigned short DllCharacteristics; /* +0x0046 */ unsigned long SizeOfStackReserve; /* +0x0048 */ unsigned long SizeOfStackCommit; /* +0x004c */ unsigned long SizeOfHeapReserve; /* +0x0050 */ unsigned long SizeOfHeapCommit; /* +0x0054 */ unsigned long LoaderFlags; /* +0x0058 */ unsigned long NumberOfRvaAndSizes; /* +0x005c */ unsigned char DataDirectory[128]; /* +0x0060 b5 20 00 00 */ }; struct _IMAGE_COFF_SYMBOLS_HEADER { unsigned long NumberOfSymbols; /* +0x0000 */ unsigned long LvaToFirstSymbol; /* +0x0004 */ unsigned long NumberOfLinenumbers; /* +0x0008 */ unsigned long LvaToFirstLinenumber; /* +0x000c */ unsigned long RvaToFirstByteOfCode; /* +0x0010 */ unsigned long RvaToLastByteOfCode; /* +0x0014 */ unsigned long RvaToFirstByteOfData; /* +0x0018 */ unsigned long RvaToLastByteOfData; /* +0x001c */ }; struct _WAKE_TIMER_INFO { unsigned long long OffsetToNext; /* +0x0000 */ unsigned char DueTime[8]; /* +0x0008 9e 2a 00 00 */ unsigned long Period; /* +0x0010 */ unsigned char ReasonContext[40]; /* +0x0018 6f 21 00 00 */ }; struct tagEMRPOLYLINE16 { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long cpts; /* +0x0018 */ unsigned char apts[4]; /* +0x001c a6 2a 00 00 */ }; struct _LDR_IMPORT_CALLBACK_INFO { unsigned char ImportCallbackRoutine[8]; /* +0x0000 af 2a 00 00 */ void *ImportCallbackParameter; /* +0x0008 */ }; struct _PS_ATTRIBUTE_LIST { unsigned long long TotalLength; /* +0x0000 */ unsigned char Attributes[32]; /* +0x0008 b3 2a 00 00 */ }; struct tagEMRPOLYDRAW { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long cptl; /* +0x0018 */ unsigned char aptl[8]; /* +0x001c c1 1f 00 00 */ unsigned char abTypes[4]; /* +0x0024 d7 18 00 00 */ }; struct tagMENUBARINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcBar[20]; /* +0x0004 06 1a 00 00 */ unsigned char hMenu[8]; /* +0x0018 b5 1e 00 00 */ unsigned char hwndMenu[8]; /* +0x0020 97 13 00 00 */ /* unsigned char fBarFocused[0]; +0x0028 bc 2a 00 00 */ unsigned char fFocused[8]; /* +0x0028 bd 2a 00 00 */ }; struct _BYTE_SIZEDARR { unsigned long clSize; /* +0x0000 */ unsigned char *pData; /* +0x0008 */ }; struct _CLIENT_ID { void *UniqueProcess; /* +0x0000 */ void *UniqueThread; /* +0x0008 */ }; struct tagPOINTER_DEVICE_INFO { unsigned long displayOrientation; /* +0x0000 */ void *device; /* +0x0008 */ unsigned char pointerDeviceType[8]; /* +0x0010 c1 16 00 00 */ unsigned char monitor[8]; /* +0x0018 32 21 00 00 */ unsigned long startingCursorId; /* +0x0020 */ unsigned short maxActiveContacts; /* +0x0024 */ unsigned char productString[1042]; /* +0x0026 c8 2a 00 00 */ }; struct _STARTUPINFOA { unsigned long cb; /* +0x0000 */ char *lpReserved; /* +0x0008 */ char *lpDesktop; /* +0x0010 */ char *lpTitle; /* +0x0018 */ unsigned long dwX; /* +0x0020 */ unsigned long dwY; /* +0x0024 */ unsigned long dwXSize; /* +0x0028 */ unsigned long dwYSize; /* +0x002c */ unsigned long dwXCountChars; /* +0x0030 */ unsigned long dwYCountChars; /* +0x0034 */ unsigned long dwFillAttribute; /* +0x0038 */ unsigned long dwFlags; /* +0x003c */ unsigned short wShowWindow; /* +0x0040 */ unsigned short cbReserved2; /* +0x0042 */ unsigned char *lpReserved2; /* +0x0048 */ void *hStdInput; /* +0x0050 */ void *hStdOutput; /* +0x0058 */ void *hStdError; /* +0x0060 */ }; struct tagCOLORCORRECTPALETTE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihPalette; /* +0x0008 */ unsigned long nFirstEntry; /* +0x000c */ unsigned long nPalEntries; /* +0x0010 */ unsigned long nReserved; /* +0x0014 */ }; struct _OBJECT_ATTRIBUTES { unsigned long Length; /* +0x0000 */ void *RootDirectory; /* +0x0008 */ unsigned char ObjectName[8]; /* +0x0010 07 21 00 00 */ unsigned long Attributes; /* +0x0018 */ void *SecurityDescriptor; /* +0x0020 */ void *SecurityQualityOfService; /* +0x0028 */ }; struct _DISPLAY_DEVICEA { unsigned long cb; /* +0x0000 */ unsigned char DeviceName[32]; /* +0x0004 e3 2a 00 00 */ unsigned char DeviceString[128]; /* +0x0024 76 20 00 00 */ unsigned long StateFlags; /* +0x00a4 */ unsigned char DeviceID[128]; /* +0x00a8 76 20 00 00 */ unsigned char DeviceKey[128]; /* +0x0128 76 20 00 00 */ }; struct _DMA_CONFIGURATION_BYTE0 { /* unsigned char Channel[0]; +0x0000 8f 19 00 00 */ /* unsigned char Reserved[0]; +0x0000 e8 2a 00 00 */ /* unsigned char Shared[0]; +0x0000 99 26 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 9a 26 00 00 */ }; struct tagENHMETARECORD { unsigned long iType; /* +0x0000 */ unsigned long nSize; /* +0x0004 */ unsigned char dParm[4]; /* +0x0008 d4 18 00 00 */ }; struct _remoteMETAFILEPICT { long mm; /* +0x0000 */ long xExt; /* +0x0004 */ long yExt; /* +0x0008 */ unsigned char hMF[8]; /* +0x0010 f0 2a 00 00 */ }; struct _tagPROTOCOL_ARGUMENT { unsigned char szMethod[8]; /* +0x0000 27 10 00 00 */ unsigned char szTargetUrl[8]; /* +0x0008 27 10 00 00 */ }; struct _PROCESS_MITIGATION_POLICY_INFORMATION { unsigned char Policy[4]; /* +0x0000 a1 16 00 00 */ /* unsigned char ASLRPolicy[0]; +0x0004 f5 2a 00 00 */ /* unsigned char StackCheckPolicy[0]; +0x0004 f6 2a 00 00 */ /* unsigned char StrictHandleCheckPolicy[0]; +0x0004 f7 2a 00 00 */ unsigned char SystemCallDisablePolicy[4]; /* +0x0004 f8 2a 00 00 */ }; struct _FILE_COMPRESSION_INFO { unsigned char CompressedFileSize[8]; /* +0x0000 0e 19 00 00 */ unsigned short CompressionFormat; /* +0x0008 */ unsigned char CompressionUnitShift; /* +0x000a */ unsigned char ChunkShift; /* +0x000b */ unsigned char ClusterShift; /* +0x000c */ unsigned char Reserved[3]; /* +0x000d 52 19 00 00 */ }; struct tagEMRSCALEVIEWPORTEXTEX { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ long xNum; /* +0x0008 */ long xDenom; /* +0x000c */ long yNum; /* +0x0010 */ long yDenom; /* +0x0014 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_W { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long ProtocolSequence; /* +0x0008 */ unsigned short *NetworkAddress; /* +0x0010 */ unsigned short *StringEndpoint; /* +0x0018 */ }; struct tagEMRELLIPSE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBox[16]; /* +0x0008 b5 18 00 00 */ }; struct _RATE_QUOTA_LIMIT { unsigned long RateData; /* +0x0000 */ /* unsigned char RatePercent[0]; +0x0000 0f 2b 00 00 */ unsigned char Reserved0[4]; /* +0x0000 10 2b 00 00 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION { unsigned long long ProcessorMask; /* +0x0000 */ unsigned char Relationship[8]; /* +0x0008 85 17 00 00 */ /* unsigned char ProcessorCore[0]; +0x0010 13 2b 00 00 */ /* unsigned char NumaNode[0]; +0x0010 14 2b 00 00 */ /* unsigned char Cache[0]; +0x0010 15 2b 00 00 */ unsigned char Reserved[16]; /* +0x0010 d1 1e 00 00 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION:::: { unsigned long NodeNumber; /* +0x0000 */ }; struct _SYSTEM_LOGICAL_PROCESSOR_INFORMATION:::: { unsigned char Flags; /* +0x0000 */ }; struct _SYSTEM_WATCHDOG_HANDLER_INFORMATION { unsigned char WdHandler[8]; /* +0x0000 1c 2b 00 00 */ void *Context; /* +0x0008 */ }; struct tagENHMETAHEADER { unsigned long iType; /* +0x0000 */ unsigned long nSize; /* +0x0004 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned char rclFrame[16]; /* +0x0018 b5 18 00 00 */ unsigned long dSignature; /* +0x0028 */ unsigned long nVersion; /* +0x002c */ unsigned long nBytes; /* +0x0030 */ unsigned long nRecords; /* +0x0034 */ unsigned short nHandles; /* +0x0038 */ unsigned short sReserved; /* +0x003a */ unsigned long nDescription; /* +0x003c */ unsigned long offDescription; /* +0x0040 */ unsigned long nPalEntries; /* +0x0044 */ unsigned char szlDevice[8]; /* +0x0048 8e 1f 00 00 */ unsigned char szlMillimeters[8]; /* +0x0050 8e 1f 00 00 */ unsigned long cbPixelFormat; /* +0x0058 */ unsigned long offPixelFormat; /* +0x005c */ unsigned long bOpenGL; /* +0x0060 */ unsigned char szlMicrometers[8]; /* +0x0064 8e 1f 00 00 */ }; struct _SERVICE_TRIGGER { unsigned long dwTriggerType; /* +0x0000 */ unsigned long dwAction; /* +0x0004 */ unsigned char pTriggerSubtype[8]; /* +0x0008 26 1c 00 00 */ unsigned long cDataItems; /* +0x0010 */ unsigned char pDataItems[8]; /* +0x0018 26 2b 00 00 */ }; struct tagCAUL { unsigned long cElems; /* +0x0000 */ unsigned long *pElems; /* +0x0008 */ }; struct _WNODE_HEADER { unsigned long BufferSize; /* +0x0000 */ unsigned long ProviderId; /* +0x0004 */ unsigned long long HistoricalContext; /* +0x0008 */ unsigned long Version; /* +0x0008 */ unsigned long Linkage; /* +0x000c */ unsigned long CountLost; /* +0x0010 */ void *KernelHandle; /* +0x0010 */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ unsigned char Guid[16]; /* +0x0018 6b 10 00 00 */ unsigned long ClientContext; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct _FILE_FS_LABEL_INFORMATION { unsigned long VolumeLabelLength; /* +0x0000 */ unsigned char VolumeLabel[4]; /* +0x0004 ab 19 00 00 */ }; struct _SD_GLOBAL_CHANGE_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long ChangeType; /* +0x0004 */ /* unsigned char SdChange[0]; +0x0008 32 2b 00 00 */ /* unsigned char SdQueryStats[0]; +0x0008 33 2b 00 00 */ unsigned char SdEnumSds[16]; /* +0x0008 34 2b 00 00 */ }; struct _KLOCK_QUEUE_HANDLE { unsigned char LockQueue[16]; /* +0x0000 bd 29 00 00 */ unsigned char OldIrql; /* +0x0010 */ }; struct tagRAWMOUSE { unsigned short usFlags; /* +0x0000 */ unsigned long ulButtons; /* +0x0004 */ unsigned short usButtonFlags; /* +0x0004 */ unsigned short usButtonData; /* +0x0006 */ unsigned long ulRawButtons; /* +0x0008 */ long lLastX; /* +0x000c */ long lLastY; /* +0x0010 */ unsigned long ulExtraInformation; /* +0x0014 */ }; struct tagGESTUREINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long dwID; /* +0x0008 */ unsigned char hwndTarget[8]; /* +0x0010 97 13 00 00 */ unsigned char ptsLocation[4]; /* +0x0018 a5 2a 00 00 */ unsigned long dwInstanceID; /* +0x001c */ unsigned long dwSequenceID; /* +0x0020 */ unsigned long long ullArguments; /* +0x0028 */ unsigned char cbExtraArgs[8]; /* +0x0030 75 00 00 00 */ }; struct _M128A { unsigned long long Low; /* +0x0000 */ long long High; /* +0x0008 */ }; struct _SYSDBG_MSR { unsigned long Msr; /* +0x0000 */ unsigned long long Data; /* +0x0008 */ }; struct _JOURNAL_SET_DELETE_VALUE_INFORMATION { unsigned char Action[8]; /* +0x0000 fd 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 c1 18 00 00 */ unsigned char ValueName[16]; /* +0x0028 c1 18 00 00 */ unsigned long OldValueType; /* +0x0038 */ unsigned long OldDataLength; /* +0x003c */ void *OldData; /* +0x0040 */ unsigned long NewValueType; /* +0x0048 */ unsigned long NewDataLength; /* +0x004c */ void *NewData; /* +0x0050 */ }; struct _IO_RESOURCE_LIST { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long Count; /* +0x0004 */ unsigned char Descriptors[32]; /* +0x0008 4c 2b 00 00 */ }; struct _HEAP_RANGE_INFORMATION { unsigned long long Address; /* +0x0000 */ unsigned long long Size; /* +0x0008 */ unsigned long Type; /* +0x0010 */ unsigned long Protection; /* +0x0014 */ unsigned long long FirstBlockInformationOffset; /* +0x0018 */ unsigned long long NextRangeInformationOffset; /* +0x0020 */ }; struct _SE_SECURITY_DESCRIPTOR { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ void *SecurityDescriptor; /* +0x0008 */ }; struct _LDR_DATA_TABLE_ENTRY { unsigned char InLoadOrderLinks[16]; /* +0x0000 7d 1a 00 00 */ unsigned char InMemoryOrderLinks[16]; /* +0x0010 7d 1a 00 00 */ /* unsigned char InInitializationOrderLinks[0]; +0x0020 7d 1a 00 00 */ unsigned char InProgressLinks[16]; /* +0x0020 7d 1a 00 00 */ void *DllBase; /* +0x0030 */ void *EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 c1 18 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 c1 18 00 00 */ /* unsigned char FlagGroup[0]; +0x0068 a3 10 00 00 */ unsigned long Flags; /* +0x0068 */ /* unsigned char PackagedBinary[0]; +0x0068 53 19 00 00 */ /* unsigned char MarkedForRemoval[0]; +0x0068 e3 21 00 00 */ /* unsigned char ImageDll[0]; +0x0068 e4 21 00 00 */ /* unsigned char LoadNotificationsSent[0]; +0x0068 68 26 00 00 */ /* unsigned char TelemetryEntryProcessed[0]; +0x0068 69 26 00 00 */ /* unsigned char ProcessStaticImport[0]; +0x0068 5a 2b 00 00 */ /* unsigned char InLegacyLists[0]; +0x0068 16 27 00 00 */ /* unsigned char InIndexes[0]; +0x0068 17 27 00 00 */ /* unsigned char ShimDll[0]; +0x0068 18 27 00 00 */ /* unsigned char InExceptionTable[0]; +0x0068 19 27 00 00 */ /* unsigned char ReservedFlags1[0]; +0x0068 5b 2b 00 00 */ /* unsigned char LoadInProgress[0]; +0x0068 5c 2b 00 00 */ /* unsigned char ReservedFlags2[0]; +0x0068 5d 2b 00 00 */ /* unsigned char EntryProcessed[0]; +0x0068 1d 27 00 00 */ /* unsigned char ReservedFlags3[0]; +0x0068 5e 2b 00 00 */ /* unsigned char DontCallForThreads[0]; +0x0068 5f 2b 00 00 */ /* unsigned char ProcessAttachCalled[0]; +0x0068 60 2b 00 00 */ /* unsigned char ProcessAttachFailed[0]; +0x0068 4d 19 00 00 */ /* unsigned char CorDeferredValidate[0]; +0x0068 4e 19 00 00 */ /* unsigned char CorImage[0]; +0x0068 61 2b 00 00 */ /* unsigned char DontRelocate[0]; +0x0068 62 2b 00 00 */ /* unsigned char CorILOnly[0]; +0x0068 63 2b 00 00 */ /* unsigned char ReservedFlags5[0]; +0x0068 64 2b 00 00 */ /* unsigned char Redirected[0]; +0x0068 65 2b 00 00 */ /* unsigned char ReservedFlags6[0]; +0x0068 66 2b 00 00 */ unsigned char CompatDatabaseProcessed[4]; /* +0x0068 f3 21 00 00 */ unsigned short ObsoleteLoadCount; /* +0x006c */ unsigned short TlsIndex; /* +0x006e */ unsigned char HashLinks[16]; /* +0x0070 7d 1a 00 00 */ unsigned long TimeDateStamp; /* +0x0080 */ unsigned char EntryPointActivationContext[8]; /* +0x0088 e7 20 00 00 */ void *PatchInformation; /* +0x0090 */ unsigned char DdagNode[8]; /* +0x0098 68 2b 00 00 */ unsigned char NodeModuleLink[16]; /* +0x00a0 7d 1a 00 00 */ unsigned char SnapContext[8]; /* +0x00b0 6a 2b 00 00 */ void *SwitchBackContext; /* +0x00b8 */ unsigned char BaseAddressIndexNode[24]; /* +0x00c0 e2 27 00 00 */ unsigned char MappingInfoIndexNode[24]; /* +0x00d8 e2 27 00 00 */ unsigned long long OriginalBase; /* +0x00f0 */ unsigned char LoadTime[8]; /* +0x00f8 0e 19 00 00 */ unsigned long BaseNameHashValue; /* +0x0100 */ }; struct _FILE_GET_EA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char EaNameLength; /* +0x0004 */ unsigned char EaName[3]; /* +0x0005 6d 2b 00 00 */ }; struct _QUERY_FILE_LAYOUT_OUTPUT { unsigned long FileEntryCount; /* +0x0000 */ unsigned long FirstFileOffset; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _PROCESSOR_IDLE_STATES { unsigned long Size; /* +0x0000 */ unsigned long Revision; /* +0x0004 */ unsigned long Count; /* +0x0008 */ unsigned long Type; /* +0x000c */ unsigned long long TargetProcessors; /* +0x0010 */ unsigned char State[32]; /* +0x0018 73 2b 00 00 */ }; struct _RPC_MESSAGE { void *Handle; /* +0x0000 */ unsigned long DataRepresentation; /* +0x0008 */ void *Buffer; /* +0x0010 */ unsigned char BufferLength[4]; /* +0x0018 75 00 00 00 */ unsigned char ProcNum[4]; /* +0x001c 75 00 00 00 */ unsigned char TransferSyntax[8]; /* +0x0020 7a 2b 00 00 */ void *RpcInterfaceInformation; /* +0x0028 */ void *ReservedForRuntime; /* +0x0030 */ void *ManagerEpv; /* +0x0038 */ void *ImportContext; /* +0x0040 */ unsigned long RpcFlags; /* +0x0048 */ }; struct tagBSTRBLOB { unsigned long cbSize; /* +0x0000 */ unsigned char *pData; /* +0x0008 */ }; struct _SLIST_ENTRY { unsigned char Next[16]; /* +0x0000 84 2b 00 00 */ }; struct _RTL_PROCESS_BACKTRACE_INFORMATION { char *SymbolicBackTrace; /* +0x0000 */ unsigned long TraceCount; /* +0x0008 */ unsigned short Index; /* +0x000c */ unsigned short Depth; /* +0x000e */ unsigned char BackTrace[256]; /* +0x0010 89 2b 00 00 */ }; struct tagDVTARGETDEVICE { unsigned long tdSize; /* +0x0000 */ unsigned short tdDriverNameOffset; /* +0x0004 */ unsigned short tdDeviceNameOffset; /* +0x0006 */ unsigned short tdPortNameOffset; /* +0x0008 */ unsigned short tdExtDevmodeOffset; /* +0x000a */ unsigned char tdData[4]; /* +0x000c d7 18 00 00 */ }; struct _PROCESS_KEEPALIVE_COUNT_INFORMATION { unsigned long Count; /* +0x0000 */ }; struct _SYSTEM_POWER_LOGGING_ENTRY { unsigned long Reason; /* +0x0000 */ unsigned long States; /* +0x0004 */ }; struct _SYSTEM_IMAGE_FILE_EXECUTION_OPTIONS_INFORMATION { unsigned long FlagsToEnable; /* +0x0000 */ unsigned long FlagsToDisable; /* +0x0004 */ }; struct tagMOUSEMOVEPOINT { unsigned char x[4]; /* +0x0000 74 00 00 00 */ unsigned char y[4]; /* +0x0004 74 00 00 00 */ unsigned long time; /* +0x0008 */ unsigned long long dwExtraInfo; /* +0x0010 */ }; struct tagCAH { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 12 20 00 00 */ }; struct WMIREGGUIDW { unsigned char Guid[16]; /* +0x0000 6b 10 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long InstanceCount; /* +0x0014 */ unsigned long InstanceNameList; /* +0x0018 */ unsigned long BaseNameOffset; /* +0x0018 */ unsigned long long Pdo; /* +0x0018 */ unsigned long long InstanceInfo; /* +0x0018 */ }; struct _FILE_INTEGRITY_STREAM_INFORMATION { unsigned short ChecksumAlgorithm; /* +0x0000 */ unsigned char ChecksumChunkShift; /* +0x0002 */ unsigned char ClusterShift; /* +0x0003 */ unsigned long Flags; /* +0x0004 */ }; struct _DIAGNOSTIC_BUFFER { unsigned long long Size; /* +0x0000 */ unsigned char CallerType[8]; /* +0x0008 87 17 00 00 */ unsigned long long ProcessImageNameOffset; /* +0x0010 */ unsigned long ProcessId; /* +0x0018 */ unsigned long ServiceTag; /* +0x001c */ unsigned long long DeviceDescriptionOffset; /* +0x0010 */ unsigned long long DevicePathOffset; /* +0x0018 */ unsigned long long ReasonOffset; /* +0x0020 */ }; struct _SYSTEM_VERIFIER_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long Level; /* +0x0004 */ unsigned char DriverName[16]; /* +0x0008 c1 18 00 00 */ unsigned long RaiseIrqls; /* +0x0018 */ unsigned long AcquireSpinLocks; /* +0x001c */ unsigned long SynchronizeExecutions; /* +0x0020 */ unsigned long AllocationsAttempted; /* +0x0024 */ unsigned long AllocationsSucceeded; /* +0x0028 */ unsigned long AllocationsSucceededSpecialPool; /* +0x002c */ unsigned long AllocationsWithNoTag; /* +0x0030 */ unsigned long TrimRequests; /* +0x0034 */ unsigned long Trims; /* +0x0038 */ unsigned long AllocationsFailed; /* +0x003c */ unsigned long AllocationsFailedDeliberately; /* +0x0040 */ unsigned long Loads; /* +0x0044 */ unsigned long Unloads; /* +0x0048 */ unsigned long UnTrackedPool; /* +0x004c */ unsigned long CurrentPagedPoolAllocations; /* +0x0050 */ unsigned long CurrentNonPagedPoolAllocations; /* +0x0054 */ unsigned long PeakPagedPoolAllocations; /* +0x0058 */ unsigned long PeakNonPagedPoolAllocations; /* +0x005c */ unsigned long long PagedPoolUsageInBytes; /* +0x0060 */ unsigned long long NonPagedPoolUsageInBytes; /* +0x0068 */ unsigned long long PeakPagedPoolUsageInBytes; /* +0x0070 */ unsigned long long PeakNonPagedPoolUsageInBytes; /* +0x0078 */ }; struct tagHIGHCONTRASTW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpszDefaultScheme[8]; /* +0x0008 71 06 00 00 */ }; struct _CM_SERIAL_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long BaudClock; /* +0x0004 */ }; struct _cpinfoexA { unsigned char MaxCharSize[4]; /* +0x0000 75 00 00 00 */ unsigned char DefaultChar[2]; /* +0x0004 0c 21 00 00 */ unsigned char LeadByte[12]; /* +0x0006 d6 1e 00 00 */ unsigned char UnicodeDefaultChar[2]; /* +0x0012 71 00 00 00 */ unsigned char CodePage[4]; /* +0x0014 75 00 00 00 */ unsigned char CodePageName[260]; /* +0x0018 b5 2b 00 00 */ }; struct _JIT_DEBUG_INFO { unsigned long dwSize; /* +0x0000 */ unsigned long dwProcessorArchitecture; /* +0x0004 */ unsigned long dwThreadID; /* +0x0008 */ unsigned long dwReserved0; /* +0x000c */ unsigned long long lpExceptionAddress; /* +0x0010 */ unsigned long long lpExceptionRecord; /* +0x0018 */ unsigned long long lpContextRecord; /* +0x0020 */ }; struct _FILE_IO_PRIORITY_HINT_INFO { unsigned char PriorityHint[4]; /* +0x0000 d7 17 00 00 */ }; struct _KEY_VALUE_FULL_INFORMATION { unsigned long TitleIndex; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long DataOffset; /* +0x0008 */ unsigned long DataLength; /* +0x000c */ unsigned long NameLength; /* +0x0010 */ unsigned char Name[4]; /* +0x0014 ab 19 00 00 */ }; struct _FILE_GET_QUOTA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long SidLength; /* +0x0004 */ unsigned char Sid[12]; /* +0x0008 f1 26 00 00 */ }; struct _FILE_PIPE_CLIENT_PROCESS_BUFFER { void *ClientSession; /* +0x0000 */ void *ClientProcess; /* +0x0008 */ }; struct tagEMRSETICMPROFILE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long dwFlags; /* +0x0008 */ unsigned long cbName; /* +0x000c */ unsigned long cbData; /* +0x0010 */ unsigned char Data[4]; /* +0x0014 d7 18 00 00 */ }; struct _SYSTEM_SESSION_PROCESS_INFORMATION { unsigned long SessionId; /* +0x0000 */ unsigned long SizeOfBuf; /* +0x0004 */ void *Buffer; /* +0x0008 */ }; struct _SYSTEM_VA_LIST_INFORMATION { unsigned long long VirtualSize; /* +0x0000 */ unsigned long long VirtualPeak; /* +0x0008 */ unsigned long long VirtualLimit; /* +0x0010 */ unsigned long long AllocationFailures; /* +0x0018 */ }; struct _ABC { unsigned char abcA[4]; /* +0x0000 74 00 00 00 */ unsigned char abcB[4]; /* +0x0004 75 00 00 00 */ unsigned char abcC[4]; /* +0x0008 74 00 00 00 */ }; struct _PROCESSOR_NUMBER { unsigned short Group; /* +0x0000 */ unsigned char Number; /* +0x0002 */ unsigned char Reserved; /* +0x0003 */ }; struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_ASSEMBLY_METADATA { unsigned char Information[8]; /* +0x0000 07 2c 00 00 */ void *SectionBase; /* +0x0008 */ unsigned long SectionLength; /* +0x0010 */ void *SectionGlobalDataBase; /* +0x0018 */ unsigned long SectionGlobalDataLength; /* +0x0020 */ }; struct _LDR_DDAG_NODE { unsigned char Modules[16]; /* +0x0000 7d 1a 00 00 */ unsigned char ServiceTagList[8]; /* +0x0010 c8 23 00 00 */ unsigned long LoadCount; /* +0x0018 */ unsigned long ReferenceCount; /* +0x001c */ unsigned long DependencyCount; /* +0x0020 */ /* unsigned char Dependencies[0]; +0x0028 4a 22 00 00 */ unsigned char RemovalLink[8]; /* +0x0028 21 21 00 00 */ unsigned char IncomingDependencies[8]; /* +0x0030 4a 22 00 00 */ unsigned char State[8]; /* +0x0038 95 16 00 00 */ unsigned char CondenseLink[8]; /* +0x0040 21 21 00 00 */ unsigned long PreorderNumber; /* +0x0048 */ unsigned long LowestLink; /* +0x004c */ }; struct _LPC_CLIENT_DIED_MSG { unsigned char PortMsg[40]; /* +0x0000 d9 27 00 00 */ unsigned char CreateTime[8]; /* +0x0028 0e 19 00 00 */ }; struct _wireSAFEARRAY_UNION { unsigned long sfType; /* +0x0000 */ }; struct _wireSAFEARRAY_UNION::__MIDL_IOleAutomationTypes_0001 { /* unsigned char BstrStr[0]; +0x0000 1e 2c 00 00 */ /* unsigned char UnknownStr[0]; +0x0000 1f 2c 00 00 */ /* unsigned char DispatchStr[0]; +0x0000 20 2c 00 00 */ /* unsigned char VariantStr[0]; +0x0000 21 2c 00 00 */ /* unsigned char RecordStr[0]; +0x0000 22 2c 00 00 */ /* unsigned char HaveIidStr[0]; +0x0000 23 2c 00 00 */ /* unsigned char ByteStr[0]; +0x0000 24 2c 00 00 */ /* unsigned char WordStr[0]; +0x0000 25 2c 00 00 */ /* unsigned char LongStr[0]; +0x0000 26 2c 00 00 */ unsigned char HyperStr[32]; /* +0x0000 27 2c 00 00 */ }; struct _TRANSACTION_NOTIFICATION_MARSHAL_ARGUMENT { unsigned long MarshalCookie; /* +0x0000 */ unsigned char UOW[16]; /* +0x0004 6b 10 00 00 */ }; struct _TRACE_PROVIDER_INSTANCE_INFO { unsigned long NextOffset; /* +0x0000 */ unsigned long EnableCount; /* +0x0004 */ unsigned long Pid; /* +0x0008 */ unsigned long Flags; /* +0x000c */ }; struct _CSV_INTERNAL_CONTROL_PARAM { unsigned char Operation[8]; /* +0x0000 fd 16 00 00 */ long long Unused; /* +0x0008 */ }; struct _MCI_ADDR { unsigned long Address; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned long long QuadPart; /* +0x0000 */ }; struct DISPLAYCONFIG_TARGET_PREFERRED_MODE { unsigned char header[20]; /* +0x0000 38 2c 00 00 */ unsigned char width[4]; /* +0x0014 75 00 00 00 */ unsigned char height[8]; /* +0x0018 75 00 00 00 */ unsigned char targetMode[48]; /* +0x0020 39 2c 00 00 */ }; struct tagPOINTER_TOUCH_INFO { unsigned char pointerInfo[88]; /* +0x0000 3c 2c 00 00 */ unsigned char touchFlags[4]; /* +0x0058 75 00 00 00 */ unsigned char touchMask[4]; /* +0x005c 75 00 00 00 */ unsigned char rcContact[16]; /* +0x0060 06 1a 00 00 */ unsigned char rcContactRaw[16]; /* +0x0070 06 1a 00 00 */ unsigned char orientation[4]; /* +0x0080 75 00 00 00 */ unsigned char pressure[4]; /* +0x0084 75 00 00 00 */ }; struct tagACCESSTIMEOUT { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iTimeOutMSec; /* +0x0008 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001 { unsigned long tyspec; /* +0x0000 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001::__MIDL___MIDL_itf_wtypes_0000_0001_0005 { /* unsigned char clsid[0]; +0x0000 6b 10 00 00 */ /* unsigned char pFileExt[0]; +0x0000 71 06 00 00 */ /* unsigned char pMimeType[0]; +0x0000 71 06 00 00 */ /* unsigned char pProgId[0]; +0x0000 71 06 00 00 */ unsigned char pFileName[32]; /* +0x0000 71 06 00 00 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001::__MIDL___MIDL_itf_wtypes_0000_0001_0005:: { unsigned char ObjectId[16]; /* +0x0000 6b 10 00 00 */ unsigned char PolicyId[16]; /* +0x0010 6b 10 00 00 */ }; struct __MIDL___MIDL_itf_wtypes_0000_0001_0001::__MIDL___MIDL_itf_wtypes_0000_0001_0005:: { unsigned char pPackageName[8]; /* +0x0000 71 06 00 00 */ unsigned char PolicyId[16]; /* +0x0008 6b 10 00 00 */ }; struct _FILE_MAILSLOT_PEEK_BUFFER { unsigned long ReadDataAvailable; /* +0x0000 */ unsigned long NumberOfMessages; /* +0x0004 */ unsigned long MessageLength; /* +0x0008 */ }; struct _userFLAG_STGMEDIUM { long ContextFlags; /* +0x0000 */ long fPassOwnership; /* +0x0004 */ unsigned char Stgmed[8]; /* +0x0008 a9 2a 00 00 */ }; struct _wireSAFEARRAY { unsigned short cDims; /* +0x0000 */ unsigned short fFeatures; /* +0x0002 */ unsigned long cbElements; /* +0x0004 */ unsigned long cLocks; /* +0x0008 */ unsigned char uArrayStructs[40]; /* +0x0010 60 2c 00 00 */ unsigned char rgsabound[8]; /* +0x0038 d4 28 00 00 */ }; struct _EVENT_INSTANCE_HEADER { unsigned short Size; /* +0x0000 */ unsigned short FieldTypeFlags; /* +0x0002 */ unsigned char HeaderType; /* +0x0002 */ unsigned char MarkerFlags; /* +0x0003 */ unsigned long Version; /* +0x0004 */ unsigned char Class[4]; /* +0x0004 65 2c 00 00 */ unsigned long ThreadId; /* +0x0008 */ unsigned long ProcessId; /* +0x000c */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ unsigned long long RegHandle; /* +0x0018 */ unsigned long InstanceId; /* +0x0020 */ unsigned long ParentInstanceId; /* +0x0024 */ unsigned long KernelTime; /* +0x0028 */ unsigned long UserTime; /* +0x002c */ unsigned long long ProcessorTime; /* +0x0028 */ unsigned long EventId; /* +0x0028 */ unsigned long Flags; /* +0x002c */ unsigned long long ParentRegHandle; /* +0x0030 */ }; struct _EVENT_INSTANCE_HEADER:::: { unsigned char Type; /* +0x0000 */ unsigned char Level; /* +0x0001 */ unsigned short Version; /* +0x0002 */ }; struct threadlocaleinfostruct { unsigned char refcount[4]; /* +0x0000 74 00 00 00 */ unsigned char lc_codepage[4]; /* +0x0004 75 00 00 00 */ unsigned char lc_collate_cp[4]; /* +0x0008 75 00 00 00 */ unsigned char lc_handle[24]; /* +0x000c 8d 27 00 00 */ unsigned char lc_id[316]; /* +0x0024 6f 2c 00 00 */ }; struct _MESSAGE_RESOURCE_ENTRY { unsigned short Length; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned char Text[2]; /* +0x0004 d7 18 00 00 */ }; struct _WNF_PUBLISH_DESCRIPTOR { unsigned char StateName[8]; /* +0x0000 9f 19 00 00 */ unsigned char TypeId[8]; /* +0x0008 45 27 00 00 */ unsigned char StateData[8]; /* +0x0010 3d 11 00 00 */ unsigned long StateDataLength; /* +0x0018 */ }; struct _MEMORY_WORKING_SET_INFORMATION { unsigned long long NumberOfEntries; /* +0x0000 */ unsigned char WorkingSetInfo[8]; /* +0x0008 84 2c 00 00 */ }; struct tagPOLYTEXTW { unsigned char x[4]; /* +0x0000 74 00 00 00 */ unsigned char y[4]; /* +0x0004 74 00 00 00 */ unsigned char n[8]; /* +0x0008 75 00 00 00 */ unsigned char lpstr[8]; /* +0x0010 27 10 00 00 */ unsigned char uiFlags[4]; /* +0x0018 75 00 00 00 */ unsigned char rcl[20]; /* +0x001c 06 1a 00 00 */ unsigned char pdx[8]; /* +0x0030 74 06 00 00 */ }; struct tagSOLE_AUTHENTICATION_INFO { unsigned long dwAuthnSvc; /* +0x0000 */ unsigned long dwAuthzSvc; /* +0x0004 */ void *pAuthInfo; /* +0x0008 */ }; struct _PLUGPLAY_CONTROL_DEVICE_CONTROL_DATA { unsigned char DeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned long Flags; /* +0x0010 */ }; struct _SYSTEM_CALL_TIME_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long TotalCalls; /* +0x0004 */ unsigned char TimeOfCalls[8]; /* +0x0008 9a 2c 00 00 */ }; struct _TRANSACTION_NOTIFICATION_SAVEPOINT_ARGUMENT { unsigned long SavepointId; /* +0x0000 */ }; struct tagGESTURENOTIFYSTRUCT { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndTarget[8]; /* +0x0008 97 13 00 00 */ unsigned char ptsLocation[4]; /* +0x0010 a5 2a 00 00 */ unsigned long dwInstanceID; /* +0x0014 */ }; struct _RETRIEVAL_POINTER_BASE { unsigned char FileAreaOffset[8]; /* +0x0000 0e 19 00 00 */ }; struct _FILE_PATH { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Type; /* +0x0008 */ unsigned char FilePath[4]; /* +0x000c d7 18 00 00 */ }; struct tagSTYLEBUFW { unsigned long dwStyle; /* +0x0000 */ unsigned char szDescription[64]; /* +0x0004 89 1f 00 00 */ }; struct _IMAGE_THUNK_DATA32:: { unsigned long ForwarderString; /* +0x0000 */ unsigned long Function; /* +0x0000 */ unsigned long Ordinal; /* +0x0000 */ unsigned long AddressOfData; /* +0x0000 */ }; struct _SYSTEM_HYPERVISOR_QUERY_INFORMATION { unsigned char HypervisorConnected; /* +0x0000 */ unsigned char Spare0[7]; /* +0x0001 d3 2c 00 00 */ unsigned long long EnabledAddressSpaceEnlightenments; /* +0x0008 */ }; struct _XMIT_ROUTINE_QUINTUPLE { unsigned char pfnTranslateToXmit[8]; /* +0x0000 d6 2c 00 00 */ unsigned char pfnTranslateFromXmit[8]; /* +0x0008 d6 2c 00 00 */ unsigned char pfnFreeXmit[8]; /* +0x0010 d6 2c 00 00 */ unsigned char pfnFreeInst[8]; /* +0x0018 d6 2c 00 00 */ }; struct _nlsversioninfo { unsigned long dwNLSVersionInfoSize; /* +0x0000 */ unsigned long dwNLSVersion; /* +0x0004 */ unsigned long dwDefinedVersion; /* +0x0008 */ unsigned long dwEffectiveId; /* +0x000c */ unsigned char guidCustomVersion[16]; /* +0x0010 6b 10 00 00 */ }; struct _RPC_SECURITY_QOS_V5_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _TRANSACTION_PROPERTIES_INFORMATION { unsigned long IsolationLevel; /* +0x0000 */ unsigned long IsolationFlags; /* +0x0004 */ unsigned char Timeout[8]; /* +0x0008 0e 19 00 00 */ unsigned long Outcome; /* +0x0010 */ unsigned long DescriptionLength; /* +0x0014 */ unsigned char Description[8]; /* +0x0018 ab 19 00 00 */ }; struct tagMETAFILEPICT { long mm; /* +0x0000 */ long xExt; /* +0x0004 */ long yExt; /* +0x0008 */ unsigned char hMF[8]; /* +0x0010 f0 2c 00 00 */ }; struct _EISA_IRQ_DESCRIPTOR { /* unsigned char Interrupt[0]; +0x0000 91 19 00 00 */ /* unsigned char Reserved[0]; +0x0000 11 2d 00 00 */ /* unsigned char LevelTriggered[0]; +0x0000 98 26 00 00 */ /* unsigned char Shared[0]; +0x0000 99 26 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 9a 26 00 00 */ }; struct _FOCUS_EVENT_RECORD { unsigned char bSetFocus[4]; /* +0x0000 74 00 00 00 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_DISTRIBUTION { unsigned long ProcessorCount; /* +0x0000 */ unsigned char Offsets[4]; /* +0x0004 d4 18 00 00 */ }; struct _FILE_STANDARD_INFO { unsigned char AllocationSize[8]; /* +0x0000 0e 19 00 00 */ unsigned char EndOfFile[8]; /* +0x0008 0e 19 00 00 */ unsigned long NumberOfLinks; /* +0x0010 */ unsigned char DeletePending; /* +0x0014 */ unsigned char Directory; /* +0x0015 */ }; struct _wireSAFEARR_VARIANT { unsigned long Size; /* +0x0000 */ unsigned char aVariant[8]; /* +0x0008 22 2d 00 00 */ }; struct _SECTION_IMAGE_INFORMATION { void *TransferAddress; /* +0x0000 */ unsigned long ZeroBits; /* +0x0008 */ unsigned long long MaximumStackSize; /* +0x0010 */ unsigned long long CommittedStackSize; /* +0x0018 */ unsigned long SubSystemType; /* +0x0020 */ unsigned short SubSystemMinorVersion; /* +0x0024 */ unsigned short SubSystemMajorVersion; /* +0x0026 */ unsigned long SubSystemVersion; /* +0x0024 */ unsigned long GpValue; /* +0x0028 */ unsigned short ImageCharacteristics; /* +0x002c */ unsigned short DllCharacteristics; /* +0x002e */ unsigned short Machine; /* +0x0030 */ unsigned char ImageContainsCode; /* +0x0032 */ unsigned char ImageFlags; /* +0x0033 */ /* unsigned char ComPlusNativeReady[0]; +0x0033 94 26 00 00 */ /* unsigned char ComPlusILOnly[0]; +0x0033 95 26 00 00 */ /* unsigned char ImageDynamicallyRelocated[0]; +0x0033 96 26 00 00 */ /* unsigned char ImageMappedFlat[0]; +0x0033 25 2d 00 00 */ /* unsigned char BaseBelow4gb[0]; +0x0033 11 2d 00 00 */ unsigned char Reserved[1]; /* +0x0033 26 2d 00 00 */ unsigned long LoaderFlags; /* +0x0034 */ unsigned long ImageFileSize; /* +0x0038 */ unsigned long CheckSum; /* +0x003c */ }; struct tagHELPWININFOW { unsigned char wStructSize[4]; /* +0x0000 74 00 00 00 */ unsigned char x[4]; /* +0x0004 74 00 00 00 */ unsigned char y[4]; /* +0x0008 74 00 00 00 */ unsigned char dx[4]; /* +0x000c 74 00 00 00 */ unsigned char dy[4]; /* +0x0010 74 00 00 00 */ unsigned char wMax[4]; /* +0x0014 74 00 00 00 */ unsigned char rgchMember[4]; /* +0x0018 29 2d 00 00 */ }; struct tagCANDIDATEFORM { unsigned long dwIndex; /* +0x0000 */ unsigned long dwStyle; /* +0x0004 */ unsigned char ptCurrentPos[8]; /* +0x0008 1b 1a 00 00 */ unsigned char rcArea[16]; /* +0x0010 06 1a 00 00 */ }; struct _HYPER_SIZEDARR { unsigned long clSize; /* +0x0000 */ long long *pData; /* +0x0008 */ }; struct _NTFS_STATISTICS { unsigned long LogFileFullExceptions; /* +0x0000 */ unsigned long OtherExceptions; /* +0x0004 */ unsigned long MftReads; /* +0x0008 */ unsigned long MftReadBytes; /* +0x000c */ unsigned long MftWrites; /* +0x0010 */ unsigned long MftWriteBytes; /* +0x0014 */ }; struct _SYSTEM_SESSION_POOLTAG_INFORMATION { unsigned long long NextEntryOffset; /* +0x0000 */ unsigned long SessionId; /* +0x0008 */ unsigned long Count; /* +0x000c */ unsigned char TagInfo[40]; /* +0x0010 89 1a 00 00 */ }; struct tagMULTIKEYHELPA { unsigned long mkSize; /* +0x0000 */ char mkKeylist; /* +0x0004 */ unsigned char szKeyphrase[3]; /* +0x0005 6d 2b 00 00 */ }; struct tagBinaryParam { void *Buffer; /* +0x0000 */ short Size; /* +0x0008 */ }; struct _PROCESS_CYCLE_TIME_INFORMATION { unsigned long long AccumulatedCycles; /* +0x0000 */ unsigned long long CurrentCycleCount; /* +0x0008 */ }; struct _TRANSACTIONMANAGER_RECOVERY_INFORMATION { unsigned long long LastRecoveredLsn; /* +0x0000 */ }; struct _HEAP_BLOCK_EXTRA_INFORMATION { unsigned char Next; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long long Size; /* +0x0008 */ }; struct tagAUDIODESCRIPTION { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char Enabled[4]; /* +0x0004 74 00 00 00 */ unsigned long Locale; /* +0x0008 */ }; struct _ETW_BUFFER_CONTEXT { unsigned char ProcessorNumber; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned short ProcessorIndex; /* +0x0000 */ unsigned short LoggerId; /* +0x0002 */ }; struct tagRID_DEVICE_INFO { unsigned long cbSize; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ /* unsigned char mouse[0]; +0x0008 66 2d 00 00 */ /* unsigned char keyboard[0]; +0x0008 67 2d 00 00 */ unsigned char hid[24]; /* +0x0008 68 2d 00 00 */ }; struct _ImageArchitectureEntry { unsigned long FixupInstRVA; /* +0x0000 */ unsigned long NewInst; /* +0x0004 */ }; struct IMPORT_OBJECT_HEADER { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned long SizeOfData; /* +0x000c */ unsigned short Ordinal; /* +0x0010 */ unsigned short Hint; /* +0x0010 */ /* unsigned char Type[0]; +0x0012 72 2d 00 00 */ /* unsigned char NameType[0]; +0x0012 73 2d 00 00 */ unsigned char Reserved[2]; /* +0x0012 74 2d 00 00 */ }; struct _RTL_AVL_TREE { unsigned char Root[8]; /* +0x0000 e3 27 00 00 */ }; struct _XSAVE_VENDOR { unsigned char VendorId[16]; /* +0x0000 fa 18 00 00 */ unsigned char SupportedCpu[40]; /* +0x0010 9a 2d 00 00 */ }; struct tagCAUI { unsigned long cElems; /* +0x0000 */ unsigned short *pElems; /* +0x0008 */ }; struct _RTL_CRITICAL_SECTION32 { unsigned long DebugInfo; /* +0x0000 */ long LockCount; /* +0x0004 */ long RecursionCount; /* +0x0008 */ unsigned long OwningThread; /* +0x000c */ unsigned long LockSemaphore; /* +0x0010 */ unsigned long SpinCount; /* +0x0014 */ }; struct _HEAP_REGION_INFORMATION { unsigned long long Address; /* +0x0000 */ unsigned long long ReserveSize; /* +0x0008 */ unsigned long long CommitSize; /* +0x0010 */ unsigned long long FirstRangeInformationOffset; /* +0x0018 */ unsigned long long NextRegionInformationOffset; /* +0x0020 */ }; struct _COUNTER_READING { unsigned char Type[4]; /* +0x0000 c9 17 00 00 */ unsigned long Index; /* +0x0004 */ unsigned long long Start; /* +0x0008 */ unsigned long long Total; /* +0x0010 */ }; struct _SEMAPHORE_BASIC_INFORMATION { long CurrentCount; /* +0x0000 */ long MaximumCount; /* +0x0004 */ }; struct _QUERY_PERFORMANCE_COUNTER_FLAGS { /* unsigned char KernelTransition[0]; +0x0000 53 19 00 00 */ /* unsigned char Reserved[0]; +0x0000 54 19 00 00 */ unsigned long ul; /* +0x0000 */ }; struct _RTL_CONDITION_VARIABLE { /* unsigned char WakeCount[0]; +0x0000 a9 2d 00 00 */ /* unsigned char Waking[0]; +0x0000 52 26 00 00 */ unsigned long long Value; /* +0x0000 */ void *Ptr; /* +0x0000 */ }; struct tagLOGPALETTE { unsigned short palVersion; /* +0x0000 */ unsigned short palNumEntries; /* +0x0002 */ unsigned char palPalEntry[4]; /* +0x0004 ac 2d 00 00 */ }; struct _ALPC_PORT_ATTRIBUTES { unsigned long Flags; /* +0x0000 */ unsigned char SecurityQos[12]; /* +0x0004 b6 2d 00 00 */ unsigned long long MaxMessageLength; /* +0x0010 */ unsigned long long MemoryBandwidth; /* +0x0018 */ unsigned long long MaxPoolUsage; /* +0x0020 */ unsigned long long MaxSectionSize; /* +0x0028 */ unsigned long long MaxViewSize; /* +0x0030 */ unsigned long long MaxTotalSectionSize; /* +0x0038 */ unsigned long DupObjectTypes; /* +0x0040 */ unsigned long Reserved; /* +0x0044 */ }; struct _SYSTEM_HANDLE_INFORMATION { unsigned long NumberOfHandles; /* +0x0000 */ unsigned char Handles[24]; /* +0x0008 bb 2d 00 00 */ }; struct tagCBT_CREATEWNDW { unsigned char lpcs[8]; /* +0x0000 c1 2d 00 00 */ unsigned char hwndInsertAfter[8]; /* +0x0008 97 13 00 00 */ }; struct tagMOUSEINPUT { long dx; /* +0x0000 */ long dy; /* +0x0004 */ unsigned long mouseData; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ unsigned long time; /* +0x0010 */ unsigned long long dwExtraInfo; /* +0x0018 */ }; struct tagSTGMEDIUM { unsigned long tymed; /* +0x0000 */ /* unsigned char hBitmap[0]; +0x0008 67 21 00 00 */ void *hMetaFilePict; /* +0x0008 */ /* unsigned char hEnhMetaFile[0]; +0x0008 d8 2d 00 00 */ void *hGlobal; /* +0x0008 */ /* unsigned char lpszFileName[0]; +0x0008 71 06 00 00 */ /* unsigned char pstm[0]; +0x0008 da 2d 00 00 */ unsigned char pstg[8]; /* +0x0008 d1 1f 00 00 */ unsigned char pUnkForRelease[8]; /* +0x0010 23 1c 00 00 */ }; struct _FSCTL_OFFLOAD_WRITE_INPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long FileOffset; /* +0x0008 */ unsigned long long CopyLength; /* +0x0010 */ unsigned long long TransferOffset; /* +0x0018 */ unsigned char Token[512]; /* +0x0020 c4 22 00 00 */ }; struct tagEMRSETWORLDTRANSFORM { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char xform[24]; /* +0x0008 b6 18 00 00 */ }; struct _PROCESS_MEMORY_ALLOCATION_MODE { unsigned long Flags; /* +0x0000 */ /* unsigned char TopDown[0]; +0x0000 53 19 00 00 */ unsigned char Reserved[4]; /* +0x0000 54 19 00 00 */ }; struct _FILE_FULL_EA_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char Flags; /* +0x0004 */ unsigned char EaNameLength; /* +0x0005 */ unsigned short EaValueLength; /* +0x0006 */ unsigned char EaName[4]; /* +0x0008 6d 2b 00 00 */ }; struct _TXFS_WRITE_BACKUP_INFORMATION { unsigned char Buffer[1]; /* +0x0000 d7 18 00 00 */ }; struct _PERFORMANCE_DATA { unsigned short Size; /* +0x0000 */ unsigned char Version; /* +0x0002 */ unsigned char HwCountersCount; /* +0x0003 */ unsigned long ContextSwitchCount; /* +0x0004 */ unsigned long long WaitReasonBitMap; /* +0x0008 */ unsigned long long CycleTime; /* +0x0010 */ unsigned long RetryCount; /* +0x0018 */ unsigned long Reserved; /* +0x001c */ unsigned char HwCounters[256]; /* +0x0020 03 2e 00 00 */ }; struct tagENUMUILANG { unsigned long NumOfEnumUILang; /* +0x0000 */ unsigned long SizeOfEnumUIBuffer; /* +0x0004 */ unsigned short *pEnumUIBuffer; /* +0x0008 */ }; struct _BOOT_AREA_INFO { unsigned long BootSectorCount; /* +0x0000 */ }; struct _HARDERROR_MSG { unsigned char h[40]; /* +0x0000 d9 27 00 00 */ long Status; /* +0x0028 */ unsigned char ErrorTime[8]; /* +0x0030 0e 19 00 00 */ unsigned long ValidResponseOptions; /* +0x0038 */ unsigned long Response; /* +0x003c */ unsigned long NumberOfParameters; /* +0x0040 */ unsigned long UnicodeStringParameterMask; /* +0x0044 */ unsigned char Parameters[40]; /* +0x0048 be 20 00 00 */ }; struct _PLUGPLAY_CONTROL_CLASS_ASSOCIATION_DATA { unsigned char DeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned char InterfaceGuid[8]; /* +0x0010 26 1c 00 00 */ unsigned char Reference[16]; /* +0x0018 c1 18 00 00 */ unsigned char Register; /* +0x0028 */ unsigned char SymLink[8]; /* +0x0030 71 06 00 00 */ unsigned long SymLinkLength; /* +0x0038 */ }; struct _RTL_BALANCED_NODE { /* unsigned char Children[0]; +0x0000 13 2e 00 00 */ unsigned char Left[8]; /* +0x0000 e3 27 00 00 */ unsigned char Right[8]; /* +0x0008 e3 27 00 00 */ /* unsigned char Red[0]; +0x0010 94 26 00 00 */ /* unsigned char Balance[0]; +0x0010 de 26 00 00 */ unsigned long long ParentValue; /* +0x0010 */ }; struct tagICONMETRICSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iHorzSpacing[4]; /* +0x0004 74 00 00 00 */ unsigned char iVertSpacing[4]; /* +0x0008 74 00 00 00 */ unsigned char iTitleWrap[4]; /* +0x000c 74 00 00 00 */ unsigned char lfFont[92]; /* +0x0010 46 20 00 00 */ }; struct _RTL_DYNAMIC_HASH_TABLE_CONTEXT { unsigned char ChainHead[8]; /* +0x0000 1c 2e 00 00 */ unsigned char PrevLinkage[8]; /* +0x0008 1c 2e 00 00 */ unsigned long long Signature; /* +0x0010 */ }; struct _ACTIVATION_CONTEXT_BASIC_INFORMATION { /* unsigned char ActivationContext[0]; +0x0000 e7 20 00 00 */ void *hActCtx; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long dwFlags; /* +0x0008 */ }; struct _CONSOLE_SCREEN_BUFFER_INFOEX { unsigned long cbSize; /* +0x0000 */ unsigned char dwSize[4]; /* +0x0004 6a 21 00 00 */ unsigned char dwCursorPosition[4]; /* +0x0008 6a 21 00 00 */ unsigned short wAttributes; /* +0x000c */ unsigned char srWindow[8]; /* +0x000e 28 2e 00 00 */ unsigned char dwMaximumWindowSize[4]; /* +0x0016 6a 21 00 00 */ unsigned short wPopupAttributes; /* +0x001a */ unsigned char bFullscreenSupported[4]; /* +0x001c 74 00 00 00 */ unsigned char ColorTable[64]; /* +0x0020 29 2e 00 00 */ }; struct _ENUM_SERVICE_STATUSW { unsigned char lpServiceName[8]; /* +0x0000 71 06 00 00 */ unsigned char lpDisplayName[8]; /* +0x0008 71 06 00 00 */ unsigned char ServiceStatus[32]; /* +0x0010 2c 2e 00 00 */ }; struct tagPARAMDESC { unsigned char pparamdescex[8]; /* +0x0000 30 2e 00 00 */ unsigned short wParamFlags; /* +0x0008 */ }; struct _FILE_IO_PRIORITY_HINT_INFORMATION { unsigned char PriorityHint[4]; /* +0x0000 13 17 00 00 */ }; struct _SECTION_IMAGE_INFORMATION64 { unsigned long long TransferAddress; /* +0x0000 */ unsigned long ZeroBits; /* +0x0008 */ unsigned long long MaximumStackSize; /* +0x0010 */ unsigned long long CommittedStackSize; /* +0x0018 */ unsigned long SubSystemType; /* +0x0020 */ unsigned short SubSystemMinorVersion; /* +0x0024 */ unsigned short SubSystemMajorVersion; /* +0x0026 */ unsigned long SubSystemVersion; /* +0x0024 */ unsigned long GpValue; /* +0x0028 */ unsigned short ImageCharacteristics; /* +0x002c */ unsigned short DllCharacteristics; /* +0x002e */ unsigned short Machine; /* +0x0030 */ unsigned char ImageContainsCode; /* +0x0032 */ unsigned char ImageFlags; /* +0x0033 */ /* unsigned char ComPlus[0]; +0x0033 94 26 00 00 */ /* unsigned char ImageDynamicallyRelocated[0]; +0x0033 95 26 00 00 */ unsigned char Reserved[1]; /* +0x0033 dd 27 00 00 */ unsigned long LoaderFlags; /* +0x0034 */ unsigned long ImageFileSize; /* +0x0038 */ unsigned long CheckSum; /* +0x003c */ }; struct tagCAFILETIME { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 9e 10 00 00 */ }; struct _LINK_TRACKING_INFORMATION { unsigned char Type[4]; /* +0x0000 b1 17 00 00 */ unsigned char VolumeId[16]; /* +0x0004 2d 11 00 00 */ }; struct _STARTUPINFOEXA { unsigned char StartupInfo[104]; /* +0x0000 43 2e 00 00 */ unsigned char lpAttributeList[8]; /* +0x0068 6e 26 00 00 */ }; struct _devicemodeA { unsigned char dmDeviceName[32]; /* +0x0000 9b 14 00 00 */ unsigned short dmSpecVersion; /* +0x0020 */ unsigned short dmDriverVersion; /* +0x0022 */ unsigned short dmSize; /* +0x0024 */ unsigned short dmDriverExtra; /* +0x0026 */ unsigned long dmFields; /* +0x0028 */ short dmOrientation; /* +0x002c */ short dmPaperSize; /* +0x002e */ short dmPaperLength; /* +0x0030 */ short dmPaperWidth; /* +0x0032 */ short dmScale; /* +0x0034 */ short dmCopies; /* +0x0036 */ short dmDefaultSource; /* +0x0038 */ short dmPrintQuality; /* +0x003a */ unsigned char dmPosition[8]; /* +0x002c 6a 19 00 00 */ unsigned long dmDisplayOrientation; /* +0x0034 */ unsigned long dmDisplayFixedOutput; /* +0x0038 */ short dmColor; /* +0x003c */ short dmDuplex; /* +0x003e */ short dmYResolution; /* +0x0040 */ short dmTTOption; /* +0x0042 */ short dmCollate; /* +0x0044 */ unsigned char dmFormName[32]; /* +0x0046 9b 14 00 00 */ unsigned short dmLogPixels; /* +0x0066 */ unsigned long dmBitsPerPel; /* +0x0068 */ unsigned long dmPelsWidth; /* +0x006c */ unsigned long dmPelsHeight; /* +0x0070 */ unsigned long dmDisplayFlags; /* +0x0074 */ unsigned long dmNup; /* +0x0074 */ unsigned long dmDisplayFrequency; /* +0x0078 */ unsigned long dmICMMethod; /* +0x007c */ unsigned long dmICMIntent; /* +0x0080 */ unsigned long dmMediaType; /* +0x0084 */ unsigned long dmDitherType; /* +0x0088 */ unsigned long dmReserved1; /* +0x008c */ unsigned long dmReserved2; /* +0x0090 */ unsigned long dmPanningWidth; /* +0x0094 */ unsigned long dmPanningHeight; /* +0x0098 */ }; struct _CONSOLE_FONT_INFOEX { unsigned long cbSize; /* +0x0000 */ unsigned long nFont; /* +0x0004 */ unsigned char dwFontSize[4]; /* +0x0008 6a 21 00 00 */ unsigned char FontFamily[4]; /* +0x000c 75 00 00 00 */ unsigned char FontWeight[4]; /* +0x0010 75 00 00 00 */ unsigned char FaceName[64]; /* +0x0014 89 1f 00 00 */ }; struct value_entW { unsigned char ve_valuename[8]; /* +0x0000 71 06 00 00 */ unsigned long ve_valuelen; /* +0x0008 */ unsigned long long ve_valueptr; /* +0x0010 */ unsigned long ve_type; /* +0x0018 */ }; struct tagPARAMDESCEX { unsigned long cBytes; /* +0x0000 */ unsigned char varDefaultValue[24]; /* +0x0008 a5 21 00 00 */ }; struct _IMAGE_FILE_HEADER { unsigned short Machine; /* +0x0000 */ unsigned short NumberOfSections; /* +0x0002 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned long PointerToSymbolTable; /* +0x0008 */ unsigned long NumberOfSymbols; /* +0x000c */ unsigned short SizeOfOptionalHeader; /* +0x0010 */ unsigned short Characteristics; /* +0x0012 */ }; struct _REPAIR_DEFERRED_EXTENTS_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long ExtentCount; /* +0x0004 */ unsigned char Extents[16]; /* +0x0008 e8 28 00 00 */ }; struct _COVERAGE_MODULES { unsigned long ListAndReset; /* +0x0000 */ unsigned long NumberOfModules; /* +0x0004 */ unsigned char ModuleRequestInfo[24]; /* +0x0008 53 2e 00 00 */ unsigned char Modules[32]; /* +0x0020 55 2e 00 00 */ }; struct _PACKEDEVENTINFO { unsigned long ulSize; /* +0x0000 */ unsigned long ulNumEventsForLogFile; /* +0x0004 */ /* unsigned char ulOffsets[0]; +0x0008 58 2e 00 00 */ }; struct _LOOKUP_STREAM_FROM_CLUSTER_ENTRY { unsigned long OffsetToNext; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char Reserved[8]; /* +0x0008 0e 19 00 00 */ unsigned char Cluster[8]; /* +0x0010 0e 19 00 00 */ unsigned char FileName[8]; /* +0x0018 ab 19 00 00 */ }; struct _POWER_SESSION_RIT_STATE { unsigned char Active; /* +0x0000 */ unsigned long LastInputTime; /* +0x0004 */ }; struct _KEY_VALUE_PARTIAL_INFORMATION { unsigned long TitleIndex; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long DataLength; /* +0x0008 */ unsigned char Data[4]; /* +0x000c d7 18 00 00 */ }; struct _INVERTED_FUNCTION_TABLE { unsigned long CurrentSize; /* +0x0000 */ unsigned long MaximumSize; /* +0x0004 */ unsigned char Epoch[4]; /* +0x0008 45 1c 00 00 */ unsigned char Overflow; /* +0x000c */ unsigned char TableEntry[12288]; /* +0x0010 6c 2e 00 00 */ }; struct tagMULTI_QI { unsigned char pIID[8]; /* +0x0000 96 1c 00 00 */ unsigned char pItf[8]; /* +0x0008 23 1c 00 00 */ unsigned char hr[8]; /* +0x0010 08 00 00 00 */ }; struct _XSTATE_FEATURE { unsigned long Offset; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct tagWNDCLASSEXW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char style[4]; /* +0x0004 75 00 00 00 */ unsigned char lpfnWndProc[8]; /* +0x0008 88 2e 00 00 */ unsigned char cbClsExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0014 74 00 00 00 */ unsigned char hInstance[8]; /* +0x0018 4e 1a 00 00 */ unsigned char hIcon[8]; /* +0x0020 2c 29 00 00 */ unsigned char hCursor[8]; /* +0x0028 2c 29 00 00 */ unsigned char hbrBackground[8]; /* +0x0030 ec 2a 00 00 */ unsigned char lpszMenuName[8]; /* +0x0038 27 10 00 00 */ unsigned char lpszClassName[8]; /* +0x0040 27 10 00 00 */ unsigned char hIconSm[8]; /* +0x0048 2c 29 00 00 */ }; struct tagMENUITEMINFOW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char fType[4]; /* +0x0008 75 00 00 00 */ unsigned char fState[4]; /* +0x000c 75 00 00 00 */ unsigned char wID[8]; /* +0x0010 75 00 00 00 */ unsigned char hSubMenu[8]; /* +0x0018 b5 1e 00 00 */ unsigned char hbmpChecked[8]; /* +0x0020 67 21 00 00 */ unsigned char hbmpUnchecked[8]; /* +0x0028 67 21 00 00 */ unsigned long long dwItemData; /* +0x0030 */ unsigned char dwTypeData[8]; /* +0x0038 71 06 00 00 */ unsigned char cch[8]; /* +0x0040 75 00 00 00 */ unsigned char hbmpItem[8]; /* +0x0048 67 21 00 00 */ }; struct _TRACE_GUID_REGISTRATION { unsigned char Guid[8]; /* +0x0000 96 1c 00 00 */ void *RegHandle; /* +0x0008 */ }; struct _s__RTTIClassHierarchyDescriptor { unsigned long signature; /* +0x0000 */ unsigned long attributes; /* +0x0004 */ unsigned long numBaseClasses; /* +0x0008 */ unsigned char pBaseClassArray[8]; /* +0x000c 93 2e 00 00 */ }; struct _PROCESS_MITIGATION_SYSTEM_CALL_DISABLE_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char DisallowWin32kSystemCalls[0]; +0x0000 53 19 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 54 19 00 00 */ }; struct _THREAD_PROFILING_INFORMATION { unsigned long long HardwareCounters; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long Enable; /* +0x000c */ unsigned char PerformanceData[8]; /* +0x0010 99 2e 00 00 */ }; struct _KEY_NAME_INFORMATION { unsigned long NameLength; /* +0x0000 */ unsigned char Name[4]; /* +0x0004 ab 19 00 00 */ }; struct _RTL_PROCESS_HEAPS { unsigned long NumberOfHeaps; /* +0x0000 */ unsigned char Heaps[88]; /* +0x0008 a1 2e 00 00 */ }; struct tagGCP_RESULTSA { unsigned long lStructSize; /* +0x0000 */ char *lpOutString; /* +0x0008 */ unsigned char lpOrder[8]; /* +0x0010 75 06 00 00 */ unsigned char lpDx[8]; /* +0x0018 74 06 00 00 */ unsigned char lpCaretPos[8]; /* +0x0020 74 06 00 00 */ char *lpClass; /* +0x0028 */ unsigned char lpGlyphs[8]; /* +0x0030 71 06 00 00 */ unsigned char nGlyphs[4]; /* +0x0038 75 00 00 00 */ unsigned char nMaxFit[4]; /* +0x003c 74 00 00 00 */ }; struct _KEY_WOW64_FLAGS_INFORMATION { unsigned long UserFlags; /* +0x0000 */ }; struct _RTL_ANSI_STRING_BUFFER { unsigned char String[16]; /* +0x0000 12 21 00 00 */ unsigned char ByteBuffer[48]; /* +0x0010 c8 2e 00 00 */ unsigned char MinimumStaticBufferForTerminalNul[8]; /* +0x0040 d7 18 00 00 */ }; struct tagMETARECORD { unsigned long rdSize; /* +0x0000 */ unsigned short rdFunction; /* +0x0004 */ unsigned char rdParm[2]; /* +0x0006 b1 20 00 00 */ }; struct tagRPC_ERROR_ENUM_HANDLE { unsigned long Signature; /* +0x0000 */ void *CurrentPos; /* +0x0008 */ void *Head; /* +0x0010 */ }; struct _TRANSACTION_NOTIFICATION_PROPAGATE_ARGUMENT { unsigned long PropagationCookie; /* +0x0000 */ unsigned char UOW[16]; /* +0x0004 6b 10 00 00 */ unsigned char TmIdentity[16]; /* +0x0014 6b 10 00 00 */ unsigned long BufferLength; /* +0x0024 */ }; struct tagWNDCLASSEXA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char style[4]; /* +0x0004 75 00 00 00 */ unsigned char lpfnWndProc[8]; /* +0x0008 88 2e 00 00 */ unsigned char cbClsExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0014 74 00 00 00 */ unsigned char hInstance[8]; /* +0x0018 4e 1a 00 00 */ unsigned char hIcon[8]; /* +0x0020 2c 29 00 00 */ unsigned char hCursor[8]; /* +0x0028 2c 29 00 00 */ unsigned char hbrBackground[8]; /* +0x0030 ec 2a 00 00 */ unsigned char lpszMenuName[8]; /* +0x0038 4f 10 00 00 */ unsigned char lpszClassName[8]; /* +0x0040 4f 10 00 00 */ unsigned char hIconSm[8]; /* +0x0048 2c 29 00 00 */ }; struct _UUID_VECTOR { unsigned long Count; /* +0x0000 */ unsigned char Uuid[8]; /* +0x0008 d3 2e 00 00 */ }; struct tagDISPPARAMS { unsigned char rgvarg[8]; /* +0x0000 a6 21 00 00 */ long *rgdispidNamedArgs; /* +0x0008 */ unsigned char cArgs[4]; /* +0x0010 75 00 00 00 */ unsigned char cNamedArgs[4]; /* +0x0014 75 00 00 00 */ }; struct _devicemodeW { unsigned char dmDeviceName[64]; /* +0x0000 89 1f 00 00 */ unsigned short dmSpecVersion; /* +0x0040 */ unsigned short dmDriverVersion; /* +0x0042 */ unsigned short dmSize; /* +0x0044 */ unsigned short dmDriverExtra; /* +0x0046 */ unsigned long dmFields; /* +0x0048 */ short dmOrientation; /* +0x004c */ short dmPaperSize; /* +0x004e */ short dmPaperLength; /* +0x0050 */ short dmPaperWidth; /* +0x0052 */ short dmScale; /* +0x0054 */ short dmCopies; /* +0x0056 */ short dmDefaultSource; /* +0x0058 */ short dmPrintQuality; /* +0x005a */ unsigned char dmPosition[8]; /* +0x004c 6a 19 00 00 */ unsigned long dmDisplayOrientation; /* +0x0054 */ unsigned long dmDisplayFixedOutput; /* +0x0058 */ short dmColor; /* +0x005c */ short dmDuplex; /* +0x005e */ short dmYResolution; /* +0x0060 */ short dmTTOption; /* +0x0062 */ short dmCollate; /* +0x0064 */ unsigned char dmFormName[64]; /* +0x0066 89 1f 00 00 */ unsigned short dmLogPixels; /* +0x00a6 */ unsigned long dmBitsPerPel; /* +0x00a8 */ unsigned long dmPelsWidth; /* +0x00ac */ unsigned long dmPelsHeight; /* +0x00b0 */ unsigned long dmDisplayFlags; /* +0x00b4 */ unsigned long dmNup; /* +0x00b4 */ unsigned long dmDisplayFrequency; /* +0x00b8 */ unsigned long dmICMMethod; /* +0x00bc */ unsigned long dmICMIntent; /* +0x00c0 */ unsigned long dmMediaType; /* +0x00c4 */ unsigned long dmDitherType; /* +0x00c8 */ unsigned long dmReserved1; /* +0x00cc */ unsigned long dmReserved2; /* +0x00d0 */ unsigned long dmPanningWidth; /* +0x00d4 */ unsigned long dmPanningHeight; /* +0x00d8 */ }; struct _REPAIR_DEFERRED_EXTENTS_OUTPUT { unsigned long Status; /* +0x0000 */ unsigned long ErrorExtentIndex; /* +0x0004 */ unsigned char ErrorExtent[16]; /* +0x0008 e7 28 00 00 */ }; struct tagEMRTEXT { unsigned char ptlReference[8]; /* +0x0000 6a 19 00 00 */ unsigned long nChars; /* +0x0008 */ unsigned long offString; /* +0x000c */ unsigned long fOptions; /* +0x0010 */ unsigned char rcl[16]; /* +0x0014 b5 18 00 00 */ unsigned long offDx; /* +0x0024 */ }; struct tagHARDWAREINPUT { unsigned long uMsg; /* +0x0000 */ unsigned short wParamL; /* +0x0004 */ unsigned short wParamH; /* +0x0006 */ }; struct tagWINDOWINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcWindow[16]; /* +0x0004 06 1a 00 00 */ unsigned char rcClient[16]; /* +0x0014 06 1a 00 00 */ unsigned long dwStyle; /* +0x0024 */ unsigned long dwExStyle; /* +0x0028 */ unsigned long dwWindowStatus; /* +0x002c */ unsigned char cxWindowBorders[4]; /* +0x0030 75 00 00 00 */ unsigned char cyWindowBorders[4]; /* +0x0034 75 00 00 00 */ unsigned short atomWindowType; /* +0x0038 */ unsigned short wCreatorVersion; /* +0x003a */ }; struct _heapinfo { unsigned char _pentry[8]; /* +0x0000 74 06 00 00 */ unsigned long long _size; /* +0x0008 */ unsigned char _useflag[8]; /* +0x0010 74 00 00 00 */ }; struct _SCONTEXT_QUEUE { unsigned long NumberOfObjects; /* +0x0000 */ unsigned char ArrayOfObjects[8]; /* +0x0008 f2 2e 00 00 */ }; struct tagWINDOWPLACEMENT { unsigned char length[4]; /* +0x0000 75 00 00 00 */ unsigned char flags[4]; /* +0x0004 75 00 00 00 */ unsigned char showCmd[4]; /* +0x0008 75 00 00 00 */ unsigned char ptMinPosition[8]; /* +0x000c 1b 1a 00 00 */ unsigned char ptMaxPosition[8]; /* +0x0014 1b 1a 00 00 */ unsigned char rcNormalPosition[16]; /* +0x001c 06 1a 00 00 */ }; struct _TEB_ACTIVE_FRAME_CONTEXT_EX { unsigned char BasicContext[16]; /* +0x0000 b1 29 00 00 */ unsigned char SourceLocation[8]; /* +0x0010 4f 10 00 00 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V3_A { void *TransportCredentials; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned char *ServerCertificateSubject; /* +0x0020 */ void *ProxyCredentials; /* +0x0028 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x0030 */ unsigned long *ProxyAuthnSchemes; /* +0x0038 */ }; struct _JOBOBJECT_BASIC_LIMIT_INFORMATION { unsigned char PerProcessUserTimeLimit[8]; /* +0x0000 0e 19 00 00 */ unsigned char PerJobUserTimeLimit[8]; /* +0x0008 0e 19 00 00 */ unsigned long LimitFlags; /* +0x0010 */ unsigned long long MinimumWorkingSetSize; /* +0x0018 */ unsigned long long MaximumWorkingSetSize; /* +0x0020 */ unsigned long ActiveProcessLimit; /* +0x0028 */ unsigned long long Affinity; /* +0x0030 */ unsigned long PriorityClass; /* +0x0038 */ unsigned long SchedulingClass; /* +0x003c */ }; struct tagVS_FIXEDFILEINFO { unsigned long dwSignature; /* +0x0000 */ unsigned long dwStrucVersion; /* +0x0004 */ unsigned long dwFileVersionMS; /* +0x0008 */ unsigned long dwFileVersionLS; /* +0x000c */ unsigned long dwProductVersionMS; /* +0x0010 */ unsigned long dwProductVersionLS; /* +0x0014 */ unsigned long dwFileFlagsMask; /* +0x0018 */ unsigned long dwFileFlags; /* +0x001c */ unsigned long dwFileOS; /* +0x0020 */ unsigned long dwFileType; /* +0x0024 */ unsigned long dwFileSubtype; /* +0x0028 */ unsigned long dwFileDateMS; /* +0x002c */ unsigned long dwFileDateLS; /* +0x0030 */ }; struct _EXCEPTION_RECORD32 { long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned long ExceptionRecord; /* +0x0008 */ unsigned long ExceptionAddress; /* +0x000c */ unsigned long NumberParameters; /* +0x0010 */ unsigned char ExceptionInformation[60]; /* +0x0014 2d 2f 00 00 */ }; struct tagMENUITEMINFOA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fMask[4]; /* +0x0004 75 00 00 00 */ unsigned char fType[4]; /* +0x0008 75 00 00 00 */ unsigned char fState[4]; /* +0x000c 75 00 00 00 */ unsigned char wID[8]; /* +0x0010 75 00 00 00 */ unsigned char hSubMenu[8]; /* +0x0018 b5 1e 00 00 */ unsigned char hbmpChecked[8]; /* +0x0020 67 21 00 00 */ unsigned char hbmpUnchecked[8]; /* +0x0028 67 21 00 00 */ unsigned long long dwItemData; /* +0x0030 */ char *dwTypeData; /* +0x0038 */ unsigned char cch[8]; /* +0x0040 75 00 00 00 */ unsigned char hbmpItem[8]; /* +0x0048 67 21 00 00 */ }; struct tagSAFEARRAY { unsigned short cDims; /* +0x0000 */ unsigned short fFeatures; /* +0x0002 */ unsigned long cbElements; /* +0x0004 */ unsigned long cLocks; /* +0x0008 */ void *pvData; /* +0x0010 */ unsigned char rgsabound[8]; /* +0x0018 d4 28 00 00 */ }; struct tagEMREXTCREATEPEN { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihPen; /* +0x0008 */ unsigned long offBmi; /* +0x000c */ unsigned long cbBmi; /* +0x0010 */ unsigned long offBits; /* +0x0014 */ unsigned long cbBits; /* +0x0018 */ unsigned char elp[28]; /* +0x001c 01 27 00 00 */ }; struct _IMAGE_RELOCATION { unsigned long VirtualAddress; /* +0x0000 */ unsigned long RelocCount; /* +0x0000 */ unsigned long SymbolTableIndex; /* +0x0004 */ unsigned short Type; /* +0x0008 */ }; struct tagWTSSESSION_NOTIFICATION { unsigned long cbSize; /* +0x0000 */ unsigned long dwSessionId; /* +0x0004 */ }; struct _TXFS_LIST_TRANSACTION_LOCKED_FILES { unsigned char KtmTransaction[16]; /* +0x0000 6b 10 00 00 */ unsigned long long NumberOfFiles; /* +0x0010 */ unsigned long long BufferSizeRequired; /* +0x0018 */ unsigned long long Offset; /* +0x0020 */ }; struct _FILE_ATTRIBUTE_CACHE_VALUE { long Status; /* +0x0000 */ unsigned short Size; /* +0x0004 */ unsigned short RequiredSize; /* +0x0006 */ unsigned char Data[4]; /* +0x0008 d7 18 00 00 */ }; struct _KSYSTEM_TIME { unsigned long LowPart; /* +0x0000 */ long High1Time; /* +0x0004 */ long High2Time; /* +0x0008 */ }; struct _LOAD_ASDATA_TABLE { void *Module; /* +0x0000 */ unsigned char FilePath[8]; /* +0x0008 71 06 00 00 */ unsigned long long Size; /* +0x0010 */ void *Handle; /* +0x0018 */ long RefCount; /* +0x0020 */ unsigned char EntryPointActivationContext[8]; /* +0x0028 e7 20 00 00 */ }; struct _s__RTTIBaseClassDescriptor2 { unsigned char pTypeDescriptor[8]; /* +0x0000 32 23 00 00 */ unsigned long numContainedBases; /* +0x0008 */ unsigned char where[12]; /* +0x000c 5c 2f 00 00 */ unsigned long attributes; /* +0x0018 */ unsigned char pClassDescriptor[8]; /* +0x001c 35 23 00 00 */ }; struct _PS_CPU_QUOTA_QUERY_INFORMATION { unsigned long SessionCount; /* +0x0000 */ unsigned char SessionInformation[8]; /* +0x0004 60 2f 00 00 */ }; struct _FILE_MOVE_CLUSTER_INFORMATION { unsigned long ClusterCount; /* +0x0000 */ void *RootDirectory; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned char FileName[4]; /* +0x0014 ab 19 00 00 */ }; struct _QUERY_SERVICE_LOCK_STATUSW { unsigned long fIsLocked; /* +0x0000 */ unsigned char lpLockOwner[8]; /* +0x0008 71 06 00 00 */ unsigned long dwLockDuration; /* +0x0010 */ }; struct _FILE_VALID_DATA_LENGTH_INFORMATION { unsigned char ValidDataLength[8]; /* +0x0000 0e 19 00 00 */ }; struct _MODEMDEVCAPS { unsigned long dwActualSize; /* +0x0000 */ unsigned long dwRequiredSize; /* +0x0004 */ unsigned long dwDevSpecificOffset; /* +0x0008 */ unsigned long dwDevSpecificSize; /* +0x000c */ unsigned long dwModemProviderVersion; /* +0x0010 */ unsigned long dwModemManufacturerOffset; /* +0x0014 */ unsigned long dwModemManufacturerSize; /* +0x0018 */ unsigned long dwModemModelOffset; /* +0x001c */ unsigned long dwModemModelSize; /* +0x0020 */ unsigned long dwModemVersionOffset; /* +0x0024 */ unsigned long dwModemVersionSize; /* +0x0028 */ unsigned long dwDialOptions; /* +0x002c */ unsigned long dwCallSetupFailTimer; /* +0x0030 */ unsigned long dwInactivityTimeout; /* +0x0034 */ unsigned long dwSpeakerVolume; /* +0x0038 */ unsigned long dwSpeakerMode; /* +0x003c */ unsigned long dwModemOptions; /* +0x0040 */ unsigned long dwMaxDTERate; /* +0x0044 */ unsigned long dwMaxDCERate; /* +0x0048 */ unsigned char abVariablePortion[4]; /* +0x004c d7 18 00 00 */ }; struct tagPROPVARIANT { unsigned short vt; /* +0x0000 */ unsigned short wReserved1; /* +0x0002 */ unsigned short wReserved2; /* +0x0004 */ unsigned short wReserved3; /* +0x0006 */ char cVal; /* +0x0008 */ unsigned char bVal; /* +0x0008 */ short iVal; /* +0x0008 */ unsigned short uiVal; /* +0x0008 */ long lVal; /* +0x0008 */ unsigned long ulVal; /* +0x0008 */ /* unsigned char intVal[0]; +0x0008 74 00 00 00 */ /* unsigned char uintVal[0]; +0x0008 75 00 00 00 */ /* unsigned char hVal[0]; +0x0008 0e 19 00 00 */ /* unsigned char uhVal[0]; +0x0008 9e 2a 00 00 */ /* unsigned char fltVal[0]; +0x0008 40 00 00 00 */ /* unsigned char dblVal[0]; +0x0008 41 00 00 00 */ short boolVal; /* +0x0008 */ long scode; /* +0x0008 */ /* unsigned char cyVal[0]; +0x0008 75 23 00 00 */ /* unsigned char date[0]; +0x0008 41 00 00 00 */ /* unsigned char filetime[0]; +0x0008 0d 10 00 00 */ /* unsigned char puuid[0]; +0x0008 26 1c 00 00 */ /* unsigned char pclipdata[0]; +0x0008 78 2f 00 00 */ /* unsigned char bstrVal[0]; +0x0008 71 06 00 00 */ /* unsigned char bstrblobVal[0]; +0x0008 79 2f 00 00 */ /* unsigned char blob[0]; +0x0008 7a 2f 00 00 */ char *pszVal; /* +0x0008 */ /* unsigned char pwszVal[0]; +0x0008 71 06 00 00 */ /* unsigned char punkVal[0]; +0x0008 23 1c 00 00 */ /* unsigned char pdispVal[0]; +0x0008 7b 2f 00 00 */ /* unsigned char pStream[0]; +0x0008 da 2d 00 00 */ /* unsigned char pStorage[0]; +0x0008 d1 1f 00 00 */ /* unsigned char pVersionedStream[0]; +0x0008 7d 2f 00 00 */ /* unsigned char parray[0]; +0x0008 7f 2f 00 00 */ /* unsigned char cac[0]; +0x0008 80 2f 00 00 */ /* unsigned char caub[0]; +0x0008 81 2f 00 00 */ /* unsigned char cai[0]; +0x0008 82 2f 00 00 */ /* unsigned char caui[0]; +0x0008 83 2f 00 00 */ /* unsigned char cal[0]; +0x0008 84 2f 00 00 */ /* unsigned char caul[0]; +0x0008 85 2f 00 00 */ /* unsigned char cah[0]; +0x0008 86 2f 00 00 */ /* unsigned char cauh[0]; +0x0008 87 2f 00 00 */ /* unsigned char caflt[0]; +0x0008 88 2f 00 00 */ /* unsigned char cadbl[0]; +0x0008 89 2f 00 00 */ /* unsigned char cabool[0]; +0x0008 8a 2f 00 00 */ /* unsigned char cascode[0]; +0x0008 8b 2f 00 00 */ /* unsigned char cacy[0]; +0x0008 8c 2f 00 00 */ /* unsigned char cadate[0]; +0x0008 8d 2f 00 00 */ /* unsigned char cafiletime[0]; +0x0008 8e 2f 00 00 */ /* unsigned char cauuid[0]; +0x0008 8f 2f 00 00 */ /* unsigned char caclipdata[0]; +0x0008 90 2f 00 00 */ /* unsigned char cabstr[0]; +0x0008 91 2f 00 00 */ /* unsigned char cabstrblob[0]; +0x0008 92 2f 00 00 */ /* unsigned char calpstr[0]; +0x0008 93 2f 00 00 */ /* unsigned char calpwstr[0]; +0x0008 94 2f 00 00 */ /* unsigned char capropvar[0]; +0x0008 95 2f 00 00 */ char *pcVal; /* +0x0008 */ unsigned char *pbVal; /* +0x0008 */ short *piVal; /* +0x0008 */ unsigned short *puiVal; /* +0x0008 */ long *plVal; /* +0x0008 */ unsigned long *pulVal; /* +0x0008 */ /* unsigned char pintVal[0]; +0x0008 74 06 00 00 */ /* unsigned char puintVal[0]; +0x0008 75 06 00 00 */ /* unsigned char pfltVal[0]; +0x0008 40 06 00 00 */ /* unsigned char pdblVal[0]; +0x0008 41 06 00 00 */ short *pboolVal; /* +0x0008 */ /* unsigned char pdecVal[0]; +0x0008 ed 26 00 00 */ long *pscode; /* +0x0008 */ /* unsigned char pcyVal[0]; +0x0008 76 23 00 00 */ /* unsigned char pdate[0]; +0x0008 41 06 00 00 */ /* unsigned char pbstrVal[0]; +0x0008 2a 10 00 00 */ /* unsigned char ppunkVal[0]; +0x0008 85 1c 00 00 */ /* unsigned char ppdispVal[0]; +0x0008 96 2f 00 00 */ /* unsigned char pparray[0]; +0x0008 97 2f 00 00 */ /* unsigned char pvarVal[-8]; +0x0008 10 25 00 00 */ unsigned char decVal[24]; /* +0x0000 ec 26 00 00 */ }; struct _RTL_STACK_TRACE_DATABASE_CREATE { void *CommitBase; /* +0x0000 */ unsigned long long CommitSize; /* +0x0008 */ unsigned long long ReserveSize; /* +0x0010 */ }; struct _MOUSE_EVENT_RECORD { unsigned char dwMousePosition[4]; /* +0x0000 6a 21 00 00 */ unsigned long dwButtonState; /* +0x0004 */ unsigned long dwControlKeyState; /* +0x0008 */ unsigned long dwEventFlags; /* +0x000c */ }; struct _LIST_ENTRY { unsigned char Flink[8]; /* +0x0000 1c 2e 00 00 */ unsigned char Blink[8]; /* +0x0008 1c 2e 00 00 */ }; struct _STRING32 { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned long Buffer; /* +0x0004 */ }; struct _KLDR_DATA_TABLE_ENTRY64 { unsigned char InLoadOrderLinks[16]; /* +0x0000 65 25 00 00 */ unsigned long long __Undefined1; /* +0x0010 */ unsigned long long __Undefined2; /* +0x0018 */ unsigned long long __Undefined3; /* +0x0020 */ unsigned long long NonPagedDebugInfo; /* +0x0028 */ unsigned long long DllBase; /* +0x0030 */ unsigned long long EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 b7 2f 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 b7 2f 00 00 */ unsigned long Flags; /* +0x0068 */ unsigned short LoadCount; /* +0x006c */ unsigned short __Undefined5; /* +0x006e */ unsigned long long __Undefined6; /* +0x0070 */ unsigned long CheckSum; /* +0x0078 */ unsigned long __padding1; /* +0x007c */ unsigned long TimeDateStamp; /* +0x0080 */ unsigned long __padding2; /* +0x0084 */ }; struct _FILE_BOTH_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 0e 19 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 0e 19 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 0e 19 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 0e 19 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ char ShortNameLength; /* +0x0044 */ unsigned char ShortName[24]; /* +0x0046 bb 2f 00 00 */ unsigned char FileName[2]; /* +0x005e ab 19 00 00 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_HITCOUNT { unsigned long Hits; /* +0x0000 */ unsigned char PercentFrequency; /* +0x0004 */ }; struct _SYSTEM_VERIFIER_COUNTERS_INFORMATION { unsigned char Legacy[128]; /* +0x0000 c0 2f 00 00 */ unsigned long RaiseIrqls; /* +0x0080 */ unsigned long AcquireSpinLocks; /* +0x0084 */ unsigned long SynchronizeExecutions; /* +0x0088 */ unsigned long AllocationsWithNoTag; /* +0x008c */ unsigned long AllocationsFailed; /* +0x0090 */ unsigned long AllocationsFailedDeliberately; /* +0x0094 */ unsigned long long LockedBytes; /* +0x0098 */ unsigned long long PeakLockedBytes; /* +0x00a0 */ unsigned long long MappedLockedBytes; /* +0x00a8 */ unsigned long long PeakMappedLockedBytes; /* +0x00b0 */ unsigned long long MappedIoSpaceBytes; /* +0x00b8 */ unsigned long long PeakMappedIoSpaceBytes; /* +0x00c0 */ unsigned long long PagesForMdlBytes; /* +0x00c8 */ unsigned long long PeakPagesForMdlBytes; /* +0x00d0 */ unsigned long long ContiguousMemoryBytes; /* +0x00d8 */ unsigned long long PeakContiguousMemoryBytes; /* +0x00e0 */ }; struct _SYSTEM_EXTENDED_THREAD_INFORMATION { unsigned char ThreadInfo[80]; /* +0x0000 c5 2f 00 00 */ void *StackBase; /* +0x0050 */ void *StackLimit; /* +0x0058 */ void *Win32StartAddress; /* +0x0060 */ void *TebBase; /* +0x0068 */ unsigned long long Reserved2; /* +0x0070 */ unsigned long long Reserved3; /* +0x0078 */ unsigned long long Reserved4; /* +0x0080 */ }; struct _RTL_RELATIVE_NAME_U { unsigned char RelativeName[16]; /* +0x0000 c1 18 00 00 */ void *ContainingDirectory; /* +0x0010 */ unsigned char CurDirRef[8]; /* +0x0018 cb 2f 00 00 */ }; struct _MIDL_STUB_MESSAGE { unsigned char RpcMsg[8]; /* +0x0000 d5 2f 00 00 */ unsigned char *Buffer; /* +0x0008 */ unsigned char *BufferStart; /* +0x0010 */ unsigned char *BufferEnd; /* +0x0018 */ unsigned char *BufferMark; /* +0x0020 */ unsigned long BufferLength; /* +0x0028 */ unsigned long MemorySize; /* +0x002c */ unsigned char *Memory; /* +0x0030 */ unsigned char IsClient; /* +0x0038 */ unsigned char Pad; /* +0x0039 */ unsigned short uFlags2; /* +0x003a */ unsigned char ReuseBuffer[4]; /* +0x003c 74 00 00 00 */ unsigned char pAllocAllNodesContext[8]; /* +0x0040 d7 2f 00 00 */ unsigned char pPointerQueueState[8]; /* +0x0048 d9 2f 00 00 */ unsigned char IgnoreEmbeddedPointers[8]; /* +0x0050 74 00 00 00 */ unsigned char *PointerBufferMark; /* +0x0058 */ unsigned char CorrDespIncrement; /* +0x0060 */ unsigned char uFlags; /* +0x0061 */ unsigned short UniquePtrCount; /* +0x0062 */ unsigned long long MaxCount; /* +0x0068 */ unsigned long Offset; /* +0x0070 */ unsigned long ActualCount; /* +0x0074 */ unsigned char pfnAllocate[8]; /* +0x0078 1e 11 00 00 */ unsigned char pfnFree[8]; /* +0x0080 21 11 00 00 */ unsigned char *StackTop; /* +0x0088 */ unsigned char *pPresentedType; /* +0x0090 */ unsigned char *pTransmitType; /* +0x0098 */ void *SavedHandle; /* +0x00a0 */ unsigned char StubDesc[8]; /* +0x00a8 dc 2f 00 00 */ unsigned char FullPtrXlatTables[8]; /* +0x00b0 de 2f 00 00 */ unsigned long FullPtrRefId; /* +0x00b8 */ unsigned long PointerLength; /* +0x00bc */ /* unsigned char fInDontFree[0]; +0x00c0 bc 2a 00 00 */ /* unsigned char fDontCallFreeInst[0]; +0x00c0 bd 2a 00 00 */ /* unsigned char fInOnlyParam[0]; +0x00c0 df 2f 00 00 */ /* unsigned char fHasReturn[0]; +0x00c0 e0 2f 00 00 */ /* unsigned char fHasExtensions[0]; +0x00c0 e1 2f 00 00 */ /* unsigned char fHasNewCorrDesc[0]; +0x00c0 e2 2f 00 00 */ /* unsigned char fIsIn[0]; +0x00c0 e3 2f 00 00 */ /* unsigned char fIsOut[0]; +0x00c0 e4 2f 00 00 */ /* unsigned char fIsOicf[0]; +0x00c0 e5 2f 00 00 */ /* unsigned char fBufferValid[0]; +0x00c0 e6 2f 00 00 */ /* unsigned char fHasMemoryValidateCallback[0]; +0x00c0 e7 2f 00 00 */ /* unsigned char fInFree[0]; +0x00c0 e8 2f 00 00 */ /* unsigned char fNeedMCCP[0]; +0x00c0 e9 2f 00 00 */ /* unsigned char fUnused[0]; +0x00c0 ea 2f 00 00 */ unsigned char fUnused2[4]; /* +0x00c0 eb 2f 00 00 */ unsigned long dwDestContext; /* +0x00c4 */ void *pvDestContext; /* +0x00c8 */ unsigned char SavedContextHandles[8]; /* +0x00d0 f2 2e 00 00 */ long ParamNumber; /* +0x00d8 */ unsigned char pRpcChannelBuffer[8]; /* +0x00e0 7e 22 00 00 */ unsigned char pArrayInfo[8]; /* +0x00e8 ed 2f 00 00 */ unsigned long *SizePtrCountArray; /* +0x00f0 */ unsigned long *SizePtrOffsetArray; /* +0x00f8 */ unsigned long *SizePtrLengthArray; /* +0x0100 */ void *pArgQueue; /* +0x0108 */ unsigned long dwStubPhase; /* +0x0110 */ void *LowStackMark; /* +0x0118 */ unsigned char pAsyncMsg[8]; /* +0x0120 ef 2f 00 00 */ unsigned char pCorrInfo[8]; /* +0x0128 bb 1e 00 00 */ unsigned char *pCorrMemory; /* +0x0130 */ void *pMemoryList; /* +0x0138 */ long long pCSInfo; /* +0x0140 */ unsigned char *ConformanceMark; /* +0x0148 */ unsigned char *VarianceMark; /* +0x0150 */ long long Unused; /* +0x0158 */ unsigned char pContext[8]; /* +0x0160 f1 2f 00 00 */ void *ContextHandleHash; /* +0x0168 */ void *pUserMarshalList; /* +0x0170 */ long long Reserved51_3; /* +0x0178 */ long long Reserved51_4; /* +0x0180 */ long long Reserved51_5; /* +0x0188 */ }; struct _CONNECTDLGSTRUCTW { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[8]; /* +0x0008 97 13 00 00 */ unsigned char lpConnRes[8]; /* +0x0010 42 2f 00 00 */ unsigned long dwFlags; /* +0x0018 */ unsigned long dwDevNum; /* +0x001c */ }; struct _FILEOFFSET_INFORMATION { /* unsigned char DontUse[0]; +0x0000 11 30 00 00 */ /* unsigned char Offset[0]; +0x0000 12 30 00 00 */ unsigned char Reserved[8]; /* +0x0000 13 30 00 00 */ }; struct tagEMRINVERTRGN { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long cbRgnData; /* +0x0018 */ unsigned char RgnData[4]; /* +0x001c d7 18 00 00 */ }; struct tagSOLE_AUTHENTICATION_SERVICE { unsigned long dwAuthnSvc; /* +0x0000 */ unsigned long dwAuthzSvc; /* +0x0004 */ unsigned char pPrincipalName[8]; /* +0x0008 71 06 00 00 */ unsigned char hr[8]; /* +0x0010 08 00 00 00 */ }; struct _IMAGE_SEPARATE_DEBUG_HEADER { unsigned short Signature; /* +0x0000 */ unsigned short Flags; /* +0x0002 */ unsigned short Machine; /* +0x0004 */ unsigned short Characteristics; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned long CheckSum; /* +0x000c */ unsigned long ImageBase; /* +0x0010 */ unsigned long SizeOfImage; /* +0x0014 */ unsigned long NumberOfSections; /* +0x0018 */ unsigned long ExportedNamesSize; /* +0x001c */ unsigned long DebugDirectorySize; /* +0x0020 */ unsigned long SectionAlignment; /* +0x0024 */ unsigned char Reserved[8]; /* +0x0028 cc 1f 00 00 */ }; struct _BOOT_AREA_INFO:: { unsigned char Offset[8]; /* +0x0000 0e 19 00 00 */ }; struct _MEMORY_SCRUB_INFORMATION { void *Handle; /* +0x0000 */ unsigned long long PagesScrubbed; /* +0x0008 */ }; struct tagCOMPAREITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char hwndItem[8]; /* +0x0008 97 13 00 00 */ unsigned char itemID1[8]; /* +0x0010 75 00 00 00 */ unsigned long long itemData1; /* +0x0018 */ unsigned char itemID2[8]; /* +0x0020 75 00 00 00 */ unsigned long long itemData2; /* +0x0028 */ unsigned long dwLocaleId; /* +0x0030 */ }; struct tagPOINTER_DEVICE_PROPERTY { unsigned char logicalMin[4]; /* +0x0000 74 00 00 00 */ unsigned char logicalMax[4]; /* +0x0004 74 00 00 00 */ unsigned char physicalMin[4]; /* +0x0008 74 00 00 00 */ unsigned char physicalMax[4]; /* +0x000c 74 00 00 00 */ unsigned char unit[4]; /* +0x0010 75 00 00 00 */ unsigned char unitExponent[4]; /* +0x0014 75 00 00 00 */ unsigned short usagePageId; /* +0x0018 */ unsigned short usageId; /* +0x001a */ }; struct tagWNODE_METHOD_ITEM { unsigned char WnodeHeader[48]; /* +0x0000 47 30 00 00 */ unsigned long OffsetInstanceName; /* +0x0030 */ unsigned long InstanceIndex; /* +0x0034 */ unsigned long MethodId; /* +0x0038 */ unsigned long DataBlockOffset; /* +0x003c */ unsigned long SizeDataBlock; /* +0x0040 */ unsigned char VariableData[4]; /* +0x0044 48 30 00 00 */ }; struct _CONTEXT_CHUNK { long Offset; /* +0x0000 */ unsigned long Length; /* +0x0004 */ }; struct _FILE_LINK_INFORMATION { unsigned char ReplaceIfExists; /* +0x0000 */ void *RootDirectory; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned char FileName[4]; /* +0x0014 ab 19 00 00 */ }; struct _JOURNAL_SET_KEY_USER_FLAGS_INFORMATION { unsigned char Action[8]; /* +0x0000 fd 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 c1 18 00 00 */ unsigned long OldFlags; /* +0x0028 */ unsigned long NewFlags; /* +0x002c */ }; struct _ENUM_SERVICE_STATUSA { char *lpServiceName; /* +0x0000 */ char *lpDisplayName; /* +0x0008 */ unsigned char ServiceStatus[32]; /* +0x0010 2c 2e 00 00 */ }; struct _SYSTEM_HIBERFILE_INFORMATION { unsigned long NumberOfMcbPairs; /* +0x0000 */ unsigned char Mcb[8]; /* +0x0008 9a 2c 00 00 */ }; struct _OSVERSIONINFOA { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[128]; /* +0x0014 76 20 00 00 */ }; struct tagEMRRESTOREDC { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ long iRelative; /* +0x0008 */ }; struct tagGUITHREADINFO { unsigned long cbSize; /* +0x0000 */ unsigned long flags; /* +0x0004 */ unsigned char hwndActive[8]; /* +0x0008 97 13 00 00 */ unsigned char hwndFocus[8]; /* +0x0010 97 13 00 00 */ unsigned char hwndCapture[8]; /* +0x0018 97 13 00 00 */ unsigned char hwndMenuOwner[8]; /* +0x0020 97 13 00 00 */ unsigned char hwndMoveSize[8]; /* +0x0028 97 13 00 00 */ unsigned char hwndCaret[8]; /* +0x0030 97 13 00 00 */ unsigned char rcCaret[16]; /* +0x0038 06 1a 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_V1 { unsigned char Name[8]; /* +0x0000 71 06 00 00 */ unsigned short ValueType; /* +0x0008 */ unsigned short Reserved; /* +0x000a */ unsigned long Flags; /* +0x000c */ unsigned long ValueCount; /* +0x0010 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_V1:: { long long *pInt64; /* +0x0000 */ unsigned long long *pUint64; /* +0x0000 */ /* unsigned char ppString[0]; +0x0000 2a 10 00 00 */ /* unsigned char pFqbn[0]; +0x0000 f9 23 00 00 */ unsigned char pOctetString[8]; /* +0x0000 2b 22 00 00 */ }; struct _GDI_TEB_BATCH { unsigned long Offset; /* +0x0000 */ unsigned long long HDC; /* +0x0008 */ unsigned char Buffer[1240]; /* +0x0010 a2 30 00 00 */ }; struct _DISPLAY_DEVICEW { unsigned long cb; /* +0x0000 */ unsigned char DeviceName[64]; /* +0x0004 89 1f 00 00 */ unsigned char DeviceString[256]; /* +0x0044 8b 1f 00 00 */ unsigned long StateFlags; /* +0x0144 */ unsigned char DeviceID[256]; /* +0x0148 8b 1f 00 00 */ unsigned char DeviceKey[256]; /* +0x0248 8b 1f 00 00 */ }; struct _UMS_CREATE_THREAD_ATTRIBUTES { unsigned long UmsVersion; /* +0x0000 */ /* unsigned char RtlUmsContext[0]; +0x0008 2d 21 00 00 */ void *UmsContext; /* +0x0008 */ /* unsigned char RtlUmsCompletionList[0]; +0x0010 b8 1f 00 00 */ void *UmsCompletionList; /* +0x0010 */ }; struct _CSV_QUERY_REDIRECT_STATE { unsigned long MdsNodeId; /* +0x0000 */ unsigned long DsNodeId; /* +0x0004 */ unsigned char FileRedirected; /* +0x0008 */ }; struct _SERVICE_NOTIFY_1 { unsigned long dwVersion; /* +0x0000 */ unsigned char pfnNotifyCallback[8]; /* +0x0008 21 11 00 00 */ void *pContext; /* +0x0010 */ unsigned long dwNotificationStatus; /* +0x0018 */ unsigned char ServiceStatus[36]; /* +0x001c 55 20 00 00 */ }; struct tagCAPROPVARIANT { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 10 25 00 00 */ }; struct _FILE_ATTRIBUTE_TAG_INFORMATION { unsigned long FileAttributes; /* +0x0000 */ unsigned long ReparseTag; /* +0x0004 */ }; struct _RTL_HANDLE_TABLE { unsigned long MaximumNumberOfHandles; /* +0x0000 */ unsigned long SizeOfHandleTableEntry; /* +0x0004 */ unsigned long UseHeap; /* +0x0008 */ unsigned long TableSize; /* +0x000c */ unsigned char FreeHandles[8]; /* +0x0010 ce 30 00 00 */ unsigned char CommittedHandles[8]; /* +0x0018 ce 30 00 00 */ unsigned char UnCommittedHandles[8]; /* +0x0020 ce 30 00 00 */ unsigned char MaxReservedHandles[8]; /* +0x0028 ce 30 00 00 */ }; struct _SYSTEMTIME { unsigned short wYear; /* +0x0000 */ unsigned short wMonth; /* +0x0002 */ unsigned short wDayOfWeek; /* +0x0004 */ unsigned short wDay; /* +0x0006 */ unsigned short wHour; /* +0x0008 */ unsigned short wMinute; /* +0x000a */ unsigned short wSecond; /* +0x000c */ unsigned short wMilliseconds; /* +0x000e */ }; struct _FILE_ALLOCATION_INFORMATION { unsigned char AllocationSize[8]; /* +0x0000 0e 19 00 00 */ }; struct tagKEYBDINPUT { unsigned short wVk; /* +0x0000 */ unsigned short wScan; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned long time; /* +0x0008 */ unsigned long long dwExtraInfo; /* +0x0010 */ }; struct _BOOT_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Id; /* +0x0008 */ unsigned long Attributes; /* +0x000c */ unsigned long FriendlyNameOffset; /* +0x0010 */ unsigned long BootFilePathOffset; /* +0x0014 */ unsigned long OsOptionsLength; /* +0x0018 */ unsigned char OsOptions[4]; /* +0x001c d7 18 00 00 */ }; struct _RTL_DEBUG_INFORMATION { void *SectionHandleClient; /* +0x0000 */ void *ViewBaseClient; /* +0x0008 */ void *ViewBaseTarget; /* +0x0010 */ unsigned long long ViewBaseDelta; /* +0x0018 */ void *EventPairClient; /* +0x0020 */ void *EventPairTarget; /* +0x0028 */ void *TargetProcessId; /* +0x0030 */ void *TargetThreadHandle; /* +0x0038 */ unsigned long Flags; /* +0x0040 */ unsigned long long OffsetFree; /* +0x0048 */ unsigned long long CommitSize; /* +0x0050 */ unsigned long long ViewSize; /* +0x0058 */ /* unsigned char Modules[0]; +0x0060 df 29 00 00 */ unsigned char ModulesEx[8]; /* +0x0060 e8 30 00 00 */ unsigned char BackTraces[8]; /* +0x0068 51 25 00 00 */ unsigned char Heaps[8]; /* +0x0070 ea 30 00 00 */ unsigned char Locks[8]; /* +0x0078 ec 30 00 00 */ void *SpecificHeap; /* +0x0080 */ void *TargetProcessHandle; /* +0x0088 */ unsigned char VerifierOptions[8]; /* +0x0090 ee 30 00 00 */ void *ProcessHeap; /* +0x0098 */ void *CriticalSectionHandle; /* +0x00a0 */ void *CriticalSectionOwnerThread; /* +0x00a8 */ unsigned char Reserved[32]; /* +0x00b0 ef 30 00 00 */ }; struct tagCURSORINFO { unsigned long cbSize; /* +0x0000 */ unsigned long flags; /* +0x0004 */ unsigned char hCursor[8]; /* +0x0008 2c 29 00 00 */ unsigned char ptScreenPos[8]; /* +0x0010 1b 1a 00 00 */ }; struct value_entA { char *ve_valuename; /* +0x0000 */ unsigned long ve_valuelen; /* +0x0008 */ unsigned long long ve_valueptr; /* +0x0010 */ unsigned long ve_type; /* +0x0018 */ }; struct _TRANSACTION_NOTIFICATION_RECOVERY_ARGUMENT { unsigned char EnlistmentId[16]; /* +0x0000 6b 10 00 00 */ unsigned char UOW[16]; /* +0x0010 6b 10 00 00 */ }; struct _RPC_CALL_LOCAL_ADDRESS_V1 { unsigned char Version[8]; /* +0x0000 75 00 00 00 */ void *Buffer; /* +0x0008 */ unsigned long BufferSize; /* +0x0010 */ unsigned char AddressFormat[4]; /* +0x0014 77 17 00 00 */ }; struct _PS_SYSTEM_DLL_INIT_BLOCK { unsigned long Size; /* +0x0000 */ unsigned long SystemDllWowRelocation; /* +0x0004 */ unsigned long long SystemDllNativeRelocation; /* +0x0008 */ unsigned char Wow64SharedInformation[64]; /* +0x0010 29 2e 00 00 */ unsigned long RngData; /* +0x0050 */ unsigned long long MitigationOptions; /* +0x0058 */ }; struct _RTL_RESOURCE { unsigned char CriticalSection[40]; /* +0x0000 09 1b 00 00 */ void *SharedSemaphore; /* +0x0028 */ unsigned char NumberOfWaitingShared[8]; /* +0x0030 45 1c 00 00 */ void *ExclusiveSemaphore; /* +0x0038 */ unsigned char NumberOfWaitingExclusive[4]; /* +0x0040 45 1c 00 00 */ unsigned char NumberOfActive[4]; /* +0x0044 0f 1c 00 00 */ void *ExclusiveOwnerThread; /* +0x0048 */ unsigned long Flags; /* +0x0050 */ unsigned char DebugInfo[8]; /* +0x0058 29 2a 00 00 */ }; struct tagENUMLOGFONTEXDVW { unsigned char elfEnumLogfontEx[348]; /* +0x0000 0a 31 00 00 */ unsigned char elfDesignVector[72]; /* +0x015c da 28 00 00 */ }; struct _EXCEPTION_POINTERS { unsigned char ExceptionRecord[8]; /* +0x0000 64 19 00 00 */ unsigned char ContextRecord[8]; /* +0x0008 ec 1e 00 00 */ }; struct _JOBOBJECT_EXTENDED_LIMIT_INFORMATION { unsigned char BasicLimitInformation[64]; /* +0x0000 3a 20 00 00 */ unsigned char IoInfo[48]; /* +0x0040 d6 24 00 00 */ unsigned long long ProcessMemoryLimit; /* +0x0070 */ unsigned long long JobMemoryLimit; /* +0x0078 */ unsigned long long PeakProcessMemoryUsed; /* +0x0080 */ unsigned long long PeakJobMemoryUsed; /* +0x0088 */ }; struct _FILE_BASIC_INFO { unsigned char CreationTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char LastAccessTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char LastWriteTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char ChangeTime[8]; /* +0x0018 0e 19 00 00 */ unsigned long FileAttributes; /* +0x0020 */ }; struct _PROFILE_SOURCE_INFO { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long Source; /* +0x0004 */ unsigned long MinInterval; /* +0x0008 */ unsigned long MaxInterval; /* +0x000c */ unsigned long long Reserved; /* +0x0010 */ unsigned char Description[8]; /* +0x0018 ab 19 00 00 */ }; struct _TRANSACTION_NOTIFICATION_TM_ONLINE_ARGUMENT { unsigned char TmIdentity[16]; /* +0x0000 6b 10 00 00 */ unsigned long Flags; /* +0x0010 */ }; struct _PROCESS_AFFINITY_UPDATE_MODE { unsigned long Flags; /* +0x0000 */ /* unsigned char EnableAutoUpdate[0]; +0x0000 53 19 00 00 */ /* unsigned char Permanent[0]; +0x0000 e3 21 00 00 */ unsigned char Reserved[4]; /* +0x0000 c0 22 00 00 */ }; struct _SD_CHANGE_MACHINE_SID_OUTPUT { unsigned long long NumSDChangedSuccess; /* +0x0000 */ unsigned long long NumSDChangedFail; /* +0x0008 */ unsigned long long NumSDUnused; /* +0x0010 */ unsigned long long NumSDTotal; /* +0x0018 */ unsigned long long NumMftSDChangedSuccess; /* +0x0020 */ unsigned long long NumMftSDChangedFail; /* +0x0028 */ unsigned long long NumMftSDTotal; /* +0x0030 */ }; struct _COVERAGE_MODULE_REQUEST:: { /* unsigned char MD5Hash[0]; +0x0000 2d 11 00 00 */ unsigned char ModuleName[16]; /* +0x0000 c1 18 00 00 */ }; struct _OBJECT_TYPE_INFORMATION { unsigned char TypeName[16]; /* +0x0000 c1 18 00 00 */ unsigned long TotalNumberOfObjects; /* +0x0010 */ unsigned long TotalNumberOfHandles; /* +0x0014 */ unsigned long TotalPagedPoolUsage; /* +0x0018 */ unsigned long TotalNonPagedPoolUsage; /* +0x001c */ unsigned long TotalNamePoolUsage; /* +0x0020 */ unsigned long TotalHandleTableUsage; /* +0x0024 */ unsigned long HighWaterNumberOfObjects; /* +0x0028 */ unsigned long HighWaterNumberOfHandles; /* +0x002c */ unsigned long HighWaterPagedPoolUsage; /* +0x0030 */ unsigned long HighWaterNonPagedPoolUsage; /* +0x0034 */ unsigned long HighWaterNamePoolUsage; /* +0x0038 */ unsigned long HighWaterHandleTableUsage; /* +0x003c */ unsigned long InvalidAttributes; /* +0x0040 */ unsigned char GenericMapping[16]; /* +0x0044 02 20 00 00 */ unsigned long ValidAccessMask; /* +0x0054 */ unsigned char SecurityRequired; /* +0x0058 */ unsigned char MaintainHandleCount; /* +0x0059 */ unsigned long PoolType; /* +0x005c */ unsigned long DefaultPagedPoolCharge; /* +0x0060 */ unsigned long DefaultNonPagedPoolCharge; /* +0x0064 */ }; struct _FSCTL_QUERY_FAT_BPB_BUFFER { unsigned char First0x24BytesOfBootSector[36]; /* +0x0000 fe 10 00 00 */ }; struct tagTOUCHINPUT { long x; /* +0x0000 */ long y; /* +0x0004 */ void *hSource; /* +0x0008 */ unsigned long dwID; /* +0x0010 */ unsigned long dwFlags; /* +0x0014 */ unsigned long dwMask; /* +0x0018 */ unsigned long dwTime; /* +0x001c */ unsigned long long dwExtraInfo; /* +0x0020 */ unsigned long cxContact; /* +0x0028 */ unsigned long cyContact; /* +0x002c */ }; struct _COORD { short X; /* +0x0000 */ short Y; /* +0x0002 */ }; struct _SETJMP_FLOAT128 { unsigned char Part[16]; /* +0x0000 d1 1e 00 00 */ }; struct _TRACE_PROFILE_INTERVAL { unsigned long Source; /* +0x0000 */ unsigned long Interval; /* +0x0004 */ }; struct _DEVICE_FLAGS { /* unsigned char Failed[0]; +0x0000 53 19 00 00 */ /* unsigned char ReadOnly[0]; +0x0000 e3 21 00 00 */ /* unsigned char Removable[0]; +0x0000 e4 21 00 00 */ /* unsigned char ConsoleIn[0]; +0x0000 68 26 00 00 */ /* unsigned char ConsoleOut[0]; +0x0000 69 26 00 00 */ /* unsigned char Input[0]; +0x0000 5a 2b 00 00 */ unsigned char Output[4]; /* +0x0000 16 27 00 00 */ }; struct _tagBINDINFO { unsigned long cbSize; /* +0x0000 */ unsigned char szExtraInfo[8]; /* +0x0008 71 06 00 00 */ unsigned char stgmedData[24]; /* +0x0010 4d 31 00 00 */ unsigned long grfBindInfoF; /* +0x0028 */ unsigned long dwBindVerb; /* +0x002c */ unsigned char szCustomVerb[8]; /* +0x0030 71 06 00 00 */ unsigned long cbstgmedData; /* +0x0038 */ unsigned long dwOptions; /* +0x003c */ unsigned long dwOptionsFlags; /* +0x0040 */ unsigned long dwCodePage; /* +0x0044 */ unsigned char securityAttributes[24]; /* +0x0048 73 1a 00 00 */ unsigned char iid[16]; /* +0x0060 6b 10 00 00 */ unsigned char pUnk[8]; /* +0x0070 23 1c 00 00 */ unsigned long dwReserved; /* +0x0078 */ }; struct _PROCESS_HANDLE_INFORMATION { unsigned long HandleCount; /* +0x0000 */ unsigned long HandleCountHighWatermark; /* +0x0004 */ }; struct _CM_INT13_DRIVE_PARAMETER { unsigned short DriveSelect; /* +0x0000 */ unsigned long MaxCylinders; /* +0x0002 */ unsigned short SectorsPerTrack; /* +0x0006 */ unsigned short MaxHeads; /* +0x0008 */ unsigned short NumberDrives; /* +0x000a */ }; struct _PLUGPLAY_CONTROL_LEGACY_DEVGEN_DATA { unsigned char ServiceName[16]; /* +0x0000 c1 18 00 00 */ unsigned char DeviceInstance[8]; /* +0x0010 71 06 00 00 */ unsigned long DeviceInstanceLength; /* +0x0018 */ }; struct _WOW64_FLOATING_SAVE_AREA { unsigned long ControlWord; /* +0x0000 */ unsigned long StatusWord; /* +0x0004 */ unsigned long TagWord; /* +0x0008 */ unsigned long ErrorOffset; /* +0x000c */ unsigned long ErrorSelector; /* +0x0010 */ unsigned long DataOffset; /* +0x0014 */ unsigned long DataSelector; /* +0x0018 */ unsigned char RegisterArea[80]; /* +0x001c 90 31 00 00 */ unsigned long Cr0NpxState; /* +0x006c */ }; struct _MEMORYSTATUS { unsigned long dwLength; /* +0x0000 */ unsigned long dwMemoryLoad; /* +0x0004 */ unsigned long long dwTotalPhys; /* +0x0008 */ unsigned long long dwAvailPhys; /* +0x0010 */ unsigned long long dwTotalPageFile; /* +0x0018 */ unsigned long long dwAvailPageFile; /* +0x0020 */ unsigned long long dwTotalVirtual; /* +0x0028 */ unsigned long long dwAvailVirtual; /* +0x0030 */ }; struct __m128 { /* unsigned char m128_f32[0]; +0x0000 97 31 00 00 */ /* unsigned char m128_u64[0]; +0x0000 d1 1e 00 00 */ /* unsigned char m128_i8[0]; +0x0000 98 31 00 00 */ /* unsigned char m128_i16[0]; +0x0000 99 31 00 00 */ /* unsigned char m128_i32[0]; +0x0000 74 29 00 00 */ /* unsigned char m128_i64[0]; +0x0000 9a 31 00 00 */ /* unsigned char m128_u8[0]; +0x0000 2d 11 00 00 */ /* unsigned char m128_u16[0]; +0x0000 9b 31 00 00 */ unsigned char m128_u32[16]; /* +0x0000 9c 31 00 00 */ }; struct tagWNODE_EVENT_ITEM { unsigned char WnodeHeader[48]; /* +0x0000 47 30 00 00 */ }; struct _FILE_NETWORK_PHYSICAL_NAME_INFORMATION { unsigned long FileNameLength; /* +0x0000 */ unsigned char FileName[4]; /* +0x0004 ab 19 00 00 */ }; struct tagTITLEBARINFOEX { unsigned long cbSize; /* +0x0000 */ unsigned char rcTitleBar[16]; /* +0x0004 06 1a 00 00 */ unsigned char rgstate[24]; /* +0x0014 8d 27 00 00 */ unsigned char rgrect[96]; /* +0x002c a5 31 00 00 */ }; struct tagCLEANLOCALSTORAGE { unsigned char pInterface[8]; /* +0x0000 23 1c 00 00 */ void *pStorage; /* +0x0008 */ unsigned long flags; /* +0x0010 */ }; struct tagWNODE_SINGLE_INSTANCE { unsigned char WnodeHeader[48]; /* +0x0000 47 30 00 00 */ unsigned long OffsetInstanceName; /* +0x0030 */ unsigned long InstanceIndex; /* +0x0034 */ unsigned long DataBlockOffset; /* +0x0038 */ unsigned long SizeDataBlock; /* +0x003c */ /* unsigned char VariableData[0]; +0x0040 48 30 00 00 */ }; struct _TOKEN_APPCONTAINER_INFORMATION { void *TokenAppContainer; /* +0x0000 */ }; struct _LPC_UNREGISTER_PROCESS_MSG { unsigned char PortMsg[40]; /* +0x0000 d9 27 00 00 */ void *UniqueProcessId; /* +0x0028 */ }; struct tagTTPOLYGONHEADER { unsigned long cb; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned char pfxStart[8]; /* +0x0008 fa 28 00 00 */ }; struct tagMSGBOXPARAMSW { unsigned char cbSize[8]; /* +0x0000 75 00 00 00 */ unsigned char hwndOwner[8]; /* +0x0008 97 13 00 00 */ unsigned char hInstance[8]; /* +0x0010 4e 1a 00 00 */ unsigned char lpszText[8]; /* +0x0018 27 10 00 00 */ unsigned char lpszCaption[8]; /* +0x0020 27 10 00 00 */ unsigned long dwStyle; /* +0x0028 */ unsigned char lpszIcon[8]; /* +0x0030 27 10 00 00 */ unsigned long long dwContextHelpId; /* +0x0038 */ unsigned char lpfnMsgBoxCallback[8]; /* +0x0040 ba 31 00 00 */ unsigned long dwLanguageId; /* +0x0048 */ }; struct _SERVICE_CONTROL_STATUS_REASON_PARAMSW { unsigned long dwReason; /* +0x0000 */ unsigned char pszComment[8]; /* +0x0008 71 06 00 00 */ unsigned char ServiceStatus[40]; /* +0x0010 55 20 00 00 */ }; struct tagAXESLISTW { unsigned long axlReserved; /* +0x0000 */ unsigned long axlNumAxes; /* +0x0004 */ unsigned char axlAxisInfo[640]; /* +0x0008 d5 31 00 00 */ }; struct _IMAGE_ARCHIVE_MEMBER_HEADER { unsigned char Name[16]; /* +0x0000 2d 11 00 00 */ unsigned char Date[12]; /* +0x0010 d6 1e 00 00 */ unsigned char UserID[6]; /* +0x001c ec 29 00 00 */ unsigned char GroupID[6]; /* +0x0022 ec 29 00 00 */ unsigned char Mode[8]; /* +0x0028 fb 10 00 00 */ unsigned char Size[10]; /* +0x0030 e0 31 00 00 */ unsigned char EndHeader[2]; /* +0x003a 0c 21 00 00 */ }; struct _PROCESS_EXCEPTION_PORT { void *ExceptionPortHandle; /* +0x0000 */ unsigned long StateFlags; /* +0x0008 */ }; struct _KEY_HANDLE_TAGS_INFORMATION { unsigned long HandleTags; /* +0x0000 */ }; struct _RTL_MODULE_BASIC_INFO { void *ImageBase; /* +0x0000 */ }; struct tagTYPEDESC { /* unsigned char lptdesc[0]; +0x0000 07 32 00 00 */ /* unsigned char lpadesc[0]; +0x0000 09 32 00 00 */ unsigned long hreftype; /* +0x0000 */ unsigned short vt; /* +0x0008 */ }; struct _OBJECT_NAME_INFORMATION { unsigned char Name[16]; /* +0x0000 c1 18 00 00 */ }; struct _SYSTEM_KERNEL_DEBUGGER_INFORMATION { unsigned char KernelDebuggerEnabled; /* +0x0000 */ unsigned char KernelDebuggerNotPresent; /* +0x0001 */ }; struct _REG_NOTIFY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned char Action[4]; /* +0x0004 f7 16 00 00 */ unsigned long KeyLength; /* +0x0008 */ unsigned char Key[4]; /* +0x000c ab 19 00 00 */ }; struct _SERVICE_FAILURE_ACTIONSW { unsigned long dwResetPeriod; /* +0x0000 */ unsigned char lpRebootMsg[8]; /* +0x0008 71 06 00 00 */ unsigned char lpCommand[8]; /* +0x0010 71 06 00 00 */ unsigned long cActions; /* +0x0018 */ unsigned char lpsaActions[8]; /* +0x0020 19 32 00 00 */ }; struct _PROCESS_PRIORITY_CLASS { unsigned char Foreground; /* +0x0000 */ unsigned char PriorityClass; /* +0x0001 */ }; struct _TXFS_TRANSACTION_ACTIVE_INFO { unsigned char TransactionsActiveAtSnapshot; /* +0x0000 */ }; struct _EVENT_BASIC_INFORMATION { unsigned char EventType[4]; /* +0x0000 9f 17 00 00 */ long EventState; /* +0x0004 */ }; struct _SERVICE_PREFERRED_NODE_INFO { unsigned short usPreferredNode; /* +0x0000 */ unsigned char fDelete; /* +0x0002 */ }; struct _IMAGE_EXPORT_DIRECTORY { unsigned long Characteristics; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long Name; /* +0x000c */ unsigned long Base; /* +0x0010 */ unsigned long NumberOfFunctions; /* +0x0014 */ unsigned long NumberOfNames; /* +0x0018 */ unsigned long AddressOfFunctions; /* +0x001c */ unsigned long AddressOfNames; /* +0x0020 */ unsigned long AddressOfNameOrdinals; /* +0x0024 */ }; struct _PROCESSOR_PROFILE_CONTROL_AREA { unsigned char PebsDsSaveArea[96]; /* +0x0000 15 23 00 00 */ }; struct tagENUMTEXTMETRICW { unsigned char etmNewTextMetricEx[100]; /* +0x0000 49 32 00 00 */ unsigned char etmAxesList[648]; /* +0x0064 43 2c 00 00 */ }; struct tagCLIPDATA { unsigned long cbSize; /* +0x0000 */ long ulClipFmt; /* +0x0004 */ unsigned char *pClipData; /* +0x0008 */ }; struct _RTL_DRIVE_LETTER_CURDIR { unsigned short Flags; /* +0x0000 */ unsigned short Length; /* +0x0002 */ unsigned long TimeStamp; /* +0x0004 */ unsigned char DosPath[16]; /* +0x0008 12 21 00 00 */ }; struct _PAGE_PRIORITY_INFORMATION { unsigned long PagePriority; /* +0x0000 */ }; struct tagACTCTX_SECTION_KEYED_DATA { unsigned long cbSize; /* +0x0000 */ unsigned long ulDataFormatVersion; /* +0x0004 */ void *lpData; /* +0x0008 */ unsigned long ulLength; /* +0x0010 */ void *lpSectionGlobalData; /* +0x0018 */ unsigned long ulSectionGlobalDataLength; /* +0x0020 */ void *lpSectionBase; /* +0x0028 */ unsigned long ulSectionTotalLength; /* +0x0030 */ void *hActCtx; /* +0x0038 */ unsigned long ulAssemblyRosterIndex; /* +0x0040 */ unsigned long ulFlags; /* +0x0044 */ unsigned char AssemblyMetadata[40]; /* +0x0048 56 32 00 00 */ }; struct _POWER_STATE { /* unsigned char SystemState[0]; +0x0000 c5 16 00 00 */ unsigned char DeviceState[4]; /* +0x0000 75 16 00 00 */ }; struct tagICONMETRICSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iHorzSpacing[4]; /* +0x0004 74 00 00 00 */ unsigned char iVertSpacing[4]; /* +0x0008 74 00 00 00 */ unsigned char iTitleWrap[4]; /* +0x000c 74 00 00 00 */ unsigned char lfFont[60]; /* +0x0010 51 20 00 00 */ }; struct _PROCESSOR_GROUP_INFO { unsigned char MaximumProcessorCount; /* +0x0000 */ unsigned char ActiveProcessorCount; /* +0x0001 */ unsigned char Reserved[38]; /* +0x0002 6e 32 00 00 */ unsigned long long ActiveProcessorMask; /* +0x0028 */ }; struct tagEMREXTTEXTOUTA { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long iGraphicsMode; /* +0x0018 */ unsigned char exScale[4]; /* +0x001c 40 00 00 00 */ unsigned char eyScale[4]; /* +0x0020 40 00 00 00 */ unsigned char emrtext[40]; /* +0x0024 a9 24 00 00 */ }; struct tagEMRPLGBLT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned char aptlDest[24]; /* +0x0018 73 32 00 00 */ long xSrc; /* +0x0030 */ long ySrc; /* +0x0034 */ long cxSrc; /* +0x0038 */ long cySrc; /* +0x003c */ unsigned char xformSrc[24]; /* +0x0040 b6 18 00 00 */ unsigned long crBkColorSrc; /* +0x0058 */ unsigned long iUsageSrc; /* +0x005c */ unsigned long offBmiSrc; /* +0x0060 */ unsigned long cbBmiSrc; /* +0x0064 */ unsigned long offBitsSrc; /* +0x0068 */ unsigned long cbBitsSrc; /* +0x006c */ long xMask; /* +0x0070 */ long yMask; /* +0x0074 */ unsigned long iUsageMask; /* +0x0078 */ unsigned long offBmiMask; /* +0x007c */ unsigned long cbBmiMask; /* +0x0080 */ unsigned long offBitsMask; /* +0x0084 */ unsigned long cbBitsMask; /* +0x0088 */ }; struct _LOAD_DLL_DEBUG_INFO { void *hFile; /* +0x0000 */ void *lpBaseOfDll; /* +0x0008 */ unsigned long dwDebugInfoFileOffset; /* +0x0010 */ unsigned long nDebugInfoSize; /* +0x0014 */ void *lpImageName; /* +0x0018 */ unsigned short fUnicode; /* +0x0020 */ }; struct _ACL { unsigned char AclRevision; /* +0x0000 */ unsigned char Sbz1; /* +0x0001 */ unsigned short AclSize; /* +0x0002 */ unsigned short AceCount; /* +0x0004 */ unsigned short Sbz2; /* +0x0006 */ }; struct _IMAGE_RUNTIME_FUNCTION_ENTRY { unsigned long BeginAddress; /* +0x0000 */ unsigned long EndAddress; /* +0x0004 */ unsigned long UnwindInfoAddress; /* +0x0008 */ }; struct _CLIENT_ID64 { unsigned long long UniqueProcess; /* +0x0000 */ unsigned long long UniqueThread; /* +0x0008 */ }; struct tagCIEXYZ { long ciexyzX; /* +0x0000 */ long ciexyzY; /* +0x0004 */ long ciexyzZ; /* +0x0008 */ }; struct _PLUGPLAY_CONTROL_BLOCKED_DRIVER_DATA { unsigned long Flags; /* +0x0000 */ unsigned long BufferLength; /* +0x0004 */ void *Buffer; /* +0x0008 */ }; struct tagBINDPTR { /* unsigned char lpfuncdesc[0]; +0x0000 c2 32 00 00 */ /* unsigned char lpvardesc[0]; +0x0000 c4 32 00 00 */ unsigned char lptcomp[8]; /* +0x0000 fd 2c 00 00 */ }; struct tagWNODE_TOO_SMALL { unsigned char WnodeHeader[48]; /* +0x0000 47 30 00 00 */ unsigned long SizeNeeded; /* +0x0030 */ }; struct _PROCESS_DISK_COUNTERS { unsigned long long BytesRead; /* +0x0000 */ unsigned long long BytesWritten; /* +0x0008 */ unsigned long long ReadOperationCount; /* +0x0010 */ unsigned long long WriteOperationCount; /* +0x0018 */ unsigned long long FlushOperationCount; /* +0x0020 */ }; struct tagRGBQUAD { unsigned char rgbBlue; /* +0x0000 */ unsigned char rgbGreen; /* +0x0001 */ unsigned char rgbRed; /* +0x0002 */ unsigned char rgbReserved; /* +0x0003 */ }; struct tagRPC_EE_INFO_PARAM { unsigned char ParameterType[24]; /* +0x0000 cf 16 00 00 */ }; struct tagRPC_EE_INFO_PARAM:: { char *AnsiString; /* +0x0000 */ /* unsigned char UnicodeString[0]; +0x0000 71 06 00 00 */ long LVal; /* +0x0000 */ short SVal; /* +0x0000 */ unsigned long long PVal; /* +0x0000 */ unsigned char BVal[16]; /* +0x0000 d5 32 00 00 */ }; struct _FILE_SEGMENT_ELEMENT { void *Buffer; /* +0x0000 */ unsigned long long Alignment; /* +0x0000 */ }; struct _SI_COPYFILE { unsigned long SourceFileNameLength; /* +0x0000 */ unsigned long DestinationFileNameLength; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned char FileNameBuffer[4]; /* +0x000c ab 19 00 00 */ }; struct _SID_AND_ATTRIBUTES_HASH { unsigned long SidCount; /* +0x0000 */ unsigned char SidAttr[8]; /* +0x0008 55 24 00 00 */ unsigned char Hash[256]; /* +0x0010 e1 32 00 00 */ }; struct _SERVICE_FAILURE_ACTIONS_FLAG { unsigned char fFailureActionsOnNonCrashFailures[4]; /* +0x0000 74 00 00 00 */ }; struct _div_t { unsigned char quot[4]; /* +0x0000 74 00 00 00 */ unsigned char rem[4]; /* +0x0004 74 00 00 00 */ }; struct tagStorageLayout { unsigned long LayoutType; /* +0x0000 */ unsigned char pwcsElementName[8]; /* +0x0008 71 06 00 00 */ unsigned char cOffset[8]; /* +0x0010 0e 19 00 00 */ unsigned char cBytes[8]; /* +0x0018 0e 19 00 00 */ }; struct _RTL_ELEVATION_FLAGS { unsigned long Flags; /* +0x0000 */ /* unsigned char ElevationEnabled[0]; +0x0000 53 19 00 00 */ /* unsigned char VirtualizationEnabled[0]; +0x0000 e3 21 00 00 */ /* unsigned char InstallerDetectEnabled[0]; +0x0000 e4 21 00 00 */ unsigned char ReservedBits[4]; /* +0x0000 f4 32 00 00 */ }; struct tagHIGHCONTRASTA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ char *lpszDefaultScheme; /* +0x0008 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V2_A { unsigned char TransportCredentials[8]; /* +0x0000 1f 22 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned char *ServerCertificateSubject; /* +0x0020 */ unsigned char ProxyCredentials[8]; /* +0x0028 1f 22 00 00 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x0030 */ unsigned long *ProxyAuthnSchemes; /* +0x0038 */ }; struct tagCAC { unsigned long cElems; /* +0x0000 */ char *pElems; /* +0x0008 */ }; struct _JOB_SET_ARRAY { void *JobHandle; /* +0x0000 */ unsigned long MemberLevel; /* +0x0008 */ unsigned long Flags; /* +0x000c */ }; struct tagDESIGNVECTOR { unsigned long dvReserved; /* +0x0000 */ unsigned long dvNumAxes; /* +0x0004 */ unsigned char dvValues[64]; /* +0x0008 0b 33 00 00 */ }; struct tagLOGPEN { unsigned char lopnStyle[4]; /* +0x0000 75 00 00 00 */ unsigned char lopnWidth[8]; /* +0x0004 1b 1a 00 00 */ unsigned long lopnColor; /* +0x000c */ }; struct _FLAGGED_WORD_BLOB { unsigned long fFlags; /* +0x0000 */ unsigned long clSize; /* +0x0004 */ unsigned char asData[4]; /* +0x0008 b1 20 00 00 */ }; struct _FILE_END_OF_FILE_INFORMATION { unsigned char EndOfFile[8]; /* +0x0000 0e 19 00 00 */ }; struct _MIDL_FORMAT_STRING { short Pad; /* +0x0000 */ /* unsigned char Format[0]; +0x0002 48 30 00 00 */ }; struct _EXCEPTION_LOG { unsigned char ExceptionRecord[160]; /* +0x0000 63 19 00 00 */ unsigned char ContextRecord[1232]; /* +0x00a0 1c 19 00 00 */ unsigned char Type[4]; /* +0x0570 cf 17 00 00 */ long Disposition; /* +0x0574 */ unsigned long long Thread; /* +0x0578 */ unsigned long long ControlPc; /* +0x0580 */ void *Handler; /* +0x0588 */ }; struct _GLYPHMETRICS { unsigned char gmBlackBoxX[4]; /* +0x0000 75 00 00 00 */ unsigned char gmBlackBoxY[4]; /* +0x0004 75 00 00 00 */ unsigned char gmptGlyphOrigin[8]; /* +0x0008 1b 1a 00 00 */ short gmCellIncX; /* +0x0010 */ short gmCellIncY; /* +0x0012 */ }; struct tagAXESLISTA { unsigned long axlReserved; /* +0x0000 */ unsigned long axlNumAxes; /* +0x0004 */ unsigned char axlAxisInfo[384]; /* +0x0008 21 33 00 00 */ }; struct _JOBOBJECT_BASIC_AND_IO_ACCOUNTING_INFORMATION { unsigned char BasicInfo[48]; /* +0x0000 d5 24 00 00 */ unsigned char IoInfo[48]; /* +0x0030 d6 24 00 00 */ }; struct _SYSTEM_MEMORY_CHANNEL_INFORMATION { unsigned long ChannelNumber; /* +0x0000 */ unsigned long ChannelHeatIndex; /* +0x0004 */ unsigned long long TotalPageCount; /* +0x0008 */ unsigned long long ZeroPageCount; /* +0x0010 */ unsigned long long FreePageCount; /* +0x0018 */ unsigned long long StandbyPageCount; /* +0x0020 */ }; struct tagRID_DEVICE_INFO_MOUSE { unsigned long dwId; /* +0x0000 */ unsigned long dwNumberOfButtons; /* +0x0004 */ unsigned long dwSampleRate; /* +0x0008 */ unsigned char fHasHorizontalWheel[4]; /* +0x000c 74 00 00 00 */ }; struct tagCHANGEFILTERSTRUCT { unsigned long cbSize; /* +0x0000 */ unsigned long ExtStatus; /* +0x0004 */ }; struct _OBJECT_BASIC_INFORMATION { unsigned long Attributes; /* +0x0000 */ unsigned long GrantedAccess; /* +0x0004 */ unsigned long HandleCount; /* +0x0008 */ unsigned long PointerCount; /* +0x000c */ unsigned long PagedPoolCharge; /* +0x0010 */ unsigned long NonPagedPoolCharge; /* +0x0014 */ unsigned char Reserved[12]; /* +0x0018 fa 18 00 00 */ unsigned long NameInfoSize; /* +0x0024 */ unsigned long TypeInfoSize; /* +0x0028 */ unsigned long SecurityDescriptorSize; /* +0x002c */ unsigned char CreationTime[8]; /* +0x0030 0e 19 00 00 */ }; struct _COVERAGE_SECTION_HEADER { unsigned long Signature; /* +0x0000 */ unsigned long CoverageType; /* +0x0004 */ unsigned char MD5Hash[16]; /* +0x0008 2d 11 00 00 */ unsigned long CoverageSectionSize; /* +0x0018 */ unsigned long CoverageVectorSize; /* +0x001c */ unsigned long CoverageVectorOffset; /* +0x0020 */ unsigned long ExtraDataOffset; /* +0x0024 */ }; struct _PORT_DATA_ENTRY { void *Base; /* +0x0000 */ unsigned long Size; /* +0x0008 */ }; struct _OSVERSIONINFOEXW { unsigned long dwOSVersionInfoSize; /* +0x0000 */ unsigned long dwMajorVersion; /* +0x0004 */ unsigned long dwMinorVersion; /* +0x0008 */ unsigned long dwBuildNumber; /* +0x000c */ unsigned long dwPlatformId; /* +0x0010 */ unsigned char szCSDVersion[256]; /* +0x0014 8b 1f 00 00 */ unsigned short wServicePackMajor; /* +0x0114 */ unsigned short wServicePackMinor; /* +0x0116 */ unsigned short wSuiteMask; /* +0x0118 */ unsigned char wProductType; /* +0x011a */ unsigned char wReserved; /* +0x011b */ }; struct _PROCESS_HANDLE_TABLE_ENTRY_INFO { void *HandleValue; /* +0x0000 */ unsigned long long HandleCount; /* +0x0008 */ unsigned long long PointerCount; /* +0x0010 */ unsigned long GrantedAccess; /* +0x0018 */ unsigned long ObjectTypeIndex; /* +0x001c */ unsigned long HandleAttributes; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ }; struct _CM_COMPONENT_INFORMATION { unsigned char Flags[4]; /* +0x0000 89 33 00 00 */ unsigned long Version; /* +0x0004 */ unsigned long Key; /* +0x0008 */ unsigned long long AffinityMask; /* +0x0010 */ }; struct _MUIREGISTRYINFO { unsigned char Owned[4]; /* +0x0000 75 00 00 00 */ unsigned char InstallLanguageFallback[8]; /* +0x0004 8c 33 00 00 */ unsigned long Generation; /* +0x000c */ unsigned long ProcessGeneration; /* +0x0010 */ unsigned char Installed[8]; /* +0x0018 8e 33 00 00 */ unsigned char Strings[8]; /* +0x0020 6f 27 00 00 */ unsigned char MachineConfig[8]; /* +0x0028 90 33 00 00 */ unsigned char UserConfig[8]; /* +0x0030 90 33 00 00 */ unsigned char MachinePreferred[8]; /* +0x0038 92 33 00 00 */ unsigned char UserPreferred[8]; /* +0x0040 92 33 00 00 */ unsigned char ProcessPreferred[8]; /* +0x0048 92 33 00 00 */ unsigned char MergedUser[8]; /* +0x0050 92 33 00 00 */ unsigned char MergedMachine[8]; /* +0x0058 92 33 00 00 */ unsigned char MergedFallback[8]; /* +0x0060 92 33 00 00 */ unsigned char PrevRegInfo[8]; /* +0x0068 e0 20 00 00 */ unsigned long MUI_Locked; /* +0x0070 */ unsigned long MUI_SE; /* +0x0074 */ unsigned long MUI_NumberAllowed; /* +0x0078 */ unsigned char MUI_AllowedLanguage[8]; /* +0x0080 71 06 00 00 */ unsigned char MUI_InstalledSKU[8]; /* +0x0088 71 06 00 00 */ unsigned long cbInstalledSKU; /* +0x0090 */ unsigned long cbAllowedLanguage; /* +0x0094 */ unsigned char MUI_DisallowedLanguage[8]; /* +0x0098 71 06 00 00 */ unsigned long cbDisallowedLanguage; /* +0x00a0 */ }; struct _RTL_PROCESS_BACKTRACES { unsigned long long CommittedMemory; /* +0x0000 */ unsigned long long ReservedMemory; /* +0x0008 */ unsigned long NumberOfBackTraceLookups; /* +0x0010 */ unsigned long NumberOfBackTraces; /* +0x0014 */ unsigned char BackTraces[272]; /* +0x0018 96 33 00 00 */ }; struct _DEBUG_EVENT { unsigned long dwDebugEventCode; /* +0x0000 */ unsigned long dwProcessId; /* +0x0004 */ unsigned long dwThreadId; /* +0x0008 */ }; struct _SECURITY_DESCRIPTOR_RELATIVE { unsigned char Revision; /* +0x0000 */ unsigned char Sbz1; /* +0x0001 */ unsigned short Control; /* +0x0002 */ unsigned long Owner; /* +0x0004 */ unsigned long Group; /* +0x0008 */ unsigned long Sacl; /* +0x000c */ unsigned long Dacl; /* +0x0010 */ }; struct _FILE_NAMES_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned long FileNameLength; /* +0x0008 */ unsigned char FileName[4]; /* +0x000c ab 19 00 00 */ }; struct _RPC_BINDING_HANDLE_TEMPLATE_V1_W:: { unsigned short *Reserved; /* +0x0000 */ }; struct _NDR_EXPR_DESC { unsigned char pOffset[8]; /* +0x0000 60 22 00 00 */ unsigned char pFormatExpr[8]; /* +0x0008 5e 22 00 00 */ }; struct tagTYPEATTR { unsigned char guid[16]; /* +0x0000 6b 10 00 00 */ unsigned long lcid; /* +0x0010 */ unsigned long dwReserved; /* +0x0014 */ long memidConstructor; /* +0x0018 */ long memidDestructor; /* +0x001c */ unsigned char lpstrSchema[8]; /* +0x0020 71 06 00 00 */ unsigned long cbSizeInstance; /* +0x0028 */ unsigned char typekind[4]; /* +0x002c f5 15 00 00 */ unsigned short cFuncs; /* +0x0030 */ unsigned short cVars; /* +0x0032 */ unsigned short cImplTypes; /* +0x0034 */ unsigned short cbSizeVft; /* +0x0036 */ unsigned short cbAlignment; /* +0x0038 */ unsigned short wTypeFlags; /* +0x003a */ unsigned short wMajorVerNum; /* +0x003c */ unsigned short wMinorVerNum; /* +0x003e */ unsigned char tdescAlias[16]; /* +0x0040 d2 28 00 00 */ unsigned char idldescType[16]; /* +0x0050 b9 33 00 00 */ }; struct _PACKAGE_INFO_REFERENCE { void *reserved; /* +0x0000 */ }; struct _FILE_STREAM_INFO { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long StreamNameLength; /* +0x0004 */ unsigned char StreamSize[8]; /* +0x0008 0e 19 00 00 */ unsigned char StreamAllocationSize[8]; /* +0x0010 0e 19 00 00 */ unsigned char StreamName[8]; /* +0x0018 ab 19 00 00 */ }; struct tagSAFEARRAYBOUND { unsigned long cElements; /* +0x0000 */ long lLbound; /* +0x0004 */ }; struct _TOKEN_STATISTICS { unsigned char TokenId[8]; /* +0x0000 90 1e 00 00 */ unsigned char AuthenticationId[8]; /* +0x0008 90 1e 00 00 */ unsigned char ExpirationTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char TokenType[4]; /* +0x0018 05 18 00 00 */ unsigned char ImpersonationLevel[4]; /* +0x001c 1d 17 00 00 */ unsigned long DynamicCharged; /* +0x0020 */ unsigned long DynamicAvailable; /* +0x0024 */ unsigned long GroupCount; /* +0x0028 */ unsigned long PrivilegeCount; /* +0x002c */ unsigned char ModifiedId[8]; /* +0x0030 90 1e 00 00 */ }; struct _FILE_EA_INFORMATION { unsigned long EaSize; /* +0x0000 */ }; struct _EVENT_TRACE_PROPERTIES { unsigned char Wnode[48]; /* +0x0000 47 30 00 00 */ unsigned long BufferSize; /* +0x0030 */ unsigned long MinimumBuffers; /* +0x0034 */ unsigned long MaximumBuffers; /* +0x0038 */ unsigned long MaximumFileSize; /* +0x003c */ unsigned long LogFileMode; /* +0x0040 */ unsigned long FlushTimer; /* +0x0044 */ unsigned long EnableFlags; /* +0x0048 */ long AgeLimit; /* +0x004c */ unsigned long NumberOfBuffers; /* +0x0050 */ unsigned long FreeBuffers; /* +0x0054 */ unsigned long EventsLost; /* +0x0058 */ unsigned long BuffersWritten; /* +0x005c */ unsigned long LogBuffersLost; /* +0x0060 */ unsigned long RealTimeBuffersLost; /* +0x0064 */ void *LoggerThreadId; /* +0x0068 */ unsigned long LogFileNameOffset; /* +0x0070 */ unsigned long LoggerNameOffset; /* +0x0074 */ }; struct _DYNAMIC_FUNCTION_TABLE { unsigned char ListEntry[16]; /* +0x0000 7d 1a 00 00 */ unsigned char FunctionTable[8]; /* +0x0010 6d 25 00 00 */ unsigned char TimeStamp[8]; /* +0x0018 0e 19 00 00 */ unsigned long long MinimumAddress; /* +0x0020 */ unsigned long long MaximumAddress; /* +0x0028 */ unsigned long long BaseAddress; /* +0x0030 */ unsigned char Callback[8]; /* +0x0038 e8 33 00 00 */ void *Context; /* +0x0040 */ unsigned char OutOfProcessCallbackDll[8]; /* +0x0048 71 06 00 00 */ unsigned char Type[4]; /* +0x0050 99 17 00 00 */ unsigned long EntryCount; /* +0x0054 */ }; struct _KEY_VALUE_PARTIAL_INFORMATION_ALIGN64 { unsigned long Type; /* +0x0000 */ unsigned long DataLength; /* +0x0004 */ unsigned char Data[4]; /* +0x0008 d7 18 00 00 */ }; struct _PLUGPLAY_CONTROL_INSTALL_DATA { unsigned long BufferLength; /* +0x0000 */ unsigned char Buffer[8]; /* +0x0008 71 06 00 00 */ }; struct tagTOUCH_HIT_TESTING_PROXIMITY_EVALUATION { unsigned short score; /* +0x0000 */ unsigned char adjustedPoint[8]; /* +0x0004 1b 1a 00 00 */ }; struct _RPC_BINDING_HANDLE_SECURITY_V1_A { unsigned long Version; /* +0x0000 */ unsigned char *ServerPrincName; /* +0x0008 */ unsigned long AuthnLevel; /* +0x0010 */ unsigned long AuthnSvc; /* +0x0014 */ unsigned char AuthIdentity[8]; /* +0x0018 1f 22 00 00 */ unsigned char SecurityQos[8]; /* +0x0020 80 25 00 00 */ }; struct tagQUERYCONTEXT { unsigned long dwContext; /* +0x0000 */ unsigned char Platform[16]; /* +0x0004 ff 33 00 00 */ unsigned long Locale; /* +0x0014 */ unsigned long dwVersionHi; /* +0x0018 */ unsigned long dwVersionLo; /* +0x001c */ }; struct _SYSTEM_PROCESSOR_POLICY_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long PolicyId; /* +0x0004 */ unsigned char Policy[48]; /* +0x0008 09 34 00 00 */ }; struct _PRIVILEGE_SET { unsigned long PrivilegeCount; /* +0x0000 */ unsigned long Control; /* +0x0004 */ unsigned char Privilege[12]; /* +0x0008 11 34 00 00 */ }; struct _KEY_VALUE_BASIC_INFORMATION { unsigned long TitleIndex; /* +0x0000 */ unsigned long Type; /* +0x0004 */ unsigned long NameLength; /* +0x0008 */ unsigned char Name[4]; /* +0x000c ab 19 00 00 */ }; struct _TEB { unsigned char NtTib[56]; /* +0x0000 24 2e 00 00 */ void *EnvironmentPointer; /* +0x0038 */ unsigned char ClientId[16]; /* +0x0040 0f 19 00 00 */ void *ActiveRpcHandle; /* +0x0050 */ void *ThreadLocalStoragePointer; /* +0x0058 */ unsigned char ProcessEnvironmentBlock[8]; /* +0x0060 1d 34 00 00 */ unsigned long LastErrorValue; /* +0x0068 */ unsigned long CountOfOwnedCriticalSections; /* +0x006c */ void *CsrClientThread; /* +0x0070 */ void *Win32ThreadInfo; /* +0x0078 */ unsigned char User32Reserved[104]; /* +0x0080 1e 34 00 00 */ unsigned char UserReserved[24]; /* +0x00e8 1f 34 00 00 */ void *WOW32Reserved; /* +0x0100 */ unsigned long CurrentLocale; /* +0x0108 */ unsigned long FpSoftwareStatusRegister; /* +0x010c */ unsigned char SystemReserved1[432]; /* +0x0110 20 34 00 00 */ long ExceptionCode; /* +0x02c0 */ unsigned char ActivationContextStackPointer[8]; /* +0x02c8 41 26 00 00 */ unsigned char SpareBytes[24]; /* +0x02d0 d3 12 00 00 */ unsigned long TxFsContext; /* +0x02e8 */ unsigned char GdiTebBatch[1256]; /* +0x02f0 21 34 00 00 */ unsigned char RealClientId[16]; /* +0x07d8 0f 19 00 00 */ void *GdiCachedProcessHandle; /* +0x07e8 */ unsigned long GdiClientPID; /* +0x07f0 */ unsigned long GdiClientTID; /* +0x07f4 */ void *GdiThreadLocalInfo; /* +0x07f8 */ unsigned char Win32ClientInfo[496]; /* +0x0800 22 34 00 00 */ unsigned char glDispatchTable[1864]; /* +0x09f0 23 34 00 00 */ unsigned char glReserved1[232]; /* +0x1138 24 34 00 00 */ void *glReserved2; /* +0x1220 */ void *glSectionInfo; /* +0x1228 */ void *glSection; /* +0x1230 */ void *glTable; /* +0x1238 */ void *glCurrentRC; /* +0x1240 */ void *glContext; /* +0x1248 */ unsigned long LastStatusValue; /* +0x1250 */ unsigned char StaticUnicodeString[16]; /* +0x1258 c1 18 00 00 */ unsigned char StaticUnicodeBuffer[528]; /* +0x1268 25 34 00 00 */ void *DeallocationStack; /* +0x1478 */ unsigned char TlsSlots[512]; /* +0x1480 26 34 00 00 */ unsigned char TlsLinks[16]; /* +0x1680 7d 1a 00 00 */ void *Vdm; /* +0x1690 */ void *ReservedForNtRpc; /* +0x1698 */ unsigned char DbgSsReserved[16]; /* +0x16a0 86 2a 00 00 */ unsigned long HardErrorMode; /* +0x16b0 */ unsigned char Instrumentation[88]; /* +0x16b8 27 34 00 00 */ unsigned char ActivityId[16]; /* +0x1710 6b 10 00 00 */ void *SubProcessTag; /* +0x1720 */ void *EtwLocalData; /* +0x1728 */ void *EtwTraceData; /* +0x1730 */ void *WinSockData; /* +0x1738 */ unsigned long GdiBatchCount; /* +0x1740 */ /* unsigned char CurrentIdealProcessor[0]; +0x1744 4f 28 00 00 */ unsigned long IdealProcessorValue; /* +0x1744 */ unsigned char ReservedPad0; /* +0x1744 */ unsigned char ReservedPad1; /* +0x1745 */ unsigned char ReservedPad2; /* +0x1746 */ unsigned char IdealProcessor; /* +0x1747 */ unsigned long GuaranteedStackBytes; /* +0x1748 */ void *ReservedForPerf; /* +0x1750 */ void *ReservedForOle; /* +0x1758 */ unsigned long WaitingOnLoaderLock; /* +0x1760 */ void *SavedPriorityState; /* +0x1768 */ unsigned long long ReservedForCodeCoverage; /* +0x1770 */ void *ThreadPoolData; /* +0x1778 */ unsigned char TlsExpansionSlots[8]; /* +0x1780 1a 10 00 00 */ void *DeallocationBStore; /* +0x1788 */ void *BStoreLimit; /* +0x1790 */ unsigned long MuiGeneration; /* +0x1798 */ unsigned long IsImpersonating; /* +0x179c */ void *NlsCache; /* +0x17a0 */ void *pShimData; /* +0x17a8 */ unsigned short HeapVirtualAffinity; /* +0x17b0 */ unsigned short LowFragHeapDataSlot; /* +0x17b2 */ void *CurrentTransactionHandle; /* +0x17b8 */ unsigned char ActiveFrame[8]; /* +0x17c0 28 34 00 00 */ void *FlsData; /* +0x17c8 */ void *PreferredLanguages; /* +0x17d0 */ void *UserPrefLanguages; /* +0x17d8 */ void *MergedPrefLanguages; /* +0x17e0 */ unsigned long MuiImpersonation; /* +0x17e8 */ /* unsigned char CrossTebFlags[0]; +0x17ec 29 34 00 00 */ unsigned char SpareCrossTebBits[2]; /* +0x17ec 2a 34 00 00 */ unsigned short SameTebFlags; /* +0x17ee */ /* unsigned char SafeThunkCall[0]; +0x17ee 2b 34 00 00 */ /* unsigned char InDebugPrint[0]; +0x17ee 2c 34 00 00 */ /* unsigned char HasFiberData[0]; +0x17ee 2d 34 00 00 */ /* unsigned char SkipThreadAttach[0]; +0x17ee 2e 34 00 00 */ /* unsigned char WerInShipAssertCode[0]; +0x17ee 2f 34 00 00 */ /* unsigned char RanProcessInit[0]; +0x17ee 30 34 00 00 */ /* unsigned char ClonedThread[0]; +0x17ee 31 34 00 00 */ /* unsigned char SuppressDebugMsg[0]; +0x17ee 32 34 00 00 */ /* unsigned char DisableUserStackWalk[0]; +0x17ee 33 34 00 00 */ /* unsigned char RtlExceptionAttached[0]; +0x17ee 34 34 00 00 */ /* unsigned char InitialThread[0]; +0x17ee 35 34 00 00 */ /* unsigned char SessionAware[0]; +0x17ee 36 34 00 00 */ /* unsigned char DisabledStackCheck[0]; +0x17ee 37 34 00 00 */ unsigned char SpareSameTebBits[2]; /* +0x17ee 38 34 00 00 */ void *TxnScopeEnterCallback; /* +0x17f0 */ void *TxnScopeExitCallback; /* +0x17f8 */ void *TxnScopeContext; /* +0x1800 */ unsigned long LockCount; /* +0x1808 */ unsigned long SpareUlong0; /* +0x180c */ void *ResourceRetValue; /* +0x1810 */ void *ReservedForWdf; /* +0x1818 */ }; struct _SYSTEM_PAGEFILE_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long TotalSize; /* +0x0004 */ unsigned long TotalInUse; /* +0x0008 */ unsigned long PeakUsage; /* +0x000c */ unsigned char PageFileName[16]; /* +0x0010 c1 18 00 00 */ }; struct _WNF_TYPE_ID { unsigned char TypeId[16]; /* +0x0000 6b 10 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_GET_ROOT { void *ResolutionContext; /* +0x0000 */ unsigned long long RootIndex; /* +0x0008 */ unsigned char CancelResolution; /* +0x0010 */ unsigned char NoMoreEntries; /* +0x0011 */ unsigned char Root[16]; /* +0x0018 c1 18 00 00 */ }; struct _REPAIR_COPIES_OUTPUT { unsigned char FileOffsetRestart[8]; /* +0x0000 0e 19 00 00 */ unsigned long Status; /* +0x0008 */ unsigned long ExtentCount; /* +0x000c */ unsigned char Extents[16]; /* +0x0010 e8 28 00 00 */ }; struct _RTL_LFG_RNG_STATE { unsigned char SeedArray[224]; /* +0x0000 43 34 00 00 */ long Next; /* +0x00e0 */ long NextP; /* +0x00e4 */ }; struct tagEMREOF { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long nPalEntries; /* +0x0008 */ unsigned long offPalEntries; /* +0x000c */ unsigned long nSizeLast; /* +0x0010 */ }; struct _FILE_LAYOUT_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long NextFileOffset; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long FileAttributes; /* +0x000c */ unsigned long long FileReferenceNumber; /* +0x0010 */ unsigned long FirstNameOffset; /* +0x0018 */ unsigned long FirstStreamOffset; /* +0x001c */ unsigned long ExtraInfoOffset; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ }; struct _CSV_IS_OWNED_BY_CSVFS { unsigned char OwnedByCSVFS; /* +0x0000 */ }; struct tagBLOB { unsigned long cbSize; /* +0x0000 */ unsigned char *pBlobData; /* +0x0008 */ }; struct _RTL_ACTIVATION_CONTEXT_STACK_FRAME { unsigned char Previous[8]; /* +0x0000 53 21 00 00 */ unsigned char ActivationContext[8]; /* +0x0008 e7 20 00 00 */ unsigned long Flags; /* +0x0010 */ }; struct _TIME_FIELDS { short Year; /* +0x0000 */ short Month; /* +0x0002 */ short Day; /* +0x0004 */ short Hour; /* +0x0006 */ short Minute; /* +0x0008 */ short Second; /* +0x000a */ short Milliseconds; /* +0x000c */ short Weekday; /* +0x000e */ }; struct tagPALETTEENTRY { unsigned char peRed; /* +0x0000 */ unsigned char peGreen; /* +0x0001 */ unsigned char peBlue; /* +0x0002 */ unsigned char peFlags; /* +0x0003 */ }; struct tagRPC_CALL_ATTRIBUTES_V1_W { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned short *ServerPrincipalName; /* +0x0010 */ unsigned long ClientPrincipalNameBufferLength; /* +0x0018 */ unsigned short *ClientPrincipalName; /* +0x0020 */ unsigned long AuthenticationLevel; /* +0x0028 */ unsigned long AuthenticationService; /* +0x002c */ unsigned char NullSession[8]; /* +0x0030 74 00 00 00 */ }; struct _s__CatchableType { unsigned char properties[4]; /* +0x0000 75 00 00 00 */ unsigned char pType[8]; /* +0x0004 32 23 00 00 */ unsigned char thisDisplacement[12]; /* +0x000c 5c 2f 00 00 */ unsigned char sizeOrOffset[4]; /* +0x0018 74 00 00 00 */ unsigned char copyFunction[8]; /* +0x001c 21 11 00 00 */ }; struct _Wx86ThreadState { unsigned long *CallBx86Eip; /* +0x0000 */ void *DeallocationCpu; /* +0x0008 */ unsigned char UseKnownWx86Dll; /* +0x0010 */ char OleStubInvoked; /* +0x0011 */ }; struct tagLOGCOLORSPACEW { unsigned long lcsSignature; /* +0x0000 */ unsigned long lcsVersion; /* +0x0004 */ unsigned long lcsSize; /* +0x0008 */ long lcsCSType; /* +0x000c */ long lcsIntent; /* +0x0010 */ unsigned char lcsEndpoints[36]; /* +0x0014 f9 32 00 00 */ unsigned long lcsGammaRed; /* +0x0038 */ unsigned long lcsGammaGreen; /* +0x003c */ unsigned long lcsGammaBlue; /* +0x0040 */ unsigned char lcsFilename[520]; /* +0x0044 0d 21 00 00 */ }; struct tagPOINTER_PEN_INFO { unsigned char pointerInfo[88]; /* +0x0000 3c 2c 00 00 */ unsigned char penFlags[4]; /* +0x0058 75 00 00 00 */ unsigned char penMask[4]; /* +0x005c 75 00 00 00 */ unsigned char pressure[4]; /* +0x0060 75 00 00 00 */ unsigned char rotation[4]; /* +0x0064 75 00 00 00 */ unsigned char tiltX[4]; /* +0x0068 74 00 00 00 */ unsigned char tiltY[4]; /* +0x006c 74 00 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_SUCCESSFUL { void *ResolutionContext; /* +0x0000 */ unsigned long RootIndexUsed; /* +0x0008 */ }; struct _GRADIENT_RECT { unsigned long UpperLeft; /* +0x0000 */ unsigned long LowerRight; /* +0x0004 */ }; struct _ADMINISTRATOR_POWER_POLICY { unsigned char MinSleep[4]; /* +0x0000 c5 16 00 00 */ unsigned char MaxSleep[4]; /* +0x0004 c5 16 00 00 */ unsigned long MinVideoTimeout; /* +0x0008 */ unsigned long MaxVideoTimeout; /* +0x000c */ unsigned long MinSpindownTimeout; /* +0x0010 */ unsigned long MaxSpindownTimeout; /* +0x0014 */ }; struct _RTL_BACKOFF { unsigned long Delay; /* +0x0000 */ }; struct _IMAGE_RESOURCE_DATA_ENTRY { unsigned long OffsetToData; /* +0x0000 */ unsigned long Size; /* +0x0004 */ unsigned long CodePage; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _DEDUP_CHUNK_INFORMATION_HASH32 { unsigned long ChunkFlags; /* +0x0000 */ long long ChunkOffsetInFile; /* +0x0008 */ long long ChunkSize; /* +0x0010 */ unsigned char HashVal[32]; /* +0x0018 9b 14 00 00 */ }; struct _KEY_CACHED_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 0e 19 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long SubKeys; /* +0x000c */ unsigned long MaxNameLen; /* +0x0010 */ unsigned long Values; /* +0x0014 */ unsigned long MaxValueNameLen; /* +0x0018 */ unsigned long MaxValueDataLen; /* +0x001c */ unsigned long NameLength; /* +0x0020 */ }; struct _RemotableHandle { long fContext; /* +0x0000 */ }; struct _PROCESS_HANDLE_TRACING_ENABLE_EX { unsigned long Flags; /* +0x0000 */ unsigned long TotalSlots; /* +0x0004 */ }; struct _EISA_PORT_DESCRIPTOR { /* unsigned char NumberPorts[0]; +0x0000 e0 34 00 00 */ /* unsigned char Reserved[0]; +0x0000 98 26 00 00 */ /* unsigned char Shared[0]; +0x0000 99 26 00 00 */ unsigned char MoreEntries[1]; /* +0x0000 9a 26 00 00 */ }; struct tagEMRPOLYPOLYLINE16 { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long nPolys; /* +0x0018 */ unsigned long cpts; /* +0x001c */ unsigned char aPolyCounts[4]; /* +0x0020 d4 18 00 00 */ unsigned char apts[4]; /* +0x0024 a6 2a 00 00 */ }; struct _SERVICE_REQUIRED_PRIVILEGES_INFOA { char *pmszRequiredPrivileges; /* +0x0000 */ }; struct _FLAG_STGMEDIUM { long ContextFlags; /* +0x0000 */ long fPassOwnership; /* +0x0004 */ unsigned char Stgmed[24]; /* +0x0008 4d 31 00 00 */ }; struct tagCUSTDATA { unsigned long cCustData; /* +0x0000 */ unsigned char prgCustData[8]; /* +0x0008 9b 1f 00 00 */ }; struct _JOBOBJECT_BASIC_ACCOUNTING_INFORMATION { unsigned char TotalUserTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char TotalKernelTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char ThisPeriodTotalUserTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char ThisPeriodTotalKernelTime[8]; /* +0x0018 0e 19 00 00 */ unsigned long TotalPageFaultCount; /* +0x0020 */ unsigned long TotalProcesses; /* +0x0024 */ unsigned long ActiveProcesses; /* +0x0028 */ unsigned long TotalTerminatedProcesses; /* +0x002c */ }; struct _SYSTEM_PERFORMANCE_INFORMATION { unsigned char IdleProcessTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char IoReadTransferCount[8]; /* +0x0008 0e 19 00 00 */ unsigned char IoWriteTransferCount[8]; /* +0x0010 0e 19 00 00 */ unsigned char IoOtherTransferCount[8]; /* +0x0018 0e 19 00 00 */ unsigned long IoReadOperationCount; /* +0x0020 */ unsigned long IoWriteOperationCount; /* +0x0024 */ unsigned long IoOtherOperationCount; /* +0x0028 */ unsigned long AvailablePages; /* +0x002c */ unsigned long CommittedPages; /* +0x0030 */ unsigned long CommitLimit; /* +0x0034 */ unsigned long PeakCommitment; /* +0x0038 */ unsigned long PageFaultCount; /* +0x003c */ unsigned long CopyOnWriteCount; /* +0x0040 */ unsigned long TransitionCount; /* +0x0044 */ unsigned long CacheTransitionCount; /* +0x0048 */ unsigned long DemandZeroCount; /* +0x004c */ unsigned long PageReadCount; /* +0x0050 */ unsigned long PageReadIoCount; /* +0x0054 */ unsigned long CacheReadCount; /* +0x0058 */ unsigned long CacheIoCount; /* +0x005c */ unsigned long DirtyPagesWriteCount; /* +0x0060 */ unsigned long DirtyWriteIoCount; /* +0x0064 */ unsigned long MappedPagesWriteCount; /* +0x0068 */ unsigned long MappedWriteIoCount; /* +0x006c */ unsigned long PagedPoolPages; /* +0x0070 */ unsigned long NonPagedPoolPages; /* +0x0074 */ unsigned long PagedPoolAllocs; /* +0x0078 */ unsigned long PagedPoolFrees; /* +0x007c */ unsigned long NonPagedPoolAllocs; /* +0x0080 */ unsigned long NonPagedPoolFrees; /* +0x0084 */ unsigned long FreeSystemPtes; /* +0x0088 */ unsigned long ResidentSystemCodePage; /* +0x008c */ unsigned long TotalSystemDriverPages; /* +0x0090 */ unsigned long TotalSystemCodePages; /* +0x0094 */ unsigned long NonPagedPoolLookasideHits; /* +0x0098 */ unsigned long PagedPoolLookasideHits; /* +0x009c */ unsigned long AvailablePagedPoolPages; /* +0x00a0 */ unsigned long ResidentSystemCachePage; /* +0x00a4 */ unsigned long ResidentPagedPoolPage; /* +0x00a8 */ unsigned long ResidentSystemDriverPage; /* +0x00ac */ unsigned long CcFastReadNoWait; /* +0x00b0 */ unsigned long CcFastReadWait; /* +0x00b4 */ unsigned long CcFastReadResourceMiss; /* +0x00b8 */ unsigned long CcFastReadNotPossible; /* +0x00bc */ unsigned long CcFastMdlReadNoWait; /* +0x00c0 */ unsigned long CcFastMdlReadWait; /* +0x00c4 */ unsigned long CcFastMdlReadResourceMiss; /* +0x00c8 */ unsigned long CcFastMdlReadNotPossible; /* +0x00cc */ unsigned long CcMapDataNoWait; /* +0x00d0 */ unsigned long CcMapDataWait; /* +0x00d4 */ unsigned long CcMapDataNoWaitMiss; /* +0x00d8 */ unsigned long CcMapDataWaitMiss; /* +0x00dc */ unsigned long CcPinMappedDataCount; /* +0x00e0 */ unsigned long CcPinReadNoWait; /* +0x00e4 */ unsigned long CcPinReadWait; /* +0x00e8 */ unsigned long CcPinReadNoWaitMiss; /* +0x00ec */ unsigned long CcPinReadWaitMiss; /* +0x00f0 */ unsigned long CcCopyReadNoWait; /* +0x00f4 */ unsigned long CcCopyReadWait; /* +0x00f8 */ unsigned long CcCopyReadNoWaitMiss; /* +0x00fc */ unsigned long CcCopyReadWaitMiss; /* +0x0100 */ unsigned long CcMdlReadNoWait; /* +0x0104 */ unsigned long CcMdlReadWait; /* +0x0108 */ unsigned long CcMdlReadNoWaitMiss; /* +0x010c */ unsigned long CcMdlReadWaitMiss; /* +0x0110 */ unsigned long CcReadAheadIos; /* +0x0114 */ unsigned long CcLazyWriteIos; /* +0x0118 */ unsigned long CcLazyWritePages; /* +0x011c */ unsigned long CcDataFlushes; /* +0x0120 */ unsigned long CcDataPages; /* +0x0124 */ unsigned long ContextSwitches; /* +0x0128 */ unsigned long FirstLevelTbFills; /* +0x012c */ unsigned long SecondLevelTbFills; /* +0x0130 */ unsigned long SystemCalls; /* +0x0134 */ unsigned long long CcTotalDirtyPages; /* +0x0138 */ unsigned long long CcDirtyPageThreshold; /* +0x0140 */ long long ResidentAvailablePages; /* +0x0148 */ }; struct _RTL_MODULE_EXTENDED_INFO { unsigned char BasicInfo[8]; /* +0x0000 fb 34 00 00 */ unsigned long ImageSize; /* +0x0008 */ unsigned short FileNameOffset; /* +0x000c */ unsigned char FullPathName[258]; /* +0x000e 86 13 00 00 */ }; struct _COMSTAT { /* unsigned char fCtsHold[0]; +0x0000 53 19 00 00 */ /* unsigned char fDsrHold[0]; +0x0000 e3 21 00 00 */ /* unsigned char fRlsdHold[0]; +0x0000 e4 21 00 00 */ /* unsigned char fXoffHold[0]; +0x0000 68 26 00 00 */ /* unsigned char fXoffSent[0]; +0x0000 69 26 00 00 */ /* unsigned char fEof[0]; +0x0000 5a 2b 00 00 */ /* unsigned char fTxim[0]; +0x0000 16 27 00 00 */ unsigned char fReserved[4]; /* +0x0000 10 2b 00 00 */ unsigned long cbInQue; /* +0x0004 */ unsigned long cbOutQue; /* +0x0008 */ }; struct tagPOINTER_INFO { unsigned long pointerType; /* +0x0000 */ unsigned char pointerId[4]; /* +0x0004 75 00 00 00 */ unsigned char frameId[4]; /* +0x0008 75 00 00 00 */ unsigned char pointerFlags[4]; /* +0x000c 75 00 00 00 */ void *sourceDevice; /* +0x0010 */ unsigned char hwndTarget[8]; /* +0x0018 97 13 00 00 */ unsigned char ptPixelLocation[8]; /* +0x0020 1b 1a 00 00 */ unsigned char ptHimetricLocation[8]; /* +0x0028 1b 1a 00 00 */ unsigned char ptPixelLocationRaw[8]; /* +0x0030 1b 1a 00 00 */ unsigned char ptHimetricLocationRaw[8]; /* +0x0038 1b 1a 00 00 */ unsigned long dwTime; /* +0x0040 */ unsigned char historyCount[4]; /* +0x0044 75 00 00 00 */ unsigned char InputData[4]; /* +0x0048 74 00 00 00 */ unsigned long dwKeyStates; /* +0x004c */ unsigned long long PerformanceCount; /* +0x0050 */ }; struct _PROCESS_WS_WATCH_INFORMATION_EX { unsigned char BasicInfo[16]; /* +0x0000 e6 2a 00 00 */ unsigned long long FaultingThreadId; /* +0x0010 */ unsigned long long Flags; /* +0x0018 */ }; struct _TRANSACTIONMANAGER_LOG_INFORMATION { unsigned char LogIdentity[16]; /* +0x0000 6b 10 00 00 */ }; struct _TRACE_ENABLE_INFO { unsigned long IsEnabled; /* +0x0000 */ unsigned char Level; /* +0x0004 */ unsigned char Reserved1; /* +0x0005 */ unsigned short LoggerId; /* +0x0006 */ unsigned long EnableProperty; /* +0x0008 */ unsigned long Reserved2; /* +0x000c */ unsigned long long MatchAnyKeyword; /* +0x0010 */ unsigned long long MatchAllKeyword; /* +0x0018 */ }; struct _FP_80 { unsigned char W[12]; /* +0x0000 fa 18 00 00 */ }; struct _ALPC_TOKEN_ATTR { unsigned char TokenId[8]; /* +0x0000 90 1e 00 00 */ unsigned char AuthenticationId[8]; /* +0x0008 90 1e 00 00 */ unsigned char ModifiedId[8]; /* +0x0010 90 1e 00 00 */ }; struct _KUSER_SHARED_DATA { unsigned long TickCountLowDeprecated; /* +0x0000 */ unsigned long TickCountMultiplier; /* +0x0004 */ unsigned char InterruptTime[12]; /* +0x0008 29 35 00 00 */ unsigned char SystemTime[12]; /* +0x0014 29 35 00 00 */ unsigned char TimeZoneBias[12]; /* +0x0020 29 35 00 00 */ unsigned short ImageNumberLow; /* +0x002c */ unsigned short ImageNumberHigh; /* +0x002e */ unsigned char NtSystemRoot[520]; /* +0x0030 0d 21 00 00 */ unsigned long MaxStackTraceDepth; /* +0x0238 */ unsigned long CryptoExponent; /* +0x023c */ unsigned long TimeZoneId; /* +0x0240 */ unsigned long LargePageMinimum; /* +0x0244 */ unsigned long AitSamplingValue; /* +0x0248 */ unsigned long AppCompatFlag; /* +0x024c */ unsigned long long RNGSeedVersion; /* +0x0250 */ unsigned long GlobalValidationRunlevel; /* +0x0258 */ unsigned char Reserved2[8]; /* +0x025c cc 1f 00 00 */ unsigned char NtProductType[4]; /* +0x0264 7b 16 00 00 */ unsigned char ProductTypeIsValid; /* +0x0268 */ unsigned char Reserved0[1]; /* +0x0269 d7 18 00 00 */ unsigned short NativeProcessorArchitecture; /* +0x026a */ unsigned long NtMajorVersion; /* +0x026c */ unsigned long NtMinorVersion; /* +0x0270 */ unsigned char ProcessorFeatures[64]; /* +0x0274 eb 18 00 00 */ unsigned long Reserved1; /* +0x02b4 */ unsigned long Reserved3; /* +0x02b8 */ unsigned char TimeSlip[4]; /* +0x02bc 45 1c 00 00 */ unsigned char AlternativeArchitecture[4]; /* +0x02c0 79 17 00 00 */ unsigned char AltArchitecturePad[4]; /* +0x02c4 d4 18 00 00 */ unsigned char SystemExpirationDate[8]; /* +0x02c8 0e 19 00 00 */ unsigned long SuiteMask; /* +0x02d0 */ unsigned char KdDebuggerEnabled; /* +0x02d4 */ unsigned char MitigationPolicies; /* +0x02d5 */ /* unsigned char NXSupportPolicy[0]; +0x02d5 de 26 00 00 */ /* unsigned char SEHValidationPolicy[0]; +0x02d5 df 26 00 00 */ /* unsigned char CurDirDevicesSkippedForDlls[0]; +0x02d5 e0 26 00 00 */ unsigned char Reserved[1]; /* +0x02d5 e1 26 00 00 */ unsigned char Reserved6[2]; /* +0x02d6 0c 21 00 00 */ unsigned char ActiveConsoleId[4]; /* +0x02d8 45 1c 00 00 */ unsigned char DismountCount[4]; /* +0x02dc 45 1c 00 00 */ unsigned long ComPlusPackage; /* +0x02e0 */ unsigned long LastSystemRITEventTickCount; /* +0x02e4 */ unsigned long NumberOfPhysicalPages; /* +0x02e8 */ unsigned char SafeBootMode; /* +0x02ec */ unsigned char Reserved12[3]; /* +0x02ed 52 19 00 00 */ unsigned long SharedDataFlags; /* +0x02f0 */ /* unsigned char DbgErrorPortPresent[0]; +0x02f0 53 19 00 00 */ /* unsigned char DbgElevationEnabled[0]; +0x02f0 e3 21 00 00 */ /* unsigned char DbgVirtEnabled[0]; +0x02f0 e4 21 00 00 */ /* unsigned char DbgInstallerDetectEnabled[0]; +0x02f0 68 26 00 00 */ /* unsigned char DbgLkgEnabled[0]; +0x02f0 69 26 00 00 */ /* unsigned char DbgDynProcessorEnabled[0]; +0x02f0 5a 2b 00 00 */ /* unsigned char DbgConsoleBrokerEnabled[0]; +0x02f0 16 27 00 00 */ unsigned char SpareBits[4]; /* +0x02f0 10 2b 00 00 */ unsigned char DataFlagsPad[4]; /* +0x02f4 d4 18 00 00 */ unsigned long long TestRetInstruction; /* +0x02f8 */ unsigned long Reserved9; /* +0x0300 */ unsigned long Reserved10; /* +0x0304 */ unsigned char SystemCallPad[24]; /* +0x0308 2a 35 00 00 */ /* unsigned char TickCount[0]; +0x0320 29 35 00 00 */ /* unsigned char TickCountQuad[0]; +0x0320 29 21 00 00 */ unsigned char ReservedTickCountOverlay[12]; /* +0x0320 fa 18 00 00 */ unsigned char TickCountPad[4]; /* +0x032c d4 18 00 00 */ unsigned long Cookie; /* +0x0330 */ unsigned char CookiePad[4]; /* +0x0334 d4 18 00 00 */ long long ConsoleSessionForegroundProcessId; /* +0x0338 */ unsigned char TimeUpdateSequence[8]; /* +0x0340 29 21 00 00 */ unsigned long long LastTimeUpdateQpcValue; /* +0x0348 */ unsigned long long LastInterruptTimeUpdateQpcValue; /* +0x0350 */ unsigned long long QpcTimeIncrement; /* +0x0358 */ unsigned long QpcTimeIncrement32; /* +0x0360 */ unsigned char Reserved8[28]; /* +0x0364 2b 35 00 00 */ unsigned char UserModeGlobalLogger[32]; /* +0x0380 2c 35 00 00 */ unsigned long ImageFileExecutionOptions; /* +0x03a0 */ unsigned long LangGenerationCount; /* +0x03a4 */ unsigned char InterruptTimeBias[8]; /* +0x03a8 29 21 00 00 */ unsigned char TscQpcBias[8]; /* +0x03b0 29 21 00 00 */ unsigned char ActiveProcessorCount[4]; /* +0x03b8 45 1c 00 00 */ unsigned char ActiveGroupCount[1]; /* +0x03bc 2d 35 00 00 */ unsigned char QpcTimeIncrementShift; /* +0x03bd */ unsigned short TscQpcData; /* +0x03be */ unsigned char TscQpcEnabled[1]; /* +0x03be 2d 35 00 00 */ unsigned char TscQpcShift; /* +0x03bf */ unsigned char XState[528]; /* +0x03c0 2e 35 00 00 */ }; struct _FILE_PREFETCH { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned char Prefetch[8]; /* +0x0008 34 35 00 00 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA { /* unsigned char ResolutionBeginning[0]; +0x0000 39 35 00 00 */ /* unsigned char GetRoot[0]; +0x0000 3a 35 00 00 */ /* unsigned char ResolutionSuccessful[0]; +0x0000 3b 35 00 00 */ unsigned char ResolutionEnding[64]; /* +0x0000 3c 35 00 00 */ }; struct tagHW_PROFILE_INFOW { unsigned long dwDockInfo; /* +0x0000 */ unsigned char szHwProfileGuid[78]; /* +0x0004 3f 35 00 00 */ unsigned char szHwProfileName[162]; /* +0x0052 40 35 00 00 */ }; struct _TRACE_LOGFILE_HEADER { unsigned long BufferSize; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned char VersionDetail[4]; /* +0x0004 43 35 00 00 */ unsigned long ProviderVersion; /* +0x0008 */ unsigned long NumberOfProcessors; /* +0x000c */ unsigned char EndTime[8]; /* +0x0010 0e 19 00 00 */ unsigned long TimerResolution; /* +0x0018 */ unsigned long MaximumFileSize; /* +0x001c */ unsigned long LogFileMode; /* +0x0020 */ unsigned long BuffersWritten; /* +0x0024 */ /* unsigned char LogInstanceGuid[0]; +0x0028 6b 10 00 00 */ unsigned long StartBuffers; /* +0x0028 */ unsigned long PointerSize; /* +0x002c */ unsigned long EventsLost; /* +0x0030 */ unsigned long CpuSpeedInMHz; /* +0x0034 */ unsigned char LoggerName[8]; /* +0x0038 71 06 00 00 */ unsigned char LogFileName[8]; /* +0x0040 71 06 00 00 */ unsigned char TimeZone[176]; /* +0x0048 44 35 00 00 */ unsigned char BootTime[8]; /* +0x00f8 0e 19 00 00 */ unsigned char PerfFreq[8]; /* +0x0100 0e 19 00 00 */ unsigned char StartTime[8]; /* +0x0108 0e 19 00 00 */ unsigned long ReservedFlags; /* +0x0110 */ unsigned long BuffersLost; /* +0x0114 */ }; struct _SYSTEM_EXCEPTION_INFORMATION { unsigned long AlignmentFixupCount; /* +0x0000 */ unsigned long ExceptionDispatchCount; /* +0x0004 */ unsigned long FloatingEmulationCount; /* +0x0008 */ unsigned long ByteWordEmulationCount; /* +0x000c */ }; struct _CM_FLOPPY_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned char Size[8]; /* +0x0004 83 25 00 00 */ unsigned long MaxDensity; /* +0x000c */ unsigned long MountDensity; /* +0x0010 */ unsigned char StepRateHeadUnloadTime; /* +0x0014 */ unsigned char HeadLoadTime; /* +0x0015 */ unsigned char MotorOffTime; /* +0x0016 */ unsigned char SectorLengthCode; /* +0x0017 */ unsigned char SectorPerTrack; /* +0x0018 */ unsigned char ReadWriteGapLength; /* +0x0019 */ unsigned char DataTransferLength; /* +0x001a */ unsigned char FormatGapLength; /* +0x001b */ unsigned char FormatFillCharacter; /* +0x001c */ unsigned char HeadSettleTime; /* +0x001d */ unsigned char MotorSettleTime; /* +0x001e */ unsigned char MaximumTrackValue; /* +0x001f */ unsigned char DataTransferRate; /* +0x0020 */ }; struct tagPANOSE { unsigned char bFamilyType; /* +0x0000 */ unsigned char bSerifStyle; /* +0x0001 */ unsigned char bWeight; /* +0x0002 */ unsigned char bProportion; /* +0x0003 */ unsigned char bContrast; /* +0x0004 */ unsigned char bStrokeVariation; /* +0x0005 */ unsigned char bArmStyle; /* +0x0006 */ unsigned char bLetterform; /* +0x0007 */ unsigned char bMidline; /* +0x0008 */ unsigned char bXHeight; /* +0x0009 */ }; struct _ENUM_SERVICE_STATUS_PROCESSW { unsigned char lpServiceName[8]; /* +0x0000 71 06 00 00 */ unsigned char lpDisplayName[8]; /* +0x0008 71 06 00 00 */ unsigned char ServiceStatusProcess[40]; /* +0x0010 55 20 00 00 */ }; struct _SYSTEM_PROCESSOR_POWER_INFORMATION { unsigned char CurrentFrequency; /* +0x0000 */ unsigned char ThermalLimitFrequency; /* +0x0001 */ unsigned char ConstantThrottleFrequency; /* +0x0002 */ unsigned char DegradedThrottleFrequency; /* +0x0003 */ unsigned char LastBusyFrequency; /* +0x0004 */ unsigned char LastC3Frequency; /* +0x0005 */ unsigned char LastAdjustedBusyFrequency; /* +0x0006 */ unsigned char ProcessorMinThrottle; /* +0x0007 */ unsigned char ProcessorMaxThrottle; /* +0x0008 */ unsigned long NumberOfFrequencies; /* +0x000c */ unsigned long PromotionCount; /* +0x0010 */ unsigned long DemotionCount; /* +0x0014 */ unsigned long ErrorCount; /* +0x0018 */ unsigned long RetryCount; /* +0x001c */ unsigned long long CurrentFrequencyTime; /* +0x0020 */ unsigned long long CurrentProcessorTime; /* +0x0028 */ unsigned long long CurrentProcessorIdleTime; /* +0x0030 */ unsigned long long LastProcessorTime; /* +0x0038 */ unsigned long long LastProcessorIdleTime; /* +0x0040 */ }; struct _RTL_RXACT_LOG { unsigned long OperationCount; /* +0x0000 */ unsigned long LogSize; /* +0x0004 */ unsigned long LogSizeInUse; /* +0x0008 */ unsigned long Alignment; /* +0x000c */ }; struct _LDR_RESLOADER_RET { void *Module; /* +0x0000 */ void *DataEntry; /* +0x0008 */ void *TargetModule; /* +0x0010 */ }; struct tagIMEMENUITEMINFOA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fType[4]; /* +0x0004 75 00 00 00 */ unsigned char fState[4]; /* +0x0008 75 00 00 00 */ unsigned char wID[4]; /* +0x000c 75 00 00 00 */ unsigned char hbmpChecked[8]; /* +0x0010 67 21 00 00 */ unsigned char hbmpUnchecked[8]; /* +0x0018 67 21 00 00 */ unsigned long dwItemData; /* +0x0020 */ unsigned char szString[84]; /* +0x0024 66 35 00 00 */ unsigned char hbmpItem[8]; /* +0x0078 67 21 00 00 */ }; struct _SYSTEM_GDI_DRIVER_INFORMATION { unsigned char DriverName[16]; /* +0x0000 c1 18 00 00 */ void *ImageAddress; /* +0x0010 */ void *SectionPointer; /* +0x0018 */ void *EntryPoint; /* +0x0020 */ unsigned char ExportSectionPointer[8]; /* +0x0028 6c 35 00 00 */ unsigned long ImageLength; /* +0x0030 */ }; struct tagKERNINGPAIR { unsigned short wFirst; /* +0x0000 */ unsigned short wSecond; /* +0x0002 */ unsigned char iKernAmount[4]; /* +0x0004 74 00 00 00 */ }; struct tagCOLORMATCHTOTARGET { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long dwAction; /* +0x0008 */ unsigned long dwFlags; /* +0x000c */ unsigned long cbName; /* +0x0010 */ unsigned long cbData; /* +0x0014 */ unsigned char Data[4]; /* +0x0018 d7 18 00 00 */ }; struct _wireSAFEARR_UNKNOWN { unsigned long Size; /* +0x0000 */ unsigned char apUnknown[8]; /* +0x0008 85 1c 00 00 */ }; struct _LEARNING_MODE_OBJECT_INFORMATION { unsigned char ListEntry[8]; /* +0x0000 21 21 00 00 */ unsigned char LogLevel[8]; /* +0x0008 53 16 00 00 */ unsigned char ObjectType[8]; /* +0x0010 07 21 00 00 */ unsigned char ObjectName[8]; /* +0x0018 07 21 00 00 */ void *RootDirectory; /* +0x0020 */ unsigned char FullObjectName[16]; /* +0x0028 c1 18 00 00 */ }; struct _ULARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ unsigned long HighPart; /* +0x0004 */ }; struct _ULARGE_INTEGER:: { unsigned long LowPart; /* +0x0000 */ unsigned long HighPart; /* +0x0004 */ }; struct _SYSTEM_VHD_BOOT_INFORMATION { unsigned char OsDiskIsVhd; /* +0x0000 */ unsigned long OsVhdFilePathOffset; /* +0x0004 */ unsigned char OsVhdParentVolume[4]; /* +0x0008 ab 19 00 00 */ }; struct _EVENT_DATA_DESCRIPTOR { unsigned long long Ptr; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct tagEMRCREATEPEN { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihPen; /* +0x0008 */ unsigned char lopn[16]; /* +0x000c 10 22 00 00 */ }; struct _MIDL_STUBLESS_PROXY_INFO { unsigned char pStubDesc[8]; /* +0x0000 dc 2f 00 00 */ unsigned char ProcFormatString[8]; /* +0x0008 5e 22 00 00 */ unsigned char FormatStringOffset[8]; /* +0x0010 60 22 00 00 */ unsigned char pTransferSyntax[8]; /* +0x0018 7a 2b 00 00 */ unsigned long long nCount; /* +0x0020 */ unsigned char pSyntaxInfo[8]; /* +0x0028 75 28 00 00 */ }; struct _TRACE_LOGFILE_HEADER:::: { unsigned char MajorVersion; /* +0x0000 */ unsigned char MinorVersion; /* +0x0001 */ unsigned char SubVersion; /* +0x0002 */ unsigned char SubMinorVersion; /* +0x0003 */ }; struct _PROCESS_MITIGATION_DEP_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char Enable[0]; +0x0000 53 19 00 00 */ /* unsigned char DisableAtlThunkEmulation[0]; +0x0000 e3 21 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 c0 22 00 00 */ unsigned char Permanent; /* +0x0004 */ }; struct _KEY_EVENT_RECORD { unsigned char bKeyDown[4]; /* +0x0000 74 00 00 00 */ unsigned short wRepeatCount; /* +0x0004 */ unsigned short wVirtualKeyCode; /* +0x0006 */ unsigned short wVirtualScanCode; /* +0x0008 */ }; struct _KEY_EVENT_RECORD:: { /* unsigned char UnicodeChar[0]; +0x0000 71 00 00 00 */ char AsciiChar; /* +0x0000 */ }; struct _EVENT_TRACE_LOGFILEA { char *LogFileName; /* +0x0000 */ char *LoggerName; /* +0x0008 */ long long CurrentTime; /* +0x0010 */ unsigned long BuffersRead; /* +0x0018 */ unsigned long LogFileMode; /* +0x001c */ unsigned long ProcessTraceMode; /* +0x001c */ unsigned char CurrentEvent[88]; /* +0x0020 cc 35 00 00 */ unsigned char LogfileHeader[280]; /* +0x0078 cd 35 00 00 */ unsigned char BufferCallback[8]; /* +0x0190 f5 2b 00 00 */ unsigned long BufferSize; /* +0x0198 */ unsigned long Filled; /* +0x019c */ unsigned long EventsLost; /* +0x01a0 */ /* unsigned char EventCallback[0]; +0x01a8 d1 35 00 00 */ unsigned char EventRecordCallback[8]; /* +0x01a8 d5 35 00 00 */ unsigned long IsKernelTrace; /* +0x01b0 */ void *Context; /* +0x01b8 */ }; struct _RTL_PROCESS_MODULES { unsigned long NumberOfModules; /* +0x0000 */ unsigned char Modules[296]; /* +0x0008 d8 35 00 00 */ }; struct _PEB { unsigned char InheritedAddressSpace; /* +0x0000 */ unsigned char ReadImageFileExecOptions; /* +0x0001 */ unsigned char BeingDebugged; /* +0x0002 */ unsigned char BitField; /* +0x0003 */ /* unsigned char ImageUsesLargePages[0]; +0x0003 94 26 00 00 */ /* unsigned char IsProtectedProcess[0]; +0x0003 95 26 00 00 */ /* unsigned char IsLegacyProcess[0]; +0x0003 96 26 00 00 */ /* unsigned char IsImageDynamicallyRelocated[0]; +0x0003 25 2d 00 00 */ /* unsigned char SkipPatchingUser32Forwarders[0]; +0x0003 11 2d 00 00 */ unsigned char SpareBits[5]; /* +0x0003 26 2d 00 00 */ void *Mutant; /* +0x0008 */ void *ImageBaseAddress; /* +0x0010 */ unsigned char Ldr[8]; /* +0x0018 d7 26 00 00 */ unsigned char ProcessParameters[8]; /* +0x0020 44 2b 00 00 */ void *SubSystemData; /* +0x0028 */ void *ProcessHeap; /* +0x0030 */ unsigned char FastPebLock[8]; /* +0x0038 0a 1b 00 00 */ void *AtlThunkSListPtr; /* +0x0040 */ void *IFEOKey; /* +0x0048 */ unsigned long CrossProcessFlags; /* +0x0050 */ /* unsigned char ProcessInJob[0]; +0x0050 53 19 00 00 */ /* unsigned char ProcessInitializing[0]; +0x0050 e3 21 00 00 */ /* unsigned char ProcessUsingVEH[0]; +0x0050 e4 21 00 00 */ /* unsigned char ProcessUsingVCH[0]; +0x0050 68 26 00 00 */ /* unsigned char ProcessUsingFTH[0]; +0x0050 69 26 00 00 */ unsigned char ReservedBits0[8]; /* +0x0050 6a 26 00 00 */ void *KernelCallbackTable; /* +0x0058 */ void *UserSharedInfoPtr; /* +0x0058 */ unsigned char SystemReserved[4]; /* +0x0060 d4 18 00 00 */ unsigned long AtlThunkSListPtr32; /* +0x0064 */ void *ApiSetMap; /* +0x0068 */ unsigned long TlsExpansionCounter; /* +0x0070 */ void *TlsBitmap; /* +0x0078 */ unsigned char TlsBitmapBits[8]; /* +0x0080 cc 1f 00 00 */ void *ReadOnlySharedMemoryBase; /* +0x0088 */ void *HotpatchInformation; /* +0x0090 */ unsigned char ReadOnlyStaticServerData[8]; /* +0x0098 1a 10 00 00 */ void *AnsiCodePageData; /* +0x00a0 */ void *OemCodePageData; /* +0x00a8 */ void *UnicodeCaseTableData; /* +0x00b0 */ unsigned long NumberOfProcessors; /* +0x00b8 */ unsigned long NtGlobalFlag; /* +0x00bc */ unsigned char CriticalSectionTimeout[8]; /* +0x00c0 0e 19 00 00 */ unsigned long long HeapSegmentReserve; /* +0x00c8 */ unsigned long long HeapSegmentCommit; /* +0x00d0 */ unsigned long long HeapDeCommitTotalFreeThreshold; /* +0x00d8 */ unsigned long long HeapDeCommitFreeBlockThreshold; /* +0x00e0 */ unsigned long NumberOfHeaps; /* +0x00e8 */ unsigned long MaximumNumberOfHeaps; /* +0x00ec */ unsigned char ProcessHeaps[8]; /* +0x00f0 1a 10 00 00 */ void *GdiSharedHandleTable; /* +0x00f8 */ void *ProcessStarterHelper; /* +0x0100 */ unsigned long GdiDCAttributeList; /* +0x0108 */ unsigned char LoaderLock[8]; /* +0x0110 0a 1b 00 00 */ unsigned long OSMajorVersion; /* +0x0118 */ unsigned long OSMinorVersion; /* +0x011c */ unsigned short OSBuildNumber; /* +0x0120 */ unsigned short OSCSDVersion; /* +0x0122 */ unsigned long OSPlatformId; /* +0x0124 */ unsigned long ImageSubsystem; /* +0x0128 */ unsigned long ImageSubsystemMajorVersion; /* +0x012c */ unsigned long ImageSubsystemMinorVersion; /* +0x0130 */ unsigned long long ActiveProcessAffinityMask; /* +0x0138 */ unsigned char GdiHandleBuffer[240]; /* +0x0140 57 2f 00 00 */ unsigned char PostProcessInitRoutine[8]; /* +0x0230 f7 23 00 00 */ void *TlsExpansionBitmap; /* +0x0238 */ unsigned char TlsExpansionBitmapBits[128]; /* +0x0240 db 35 00 00 */ unsigned long SessionId; /* +0x02c0 */ unsigned char AppCompatFlags[8]; /* +0x02c8 9e 2a 00 00 */ unsigned char AppCompatFlagsUser[8]; /* +0x02d0 9e 2a 00 00 */ void *pShimData; /* +0x02d8 */ void *AppCompatInfo; /* +0x02e0 */ unsigned char CSDVersion[16]; /* +0x02e8 c1 18 00 00 */ unsigned char ActivationContextData[8]; /* +0x02f8 de 35 00 00 */ unsigned char ProcessAssemblyStorageMap[8]; /* +0x0300 e0 35 00 00 */ unsigned char SystemDefaultActivationContextData[8]; /* +0x0308 de 35 00 00 */ unsigned char SystemAssemblyStorageMap[8]; /* +0x0310 e0 35 00 00 */ unsigned long long MinimumStackCommit; /* +0x0318 */ unsigned char FlsCallback[8]; /* +0x0320 e2 35 00 00 */ unsigned char FlsListHead[16]; /* +0x0328 7d 1a 00 00 */ void *FlsBitmap; /* +0x0338 */ unsigned char FlsBitmapBits[16]; /* +0x0340 2b 23 00 00 */ unsigned long FlsHighIndex; /* +0x0350 */ void *WerRegistrationData; /* +0x0358 */ void *WerShipAssertPtr; /* +0x0360 */ void *pUnused; /* +0x0368 */ void *pImageHeaderHash; /* +0x0370 */ unsigned long TracingFlags; /* +0x0378 */ /* unsigned char HeapTracingEnabled[0]; +0x0378 53 19 00 00 */ /* unsigned char CritSecTracingEnabled[0]; +0x0378 e3 21 00 00 */ /* unsigned char LibLoaderTracingEnabled[0]; +0x0378 e4 21 00 00 */ unsigned char SpareTracingBits[8]; /* +0x0378 f4 32 00 00 */ unsigned long long CsrServerReadOnlySharedMemoryBase; /* +0x0380 */ }; struct _CALL_FRAME { void *ReturnAddress; /* +0x0000 */ void *Param1Home; /* +0x0008 */ void *Param2Home; /* +0x0010 */ void *Param3Home; /* +0x0018 */ void *Param4Home; /* +0x0020 */ }; struct _RPC_SECURITY_QOS { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ }; struct _SYSTEM_CODEINTEGRITY_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long CodeIntegrityOptions; /* +0x0004 */ }; struct _SEC_WINNT_AUTH_IDENTITY_A { unsigned char *User; /* +0x0000 */ unsigned long UserLength; /* +0x0008 */ unsigned char *Domain; /* +0x0010 */ unsigned long DomainLength; /* +0x0018 */ unsigned char *Password; /* +0x0020 */ unsigned long PasswordLength; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct _PROCESS_ACCESS_TOKEN { void *Token; /* +0x0000 */ void *Thread; /* +0x0008 */ }; struct _STORAGE_QUERY_DEPENDENT_VOLUME_RESPONSE { unsigned long ResponseLevel; /* +0x0000 */ unsigned long NumberEntries; /* +0x0004 */ /* unsigned char Lev1Depends[0]; +0x0008 17 36 00 00 */ unsigned char Lev2Depends[68]; /* +0x0008 19 36 00 00 */ }; struct tagCLIENTCREATESTRUCT { void *hWindowMenu; /* +0x0000 */ unsigned char idFirstChild[8]; /* +0x0008 75 00 00 00 */ }; struct _CONSOLE_HISTORY_INFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char HistoryBufferSize[4]; /* +0x0004 75 00 00 00 */ unsigned char NumberOfHistoryBuffers[4]; /* +0x0008 75 00 00 00 */ unsigned long dwFlags; /* +0x000c */ }; struct _OBJECTID { unsigned char Lineage[16]; /* +0x0000 6b 10 00 00 */ unsigned long Uniquifier; /* +0x0010 */ }; struct tagEMRSETPIXELV { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char ptlPixel[8]; /* +0x0008 6a 19 00 00 */ unsigned long crColor; /* +0x0010 */ }; struct _RPC_SERVER_INTERFACE { unsigned char Length[4]; /* +0x0000 75 00 00 00 */ unsigned char InterfaceId[20]; /* +0x0004 6d 20 00 00 */ unsigned char TransferSyntax[24]; /* +0x0018 6d 20 00 00 */ unsigned char DispatchTable[8]; /* +0x0030 5d 22 00 00 */ unsigned char RpcProtseqEndpointCount[8]; /* +0x0038 75 00 00 00 */ unsigned char RpcProtseqEndpoint[8]; /* +0x0040 8c 26 00 00 */ void *DefaultManagerEpv; /* +0x0048 */ unsigned char InterpreterInfo[8]; /* +0x0050 3d 11 00 00 */ unsigned char Flags[8]; /* +0x0058 75 00 00 00 */ }; struct _NT_TIB64 { unsigned long long ExceptionList; /* +0x0000 */ unsigned long long StackBase; /* +0x0008 */ unsigned long long StackLimit; /* +0x0010 */ unsigned long long SubSystemTib; /* +0x0018 */ unsigned long long FiberData; /* +0x0020 */ unsigned long Version; /* +0x0020 */ unsigned long long ArbitraryUserPointer; /* +0x0028 */ unsigned long long Self; /* +0x0030 */ }; struct _LOOKUP_STREAM_FROM_CLUSTER_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long NumberOfClusters; /* +0x0004 */ unsigned char Cluster[8]; /* +0x0008 9a 2c 00 00 */ }; struct _SYSTEM_INTERRUPT_INFORMATION { unsigned long ContextSwitches; /* +0x0000 */ unsigned long DpcCount; /* +0x0004 */ unsigned long DpcRate; /* +0x0008 */ unsigned long TimeIncrement; /* +0x000c */ unsigned long DpcBypassCount; /* +0x0010 */ unsigned long ApcBypassCount; /* +0x0014 */ }; struct _UMS_SCHEDULER_STARTUP_INFO { unsigned long UmsVersion; /* +0x0000 */ void *CompletionList; /* +0x0008 */ unsigned char SchedulerProc[8]; /* +0x0010 bb 1f 00 00 */ void *SchedulerParam; /* +0x0018 */ }; struct _ABCFLOAT { unsigned char abcfA[4]; /* +0x0000 40 00 00 00 */ unsigned char abcfB[4]; /* +0x0004 40 00 00 00 */ unsigned char abcfC[4]; /* +0x0008 40 00 00 00 */ }; struct tagEMRCREATECOLORSPACE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihCS; /* +0x0008 */ unsigned char lcs[328]; /* +0x000c 3b 36 00 00 */ }; struct _numberfmtW { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[8]; /* +0x0008 75 00 00 00 */ unsigned char lpDecimalSep[8]; /* +0x0010 71 06 00 00 */ unsigned char lpThousandSep[8]; /* +0x0018 71 06 00 00 */ unsigned char NegativeOrder[8]; /* +0x0020 75 00 00 00 */ }; struct _TXFS_START_RM_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long long LogContainerSize; /* +0x0008 */ unsigned long LogContainerCountMin; /* +0x0010 */ unsigned long LogContainerCountMax; /* +0x0014 */ unsigned long LogGrowthIncrement; /* +0x0018 */ unsigned long LogAutoShrinkPercentage; /* +0x001c */ unsigned long TmLogPathOffset; /* +0x0020 */ unsigned short TmLogPathLength; /* +0x0024 */ unsigned short LoggingMode; /* +0x0026 */ unsigned short LogPathLength; /* +0x0028 */ unsigned short Reserved; /* +0x002a */ unsigned char LogPath[4]; /* +0x002c ab 19 00 00 */ }; struct _STREAM_LAYOUT_ENTRY { unsigned long Version; /* +0x0000 */ unsigned long NextStreamOffset; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long ExtentInformationOffset; /* +0x000c */ unsigned char AllocationSize[8]; /* +0x0010 0e 19 00 00 */ unsigned char EndOfFile[8]; /* +0x0018 0e 19 00 00 */ unsigned long StreamIdentifierLength; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ unsigned char StreamIdentifier[8]; /* +0x0028 ab 19 00 00 */ }; struct _PARSE_MESSAGE_CONTEXT { unsigned long fFlags; /* +0x0000 */ unsigned long cwSavColumn; /* +0x0004 */ unsigned long long iwSrc; /* +0x0008 */ unsigned long long iwDst; /* +0x0010 */ unsigned long long iwDstSpace; /* +0x0018 */ char *lpvArgStart; /* +0x0020 */ }; struct _IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY { unsigned long long BeginAddress; /* +0x0000 */ unsigned long long EndAddress; /* +0x0008 */ unsigned long long ExceptionHandler; /* +0x0010 */ unsigned long long HandlerData; /* +0x0018 */ unsigned long long PrologEndAddress; /* +0x0020 */ }; struct _QUERY_FILE_LAYOUT_INPUT { unsigned long NumberOfPairs; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char FilterType[4]; /* +0x0008 2f 17 00 00 */ unsigned long Reserved; /* +0x000c */ }; struct _QUERY_FILE_LAYOUT_INPUT:: { /* unsigned char ClusterRanges[0]; +0x0000 4e 36 00 00 */ unsigned char FileReferenceRanges[16]; /* +0x0000 4f 36 00 00 */ }; struct _FILE_VOLUME_NAME_INFORMATION { unsigned long DeviceNameLength; /* +0x0000 */ unsigned char DeviceName[4]; /* +0x0004 ab 19 00 00 */ }; struct _POWER_SESSION_TIMEOUTS { unsigned long InputTimeout; /* +0x0000 */ unsigned long DisplayTimeout; /* +0x0004 */ }; struct _KAFFINITY_ENUMERATION_CONTEXT { unsigned char Affinity[8]; /* +0x0000 fe 2a 00 00 */ unsigned long long CurrentMask; /* +0x0008 */ unsigned short CurrentIndex; /* +0x0010 */ }; struct _TOKEN_ELEVATION { unsigned long TokenIsElevated; /* +0x0000 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long InfoSize; /* +0x0004 */ /* unsigned char CodeInfo[0]; +0x0008 84 36 00 00 */ /* unsigned char KernelInfo[0]; +0x0008 85 36 00 00 */ /* unsigned char UserModeInfo[0]; +0x0008 86 36 00 00 */ /* unsigned char InjectionInfo[0]; +0x0008 87 36 00 00 */ unsigned char AtomicSwap[48]; /* +0x0008 88 36 00 00 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned long long ParentDirectory; /* +0x0000 */ unsigned long long ObjectHandle1; /* +0x0008 */ unsigned long long ObjectHandle2; /* +0x0010 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned short NameOffset; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ unsigned short TargetNameOffset; /* +0x0004 */ unsigned short TargetNameLength; /* +0x0006 */ unsigned short ColdpatchImagePathOffset; /* +0x0008 */ unsigned short ColdpatchImagePathLength; /* +0x000a */ unsigned long long TargetProcess; /* +0x0010 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned short NameOffset; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ unsigned short TargetNameOffset; /* +0x0004 */ unsigned short TargetNameLength; /* +0x0006 */ unsigned short ColdpatchImagePathOffset; /* +0x0008 */ unsigned short ColdpatchImagePathLength; /* +0x000a */ unsigned char PatchingFinished; /* +0x000c */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned short NameOffset; /* +0x0000 */ unsigned short NameLength; /* +0x0002 */ }; struct _SYSTEM_HOTPATCH_CODE_INFORMATION:::: { unsigned long DescriptorsCount; /* +0x0000 */ unsigned char CodeDescriptors[40]; /* +0x0008 93 36 00 00 */ }; struct _MEMORY_PRIORITY_INFORMATION { unsigned long MemoryPriority; /* +0x0000 */ }; struct _SYSTEM_QUERY_PERFORMANCE_COUNTER_INFORMATION { unsigned long Version; /* +0x0000 */ unsigned char Flags[4]; /* +0x0004 9a 36 00 00 */ unsigned char ValidFlags[4]; /* +0x0008 9a 36 00 00 */ }; struct _RTL_UNICODE_STRING_BUFFER { unsigned char String[16]; /* +0x0000 c1 18 00 00 */ unsigned char ByteBuffer[48]; /* +0x0010 c8 2e 00 00 */ unsigned char MinimumStaticBufferForTerminalNul[8]; /* +0x0040 0c 21 00 00 */ }; struct tagSTATDATA { unsigned char formatetc[32]; /* +0x0000 88 21 00 00 */ unsigned long advf; /* +0x0020 */ unsigned char pAdvSink[8]; /* +0x0028 8b 21 00 00 */ unsigned long dwConnection; /* +0x0030 */ }; struct _userSTGMEDIUM::_STGMEDIUM_UNION { unsigned long tymed; /* +0x0000 */ }; struct _userSTGMEDIUM::_STGMEDIUM_UNION::__MIDL_IAdviseSink_0003 { /* unsigned char hMetaFilePict[0]; +0x0000 a7 36 00 00 */ /* unsigned char hHEnhMetaFile[0]; +0x0000 a9 36 00 00 */ /* unsigned char hGdiHandle[0]; +0x0000 ab 36 00 00 */ /* unsigned char hGlobal[0]; +0x0000 8c 19 00 00 */ /* unsigned char lpszFileName[0]; +0x0000 71 06 00 00 */ /* unsigned char pstm[0]; +0x0000 de 1f 00 00 */ unsigned char pstg[8]; /* +0x0000 de 1f 00 00 */ }; struct _FILE_ID_GLOBAL_TX_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 0e 19 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 0e 19 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 0e 19 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 0e 19 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned char FileId[8]; /* +0x0040 0e 19 00 00 */ unsigned char LockingTransactionId[16]; /* +0x0048 6b 10 00 00 */ unsigned long TxInfoFlags; /* +0x0058 */ unsigned char FileName[4]; /* +0x005c ab 19 00 00 */ }; struct _IMAGE_BOUND_FORWARDER_REF { unsigned long TimeDateStamp; /* +0x0000 */ unsigned short OffsetModuleName; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ }; struct _LDR_FAILURE_DATA { long Status; /* +0x0000 */ unsigned char ImageName[64]; /* +0x0004 89 1f 00 00 */ unsigned char AdditionalInfo[64]; /* +0x0044 89 1f 00 00 */ }; struct _SYSTEM_HYPERVISOR_PROCESSOR_COUNT_INFORMATION { unsigned long NumberOfLogicalProcessors; /* +0x0000 */ unsigned long NumberOfCores; /* +0x0004 */ }; struct tagRAWINPUTDEVICELIST { void *hDevice; /* +0x0000 */ unsigned long dwType; /* +0x0008 */ }; struct _X86_CALL_FRAME { unsigned long ReturnAddress; /* +0x0000 */ unsigned long Param1; /* +0x0004 */ unsigned long Param2; /* +0x0008 */ unsigned long CompatibilityArea; /* +0x000c */ }; struct _TRANSACTION_ENLISTMENT_PAIR { unsigned char EnlistmentId[16]; /* +0x0000 6b 10 00 00 */ unsigned char ResourceManagerId[16]; /* +0x0010 6b 10 00 00 */ }; struct tagDIBSECTION { unsigned char dsBm[32]; /* +0x0000 ce 36 00 00 */ unsigned char dsBmih[40]; /* +0x0020 cf 36 00 00 */ unsigned char dsBitfields[16]; /* +0x0048 fa 18 00 00 */ void *dshSection; /* +0x0058 */ unsigned long dsOffset; /* +0x0060 */ }; struct _WOW64_LDT_ENTRY { unsigned short LimitLow; /* +0x0000 */ unsigned short BaseLow; /* +0x0002 */ }; struct _WOW64_LDT_ENTRY:::: { /* unsigned char BaseMid[0]; +0x0000 49 19 00 00 */ /* unsigned char Type[0]; +0x0000 dd 36 00 00 */ /* unsigned char Dpl[0]; +0x0000 de 36 00 00 */ /* unsigned char Pres[0]; +0x0000 df 36 00 00 */ /* unsigned char LimitHi[0]; +0x0000 4c 19 00 00 */ /* unsigned char Sys[0]; +0x0000 4d 19 00 00 */ /* unsigned char Reserved_0[0]; +0x0000 4e 19 00 00 */ /* unsigned char Default_Big[0]; +0x0000 61 2b 00 00 */ /* unsigned char Granularity[0]; +0x0000 62 2b 00 00 */ unsigned char BaseHi[4]; /* +0x0000 e0 36 00 00 */ }; struct _WOW64_LDT_ENTRY:::: { unsigned char BaseMid; /* +0x0000 */ unsigned char Flags1; /* +0x0001 */ unsigned char Flags2; /* +0x0002 */ unsigned char BaseHi; /* +0x0003 */ }; struct _WIN32_STREAM_ID { unsigned long dwStreamId; /* +0x0000 */ unsigned long dwStreamAttributes; /* +0x0004 */ unsigned char Size[8]; /* +0x0008 0e 19 00 00 */ unsigned long dwStreamNameSize; /* +0x0010 */ unsigned char cStreamName[4]; /* +0x0014 ab 19 00 00 */ }; struct tagENUMLOGFONTEXW { unsigned char elfLogFont[92]; /* +0x0000 46 20 00 00 */ unsigned char elfFullName[128]; /* +0x005c b7 26 00 00 */ unsigned char elfStyle[64]; /* +0x00dc 89 1f 00 00 */ unsigned char elfScript[64]; /* +0x011c 89 1f 00 00 */ }; struct _TOKEN_OWNER { void *Owner; /* +0x0000 */ }; struct _tagRemBINDINFO { unsigned long cbSize; /* +0x0000 */ unsigned char szExtraInfo[8]; /* +0x0008 71 06 00 00 */ unsigned long grfBindInfoF; /* +0x0010 */ unsigned long dwBindVerb; /* +0x0014 */ unsigned char szCustomVerb[8]; /* +0x0018 71 06 00 00 */ unsigned long cbstgmedData; /* +0x0020 */ unsigned long dwOptions; /* +0x0024 */ unsigned long dwOptionsFlags; /* +0x0028 */ unsigned long dwCodePage; /* +0x002c */ unsigned char securityAttributes[12]; /* +0x0030 34 20 00 00 */ unsigned char iid[20]; /* +0x003c 6b 10 00 00 */ unsigned char pUnk[8]; /* +0x0050 23 1c 00 00 */ unsigned long dwReserved; /* +0x0058 */ }; struct _EVENTSFORLOGFILE { unsigned long ulSize; /* +0x0000 */ unsigned char szLogicalLogFile[512]; /* +0x0004 bf 20 00 00 */ unsigned long ulNumRecords; /* +0x0204 */ /* unsigned char pEventLogRecords[0]; +0x0208 f3 36 00 00 */ }; struct _COAUTHINFO { unsigned long dwAuthnSvc; /* +0x0000 */ unsigned long dwAuthzSvc; /* +0x0004 */ unsigned char pwszServerPrincName[8]; /* +0x0008 71 06 00 00 */ unsigned long dwAuthnLevel; /* +0x0010 */ unsigned long dwImpersonationLevel; /* +0x0014 */ unsigned char pAuthIdentityData[8]; /* +0x0018 18 37 00 00 */ unsigned long dwCapabilities; /* +0x0020 */ }; struct _UNIQUE_PROCESS_INFORMATION { /* unsigned char DontUse[0]; +0x0000 11 30 00 00 */ /* unsigned char UniqueProcessKey[0]; +0x0000 12 30 00 00 */ unsigned char Reserved[8]; /* +0x0000 13 30 00 00 */ }; struct _SUPPORTED_OS_INFO { unsigned short OsCount; /* +0x0000 */ unsigned short MitigationExist; /* +0x0002 */ unsigned char OsList[8]; /* +0x0004 8c 33 00 00 */ }; struct _SERVICE_START_REASON { unsigned long dwReason; /* +0x0000 */ }; struct _RPC_ASYNC_STATE { unsigned char Size[4]; /* +0x0000 75 00 00 00 */ unsigned long Signature; /* +0x0004 */ long Lock; /* +0x0008 */ unsigned long Flags; /* +0x000c */ void *StubInfo; /* +0x0010 */ void *UserInfo; /* +0x0018 */ void *RuntimeInfo; /* +0x0020 */ unsigned char Event[4]; /* +0x0028 51 17 00 00 */ unsigned char NotificationType[4]; /* +0x002c e3 17 00 00 */ unsigned char u[32]; /* +0x0030 25 37 00 00 */ unsigned char Reserved[32]; /* +0x0050 26 37 00 00 */ }; struct _TOKEN_ORIGIN { unsigned char OriginatingLogonSession[8]; /* +0x0000 90 1e 00 00 */ }; struct _RTL_QUERY_DEBUG_INFORMATION_INFO { unsigned long UniqueProcessId; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long Buffer; /* +0x0008 */ }; struct _SERVICE_CONTROL_STATUS_REASON_PARAMSA { unsigned long dwReason; /* +0x0000 */ char *pszComment; /* +0x0008 */ unsigned char ServiceStatus[40]; /* +0x0010 55 20 00 00 */ }; struct tagLC_ID { unsigned short wLanguage; /* +0x0000 */ unsigned short wCountry; /* +0x0002 */ unsigned short wCodePage; /* +0x0004 */ }; struct tagLAYERPLANEDESCRIPTOR { unsigned short nSize; /* +0x0000 */ unsigned short nVersion; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned char iPixelType; /* +0x0008 */ unsigned char cColorBits; /* +0x0009 */ unsigned char cRedBits; /* +0x000a */ unsigned char cRedShift; /* +0x000b */ unsigned char cGreenBits; /* +0x000c */ unsigned char cGreenShift; /* +0x000d */ unsigned char cBlueBits; /* +0x000e */ unsigned char cBlueShift; /* +0x000f */ unsigned char cAlphaBits; /* +0x0010 */ unsigned char cAlphaShift; /* +0x0011 */ unsigned char cAccumBits; /* +0x0012 */ unsigned char cAccumRedBits; /* +0x0013 */ unsigned char cAccumGreenBits; /* +0x0014 */ unsigned char cAccumBlueBits; /* +0x0015 */ unsigned char cAccumAlphaBits; /* +0x0016 */ unsigned char cDepthBits; /* +0x0017 */ unsigned char cStencilBits; /* +0x0018 */ unsigned char cAuxBuffers; /* +0x0019 */ unsigned char iLayerPlane; /* +0x001a */ unsigned char bReserved; /* +0x001b */ unsigned long crTransparent; /* +0x001c */ }; struct tagPOINTER_DEVICE_CURSOR_INFO { unsigned char cursorId[4]; /* +0x0000 75 00 00 00 */ unsigned char cursor[4]; /* +0x0004 33 16 00 00 */ }; struct _CONSOLE_CURSOR_INFO { unsigned long dwSize; /* +0x0000 */ unsigned char bVisible[4]; /* +0x0004 74 00 00 00 */ }; struct _XSAVE_VENDORS { unsigned long NumberOfVendors; /* +0x0000 */ unsigned char Vendor[56]; /* +0x0008 43 37 00 00 */ }; struct _FILE_ALL_INFORMATION { unsigned char BasicInformation[40]; /* +0x0000 46 37 00 00 */ unsigned char StandardInformation[24]; /* +0x0028 47 37 00 00 */ unsigned char InternalInformation[8]; /* +0x0040 48 37 00 00 */ unsigned char EaInformation[4]; /* +0x0048 96 24 00 00 */ unsigned char AccessInformation[4]; /* +0x004c b0 2c 00 00 */ unsigned char PositionInformation[8]; /* +0x0050 49 37 00 00 */ unsigned char ModeInformation[4]; /* +0x0058 b8 20 00 00 */ unsigned char AlignmentInformation[4]; /* +0x005c 58 24 00 00 */ unsigned char NameInformation[8]; /* +0x0060 4a 37 00 00 */ }; struct _STARTUPINFOW { unsigned long cb; /* +0x0000 */ unsigned char lpReserved[8]; /* +0x0008 71 06 00 00 */ unsigned char lpDesktop[8]; /* +0x0010 71 06 00 00 */ unsigned char lpTitle[8]; /* +0x0018 71 06 00 00 */ unsigned long dwX; /* +0x0020 */ unsigned long dwY; /* +0x0024 */ unsigned long dwXSize; /* +0x0028 */ unsigned long dwYSize; /* +0x002c */ unsigned long dwXCountChars; /* +0x0030 */ unsigned long dwYCountChars; /* +0x0034 */ unsigned long dwFillAttribute; /* +0x0038 */ unsigned long dwFlags; /* +0x003c */ unsigned short wShowWindow; /* +0x0040 */ unsigned short cbReserved2; /* +0x0042 */ unsigned char *lpReserved2; /* +0x0048 */ void *hStdInput; /* +0x0050 */ void *hStdOutput; /* +0x0058 */ void *hStdError; /* +0x0060 */ }; struct _IMAGE_DOS_HEADER { unsigned short e_magic; /* +0x0000 */ unsigned short e_cblp; /* +0x0002 */ unsigned short e_cp; /* +0x0004 */ unsigned short e_crlc; /* +0x0006 */ unsigned short e_cparhdr; /* +0x0008 */ unsigned short e_minalloc; /* +0x000a */ unsigned short e_maxalloc; /* +0x000c */ unsigned short e_ss; /* +0x000e */ unsigned short e_sp; /* +0x0010 */ unsigned short e_csum; /* +0x0012 */ unsigned short e_ip; /* +0x0014 */ unsigned short e_cs; /* +0x0016 */ unsigned short e_lfarlc; /* +0x0018 */ unsigned short e_ovno; /* +0x001a */ unsigned char e_res[8]; /* +0x001c 8c 33 00 00 */ unsigned short e_oemid; /* +0x0024 */ unsigned short e_oeminfo; /* +0x0026 */ unsigned char e_res2[20]; /* +0x0028 51 37 00 00 */ long e_lfanew; /* +0x003c */ }; struct _FILE_DISPOSITION_INFO { unsigned char DeleteFileW; /* +0x0000 */ }; struct _FP_IEEE_RECORD { unsigned char Operand1[24]; /* +0x0000 58 37 00 00 */ unsigned char Operand2[24]; /* +0x0018 58 37 00 00 */ unsigned char Result[24]; /* +0x0030 58 37 00 00 */ }; struct tagBITMAPCOREHEADER { unsigned long bcSize; /* +0x0000 */ unsigned short bcWidth; /* +0x0004 */ unsigned short bcHeight; /* +0x0006 */ unsigned short bcPlanes; /* +0x0008 */ unsigned short bcBitCount; /* +0x000a */ }; struct DISPLAYCONFIG_SET_TARGET_PERSISTENCE { unsigned char header[20]; /* +0x0000 38 2c 00 00 */ /* unsigned char bootPersistenceOn[0]; +0x0014 52 25 00 00 */ /* unsigned char reserved[0]; +0x0014 5f 37 00 00 */ unsigned char value[4]; /* +0x0014 75 00 00 00 */ }; struct _SERVICE_STATUS { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwCurrentState; /* +0x0004 */ unsigned long dwControlsAccepted; /* +0x0008 */ unsigned long dwWin32ExitCode; /* +0x000c */ unsigned long dwServiceSpecificExitCode; /* +0x0010 */ unsigned long dwCheckPoint; /* +0x0014 */ unsigned long dwWaitHint; /* +0x0018 */ }; struct _CM_ROM_BLOCK { unsigned long Address; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct _FILE_ATTRIBUTE_CACHE_VALUES { unsigned long Flags; /* +0x0000 */ unsigned long NumberOfValues; /* +0x0004 */ unsigned char Attributes[212]; /* +0x0008 70 37 00 00 */ }; struct tagCAI { unsigned long cElems; /* +0x0000 */ short *pElems; /* +0x0008 */ }; struct _LUNICODE_STRING { unsigned long long Length; /* +0x0000 */ unsigned long long MaximumLength; /* +0x0008 */ unsigned char Buffer[8]; /* +0x0010 71 06 00 00 */ }; struct _WINDOWS_OS_OPTIONS { unsigned char Signature[8]; /* +0x0000 fb 10 00 00 */ unsigned long Version; /* +0x0008 */ unsigned long Length; /* +0x000c */ unsigned long OsLoadPathOffset; /* +0x0010 */ unsigned char OsLoadOptions[4]; /* +0x0014 ab 19 00 00 */ }; struct _JOURNAL_ABSOLUTE_INFORMATION { unsigned char StartTimeStamp[8]; /* +0x0000 0e 19 00 00 */ unsigned char EndTimeStamp[8]; /* +0x0008 0e 19 00 00 */ unsigned long long NumberOfRecords; /* +0x0010 */ unsigned long FillLevel; /* +0x0018 */ }; struct _SHORT_SIZEDARR { unsigned long clSize; /* +0x0000 */ unsigned short *pData; /* +0x0008 */ }; struct _FILE_ID_BOTH_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 0e 19 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 0e 19 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 0e 19 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 0e 19 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ char ShortNameLength; /* +0x0044 */ unsigned char ShortName[26]; /* +0x0046 bb 2f 00 00 */ unsigned char FileId[8]; /* +0x0060 0e 19 00 00 */ unsigned char FileName[8]; /* +0x0068 ab 19 00 00 */ }; struct tagEMRSELECTOBJECT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihObject; /* +0x0008 */ }; struct _userHGLOBAL { long fContext; /* +0x0000 */ }; struct _userHGLOBAL::__MIDL_IWinTypes_0003 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 42 32 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _FILE_LINKS_INFORMATION { unsigned long BytesNeeded; /* +0x0000 */ unsigned long EntriesReturned; /* +0x0004 */ unsigned char Entry[24]; /* +0x0008 99 37 00 00 */ }; struct _SYSTEM_POWER_INFORMATION { unsigned long MaxIdlenessAllowed; /* +0x0000 */ unsigned long Idleness; /* +0x0004 */ unsigned long TimeRemaining; /* +0x0008 */ unsigned char CoolingMode; /* +0x000c */ }; struct _RTL_HEAP_PARAMETERS { unsigned long Length; /* +0x0000 */ unsigned long long SegmentReserve; /* +0x0008 */ unsigned long long SegmentCommit; /* +0x0010 */ unsigned long long DeCommitFreeBlockThreshold; /* +0x0018 */ unsigned long long DeCommitTotalFreeThreshold; /* +0x0020 */ unsigned long long MaximumAllocationSize; /* +0x0028 */ unsigned long long VirtualMemoryThreshold; /* +0x0030 */ unsigned long long InitialCommit; /* +0x0038 */ unsigned long long InitialReserve; /* +0x0040 */ unsigned char CommitRoutine[8]; /* +0x0048 9e 37 00 00 */ unsigned char Reserved[16]; /* +0x0050 d1 1e 00 00 */ }; struct _ACTIVATION_CONTEXT_DETAILED_INFORMATION { unsigned long dwFlags; /* +0x0000 */ unsigned long ulFormatVersion; /* +0x0004 */ unsigned long ulAssemblyCount; /* +0x0008 */ unsigned long ulRootManifestPathType; /* +0x000c */ unsigned long ulRootManifestPathChars; /* +0x0010 */ unsigned long ulRootConfigurationPathType; /* +0x0014 */ unsigned long ulRootConfigurationPathChars; /* +0x0018 */ unsigned long ulAppDirPathType; /* +0x001c */ unsigned long ulAppDirPathChars; /* +0x0020 */ unsigned char lpRootManifestPath[8]; /* +0x0028 27 10 00 00 */ unsigned char lpRootConfigurationPath[8]; /* +0x0030 27 10 00 00 */ unsigned char lpAppDirPath[8]; /* +0x0038 27 10 00 00 */ }; struct tagLASTINPUTINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwTime; /* +0x0004 */ }; struct tagHELPINFO { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iContextType[4]; /* +0x0004 74 00 00 00 */ unsigned char iCtrlId[8]; /* +0x0008 74 00 00 00 */ void *hItemHandle; /* +0x0010 */ unsigned long long dwContextId; /* +0x0018 */ unsigned char MousePos[8]; /* +0x0020 1b 1a 00 00 */ }; struct tagACTCTX_SECTION_KEYED_DATA_2600 { unsigned long cbSize; /* +0x0000 */ unsigned long ulDataFormatVersion; /* +0x0004 */ void *lpData; /* +0x0008 */ unsigned long ulLength; /* +0x0010 */ void *lpSectionGlobalData; /* +0x0018 */ unsigned long ulSectionGlobalDataLength; /* +0x0020 */ void *lpSectionBase; /* +0x0028 */ unsigned long ulSectionTotalLength; /* +0x0030 */ void *hActCtx; /* +0x0038 */ unsigned long ulAssemblyRosterIndex; /* +0x0040 */ }; struct _FILE_MODE_INFORMATION { unsigned long Mode; /* +0x0000 */ }; struct _LAST_EXCEPTION_LOG { unsigned char ExceptionRecord[160]; /* +0x0000 63 19 00 00 */ unsigned char ContextRecord[1232]; /* +0x00a0 1c 19 00 00 */ unsigned long ControlPc; /* +0x0570 */ unsigned char Disposition[4]; /* +0x0574 af 17 00 00 */ unsigned char HandlerData[24]; /* +0x0578 1f 34 00 00 */ }; struct _RTL_RXACT_CONTEXT { void *RootRegistryKey; /* +0x0000 */ void *RXactKey; /* +0x0008 */ unsigned char HandlesValid; /* +0x0010 */ unsigned char RXactLog[8]; /* +0x0018 c6 37 00 00 */ }; struct tagUPDATELAYEREDWINDOWINFO { unsigned long cbSize; /* +0x0000 */ unsigned char hdcDst[8]; /* +0x0008 06 27 00 00 */ unsigned char pptDst[8]; /* +0x0010 cc 37 00 00 */ unsigned char psize[8]; /* +0x0018 ce 37 00 00 */ unsigned char hdcSrc[8]; /* +0x0020 06 27 00 00 */ unsigned char pptSrc[8]; /* +0x0028 cc 37 00 00 */ unsigned long crKey; /* +0x0030 */ unsigned char pblend[8]; /* +0x0038 d1 37 00 00 */ unsigned long dwFlags; /* +0x0040 */ unsigned char prcDirty[8]; /* +0x0048 c6 26 00 00 */ }; struct _IMAGE_DEBUG_MISC { unsigned long DataType; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned char Unicode; /* +0x0008 */ unsigned char Reserved[3]; /* +0x0009 52 19 00 00 */ unsigned char Data[4]; /* +0x000c d7 18 00 00 */ }; struct tagEMRSETCOLORADJUSTMENT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char ColorAdjustment[24]; /* +0x0008 f0 37 00 00 */ }; struct _FPO_DATA { unsigned long ulOffStart; /* +0x0000 */ unsigned long cbProcSize; /* +0x0004 */ unsigned long cdwLocals; /* +0x0008 */ unsigned short cdwParams; /* +0x000c */ /* unsigned char cbProlog[0]; +0x000e f3 37 00 00 */ /* unsigned char cbRegs[0]; +0x000e f4 37 00 00 */ /* unsigned char fHasSEH[0]; +0x000e 36 34 00 00 */ /* unsigned char fUseBP[0]; +0x000e 37 34 00 00 */ /* unsigned char reserved[0]; +0x000e f5 37 00 00 */ unsigned char cbFrame[2]; /* +0x000e f6 37 00 00 */ }; struct _SYSTEM_BIGPOOL_INFORMATION { unsigned long Count; /* +0x0000 */ unsigned char AllocatedInfo[24]; /* +0x0008 23 19 00 00 */ }; struct tagNONCLIENTMETRICSW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iBorderWidth[4]; /* +0x0004 74 00 00 00 */ unsigned char iScrollWidth[4]; /* +0x0008 74 00 00 00 */ unsigned char iScrollHeight[4]; /* +0x000c 74 00 00 00 */ unsigned char iCaptionWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char iCaptionHeight[4]; /* +0x0014 74 00 00 00 */ unsigned char lfCaptionFont[92]; /* +0x0018 46 20 00 00 */ unsigned char iSmCaptionWidth[4]; /* +0x0074 74 00 00 00 */ unsigned char iSmCaptionHeight[4]; /* +0x0078 74 00 00 00 */ unsigned char lfSmCaptionFont[92]; /* +0x007c 46 20 00 00 */ unsigned char iMenuWidth[4]; /* +0x00d8 74 00 00 00 */ unsigned char iMenuHeight[4]; /* +0x00dc 74 00 00 00 */ unsigned char lfMenuFont[92]; /* +0x00e0 46 20 00 00 */ unsigned char lfStatusFont[92]; /* +0x013c 46 20 00 00 */ unsigned char lfMessageFont[92]; /* +0x0198 46 20 00 00 */ unsigned char iPaddedBorderWidth[4]; /* +0x01f4 74 00 00 00 */ }; struct _CONSOLE_SCREEN_BUFFER_INFO { unsigned char dwSize[4]; /* +0x0000 6a 21 00 00 */ unsigned char dwCursorPosition[4]; /* +0x0004 6a 21 00 00 */ unsigned short wAttributes; /* +0x0008 */ unsigned char srWindow[8]; /* +0x000a 28 2e 00 00 */ unsigned char dwMaximumWindowSize[4]; /* +0x0012 6a 21 00 00 */ }; struct tagCSPLATFORM { unsigned long dwPlatformId; /* +0x0000 */ unsigned long dwVersionHi; /* +0x0004 */ unsigned long dwVersionLo; /* +0x0008 */ unsigned long dwProcessorArch; /* +0x000c */ }; struct _PROCESS_EXTENDED_BASIC_INFORMATION { unsigned long long Size; /* +0x0000 */ unsigned char BasicInfo[48]; /* +0x0008 1a 38 00 00 */ unsigned long Flags; /* +0x0038 */ /* unsigned char IsProtectedProcess[0]; +0x0038 53 19 00 00 */ /* unsigned char IsWow64Process[0]; +0x0038 e3 21 00 00 */ /* unsigned char IsProcessDeleting[0]; +0x0038 e4 21 00 00 */ /* unsigned char IsCrossSessionCreate[0]; +0x0038 68 26 00 00 */ /* unsigned char IsFrozen[0]; +0x0038 69 26 00 00 */ /* unsigned char IsIdleAware[0]; +0x0038 5a 2b 00 00 */ unsigned char SpareBits[8]; /* +0x0038 1b 38 00 00 */ }; struct _SERVICE_DESCRIPTIONA { char *lpDescription; /* +0x0000 */ }; struct _SYSTEM_SYSTEM_DISK_INFORMATION { unsigned char SystemDisk[16]; /* +0x0000 c1 18 00 00 */ }; struct tagEMRPOLYDRAW16 { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long cpts; /* +0x0018 */ unsigned char apts[4]; /* +0x001c a6 2a 00 00 */ unsigned char abTypes[4]; /* +0x0020 d7 18 00 00 */ }; struct _LONG_SIZEDARR { unsigned long clSize; /* +0x0000 */ unsigned long *pData; /* +0x0008 */ }; struct _JOBOBJECT_NOTIFICATION_LIMIT_INFORMATION { unsigned long long IoReadBytesLimit; /* +0x0000 */ unsigned long long IoWriteBytesLimit; /* +0x0008 */ unsigned char PerJobUserTimeLimit[8]; /* +0x0010 0e 19 00 00 */ unsigned long long JobMemoryLimit; /* +0x0018 */ unsigned char RateControlTolerance[4]; /* +0x0020 5b 18 00 00 */ unsigned char RateControlToleranceInterval[4]; /* +0x0024 6f 17 00 00 */ unsigned long LimitFlags; /* +0x0028 */ }; struct _SEC_WINNT_AUTH_IDENTITY_W { unsigned short *User; /* +0x0000 */ unsigned long UserLength; /* +0x0008 */ unsigned short *Domain; /* +0x0010 */ unsigned long DomainLength; /* +0x0018 */ unsigned short *Password; /* +0x0020 */ unsigned long PasswordLength; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct _NDR_USER_MARSHAL_INFO { unsigned long InformationLevel; /* +0x0000 */ unsigned char Level1[80]; /* +0x0008 33 38 00 00 */ }; struct tagEMRSETVIEWPORTORGEX { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char ptlOrigin[8]; /* +0x0008 6a 19 00 00 */ }; struct _WOW64_DESCRIPTOR_TABLE_ENTRY { unsigned long Selector; /* +0x0000 */ unsigned char Descriptor[8]; /* +0x0004 3b 38 00 00 */ }; struct _SERVICE_TABLE_ENTRYA { char *lpServiceName; /* +0x0000 */ unsigned char lpServiceProc[8]; /* +0x0008 26 33 00 00 */ }; struct tagENUMLOGFONTEXA { unsigned char elfLogFont[60]; /* +0x0000 51 20 00 00 */ unsigned char elfFullName[64]; /* +0x003c eb 18 00 00 */ unsigned char elfStyle[32]; /* +0x007c 9b 14 00 00 */ unsigned char elfScript[32]; /* +0x009c 9b 14 00 00 */ }; struct _RPC_PROTSEQ_VECTORA { unsigned char Count[8]; /* +0x0000 75 00 00 00 */ unsigned char Protseq[8]; /* +0x0008 4c 38 00 00 */ }; struct _PLEX_READ_DATA_REQUEST { unsigned char ByteOffset[8]; /* +0x0000 0e 19 00 00 */ unsigned long ByteLength; /* +0x0008 */ unsigned long PlexNumber; /* +0x000c */ }; struct _SYSTEM_CALL_COUNT_INFORMATION { unsigned long Length; /* +0x0000 */ unsigned long NumberOfTables; /* +0x0004 */ }; struct _MEMORY_WORKING_SET_EX_BLOCK:::: { /* unsigned char Valid[0]; +0x0000 ef 18 00 00 */ /* unsigned char Reserved0[0]; +0x0000 58 38 00 00 */ /* unsigned char Shared[0]; +0x0000 5c 28 00 00 */ /* unsigned char Reserved1[0]; +0x0000 59 38 00 00 */ /* unsigned char PageTable[0]; +0x0000 5a 38 00 00 */ /* unsigned char Location[0]; +0x0000 5b 38 00 00 */ /* unsigned char Reserved2[0]; +0x0000 5c 38 00 00 */ /* unsigned char Bad[0]; +0x0000 62 28 00 00 */ unsigned char ReservedUlong[8]; /* +0x0000 63 28 00 00 */ }; struct _TRANSACTIONMANAGER_OLDEST_INFORMATION { unsigned char OldestTransactionGuid[16]; /* +0x0000 6b 10 00 00 */ }; struct _API_SET_NAMESPACE_ARRAY { unsigned long Version; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned char Array[12]; /* +0x0008 66 38 00 00 */ }; struct _SYSTEM_QUERY_TIME_ADJUST_INFORMATION { unsigned long TimeAdjustment; /* +0x0000 */ unsigned long TimeIncrement; /* +0x0004 */ unsigned char Enable; /* +0x0008 */ }; struct tagMETAHEADER { unsigned short mtType; /* +0x0000 */ unsigned short mtHeaderSize; /* +0x0002 */ unsigned short mtVersion; /* +0x0004 */ unsigned long mtSize; /* +0x0006 */ unsigned short mtNoObjects; /* +0x000a */ unsigned long mtMaxRecord; /* +0x000c */ unsigned short mtNoParameters; /* +0x0010 */ }; struct _REMOTE_NAME_INFOW { unsigned char lpUniversalName[8]; /* +0x0000 71 06 00 00 */ unsigned char lpConnectionName[8]; /* +0x0008 71 06 00 00 */ unsigned char lpRemainingPath[8]; /* +0x0010 71 06 00 00 */ }; struct _RTL_USER_PROCESS_PARAMETERS { unsigned long MaximumLength; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long DebugFlags; /* +0x000c */ void *ConsoleHandle; /* +0x0010 */ unsigned long ConsoleFlags; /* +0x0018 */ void *StandardInput; /* +0x0020 */ void *StandardOutput; /* +0x0028 */ void *StandardError; /* +0x0030 */ unsigned char CurrentDirectory[24]; /* +0x0038 78 38 00 00 */ unsigned char DllPath[16]; /* +0x0050 c1 18 00 00 */ unsigned char ImagePathName[16]; /* +0x0060 c1 18 00 00 */ unsigned char CommandLine[16]; /* +0x0070 c1 18 00 00 */ void *Environment; /* +0x0080 */ unsigned long StartingX; /* +0x0088 */ unsigned long StartingY; /* +0x008c */ unsigned long CountX; /* +0x0090 */ unsigned long CountY; /* +0x0094 */ unsigned long CountCharsX; /* +0x0098 */ unsigned long CountCharsY; /* +0x009c */ unsigned long FillAttribute; /* +0x00a0 */ unsigned long WindowFlags; /* +0x00a4 */ unsigned long ShowWindowFlags; /* +0x00a8 */ unsigned char WindowTitle[16]; /* +0x00b0 c1 18 00 00 */ unsigned char DesktopInfo[16]; /* +0x00c0 c1 18 00 00 */ unsigned char ShellInfo[16]; /* +0x00d0 c1 18 00 00 */ unsigned char RuntimeData[16]; /* +0x00e0 c1 18 00 00 */ unsigned char CurrentDirectores[768]; /* +0x00f0 79 38 00 00 */ unsigned char EnvironmentSize[8]; /* +0x03f0 29 21 00 00 */ unsigned char EnvironmentVersion[8]; /* +0x03f8 29 21 00 00 */ unsigned char PackageMoniker[16]; /* +0x0400 c1 18 00 00 */ void *PackageDependencyData; /* +0x0410 */ unsigned long ProcessGroupId; /* +0x0418 */ }; struct _FILE_TRACKING_INFORMATION { void *DestinationFile; /* +0x0000 */ unsigned long ObjectInformationLength; /* +0x0008 */ unsigned char ObjectInformation[4]; /* +0x000c 6d 2b 00 00 */ }; struct _TP_TASK_CALLBACKS { unsigned char ExecuteCallback[8]; /* +0x0000 82 38 00 00 */ unsigned char Unposted[8]; /* +0x0008 0a 29 00 00 */ }; struct tagFILTERKEYS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iWaitMSec; /* +0x0008 */ unsigned long iDelayMSec; /* +0x000c */ unsigned long iRepeatMSec; /* +0x0010 */ unsigned long iBounceMSec; /* +0x0014 */ }; struct EVENT_INSTANCE_INFO { void *RegHandle; /* +0x0000 */ unsigned long InstanceId; /* +0x0008 */ }; struct _SE_LEARNING_MODE_USER_OBJECT_DATA { unsigned long Cookie; /* +0x0000 */ unsigned char ObjectType[8]; /* +0x0008 07 21 00 00 */ unsigned char ObjectName[8]; /* +0x0010 07 21 00 00 */ }; struct tagEMRSETTEXTCOLOR { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long crColor; /* +0x0008 */ }; struct tagSTATPROPSTG { unsigned char lpwstrName[8]; /* +0x0000 71 06 00 00 */ unsigned long propid; /* +0x0008 */ unsigned short vt; /* +0x000c */ }; struct _REPARSE_DATA_BUFFER { unsigned long ReparseTag; /* +0x0000 */ unsigned short ReparseDataLength; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ /* unsigned char SymbolicLinkReparseBuffer[0]; +0x0008 c2 38 00 00 */ /* unsigned char MountPointReparseBuffer[0]; +0x0008 c3 38 00 00 */ unsigned char GenericReparseBuffer[16]; /* +0x0008 c4 38 00 00 */ }; struct _REPARSE_DATA_BUFFER:::: { unsigned char DataBuffer[1]; /* +0x0000 d7 18 00 00 */ }; struct _REPARSE_DATA_BUFFER:::: { unsigned short SubstituteNameOffset; /* +0x0000 */ unsigned short SubstituteNameLength; /* +0x0002 */ unsigned short PrintNameOffset; /* +0x0004 */ unsigned short PrintNameLength; /* +0x0006 */ unsigned char PathBuffer[2]; /* +0x0008 ab 19 00 00 */ }; struct _REPARSE_DATA_BUFFER:::: { unsigned short SubstituteNameOffset; /* +0x0000 */ unsigned short SubstituteNameLength; /* +0x0002 */ unsigned short PrintNameOffset; /* +0x0004 */ unsigned short PrintNameLength; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned char PathBuffer[4]; /* +0x000c ab 19 00 00 */ }; struct _HOTPATCH_HOOK_DESCRIPTOR { unsigned long long TargetAddress; /* +0x0000 */ unsigned long long MappedAddress; /* +0x0008 */ unsigned long CodeOffset; /* +0x0010 */ unsigned long CodeSize; /* +0x0014 */ unsigned long OrigCodeOffset; /* +0x0018 */ unsigned long ValidationOffset; /* +0x001c */ unsigned long ValidationSize; /* +0x0020 */ }; struct _RTL_CRITICAL_SECTION { unsigned char DebugInfo[8]; /* +0x0000 29 2a 00 00 */ long LockCount; /* +0x0008 */ long RecursionCount; /* +0x000c */ void *OwningThread; /* +0x0010 */ void *LockSemaphore; /* +0x0018 */ unsigned long long SpinCount; /* +0x0020 */ }; struct _RTL_HEAP_INFORMATION { void *BaseAddress; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned short EntryOverhead; /* +0x000c */ unsigned short CreatorBackTraceIndex; /* +0x000e */ unsigned long long BytesAllocated; /* +0x0010 */ unsigned long long BytesCommitted; /* +0x0018 */ unsigned long NumberOfTags; /* +0x0020 */ unsigned long NumberOfEntries; /* +0x0024 */ unsigned long NumberOfPseudoTags; /* +0x0028 */ unsigned long PseudoTagGranularity; /* +0x002c */ unsigned char Reserved[24]; /* +0x0030 1f 34 00 00 */ unsigned char Tags[8]; /* +0x0048 3c 2b 00 00 */ unsigned char Entries[8]; /* +0x0050 d2 38 00 00 */ }; struct _RTL_HEAP_WALK_ENTRY { void *DataAddress; /* +0x0000 */ unsigned long long DataSize; /* +0x0008 */ unsigned char OverheadBytes; /* +0x0010 */ unsigned char SegmentIndex; /* +0x0011 */ unsigned short Flags; /* +0x0012 */ /* unsigned char Block[0]; +0x0018 d9 38 00 00 */ unsigned char Segment[24]; /* +0x0018 da 38 00 00 */ }; struct _RTL_HEAP_WALK_ENTRY:::: { unsigned long CommittedSize; /* +0x0000 */ unsigned long UnCommittedSize; /* +0x0004 */ void *FirstEntry; /* +0x0008 */ void *LastEntry; /* +0x0010 */ }; struct _RTL_HEAP_WALK_ENTRY:::: { unsigned long long Settable; /* +0x0000 */ unsigned short TagIndex; /* +0x0008 */ unsigned short AllocatorBackTraceIndex; /* +0x000a */ unsigned char Reserved[12]; /* +0x000c cc 1f 00 00 */ }; struct tagWNDCLASSA { unsigned char style[8]; /* +0x0000 75 00 00 00 */ unsigned char lpfnWndProc[8]; /* +0x0008 88 2e 00 00 */ unsigned char cbClsExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0014 74 00 00 00 */ unsigned char hInstance[8]; /* +0x0018 4e 1a 00 00 */ unsigned char hIcon[8]; /* +0x0020 2c 29 00 00 */ unsigned char hCursor[8]; /* +0x0028 2c 29 00 00 */ unsigned char hbrBackground[8]; /* +0x0030 ec 2a 00 00 */ unsigned char lpszMenuName[8]; /* +0x0038 4f 10 00 00 */ unsigned char lpszClassName[8]; /* +0x0040 4f 10 00 00 */ }; struct _VM_COUNTERS_EX { unsigned long long PeakVirtualSize; /* +0x0000 */ unsigned long long VirtualSize; /* +0x0008 */ unsigned long PageFaultCount; /* +0x0010 */ unsigned long long PeakWorkingSetSize; /* +0x0018 */ unsigned long long WorkingSetSize; /* +0x0020 */ unsigned long long QuotaPeakPagedPoolUsage; /* +0x0028 */ unsigned long long QuotaPagedPoolUsage; /* +0x0030 */ unsigned long long QuotaPeakNonPagedPoolUsage; /* +0x0038 */ unsigned long long QuotaNonPagedPoolUsage; /* +0x0040 */ unsigned long long PagefileUsage; /* +0x0048 */ unsigned long long PeakPagefileUsage; /* +0x0050 */ unsigned long long PrivateUsage; /* +0x0058 */ }; struct _QUAD { long long UseThisFieldToCopy; /* +0x0000 */ unsigned char DoNotUseThisField[8]; /* +0x0000 41 00 00 00 */ }; struct _XSTATE_CONTEXT { unsigned long long Mask; /* +0x0000 */ unsigned long Length; /* +0x0008 */ unsigned long Reserved1; /* +0x000c */ unsigned char Area[8]; /* +0x0010 ff 38 00 00 */ void *Buffer; /* +0x0018 */ }; struct _VARIABLE_NAME_AND_VALUE { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long ValueOffset; /* +0x0004 */ unsigned long ValueLength; /* +0x0008 */ unsigned long Attributes; /* +0x000c */ unsigned char VendorGuid[16]; /* +0x0010 6b 10 00 00 */ unsigned char Name[4]; /* +0x0020 ab 19 00 00 */ }; struct _SYSTEM_REGISTRY_APPEND_STRING_PARAMETERS { void *KeyHandle; /* +0x0000 */ unsigned char ValueNamePointer[8]; /* +0x0008 07 21 00 00 */ unsigned long *RequiredLengthPointer; /* +0x0010 */ unsigned char *Buffer; /* +0x0018 */ unsigned long BufferLength; /* +0x0020 */ unsigned long Type; /* +0x0024 */ unsigned char *AppendBuffer; /* +0x0028 */ unsigned long AppendBufferLength; /* +0x0030 */ unsigned char CreateIfDoesntExist; /* +0x0034 */ unsigned char TruncateExistingValue; /* +0x0035 */ }; struct tagDELETEITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char itemID[8]; /* +0x0008 75 00 00 00 */ unsigned char hwndItem[8]; /* +0x0010 97 13 00 00 */ unsigned long long itemData; /* +0x0018 */ }; struct _RPC_C_OPT_COOKIE_AUTH_DESCRIPTOR { unsigned long BufferSize; /* +0x0000 */ char *Buffer; /* +0x0008 */ }; struct _PROCESS_STACK_ALLOCATION_INFORMATION_EX { unsigned long PreferredNode; /* +0x0000 */ unsigned long Reserved0; /* +0x0004 */ unsigned long Reserved1; /* +0x0008 */ unsigned long Reserved2; /* +0x000c */ unsigned char AllocInfo[24]; /* +0x0010 0e 39 00 00 */ }; struct _STREAM_EXTENT_ENTRY { unsigned long Flags; /* +0x0000 */ }; struct tagIMECHARPOSITION { unsigned long dwSize; /* +0x0000 */ unsigned long dwCharPos; /* +0x0004 */ unsigned char pt[8]; /* +0x0008 1b 1a 00 00 */ unsigned char cLineHeight[4]; /* +0x0010 75 00 00 00 */ unsigned char rcDocument[16]; /* +0x0014 06 1a 00 00 */ }; struct _s__ThrowInfo { unsigned char attributes[4]; /* +0x0000 75 00 00 00 */ unsigned char pmfnUnwind[8]; /* +0x0004 21 11 00 00 */ unsigned char pForwardCompat[8]; /* +0x000c 44 21 00 00 */ unsigned char pCatchableTypeArray[8]; /* +0x0014 25 39 00 00 */ }; struct _TRANSACTIONMANAGER_LOGPATH_INFORMATION { unsigned long LogPathLength; /* +0x0000 */ unsigned char LogPath[4]; /* +0x0004 ab 19 00 00 */ }; struct _THREAD_TEB_INFORMATION { void *TebInformation; /* +0x0000 */ unsigned long TebOffset; /* +0x0008 */ unsigned long BytesToRead; /* +0x000c */ }; struct _JOBOBJECT_WAKE_FILTER { unsigned long HighEdgeFilter; /* +0x0000 */ unsigned long LowEdgeFilter; /* +0x0004 */ }; struct _TRANSACTION_BASIC_INFORMATION { unsigned char TransactionId[16]; /* +0x0000 6b 10 00 00 */ unsigned long State; /* +0x0010 */ unsigned long Outcome; /* +0x0014 */ }; struct tagMENUGETOBJECTINFO { unsigned long dwFlags; /* +0x0000 */ unsigned char uPos[4]; /* +0x0004 75 00 00 00 */ unsigned char hmenu[8]; /* +0x0008 b5 1e 00 00 */ void *riid; /* +0x0010 */ void *pvObj; /* +0x0018 */ }; struct tagWNDCLASSW { unsigned char style[8]; /* +0x0000 75 00 00 00 */ unsigned char lpfnWndProc[8]; /* +0x0008 88 2e 00 00 */ unsigned char cbClsExtra[4]; /* +0x0010 74 00 00 00 */ unsigned char cbWndExtra[4]; /* +0x0014 74 00 00 00 */ unsigned char hInstance[8]; /* +0x0018 4e 1a 00 00 */ unsigned char hIcon[8]; /* +0x0020 2c 29 00 00 */ unsigned char hCursor[8]; /* +0x0028 2c 29 00 00 */ unsigned char hbrBackground[8]; /* +0x0030 ec 2a 00 00 */ unsigned char lpszMenuName[8]; /* +0x0038 27 10 00 00 */ unsigned char lpszClassName[8]; /* +0x0040 27 10 00 00 */ }; struct tagRPC_EXTENDED_ERROR_INFO { unsigned long Version; /* +0x0000 */ unsigned char ComputerName[8]; /* +0x0008 71 06 00 00 */ unsigned long ProcessID; /* +0x0010 */ }; struct _FILE_LAYOUT_NAME_ENTRY { unsigned long NextNameOffset; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long long ParentFileReferenceNumber; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned long Reserved; /* +0x0014 */ unsigned char FileName[8]; /* +0x0018 ab 19 00 00 */ }; struct _MCA_EXCEPTION:::: { unsigned long long Address; /* +0x0000 */ unsigned long long Type; /* +0x0008 */ }; struct _MCA_EXCEPTION:::: { unsigned char BankNumber; /* +0x0000 */ unsigned char Reserved2[7]; /* +0x0001 d3 2c 00 00 */ unsigned char Status[8]; /* +0x0008 31 35 00 00 */ unsigned char Address[8]; /* +0x0010 67 39 00 00 */ unsigned long long Misc; /* +0x0018 */ }; struct tagNEWTEXTMETRICW { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar[2]; /* +0x002c 71 00 00 00 */ unsigned char tmLastChar[2]; /* +0x002e 71 00 00 00 */ unsigned char tmDefaultChar[2]; /* +0x0030 71 00 00 00 */ unsigned char tmBreakChar[2]; /* +0x0032 71 00 00 00 */ unsigned char tmItalic; /* +0x0034 */ unsigned char tmUnderlined; /* +0x0035 */ unsigned char tmStruckOut; /* +0x0036 */ unsigned char tmPitchAndFamily; /* +0x0037 */ unsigned char tmCharSet; /* +0x0038 */ unsigned long ntmFlags; /* +0x003c */ unsigned char ntmSizeEM[4]; /* +0x0040 75 00 00 00 */ unsigned char ntmCellHeight[4]; /* +0x0044 75 00 00 00 */ unsigned char ntmAvgWidth[4]; /* +0x0048 75 00 00 00 */ }; struct DISPLAYCONFIG_2DREGION { unsigned char cx[4]; /* +0x0000 75 00 00 00 */ unsigned char cy[4]; /* +0x0004 75 00 00 00 */ }; struct tagEMRMASKBLT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long cxDest; /* +0x0020 */ long cyDest; /* +0x0024 */ unsigned long dwRop; /* +0x0028 */ long xSrc; /* +0x002c */ long ySrc; /* +0x0030 */ unsigned char xformSrc[24]; /* +0x0034 b6 18 00 00 */ unsigned long crBkColorSrc; /* +0x004c */ unsigned long iUsageSrc; /* +0x0050 */ unsigned long offBmiSrc; /* +0x0054 */ unsigned long cbBmiSrc; /* +0x0058 */ unsigned long offBitsSrc; /* +0x005c */ unsigned long cbBitsSrc; /* +0x0060 */ long xMask; /* +0x0064 */ long yMask; /* +0x0068 */ unsigned long iUsageMask; /* +0x006c */ unsigned long offBmiMask; /* +0x0070 */ unsigned long cbBmiMask; /* +0x0074 */ unsigned long offBitsMask; /* +0x0078 */ unsigned long cbBitsMask; /* +0x007c */ }; struct _PLUGPLAY_EVENT_BLOCK { unsigned char EventGuid[16]; /* +0x0000 6b 10 00 00 */ unsigned char EventCategory[8]; /* +0x0010 8b 16 00 00 */ unsigned long *Result; /* +0x0018 */ unsigned long Flags; /* +0x0020 */ unsigned long TotalSize; /* +0x0024 */ void *DeviceObject; /* +0x0028 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char DeviceId[2]; /* +0x0000 ab 19 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char PowerSettingGuid[16]; /* +0x0000 6b 10 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long SessionId; /* +0x0014 */ unsigned long DataLength; /* +0x0018 */ unsigned char Data[4]; /* +0x001c d7 18 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char ParentId[2]; /* +0x0000 ab 19 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char BlockedDriverGuid[16]; /* +0x0000 6b 10 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char VetoType[4]; /* +0x0000 37 16 00 00 */ unsigned char DeviceIdVetoNameBuffer[4]; /* +0x0004 ab 19 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned long NotificationCode; /* +0x0000 */ unsigned long NotificationData; /* +0x0004 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { void *Notification; /* +0x0000 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { void *NotificationStructure; /* +0x0000 */ unsigned char DeviceId[8]; /* +0x0008 ab 19 00 00 */ }; struct _PLUGPLAY_EVENT_BLOCK:::: { unsigned char ClassGuid[16]; /* +0x0000 6b 10 00 00 */ unsigned char SymbolicLinkName[4]; /* +0x0010 ab 19 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned long crc; /* +0x0000 */ unsigned char rgbReserved[16]; /* +0x0004 2d 11 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned long Length; /* +0x0000 */ unsigned short NumberOfRelocations; /* +0x0004 */ unsigned short NumberOfLinenumbers; /* +0x0006 */ unsigned long CheckSum; /* +0x0008 */ short Number; /* +0x000c */ unsigned char Selection; /* +0x000e */ unsigned char bReserved; /* +0x000f */ short HighNumber; /* +0x0010 */ unsigned char rgbReserved[2]; /* +0x0012 0c 21 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned char Name[20]; /* +0x0000 a4 10 00 00 */ }; struct _IMAGE_AUX_SYMBOL_EX:: { unsigned long WeakDefaultSymIndex; /* +0x0000 */ unsigned long WeakSearchType; /* +0x0004 */ unsigned char rgbReserved[12]; /* +0x0008 d6 1e 00 00 */ }; struct _FILE_ID_FULL_DIR_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 0e 19 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 0e 19 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 0e 19 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 0e 19 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned long EaSize; /* +0x0040 */ unsigned char FileId[8]; /* +0x0048 0e 19 00 00 */ unsigned char FileName[8]; /* +0x0050 ab 19 00 00 */ }; struct _POOLED_USAGE_AND_LIMITS { unsigned long long PeakPagedPoolUsage; /* +0x0000 */ unsigned long long PagedPoolUsage; /* +0x0008 */ unsigned long long PagedPoolLimit; /* +0x0010 */ unsigned long long PeakNonPagedPoolUsage; /* +0x0018 */ unsigned long long NonPagedPoolUsage; /* +0x0020 */ unsigned long long NonPagedPoolLimit; /* +0x0028 */ unsigned long long PeakPagefileUsage; /* +0x0030 */ unsigned long long PagefileUsage; /* +0x0038 */ unsigned long long PagefileLimit; /* +0x0040 */ }; struct _CLUSTER_RANGE { unsigned char StartingCluster[8]; /* +0x0000 0e 19 00 00 */ unsigned char ClusterCount[8]; /* +0x0008 0e 19 00 00 */ }; struct _CM_SCSI_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned char HostIdentifier; /* +0x0004 */ }; struct _SERVICE_SID_INFO { unsigned long dwServiceSidType; /* +0x0000 */ }; struct _REPARSE_INDEX_KEY { unsigned long FileReparseTag; /* +0x0000 */ unsigned char FileId[8]; /* +0x0004 0e 19 00 00 */ }; struct _REMOTE_LINK_TRACKING_INFORMATION_ { void *TargetFileObject; /* +0x0000 */ unsigned long TargetLinkTrackingInformationLength; /* +0x0008 */ unsigned char TargetLinkTrackingInformationBuffer[4]; /* +0x000c d7 18 00 00 */ }; struct _RTL_RUN_ONCE { void *Ptr; /* +0x0000 */ unsigned long long Value; /* +0x0000 */ unsigned char State[8]; /* +0x0000 de 39 00 00 */ }; struct tagEMRPIXELFORMAT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char pfd[40]; /* +0x0008 76 2b 00 00 */ }; struct _TXFS_LIST_TRANSACTIONS { unsigned long long NumberOfTransactions; /* +0x0000 */ unsigned long long BufferSizeRequired; /* +0x0008 */ }; struct _SYSDBG_BUS_DATA { unsigned long Address; /* +0x0000 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ unsigned char BusDataType[4]; /* +0x0014 e9 15 00 00 */ unsigned long BusNumber; /* +0x0018 */ unsigned long SlotNumber; /* +0x001c */ }; struct _REASON_CONTEXT { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ }; struct _REASON_CONTEXT:::: { unsigned char LocalizedReasonModule[8]; /* +0x0000 4e 1a 00 00 */ unsigned long LocalizedReasonId; /* +0x0008 */ unsigned long ReasonStringCount; /* +0x000c */ unsigned char ReasonStrings[8]; /* +0x0010 2a 10 00 00 */ }; struct tagCREATESTRUCTA { void *lpCreateParams; /* +0x0000 */ unsigned char hInstance[8]; /* +0x0008 4e 1a 00 00 */ unsigned char hMenu[8]; /* +0x0010 b5 1e 00 00 */ unsigned char hwndParent[8]; /* +0x0018 97 13 00 00 */ unsigned char cy[4]; /* +0x0020 74 00 00 00 */ unsigned char cx[4]; /* +0x0024 74 00 00 00 */ unsigned char y[4]; /* +0x0028 74 00 00 00 */ unsigned char x[4]; /* +0x002c 74 00 00 00 */ long style; /* +0x0030 */ unsigned char lpszName[8]; /* +0x0038 4f 10 00 00 */ unsigned char lpszClass[8]; /* +0x0040 4f 10 00 00 */ unsigned long dwExStyle; /* +0x0048 */ }; struct tagTLIBATTR { unsigned char guid[16]; /* +0x0000 6b 10 00 00 */ unsigned long lcid; /* +0x0010 */ unsigned char syskind[4]; /* +0x0014 d9 16 00 00 */ unsigned short wMajorVerNum; /* +0x0018 */ unsigned short wMinorVerNum; /* +0x001a */ unsigned short wLibFlags; /* +0x001c */ }; struct tagSOUNDSENTRYA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iFSTextEffect; /* +0x0008 */ unsigned long iFSTextEffectMSec; /* +0x000c */ unsigned long iFSTextEffectColorBits; /* +0x0010 */ unsigned long iFSGrafEffect; /* +0x0014 */ unsigned long iFSGrafEffectMSec; /* +0x0018 */ unsigned long iFSGrafEffectColor; /* +0x001c */ unsigned long iWindowsEffect; /* +0x0020 */ unsigned long iWindowsEffectMSec; /* +0x0024 */ char *lpszWindowsEffectDLL; /* +0x0028 */ unsigned long iWindowsEffectOrdinal; /* +0x0030 */ }; struct _numberfmtA { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[8]; /* +0x0008 75 00 00 00 */ char *lpDecimalSep; /* +0x0010 */ char *lpThousandSep; /* +0x0018 */ unsigned char NegativeOrder[8]; /* +0x0020 75 00 00 00 */ }; struct _PREFIX_TABLE { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[8]; /* +0x0008 ad 35 00 00 */ }; struct _REQUEST_RAW_ENCRYPTED_DATA { long long FileOffset; /* +0x0000 */ unsigned long Length; /* +0x0008 */ }; struct _SYSTEM_PROCESSOR_PERFORMANCE_STATE_DISTRIBUTION { unsigned long ProcessorNumber; /* +0x0000 */ unsigned long StateCount; /* +0x0004 */ unsigned char States[8]; /* +0x0008 77 3a 00 00 */ }; struct _SERVICE_TIMECHANGE_INFO { unsigned char liNewTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char liOldTime[8]; /* +0x0008 0e 19 00 00 */ }; struct tagINTERFACEDATA { unsigned char pmethdata[8]; /* +0x0000 bd 1e 00 00 */ unsigned char cMembers[8]; /* +0x0008 75 00 00 00 */ }; struct _ICONINFO { unsigned char fIcon[4]; /* +0x0000 74 00 00 00 */ unsigned long xHotspot; /* +0x0004 */ unsigned long yHotspot; /* +0x0008 */ unsigned char hbmMask[8]; /* +0x0010 67 21 00 00 */ unsigned char hbmColor[8]; /* +0x0018 67 21 00 00 */ }; struct _SE_ACCESS_REQUEST { unsigned long Size; /* +0x0000 */ unsigned char SeSecurityDescriptor[8]; /* +0x0008 8e 3a 00 00 */ unsigned long DesiredAccess; /* +0x0010 */ unsigned long PreviouslyGrantedAccess; /* +0x0014 */ void *PrincipalSelfSid; /* +0x0018 */ unsigned char GenericMapping[8]; /* +0x0020 d8 2e 00 00 */ unsigned long ObjectTypeListCount; /* +0x0028 */ unsigned char ObjectTypeList[8]; /* +0x0030 90 3a 00 00 */ }; struct _INITIAL_TEB:: { void *OldStackBase; /* +0x0000 */ void *OldStackLimit; /* +0x0008 */ }; struct _RTL_PROCESS_LOCKS { unsigned long NumberOfLocks; /* +0x0000 */ unsigned char Locks[48]; /* +0x0008 96 3a 00 00 */ }; struct _RTL_TIME_ZONE_INFORMATION { long Bias; /* +0x0000 */ unsigned char StandardName[64]; /* +0x0004 89 1f 00 00 */ unsigned char StandardStart[16]; /* +0x0044 e6 35 00 00 */ long StandardBias; /* +0x0054 */ unsigned char DaylightName[64]; /* +0x0058 89 1f 00 00 */ unsigned char DaylightStart[16]; /* +0x0098 e6 35 00 00 */ long DaylightBias; /* +0x00a8 */ }; struct tagRPC_EXTENDED_ERROR_INFO:: { /* unsigned char SystemTime[0]; +0x0000 8a 1f 00 00 */ unsigned char FileTime[16]; /* +0x0000 0d 10 00 00 */ }; struct _ALPC_PORT_CALLBACK_INFORMATION { void *CallbackObject; /* +0x0000 */ void *Context; /* +0x0008 */ }; struct _PROCESS_INFORMATION { void *hProcess; /* +0x0000 */ void *hThread; /* +0x0008 */ unsigned long dwProcessId; /* +0x0010 */ unsigned long dwThreadId; /* +0x0014 */ }; struct _FP_32 { unsigned char W[4]; /* +0x0000 d4 18 00 00 */ }; struct _SYSTEM_OBJECT_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ void *Object; /* +0x0008 */ void *CreatorUniqueProcess; /* +0x0010 */ unsigned short CreatorBackTraceIndex; /* +0x0018 */ unsigned short Flags; /* +0x001a */ long PointerCount; /* +0x001c */ long HandleCount; /* +0x0020 */ unsigned long PagedPoolCharge; /* +0x0024 */ unsigned long NonPagedPoolCharge; /* +0x0028 */ void *ExclusiveProcessId; /* +0x0030 */ void *SecurityDescriptor; /* +0x0038 */ unsigned char NameInfo[16]; /* +0x0040 f4 3a 00 00 */ }; struct tagWINDOWPOS { unsigned char hwnd[8]; /* +0x0000 97 13 00 00 */ unsigned char hwndInsertAfter[8]; /* +0x0008 97 13 00 00 */ unsigned char x[4]; /* +0x0010 74 00 00 00 */ unsigned char y[4]; /* +0x0014 74 00 00 00 */ unsigned char cx[4]; /* +0x0018 74 00 00 00 */ unsigned char cy[4]; /* +0x001c 74 00 00 00 */ unsigned char flags[8]; /* +0x0020 75 00 00 00 */ }; struct tagNONCLIENTMETRICSA { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char iBorderWidth[4]; /* +0x0004 74 00 00 00 */ unsigned char iScrollWidth[4]; /* +0x0008 74 00 00 00 */ unsigned char iScrollHeight[4]; /* +0x000c 74 00 00 00 */ unsigned char iCaptionWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char iCaptionHeight[4]; /* +0x0014 74 00 00 00 */ unsigned char lfCaptionFont[60]; /* +0x0018 51 20 00 00 */ unsigned char iSmCaptionWidth[4]; /* +0x0054 74 00 00 00 */ unsigned char iSmCaptionHeight[4]; /* +0x0058 74 00 00 00 */ unsigned char lfSmCaptionFont[60]; /* +0x005c 51 20 00 00 */ unsigned char iMenuWidth[4]; /* +0x0098 74 00 00 00 */ unsigned char iMenuHeight[4]; /* +0x009c 74 00 00 00 */ unsigned char lfMenuFont[60]; /* +0x00a0 51 20 00 00 */ unsigned char lfStatusFont[60]; /* +0x00dc 51 20 00 00 */ unsigned char lfMessageFont[60]; /* +0x0118 51 20 00 00 */ unsigned char iPaddedBorderWidth[4]; /* +0x0154 74 00 00 00 */ }; struct tagGLYPHSET { unsigned long cbThis; /* +0x0000 */ unsigned long flAccel; /* +0x0004 */ unsigned long cGlyphsSupported; /* +0x0008 */ unsigned long cRanges; /* +0x000c */ unsigned char ranges[4]; /* +0x0010 00 3b 00 00 */ }; struct tagMDICREATESTRUCTW { unsigned char szClass[8]; /* +0x0000 27 10 00 00 */ unsigned char szTitle[8]; /* +0x0008 27 10 00 00 */ void *hOwner; /* +0x0010 */ unsigned char x[4]; /* +0x0018 74 00 00 00 */ unsigned char y[4]; /* +0x001c 74 00 00 00 */ unsigned char cx[4]; /* +0x0020 74 00 00 00 */ unsigned char cy[4]; /* +0x0024 74 00 00 00 */ unsigned long style; /* +0x0028 */ long long lParam; /* +0x0030 */ }; struct _FILE_FS_SIZE_INFORMATION { unsigned char TotalAllocationUnits[8]; /* +0x0000 0e 19 00 00 */ unsigned char AvailableAllocationUnits[8]; /* +0x0008 0e 19 00 00 */ unsigned long SectorsPerAllocationUnit; /* +0x0010 */ unsigned long BytesPerSector; /* +0x0014 */ }; struct _PO_WAKE_SOURCE_DEVICE { unsigned char Header[8]; /* +0x0000 6e 21 00 00 */ unsigned char InstancePath[4]; /* +0x0008 ab 19 00 00 */ }; struct _KEY_CONTROL_FLAGS_INFORMATION { unsigned long ControlFlags; /* +0x0000 */ }; struct _KCRM_TRANSACTION_BLOB { unsigned char UOW[16]; /* +0x0000 6b 10 00 00 */ unsigned char TmIdentity[16]; /* +0x0010 6b 10 00 00 */ unsigned long IsolationLevel; /* +0x0020 */ unsigned long IsolationFlags; /* +0x0024 */ unsigned long Timeout; /* +0x0028 */ unsigned char Description[128]; /* +0x002c b7 26 00 00 */ }; struct _MUILANGLISTNODE { unsigned short LanguageType; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ short LanguageSpec; /* +0x0004 */ }; struct _cpinfo { unsigned char MaxCharSize[4]; /* +0x0000 75 00 00 00 */ unsigned char DefaultChar[2]; /* +0x0004 0c 21 00 00 */ unsigned char LeadByte[14]; /* +0x0006 d6 1e 00 00 */ }; struct _POWER_SESSION_CONNECT { unsigned char Connected; /* +0x0000 */ unsigned char Console; /* +0x0001 */ }; struct _XSTATE_CONFIGURATION { unsigned long long EnabledFeatures; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned char OptimizedSave[4]; /* +0x000c 53 19 00 00 */ unsigned char Features[512]; /* +0x0010 32 3b 00 00 */ }; struct tagRPC_CALL_ATTRIBUTES_V2_A { unsigned char Version[4]; /* +0x0000 75 00 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long ServerPrincipalNameBufferLength; /* +0x0008 */ unsigned char *ServerPrincipalName; /* +0x0010 */ unsigned long ClientPrincipalNameBufferLength; /* +0x0018 */ unsigned char *ClientPrincipalName; /* +0x0020 */ unsigned long AuthenticationLevel; /* +0x0028 */ unsigned long AuthenticationService; /* +0x002c */ unsigned char NullSession[4]; /* +0x0030 74 00 00 00 */ unsigned char KernelModeCaller[4]; /* +0x0034 74 00 00 00 */ unsigned long ProtocolSequence; /* +0x0038 */ unsigned long IsClientLocal; /* +0x003c */ void *ClientPID; /* +0x0040 */ unsigned long CallStatus; /* +0x0048 */ unsigned char CallType[4]; /* +0x004c 91 16 00 00 */ unsigned char CallLocalAddress[8]; /* +0x0050 fe 21 00 00 */ unsigned short OpNum; /* +0x0058 */ unsigned char InterfaceUuid[20]; /* +0x005c 6b 10 00 00 */ }; struct _FILE_PIPE_CLIENT_PROCESS_BUFFER_EX { void *ClientSession; /* +0x0000 */ void *ClientProcess; /* +0x0008 */ unsigned short ClientComputerNameLength; /* +0x0010 */ unsigned char ClientComputerBuffer[38]; /* +0x0012 49 29 00 00 */ }; struct tagIMEMENUITEMINFOW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char fType[4]; /* +0x0004 75 00 00 00 */ unsigned char fState[4]; /* +0x0008 75 00 00 00 */ unsigned char wID[4]; /* +0x000c 75 00 00 00 */ unsigned char hbmpChecked[8]; /* +0x0010 67 21 00 00 */ unsigned char hbmpUnchecked[8]; /* +0x0018 67 21 00 00 */ unsigned long dwItemData; /* +0x0020 */ unsigned char szString[164]; /* +0x0024 40 35 00 00 */ unsigned char hbmpItem[8]; /* +0x00c8 67 21 00 00 */ }; struct threadlocaleinfostruct:: { char *locale; /* +0x0000 */ unsigned char wlocale[8]; /* +0x0008 71 06 00 00 */ unsigned char refcount[8]; /* +0x0010 74 06 00 00 */ unsigned char wrefcount[8]; /* +0x0018 74 06 00 00 */ }; struct _RTL_CRITICAL_SECTION_DEBUG32 { unsigned short Type; /* +0x0000 */ unsigned short CreatorBackTraceIndex; /* +0x0002 */ unsigned long CriticalSection; /* +0x0004 */ unsigned char ProcessLocksList[8]; /* +0x0008 ee 26 00 00 */ unsigned long EntryCount; /* +0x0010 */ unsigned long ContentionCount; /* +0x0014 */ unsigned char Spare[8]; /* +0x0018 cc 1f 00 00 */ }; struct _OPERATION_START_PARAMETERS { unsigned long Version; /* +0x0000 */ unsigned long OperationId; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ }; struct WMIREGINFOW { unsigned long BufferSize; /* +0x0000 */ unsigned long NextWmiRegInfo; /* +0x0004 */ unsigned long RegistryPath; /* +0x0008 */ unsigned long MofResourceName; /* +0x000c */ unsigned long GuidCount; /* +0x0010 */ /* unsigned char WmiRegGuid[0]; +0x0018 6a 3b 00 00 */ }; struct _FILE_REFERENCE_RANGE { unsigned long long StartingFileReferenceNumber; /* +0x0000 */ unsigned long long EndingFileReferenceNumber; /* +0x0008 */ }; struct tagEMRSETMITERLIMIT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char eMiterLimit[4]; /* +0x0008 40 00 00 00 */ }; struct _SLIST_HEADER { unsigned long long Alignment; /* +0x0000 */ unsigned long long Region; /* +0x0008 */ }; struct tagLOGBRUSH32 { unsigned char lbStyle[4]; /* +0x0000 75 00 00 00 */ unsigned long lbColor; /* +0x0004 */ unsigned long lbHatch; /* +0x0008 */ }; struct tagVARIANT { unsigned short vt; /* +0x0000 */ unsigned short wReserved1; /* +0x0002 */ unsigned short wReserved2; /* +0x0004 */ unsigned short wReserved3; /* +0x0006 */ long long llVal; /* +0x0008 */ long lVal; /* +0x0008 */ unsigned char bVal; /* +0x0008 */ short iVal; /* +0x0008 */ /* unsigned char fltVal[0]; +0x0008 40 00 00 00 */ /* unsigned char dblVal[0]; +0x0008 41 00 00 00 */ short boolVal; /* +0x0008 */ long scode; /* +0x0008 */ /* unsigned char cyVal[0]; +0x0008 75 23 00 00 */ /* unsigned char date[0]; +0x0008 41 00 00 00 */ /* unsigned char bstrVal[0]; +0x0008 71 06 00 00 */ /* unsigned char punkVal[0]; +0x0008 23 1c 00 00 */ /* unsigned char pdispVal[0]; +0x0008 7b 2f 00 00 */ /* unsigned char parray[0]; +0x0008 7f 2f 00 00 */ unsigned char *pbVal; /* +0x0008 */ short *piVal; /* +0x0008 */ long *plVal; /* +0x0008 */ long long *pllVal; /* +0x0008 */ /* unsigned char pfltVal[0]; +0x0008 40 06 00 00 */ /* unsigned char pdblVal[0]; +0x0008 41 06 00 00 */ short *pboolVal; /* +0x0008 */ long *pscode; /* +0x0008 */ /* unsigned char pcyVal[0]; +0x0008 76 23 00 00 */ /* unsigned char pdate[0]; +0x0008 41 06 00 00 */ /* unsigned char pbstrVal[0]; +0x0008 2a 10 00 00 */ /* unsigned char ppunkVal[0]; +0x0008 85 1c 00 00 */ /* unsigned char ppdispVal[0]; +0x0008 96 2f 00 00 */ /* unsigned char pparray[0]; +0x0008 97 2f 00 00 */ /* unsigned char pvarVal[0]; +0x0008 a6 21 00 00 */ void *byref; /* +0x0008 */ char cVal; /* +0x0008 */ unsigned short uiVal; /* +0x0008 */ unsigned long ulVal; /* +0x0008 */ unsigned long long ullVal; /* +0x0008 */ /* unsigned char intVal[0]; +0x0008 74 00 00 00 */ /* unsigned char uintVal[0]; +0x0008 75 00 00 00 */ /* unsigned char pdecVal[0]; +0x0008 ed 26 00 00 */ char *pcVal; /* +0x0008 */ unsigned short *puiVal; /* +0x0008 */ unsigned long *pulVal; /* +0x0008 */ unsigned long long *pullVal; /* +0x0008 */ /* unsigned char pintVal[0]; +0x0008 74 06 00 00 */ /* unsigned char puintVal[0]; +0x0008 75 06 00 00 */ void *pvRecord; /* +0x0008 */ /* unsigned char pRecInfo[-16]; +0x0010 a4 3b 00 00 */ unsigned char decVal[24]; /* +0x0000 ec 26 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTES_INFORMATION { unsigned short Version; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned long AttributeCount; /* +0x0004 */ }; struct _TOKEN_SECURITY_ATTRIBUTES_INFORMATION:: { unsigned char pAttributeV1[8]; /* +0x0000 b0 3b 00 00 */ }; enum __vc_attributes::pointer_defaultAttribute::type_e { ptr = 0, ref = 1, unique = 2 }; enum __vc_attributes::threadingAttribute::threading_e { apartment = 1, single = 2, free = 3, neutral = 4, both = 5 }; enum __vc_attributes::event_receiverAttribute::type_e { native = 0, com = 1, managed = 2 }; enum __vc_attributes::aggregatableAttribute::type_e { never = 0, allowed = 1, always = 2 }; enum __vc_attributes::event_sourceAttribute::optimize_e { speed = 0, size = 1 }; enum __vc_attributes::moduleAttribute::type_e { dll = 1, exe = 2, service = 3, unspecified = 4, EXE = 2, SERVICE = 3 }; enum __vc_attributes::helper_attributes::usageAttribute::usage_e { eAnyUsage = 0, eCoClassUsage = 1, eCOMInterfaceUsage = 2, eInterfaceUsage = 6, eMemberUsage = 8, eMethodUsage = 16, eInterfaceMethodUsage = 32, eInterfaceMemberUsage = 64, eCoClassMemberUsage = 128, eCoClassMethodUsage = 256, eGlobalMethodUsage = 768, eGlobalDataUsage = 1024, eClassUsage = 2048, eInterfaceParameterUsage = 4096, eMethodParameterUsage = 12288, eIDLModuleUsage = 16384, = 32770 }; enum __vc_attributes::helper_attributes::v1_alttypeAttribute::type_e { eBoolean = 0, eInteger = 1, eFloat = 2, eDouble = 3 }; struct _FILE_PIPE_REMOTE_INFORMATION { unsigned char CollectDataTime[8]; /* +0x0000 0e 19 00 00 */ unsigned long MaximumCollectionCount; /* +0x0008 */ }; struct Common::ImpersonationContext { unsigned char revertNeeded[4]; /* +0x0000 74 00 00 00 */ unsigned char impersonatingToken[4]; /* +0x0004 74 00 00 00 */ void *originalThreadIdentity; /* +0x0008 */ }; struct Common::Deployment::CriticalSection { unsigned char criticalSection[40]; /* +0x0000 09 1b 00 00 */ }; struct Common::Deployment::PackageID { unsigned char name[24]; /* +0x0000 1d 40 00 00 */ unsigned char version[8]; /* +0x0018 73 1f 00 00 */ unsigned char language[24]; /* +0x0020 1d 40 00 00 */ unsigned char arch[8]; /* +0x0038 65 18 00 00 */ unsigned char publisherName[24]; /* +0x0040 1d 40 00 00 */ unsigned char publisherHash[24]; /* +0x0058 1d 40 00 00 */ }; struct Common::COMMON_BYTES { unsigned long length; /* +0x0000 */ unsigned char *bytes; /* +0x0008 */ }; struct Common::PackageMoniker { unsigned char moniker[24]; /* +0x0000 1d 40 00 00 */ unsigned char familyMoniker[24]; /* +0x0018 1d 40 00 00 */ }; struct Common::StringBuffer { unsigned char value[16]; /* +0x0000 e8 3e 00 00 */ unsigned long bufferLength; /* +0x0010 */ }; struct Common::COMMON_STRING { unsigned long length; /* +0x0000 */ unsigned char chars[8]; /* +0x0008 71 06 00 00 */ }; struct tagEMRGDICOMMENT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long cbData; /* +0x0008 */ unsigned char Data[4]; /* +0x000c d7 18 00 00 */ }; struct tagMENUINFO { unsigned long cbSize; /* +0x0000 */ unsigned long fMask; /* +0x0004 */ unsigned long dwStyle; /* +0x0008 */ unsigned char cyMax[4]; /* +0x000c 75 00 00 00 */ unsigned char hbrBack[8]; /* +0x0010 ec 2a 00 00 */ unsigned long dwContextHelpID; /* +0x0018 */ unsigned long long dwMenuData; /* +0x0020 */ }; struct EventRegistrationToken { long long value; /* +0x0000 */ }; struct _ALPC_BASIC_INFORMATION { unsigned long Flags; /* +0x0000 */ unsigned long SequenceNo; /* +0x0004 */ void *PortContext; /* +0x0008 */ }; struct _FILE_LEVEL_TRIM { unsigned long Key; /* +0x0000 */ unsigned long NumRanges; /* +0x0004 */ unsigned char Ranges[16]; /* +0x0008 0e 41 00 00 */ }; struct tagRECONVERTSTRING { unsigned long dwSize; /* +0x0000 */ unsigned long dwVersion; /* +0x0004 */ unsigned long dwStrLen; /* +0x0008 */ unsigned long dwStrOffset; /* +0x000c */ unsigned long dwCompStrLen; /* +0x0010 */ unsigned long dwCompStrOffset; /* +0x0014 */ unsigned long dwTargetStrLen; /* +0x0018 */ unsigned long dwTargetStrOffset; /* +0x001c */ }; struct _SYSTEM_REGISTRY_QUOTA_INFORMATION { unsigned long RegistryQuotaAllowed; /* +0x0000 */ unsigned long RegistryQuotaUsed; /* +0x0004 */ unsigned long long PagedPoolSize; /* +0x0008 */ }; struct _NETCONNECTINFOSTRUCT { unsigned long cbStructure; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned long dwSpeed; /* +0x0008 */ unsigned long dwDelay; /* +0x000c */ unsigned long dwOptDataSize; /* +0x0010 */ }; struct tagALTTABINFO { unsigned long cbSize; /* +0x0000 */ unsigned char cItems[4]; /* +0x0004 74 00 00 00 */ unsigned char cColumns[4]; /* +0x0008 74 00 00 00 */ unsigned char cRows[4]; /* +0x000c 74 00 00 00 */ unsigned char iColFocus[4]; /* +0x0010 74 00 00 00 */ unsigned char iRowFocus[4]; /* +0x0014 74 00 00 00 */ unsigned char cxItem[4]; /* +0x0018 74 00 00 00 */ unsigned char cyItem[4]; /* +0x001c 74 00 00 00 */ unsigned char ptStart[8]; /* +0x0020 1b 1a 00 00 */ }; struct _DISPATCHER_CONTEXT { unsigned long long ControlPc; /* +0x0000 */ unsigned long long ImageBase; /* +0x0008 */ unsigned char FunctionEntry[8]; /* +0x0010 6d 25 00 00 */ unsigned long long EstablisherFrame; /* +0x0018 */ unsigned long long TargetIp; /* +0x0020 */ unsigned char ContextRecord[8]; /* +0x0028 ec 1e 00 00 */ unsigned char LanguageHandler[8]; /* +0x0030 ef 1e 00 00 */ void *HandlerData; /* +0x0038 */ unsigned char HistoryTable[8]; /* +0x0040 36 41 00 00 */ unsigned long ScopeIndex; /* +0x0048 */ unsigned long Fill0; /* +0x004c */ }; struct _FILE_IS_REMOTE_DEVICE_INFORMATION { unsigned char IsRemote; /* +0x0000 */ }; struct _userHBITMAP { long fContext; /* +0x0000 */ }; struct _userHBITMAP::__MIDL_IWinTypes_0007 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 42 41 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _PROCESSOR_POWER_INFORMATION { unsigned long Number; /* +0x0000 */ unsigned long MaxMhz; /* +0x0004 */ unsigned long CurrentMhz; /* +0x0008 */ unsigned long MhzLimit; /* +0x000c */ unsigned long MaxIdleState; /* +0x0010 */ unsigned long CurrentIdleState; /* +0x0014 */ }; struct _LDR_SECTION_INFO { void *SectionHandle; /* +0x0000 */ unsigned long DesiredAccess; /* +0x0008 */ unsigned char ObjA[8]; /* +0x0010 73 41 00 00 */ unsigned long SectionPageProtection; /* +0x0018 */ unsigned long AllocationAttributes; /* +0x001c */ }; struct tagEMRSETCOLORSPACE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihCS; /* +0x0008 */ }; struct _MMPFN_IDENTITY:::: { unsigned char CombinedPage[8]; /* +0x0000 ef 18 00 00 */ }; struct _MMPFN_IDENTITY:::: { /* unsigned char Image[0]; +0x0000 ef 18 00 00 */ unsigned char Mismatch[8]; /* +0x0000 50 26 00 00 */ }; struct _MMPFN_IDENTITY:: { /* unsigned char e1[0]; +0x0000 8c 41 00 00 */ /* unsigned char e2[0]; +0x0000 8d 41 00 00 */ /* unsigned char e3[0]; +0x0000 8e 41 00 00 */ unsigned char e4[8]; /* +0x0000 8f 41 00 00 */ }; struct _FILE_ALLOCATED_RANGE_BUFFER { unsigned char FileOffset[8]; /* +0x0000 0e 19 00 00 */ unsigned char Length[8]; /* +0x0008 0e 19 00 00 */ }; struct _RTL_UNLOAD_EVENT_TRACE32 { unsigned long BaseAddress; /* +0x0000 */ unsigned long SizeOfImage; /* +0x0004 */ unsigned long Sequence; /* +0x0008 */ unsigned long TimeDateStamp; /* +0x000c */ unsigned long CheckSum; /* +0x0010 */ unsigned char ImageName[64]; /* +0x0014 89 1f 00 00 */ unsigned char Version[8]; /* +0x0054 cc 1f 00 00 */ }; struct _SYSTEM_POWER_POLICY { unsigned long Revision; /* +0x0000 */ unsigned char PowerButton[12]; /* +0x0004 6a 27 00 00 */ unsigned char SleepButton[12]; /* +0x0010 6a 27 00 00 */ unsigned char LidClose[12]; /* +0x001c 6a 27 00 00 */ unsigned char LidOpenWake[4]; /* +0x0028 c5 16 00 00 */ unsigned long Reserved; /* +0x002c */ unsigned char Idle[12]; /* +0x0030 6a 27 00 00 */ unsigned long IdleTimeout; /* +0x003c */ unsigned char IdleSensitivity; /* +0x0040 */ unsigned char DynamicThrottle; /* +0x0041 */ unsigned char Spare2[2]; /* +0x0042 0c 21 00 00 */ unsigned char MinSleep[4]; /* +0x0044 c5 16 00 00 */ unsigned char MaxSleep[4]; /* +0x0048 c5 16 00 00 */ unsigned char ReducedLatencySleep[4]; /* +0x004c c5 16 00 00 */ unsigned long WinLogonFlags; /* +0x0050 */ unsigned long Spare3; /* +0x0054 */ unsigned long DozeS4Timeout; /* +0x0058 */ unsigned long BroadcastCapacityResolution; /* +0x005c */ unsigned char DischargePolicy[96]; /* +0x0060 bf 41 00 00 */ unsigned long VideoTimeout; /* +0x00c0 */ unsigned char VideoDimDisplay; /* +0x00c4 */ unsigned char VideoReserved[12]; /* +0x00c8 fa 18 00 00 */ unsigned long SpindownTimeout; /* +0x00d4 */ unsigned char OptimizeForPower; /* +0x00d8 */ unsigned char FanThrottleTolerance; /* +0x00d9 */ unsigned char ForcedThrottle; /* +0x00da */ unsigned char MinThrottle; /* +0x00db */ unsigned char OverThrottled[12]; /* +0x00dc 6a 27 00 00 */ }; struct _TRANSACTION_LIST_INFORMATION { unsigned long NumberOfTransactions; /* +0x0000 */ unsigned char TransactionInformation[16]; /* +0x0004 c2 41 00 00 */ }; struct _wireSAFEARR_BSTR { unsigned long Size; /* +0x0000 */ unsigned char aBstr[8]; /* +0x0008 ca 41 00 00 */ }; struct _FILE_DIRECTORY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long FileIndex; /* +0x0004 */ unsigned char CreationTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char LastAccessTime[8]; /* +0x0010 0e 19 00 00 */ unsigned char LastWriteTime[8]; /* +0x0018 0e 19 00 00 */ unsigned char ChangeTime[8]; /* +0x0020 0e 19 00 00 */ unsigned char EndOfFile[8]; /* +0x0028 0e 19 00 00 */ unsigned char AllocationSize[8]; /* +0x0030 0e 19 00 00 */ unsigned long FileAttributes; /* +0x0038 */ unsigned long FileNameLength; /* +0x003c */ unsigned char FileName[8]; /* +0x0040 ab 19 00 00 */ }; struct _TP_CALLBACK_ENVIRON_V3 { unsigned long Version; /* +0x0000 */ unsigned char Pool[8]; /* +0x0008 07 29 00 00 */ unsigned char CleanupGroup[8]; /* +0x0010 d3 41 00 00 */ unsigned char CleanupGroupCancelCallback[8]; /* +0x0018 d5 41 00 00 */ void *RaceDll; /* +0x0020 */ unsigned char ActivationContext[8]; /* +0x0028 e7 20 00 00 */ unsigned char FinalizationCallback[24]; /* +0x0030 d8 41 00 00 */ }; struct _PROCESS_MITIGATION_STACKCHECK_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char Permanent[0]; +0x0000 53 19 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 54 19 00 00 */ }; struct tagSOUNDSENTRYW { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned long dwFlags; /* +0x0004 */ unsigned long iFSTextEffect; /* +0x0008 */ unsigned long iFSTextEffectMSec; /* +0x000c */ unsigned long iFSTextEffectColorBits; /* +0x0010 */ unsigned long iFSGrafEffect; /* +0x0014 */ unsigned long iFSGrafEffectMSec; /* +0x0018 */ unsigned long iFSGrafEffectColor; /* +0x001c */ unsigned long iWindowsEffect; /* +0x0020 */ unsigned long iWindowsEffectMSec; /* +0x0024 */ unsigned char lpszWindowsEffectDLL[8]; /* +0x0028 71 06 00 00 */ unsigned long iWindowsEffectOrdinal; /* +0x0030 */ }; struct _OLESTREAM { unsigned char lpstbl[8]; /* +0x0000 e9 41 00 00 */ }; struct _FSCTL_OFFLOAD_READ_INPUT { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long TokenTimeToLive; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ unsigned long long FileOffset; /* +0x0010 */ unsigned long long CopyLength; /* +0x0018 */ }; struct _SYSTEM_BOOT_LOGO_INFORMATION { unsigned char Bitmap[1]; /* +0x0000 d7 18 00 00 */ }; struct _IMAGE_FUNCTION_ENTRY { unsigned long StartingAddress; /* +0x0000 */ unsigned long EndingAddress; /* +0x0004 */ unsigned long EndOfPrologue; /* +0x0008 */ }; struct tagMEASUREITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char itemID[4]; /* +0x0008 75 00 00 00 */ unsigned char itemWidth[4]; /* +0x000c 75 00 00 00 */ unsigned char itemHeight[8]; /* +0x0010 75 00 00 00 */ unsigned long long itemData; /* +0x0018 */ }; struct _RPC_PROTSEQ_ENDPOINT { unsigned char *RpcProtocolSequence; /* +0x0000 */ unsigned char *Endpoint; /* +0x0008 */ }; struct _PROCESS_BASIC_INFORMATION { long ExitStatus; /* +0x0000 */ unsigned char PebBaseAddress[8]; /* +0x0008 1d 34 00 00 */ unsigned long long AffinityMask; /* +0x0010 */ long BasePriority; /* +0x0018 */ unsigned long long UniqueProcessId; /* +0x0020 */ unsigned long long InheritedFromUniqueProcessId; /* +0x0028 */ }; struct tagENUMLOGFONTW { unsigned char elfLogFont[92]; /* +0x0000 46 20 00 00 */ unsigned char elfFullName[128]; /* +0x005c b7 26 00 00 */ unsigned char elfStyle[64]; /* +0x00dc 89 1f 00 00 */ }; struct _LDR_DLL_NOTIFICATION_DATA { /* unsigned char Loaded[0]; +0x0000 e2 30 00 00 */ unsigned char Unloaded[40]; /* +0x0000 1a 42 00 00 */ }; struct tagCAL { unsigned long cElems; /* +0x0000 */ long *pElems; /* +0x0008 */ }; struct _SYSTEM_NUMA_PROXIMITY_MAP { unsigned long NodeProximityId; /* +0x0000 */ unsigned short NodeNumber; /* +0x0004 */ }; struct _JOURNAL_SET_KEY_LAST_WRITE_TIME_INFORMATION { unsigned char Action[8]; /* +0x0000 fd 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 c1 18 00 00 */ unsigned char OldLastWriteTime[8]; /* +0x0028 0e 19 00 00 */ unsigned char NewLastWriteTime[8]; /* +0x0030 0e 19 00 00 */ }; struct _CREATE_THREAD_DEBUG_INFO { void *hThread; /* +0x0000 */ void *lpThreadLocalBase; /* +0x0008 */ unsigned char lpStartAddress[8]; /* +0x0010 a7 1f 00 00 */ }; struct tagMSGBOXPARAMSA { unsigned char cbSize[8]; /* +0x0000 75 00 00 00 */ unsigned char hwndOwner[8]; /* +0x0008 97 13 00 00 */ unsigned char hInstance[8]; /* +0x0010 4e 1a 00 00 */ unsigned char lpszText[8]; /* +0x0018 4f 10 00 00 */ unsigned char lpszCaption[8]; /* +0x0020 4f 10 00 00 */ unsigned long dwStyle; /* +0x0028 */ unsigned char lpszIcon[8]; /* +0x0030 4f 10 00 00 */ unsigned long long dwContextHelpId; /* +0x0038 */ unsigned char lpfnMsgBoxCallback[8]; /* +0x0040 ba 31 00 00 */ unsigned long dwLanguageId; /* +0x0048 */ }; struct _CM_PCCARD_DEVICE_DATA { unsigned char Flags; /* +0x0000 */ unsigned char ErrorCode; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned long BusData; /* +0x0004 */ unsigned long DeviceId; /* +0x0008 */ unsigned long LegacyBaseAddress; /* +0x000c */ unsigned char IRQMap[16]; /* +0x0010 2d 11 00 00 */ }; struct _RTL_BALANCED_LINKS { unsigned char Parent[8]; /* +0x0000 23 29 00 00 */ unsigned char LeftChild[8]; /* +0x0008 23 29 00 00 */ unsigned char RightChild[8]; /* +0x0010 23 29 00 00 */ char Balance; /* +0x0018 */ unsigned char Reserved[7]; /* +0x0019 52 19 00 00 */ }; struct DISPLAYCONFIG_VIDEO_SIGNAL_INFO { unsigned long long pixelRate; /* +0x0000 */ unsigned char hSyncFreq[8]; /* +0x0008 55 42 00 00 */ unsigned char vSyncFreq[8]; /* +0x0010 55 42 00 00 */ unsigned char activeSize[8]; /* +0x0018 56 42 00 00 */ unsigned char totalSize[8]; /* +0x0020 56 42 00 00 */ unsigned char videoStandard[4]; /* +0x0028 75 00 00 00 */ unsigned char scanLineOrdering[4]; /* +0x002c 55 16 00 00 */ }; struct _COUNTED_REASON_CONTEXT { unsigned long Version; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char ResourceFileName[16]; /* +0x0008 c1 18 00 00 */ unsigned short ResourceReasonId; /* +0x0018 */ unsigned long StringCount; /* +0x001c */ /* unsigned char ReasonStrings[-24]; +0x0020 07 21 00 00 */ unsigned char SimpleString[32]; /* +0x0008 c1 18 00 00 */ }; struct _INVERTED_FUNCTION_TABLE_ENTRY { /* unsigned char FunctionTable[0]; +0x0000 6d 25 00 00 */ unsigned char DynamicTable[8]; /* +0x0000 73 19 00 00 */ void *ImageBase; /* +0x0008 */ unsigned long SizeOfImage; /* +0x0010 */ unsigned long SizeOfTable; /* +0x0014 */ }; struct _IMAGE_SECTION_HEADER { unsigned char Name[40]; /* +0x0000 fb 10 00 00 */ }; struct _IMAGE_SECTION_HEADER:: { unsigned long PhysicalAddress; /* +0x0000 */ unsigned long VirtualSize; /* +0x0000 */ }; struct _PROCESS_REVOKE_FILE_HANDLES_INFORMATION { unsigned char TargetDevicePath[16]; /* +0x0000 c1 18 00 00 */ }; struct tagBITMAP { long bmType; /* +0x0000 */ long bmWidth; /* +0x0004 */ long bmHeight; /* +0x0008 */ long bmWidthBytes; /* +0x000c */ unsigned short bmPlanes; /* +0x0010 */ unsigned short bmBitsPixel; /* +0x0012 */ void *bmBits; /* +0x0018 */ }; struct _CONSOLE_FONT_INFO { unsigned long nFont; /* +0x0000 */ unsigned char dwFontSize[4]; /* +0x0004 6a 21 00 00 */ }; struct tagSTGOPTIONS { unsigned short usVersion; /* +0x0000 */ unsigned short reserved; /* +0x0002 */ unsigned long ulSectorSize; /* +0x0004 */ unsigned char pwcsTemplateFile[8]; /* +0x0008 27 10 00 00 */ }; struct _SD_QUERY_STATS_OUTPUT { unsigned long long SdsStreamSize; /* +0x0000 */ unsigned long long SdsAllocationSize; /* +0x0008 */ unsigned long long SiiStreamSize; /* +0x0010 */ unsigned long long SiiAllocationSize; /* +0x0018 */ unsigned long long SdhStreamSize; /* +0x0020 */ unsigned long long SdhAllocationSize; /* +0x0028 */ unsigned long long NumSDTotal; /* +0x0030 */ unsigned long long NumSDUnused; /* +0x0038 */ }; struct _DISCDLGSTRUCTW { unsigned long cbStructure; /* +0x0000 */ unsigned char hwndOwner[8]; /* +0x0008 97 13 00 00 */ unsigned char lpLocalName[8]; /* +0x0010 71 06 00 00 */ unsigned char lpRemoteName[8]; /* +0x0018 71 06 00 00 */ unsigned long dwFlags; /* +0x0020 */ }; struct tagACTCTXW { unsigned long cbSize; /* +0x0000 */ unsigned long dwFlags; /* +0x0004 */ unsigned char lpSource[8]; /* +0x0008 27 10 00 00 */ unsigned short wProcessorArchitecture; /* +0x0010 */ unsigned short wLangId; /* +0x0012 */ unsigned char lpAssemblyDirectory[8]; /* +0x0018 27 10 00 00 */ unsigned char lpResourceName[8]; /* +0x0020 27 10 00 00 */ unsigned char lpApplicationName[8]; /* +0x0028 27 10 00 00 */ unsigned char hModule[8]; /* +0x0030 4e 1a 00 00 */ }; struct tagLOCALESIGNATURE { unsigned char lsUsb[16]; /* +0x0000 2b 23 00 00 */ unsigned char lsCsbDefault[8]; /* +0x0010 cc 1f 00 00 */ unsigned char lsCsbSupported[8]; /* +0x0018 cc 1f 00 00 */ }; struct tagVersionedStream { unsigned char guidVersion[16]; /* +0x0000 6b 10 00 00 */ unsigned char pStream[8]; /* +0x0010 da 2d 00 00 */ }; struct _JOBOBJECT_BASIC_PROCESS_ID_LIST { unsigned long NumberOfAssignedProcesses; /* +0x0000 */ unsigned long NumberOfProcessIdsInList; /* +0x0004 */ unsigned char ProcessIdList[8]; /* +0x0008 34 35 00 00 */ }; struct _REMSECURITY_ATTRIBUTES { unsigned long nLength; /* +0x0000 */ unsigned long lpSecurityDescriptor; /* +0x0004 */ unsigned char bInheritHandle[4]; /* +0x0008 74 00 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_FQBN_VALUE { unsigned long long Version; /* +0x0000 */ unsigned char Name[8]; /* +0x0008 71 06 00 00 */ }; struct _RTL_UNLOAD_EVENT_TRACE { void *BaseAddress; /* +0x0000 */ unsigned long long SizeOfImage; /* +0x0008 */ unsigned long Sequence; /* +0x0010 */ unsigned long TimeDateStamp; /* +0x0014 */ unsigned long CheckSum; /* +0x0018 */ unsigned char ImageName[64]; /* +0x001c 89 1f 00 00 */ unsigned char Version[12]; /* +0x005c cc 1f 00 00 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR { unsigned char Type; /* +0x0000 */ unsigned char ShareDisposition; /* +0x0001 */ unsigned short Flags; /* +0x0002 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Class; /* +0x0000 */ unsigned char Type; /* +0x0001 */ unsigned char Reserved1; /* +0x0002 */ unsigned char Reserved2; /* +0x0003 */ unsigned long IdLowPart; /* +0x0004 */ unsigned long IdHighPart; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 0e 19 00 00 */ unsigned long Length64; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 0e 19 00 00 */ unsigned long Length48; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 0e 19 00 00 */ unsigned long Length40; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long DataSize; /* +0x0000 */ unsigned long Reserved1; /* +0x0004 */ unsigned long Reserved2; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long Start; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Reserved; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Data[12]; /* +0x0000 fa 18 00 00 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long Channel; /* +0x0000 */ unsigned long RequestLine; /* +0x0004 */ unsigned long Reserved1; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned long Channel; /* +0x0000 */ unsigned long Port; /* +0x0004 */ unsigned long Reserved1; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { unsigned char Start[8]; /* +0x0000 0e 19 00 00 */ unsigned long Length; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::: { /* unsigned char Raw[0]; +0x0000 e9 42 00 00 */ unsigned char Translated[16]; /* +0x0000 ea 42 00 00 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::::::: { unsigned long Level; /* +0x0000 */ unsigned long Vector; /* +0x0004 */ unsigned long long Affinity; /* +0x0008 */ }; struct _CM_PARTIAL_RESOURCE_DESCRIPTOR:::::::: { unsigned short Reserved; /* +0x0000 */ unsigned short MessageCount; /* +0x0002 */ unsigned long Vector; /* +0x0004 */ unsigned long long Affinity; /* +0x0008 */ }; struct tagNEWTEXTMETRICA { long tmHeight; /* +0x0000 */ long tmAscent; /* +0x0004 */ long tmDescent; /* +0x0008 */ long tmInternalLeading; /* +0x000c */ long tmExternalLeading; /* +0x0010 */ long tmAveCharWidth; /* +0x0014 */ long tmMaxCharWidth; /* +0x0018 */ long tmWeight; /* +0x001c */ long tmOverhang; /* +0x0020 */ long tmDigitizedAspectX; /* +0x0024 */ long tmDigitizedAspectY; /* +0x0028 */ unsigned char tmFirstChar; /* +0x002c */ unsigned char tmLastChar; /* +0x002d */ unsigned char tmDefaultChar; /* +0x002e */ unsigned char tmBreakChar; /* +0x002f */ unsigned char tmItalic; /* +0x0030 */ unsigned char tmUnderlined; /* +0x0031 */ unsigned char tmStruckOut; /* +0x0032 */ unsigned char tmPitchAndFamily; /* +0x0033 */ unsigned char tmCharSet; /* +0x0034 */ unsigned long ntmFlags; /* +0x0038 */ unsigned char ntmSizeEM[4]; /* +0x003c 75 00 00 00 */ unsigned char ntmCellHeight[4]; /* +0x0040 75 00 00 00 */ unsigned char ntmAvgWidth[4]; /* +0x0044 75 00 00 00 */ }; struct _IMAGE_ARM_RUNTIME_FUNCTION_ENTRY { unsigned long BeginAddress; /* +0x0000 */ unsigned long UnwindData; /* +0x0004 */ /* unsigned char Flag[0]; +0x0004 05 43 00 00 */ /* unsigned char FunctionLength[0]; +0x0004 06 43 00 00 */ /* unsigned char Ret[0]; +0x0004 de 36 00 00 */ /* unsigned char H[0]; +0x0004 df 36 00 00 */ /* unsigned char Reg[0]; +0x0004 07 43 00 00 */ /* unsigned char R[0]; +0x0004 60 2b 00 00 */ /* unsigned char L[0]; +0x0004 4d 19 00 00 */ /* unsigned char C[0]; +0x0004 4e 19 00 00 */ unsigned char StackAdjust[4]; /* +0x0004 4f 19 00 00 */ }; struct tagCAUH { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 18 43 00 00 */ }; struct _ATOM_TABLE_INFORMATION { unsigned long NumberOfAtoms; /* +0x0000 */ unsigned char Atoms[4]; /* +0x0004 b1 20 00 00 */ }; struct _BOOT_ENTROPY_NT_RESULT { unsigned long maxEntropySources; /* +0x0000 */ unsigned char EntropySourceResult[728]; /* +0x0008 4c 43 00 00 */ unsigned char SeedBytesForCng[48]; /* +0x02e0 98 24 00 00 */ }; struct _EISA_MEMORY_CONFIGURATION { unsigned char ConfigurationByte[1]; /* +0x0000 4f 43 00 00 */ unsigned char DataSize; /* +0x0001 */ unsigned short AddressLowWord; /* +0x0002 */ unsigned char AddressHighByte; /* +0x0004 */ unsigned short MemorySize; /* +0x0005 */ }; struct _PROCESS_BASIC_INFORMATION64 { long ExitStatus; /* +0x0000 */ unsigned char Pad1[4]; /* +0x0004 75 00 00 00 */ unsigned long long PebBaseAddress; /* +0x0008 */ unsigned long long AffinityMask; /* +0x0010 */ long BasePriority; /* +0x0018 */ unsigned char Pad2[4]; /* +0x001c 75 00 00 00 */ unsigned long long UniqueProcessId; /* +0x0020 */ unsigned long long InheritedFromUniqueProcessId; /* +0x0028 */ }; struct _FILE_REMOTE_PROTOCOL_INFORMATION { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureSize; /* +0x0002 */ unsigned long Protocol; /* +0x0004 */ unsigned short ProtocolMajorVersion; /* +0x0008 */ unsigned short ProtocolMinorVersion; /* +0x000a */ unsigned short ProtocolRevision; /* +0x000c */ unsigned short Reserved; /* +0x000e */ unsigned long Flags; /* +0x0010 */ }; struct tagSIZE { long cx; /* +0x0000 */ long cy; /* +0x0004 */ }; struct _FILE_SET_DEFECT_MGMT_BUFFER { unsigned char Disable; /* +0x0000 */ }; struct _TIMER_SET_COALESCABLE_TIMER_INFO { unsigned char DueTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char TimerApcRoutine[8]; /* +0x0008 de 2c 00 00 */ void *TimerContext; /* +0x0010 */ unsigned char WakeContext[8]; /* +0x0018 64 43 00 00 */ unsigned long Period; /* +0x0020 */ unsigned long TolerableDelay; /* +0x0024 */ unsigned char *PreviousState; /* +0x0028 */ }; struct _FILE_SYSTEM_RECOGNITION_INFORMATION { unsigned char FileSystem[9]; /* +0x0000 67 43 00 00 */ }; struct _UNICODE_PREFIX_TABLE { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[8]; /* +0x0008 06 21 00 00 */ unsigned char LastNextEntry[8]; /* +0x0010 06 21 00 00 */ }; struct tagTOUCH_HIT_TESTING_INPUT { unsigned char pointerId[4]; /* +0x0000 75 00 00 00 */ unsigned char point[8]; /* +0x0004 1b 1a 00 00 */ unsigned char boundingBox[16]; /* +0x000c 06 1a 00 00 */ unsigned char nonOccludedBoundingBox[16]; /* +0x001c 06 1a 00 00 */ unsigned char orientation[4]; /* +0x002c 75 00 00 00 */ }; struct _PROCESS_SESSION_INFORMATION { unsigned long SessionId; /* +0x0000 */ }; struct _SYSTEM_CONTEXT_SWITCH_INFORMATION { unsigned long ContextSwitches; /* +0x0000 */ unsigned long FindAny; /* +0x0004 */ unsigned long FindLast; /* +0x0008 */ unsigned long FindIdeal; /* +0x000c */ unsigned long IdleAny; /* +0x0010 */ unsigned long IdleCurrent; /* +0x0014 */ unsigned long IdleLast; /* +0x0018 */ unsigned long IdleIdeal; /* +0x001c */ unsigned long PreemptAny; /* +0x0020 */ unsigned long PreemptCurrent; /* +0x0024 */ unsigned long PreemptLast; /* +0x0028 */ unsigned long SwitchToIdle; /* +0x002c */ }; struct _CONTEXT_EX { unsigned char All[8]; /* +0x0000 8e 3b 00 00 */ unsigned char Legacy[8]; /* +0x0008 8e 3b 00 00 */ unsigned char XState[8]; /* +0x0010 8e 3b 00 00 */ }; struct _SYSTEM_DEVICE_INFORMATION { unsigned long NumberOfDisks; /* +0x0000 */ unsigned long NumberOfFloppies; /* +0x0004 */ unsigned long NumberOfCdRoms; /* +0x0008 */ unsigned long NumberOfTapes; /* +0x000c */ unsigned long NumberOfSerialPorts; /* +0x0010 */ unsigned long NumberOfParallelPorts; /* +0x0014 */ }; struct _FLS_DATA { unsigned char Entry[16]; /* +0x0000 7d 1a 00 00 */ unsigned char Slots[1024]; /* +0x0010 b2 43 00 00 */ }; struct _tagPROTOCOLFILTERDATA { unsigned long cbSize; /* +0x0000 */ unsigned char pProtocolSink[8]; /* +0x0008 b5 2c 00 00 */ unsigned char pProtocol[8]; /* +0x0010 4c 24 00 00 */ unsigned char pUnk[8]; /* +0x0018 23 1c 00 00 */ unsigned long dwFilterFlags; /* +0x0020 */ }; struct _EVENT_TRACE_HEADER { unsigned short Size; /* +0x0000 */ unsigned short FieldTypeFlags; /* +0x0002 */ unsigned char HeaderType; /* +0x0002 */ unsigned char MarkerFlags; /* +0x0003 */ unsigned long Version; /* +0x0004 */ unsigned char Class[4]; /* +0x0004 b9 43 00 00 */ unsigned long ThreadId; /* +0x0008 */ unsigned long ProcessId; /* +0x000c */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ /* unsigned char Guid[0]; +0x0018 6b 10 00 00 */ unsigned long long GuidPtr; /* +0x0018 */ unsigned long KernelTime; /* +0x0028 */ unsigned long UserTime; /* +0x002c */ unsigned long long ProcessorTime; /* +0x0028 */ unsigned long ClientContext; /* +0x0028 */ unsigned long Flags; /* +0x002c */ }; struct tagBITMAPFILEHEADER { unsigned short bfType; /* +0x0000 */ unsigned long bfSize; /* +0x0002 */ unsigned short bfReserved1; /* +0x0006 */ unsigned short bfReserved2; /* +0x0008 */ unsigned long bfOffBits; /* +0x000a */ }; struct _SERVICE_DESCRIPTIONW { unsigned char lpDescription[8]; /* +0x0000 71 06 00 00 */ }; struct _ldiv_t { long quot; /* +0x0000 */ long rem; /* +0x0004 */ }; struct Windows::Storage::Search::SortEntry { unsigned char PropertyName[8]; /* +0x0000 2f 2d 00 00 */ unsigned char AscendingOrder; /* +0x0008 */ }; struct Windows::Storage::AccessCache::AccessListEntry { unsigned char Token[8]; /* +0x0000 2f 2d 00 00 */ unsigned char Metadata[8]; /* +0x0008 2f 2d 00 00 */ }; struct Windows::Foundation::Point { unsigned char X[4]; /* +0x0000 40 00 00 00 */ unsigned char Y[4]; /* +0x0004 40 00 00 00 */ }; struct Windows::Foundation::TimeSpan { long long Duration; /* +0x0000 */ }; struct Windows::Foundation::Size { unsigned char Width[4]; /* +0x0000 40 00 00 00 */ unsigned char Height[4]; /* +0x0004 40 00 00 00 */ }; enum Windows::Foundation::Collections::is_foundation_struct *>:: { value = 0 }; enum Windows::Foundation::Collections::is_foundation_struct:: { value = 1 }; enum Windows::Foundation::Collections::CollectionChange { Reset = 0, ItemInserted = 1, ItemRemoved = 2, ItemChanged = 3 }; struct Windows::Foundation::DateTime { long long UniversalTime; /* +0x0000 */ }; struct Windows::Foundation::Rect { unsigned char X[4]; /* +0x0000 40 00 00 00 */ unsigned char Y[4]; /* +0x0004 40 00 00 00 */ unsigned char Width[4]; /* +0x0008 40 00 00 00 */ unsigned char Height[4]; /* +0x000c 40 00 00 00 */ }; struct Windows::Graphics::Imaging::BitmapBounds { unsigned char X[4]; /* +0x0000 75 00 00 00 */ unsigned char Y[4]; /* +0x0004 75 00 00 00 */ unsigned char Width[4]; /* +0x0008 75 00 00 00 */ unsigned char Height[4]; /* +0x000c 75 00 00 00 */ }; struct Windows::Management::Deployment::DeploymentProgress { unsigned char state[4]; /* +0x0000 0d 18 00 00 */ unsigned char percentage[4]; /* +0x0004 75 00 00 00 */ }; struct Windows::ApplicationModel::PackageVersion { unsigned short Major; /* +0x0000 */ unsigned short Minor; /* +0x0002 */ unsigned short Build; /* +0x0004 */ unsigned short Revision; /* +0x0006 */ }; struct _WGLSWAP { unsigned char hdc[8]; /* +0x0000 06 27 00 00 */ unsigned char uiFlags[8]; /* +0x0008 75 00 00 00 */ }; struct _PO_WAKE_SOURCE_HEADER { unsigned char Type[4]; /* +0x0000 a7 16 00 00 */ unsigned long Size; /* +0x0004 */ }; struct _FIXED { unsigned short fract; /* +0x0000 */ short value; /* +0x0002 */ }; struct _iobuf { char *_ptr; /* +0x0000 */ unsigned char _cnt[8]; /* +0x0008 74 00 00 00 */ char *_base; /* +0x0010 */ unsigned char _flag[4]; /* +0x0018 74 00 00 00 */ unsigned char _file[4]; /* +0x001c 74 00 00 00 */ unsigned char _charbuf[4]; /* +0x0020 74 00 00 00 */ unsigned char _bufsiz[4]; /* +0x0024 74 00 00 00 */ char *_tmpfname; /* +0x0028 */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_BEGINNING { unsigned char Data[8]; /* +0x0000 3d 11 00 00 */ unsigned long AssemblyRosterIndex; /* +0x0008 */ void *ResolutionContext; /* +0x0010 */ unsigned char Root[16]; /* +0x0018 c1 18 00 00 */ unsigned char KnownRoot; /* +0x0028 */ unsigned long long RootCount; /* +0x0030 */ unsigned char CancelResolution; /* +0x0038 */ }; struct tagWNODE_ALL_DATA { unsigned char WnodeHeader[48]; /* +0x0000 47 30 00 00 */ unsigned long DataBlockOffset; /* +0x0030 */ unsigned long InstanceCount; /* +0x0034 */ unsigned long OffsetInstanceNameOffsets; /* +0x0038 */ unsigned long FixedInstanceSize; /* +0x003c */ unsigned char OffsetInstanceDataAndLength[12]; /* +0x003c 74 61 00 00 */ }; struct _MEMORY_COMBINE_INFORMATION { void *Handle; /* +0x0000 */ unsigned long long PagesCombined; /* +0x0008 */ }; struct _PSINJECTDATA { unsigned long DataBytes; /* +0x0000 */ unsigned short InjectionPoint; /* +0x0004 */ unsigned short PageNumber; /* +0x0006 */ }; struct _RGNDATA { unsigned char rdh[32]; /* +0x0000 87 61 00 00 */ unsigned char Buffer[4]; /* +0x0020 6d 2b 00 00 */ }; struct _tagHIT_LOGGING_INFO { unsigned long dwStructSize; /* +0x0000 */ char *lpszLoggedUrlName; /* +0x0008 */ unsigned char StartTime[16]; /* +0x0010 8a 1f 00 00 */ unsigned char EndTime[16]; /* +0x0020 8a 1f 00 00 */ char *lpszExtendedInfo; /* +0x0030 */ }; struct _RTL_HEAP_ENTRY:::: { unsigned long long CommittedSize; /* +0x0000 */ void *FirstBlock; /* +0x0008 */ }; struct _RTL_HEAP_ENTRY:::: { unsigned long long Settable; /* +0x0000 */ unsigned long Tag; /* +0x0008 */ }; struct DISPLAYCONFIG_DEVICE_INFO_HEADER { unsigned char type[4]; /* +0x0000 d7 15 00 00 */ unsigned char size[4]; /* +0x0004 75 00 00 00 */ unsigned char adapterId[8]; /* +0x0008 90 1e 00 00 */ unsigned char id[4]; /* +0x0010 75 00 00 00 */ }; struct tagEMREXTFLOODFILL { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char ptlStart[8]; /* +0x0008 6a 19 00 00 */ unsigned long crColor; /* +0x0010 */ unsigned long iMode; /* +0x0014 */ }; struct _EVENTLOG_FULL_INFORMATION { unsigned long dwFull; /* +0x0000 */ }; struct _SYSTEM_THREAD_CID_PRIORITY_INFORMATION { unsigned char ClientId[16]; /* +0x0000 0f 19 00 00 */ long Priority; /* +0x0010 */ }; struct _JOURNAL_CREATE_DELETE_KEY_INFORMATION { unsigned char Action[8]; /* +0x0000 fd 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ unsigned char KeyPathName[16]; /* +0x0018 c1 18 00 00 */ unsigned long SecurityDescriptorLength; /* +0x0028 */ void *SecurityDescriptor; /* +0x0030 */ unsigned short ClassLength; /* +0x0038 */ void *ClassData; /* +0x0040 */ unsigned char SymbolicLink; /* +0x0048 */ }; struct _XSAVE_AREA { unsigned char LegacyState[512]; /* +0x0000 84 22 00 00 */ unsigned char Header[64]; /* +0x0200 bd 43 00 00 */ }; struct tagRAWINPUTDEVICE { unsigned short usUsagePage; /* +0x0000 */ unsigned short usUsage; /* +0x0002 */ unsigned long dwFlags; /* +0x0004 */ unsigned char hwndTarget[8]; /* +0x0008 97 13 00 00 */ }; struct _FILE_IOSTATUSBLOCK_RANGE_INFORMATION { unsigned char *IoStatusBlockRange; /* +0x0000 */ unsigned long Length; /* +0x0008 */ }; struct _KEY_WRITE_TIME_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 0e 19 00 00 */ }; struct _CLASSIC_EVENT_ID { unsigned char EventGuid[16]; /* +0x0000 6b 10 00 00 */ unsigned char Type; /* +0x0010 */ unsigned char Reserved[7]; /* +0x0011 d3 2c 00 00 */ }; struct tagWNODE_SINGLE_ITEM { unsigned char WnodeHeader[48]; /* +0x0000 47 30 00 00 */ unsigned long OffsetInstanceName; /* +0x0030 */ unsigned long InstanceIndex; /* +0x0034 */ unsigned long ItemId; /* +0x0038 */ unsigned long DataBlockOffset; /* +0x003c */ unsigned long SizeDataItem; /* +0x0040 */ unsigned char VariableData[4]; /* +0x0044 48 30 00 00 */ }; struct _FILE_OBJECTID_INFORMATION { long long FileReference; /* +0x0000 */ unsigned char ObjectId[16]; /* +0x0008 2d 11 00 00 */ unsigned char BirthVolumeId[16]; /* +0x0018 2d 11 00 00 */ unsigned char BirthObjectId[16]; /* +0x0028 2d 11 00 00 */ /* unsigned char DomainId[-32]; +0x0038 2d 11 00 00 */ unsigned char ExtendedInfo[48]; /* +0x0018 98 24 00 00 */ }; struct _RTL_USER_PROCESS_INFORMATION64 { unsigned long Length; /* +0x0000 */ long long Process; /* +0x0008 */ long long Thread; /* +0x0010 */ unsigned char ClientId[16]; /* +0x0018 e5 33 00 00 */ unsigned char ImageInformation[64]; /* +0x0028 3d 32 00 00 */ }; struct _PROCESS_HANDLE_TRACING_QUERY { void *Handle; /* +0x0000 */ unsigned long TotalTraces; /* +0x0008 */ unsigned char HandleTrace[160]; /* +0x0010 26 62 00 00 */ }; struct _SECURITY_DESCRIPTOR { unsigned char Revision; /* +0x0000 */ unsigned char Sbz1; /* +0x0001 */ unsigned short Control; /* +0x0002 */ void *Owner; /* +0x0008 */ void *Group; /* +0x0010 */ unsigned char Sacl[8]; /* +0x0018 1f 23 00 00 */ unsigned char Dacl[8]; /* +0x0020 1f 23 00 00 */ }; struct _SYSTEM_PROCESSOR_PROFILE_CONTROL_AREA { unsigned char ProcessorProfileControlArea[8]; /* +0x0000 2f 62 00 00 */ unsigned char Allocate; /* +0x0008 */ }; struct _WIN32_FIND_STREAM_DATA { unsigned char StreamSize[8]; /* +0x0000 0e 19 00 00 */ unsigned char cStreamName[592]; /* +0x0008 32 62 00 00 */ }; struct tagPARAMDATA { unsigned char szName[8]; /* +0x0000 71 06 00 00 */ unsigned short vt; /* +0x0008 */ }; struct _JOBOBJECT_WAKE_INFORMATION { unsigned long long NotificationChannel; /* +0x0000 */ unsigned char WakeCounters[32]; /* +0x0008 3a 62 00 00 */ }; struct _KEY_OPEN_SUBKEYS_INFORMATION { unsigned long Count; /* +0x0000 */ unsigned char KeyArray[24]; /* +0x0008 3e 62 00 00 */ }; struct _IMAGE_RESOURCE_DIR_STRING_U { unsigned short Length; /* +0x0000 */ unsigned char NameString[2]; /* +0x0002 ab 19 00 00 */ }; struct _POWER_PLATFORM_INFORMATION { unsigned char Role[4]; /* +0x0000 59 17 00 00 */ unsigned char AoAc; /* +0x0004 */ }; struct _USER_MARSHAL_CB { unsigned long Flags; /* +0x0000 */ unsigned char pStubMsg[8]; /* +0x0008 ef 22 00 00 */ unsigned char pReserve[8]; /* +0x0010 5e 22 00 00 */ unsigned long Signature; /* +0x0018 */ unsigned char CBType[4]; /* +0x001c 69 17 00 00 */ unsigned char pFormat[8]; /* +0x0020 5e 22 00 00 */ unsigned char pTypeFormat[8]; /* +0x0028 5e 22 00 00 */ }; struct _EXTENDED_ENCRYPTED_DATA_INFO { unsigned long ExtendedCode; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Flags; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _PROCESS_MITIGATION_STRICT_HANDLE_CHECK_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char RaiseExceptionOnInvalidHandleReference[0]; +0x0000 53 19 00 00 */ /* unsigned char HandleExceptionsPermanentlyEnabled[0]; +0x0000 e3 21 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 c0 22 00 00 */ }; struct tagTTPOLYCURVE { unsigned short wType; /* +0x0000 */ unsigned short cpfx; /* +0x0002 */ unsigned char apfx[8]; /* +0x0004 6d 62 00 00 */ }; struct _MEMORY_WORKING_SET_EX_INFORMATION { void *VirtualAddress; /* +0x0000 */ }; struct _MEMORY_WORKING_SET_EX_INFORMATION:: { /* unsigned char VirtualAttributes[0]; +0x0000 78 62 00 00 */ unsigned long long Long; /* +0x0000 */ }; struct _TP_POOL_STACK_INFORMATION { unsigned long long StackReserve; /* +0x0000 */ unsigned long long StackCommit; /* +0x0008 */ }; struct _LDRP_CSLIST { unsigned char Tail[8]; /* +0x0000 40 23 00 00 */ }; struct _RPC_SECURITY_QOS_V4_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _NT_TIB32 { unsigned long ExceptionList; /* +0x0000 */ unsigned long StackBase; /* +0x0004 */ unsigned long StackLimit; /* +0x0008 */ unsigned long SubSystemTib; /* +0x000c */ unsigned long FiberData; /* +0x0010 */ unsigned long Version; /* +0x0010 */ unsigned long ArbitraryUserPointer; /* +0x0014 */ unsigned long Self; /* +0x0018 */ }; struct _RESOURCEMANAGER_COMPLETION_INFORMATION { void *IoCompletionPortHandle; /* +0x0000 */ unsigned long long CompletionKey; /* +0x0008 */ }; struct _TXFS_MODIFY_RM { unsigned long Flags; /* +0x0000 */ unsigned long LogContainerCountMax; /* +0x0004 */ unsigned long LogContainerCountMin; /* +0x0008 */ unsigned long LogContainerCount; /* +0x000c */ unsigned long LogGrowthIncrement; /* +0x0010 */ unsigned long LogAutoShrinkPercentage; /* +0x0014 */ unsigned long long Reserved; /* +0x0018 */ unsigned short LoggingMode; /* +0x0020 */ }; struct _ALPC_SECURITY_ATTR { unsigned long Flags; /* +0x0000 */ unsigned char QoS[8]; /* +0x0008 ac 62 00 00 */ void *ContextHandle; /* +0x0010 */ }; struct _SYSTEM_VERIFIER_FAULTS_INFORMATION { unsigned long Probability; /* +0x0000 */ unsigned long MaxProbability; /* +0x0004 */ unsigned char PoolTags[16]; /* +0x0008 c1 18 00 00 */ unsigned char Applications[16]; /* +0x0018 c1 18 00 00 */ }; struct _ACTIVATION_CONTEXT_COMPATIBILITY_INFORMATION { unsigned long ElementCount; /* +0x0000 */ /* unsigned char Elements[0]; +0x0004 c4 62 00 00 */ }; struct tagXFORM { unsigned char eM11[4]; /* +0x0000 40 00 00 00 */ unsigned char eM12[4]; /* +0x0004 40 00 00 00 */ unsigned char eM21[4]; /* +0x0008 40 00 00 00 */ unsigned char eM22[4]; /* +0x000c 40 00 00 00 */ unsigned char eDx[4]; /* +0x0010 40 00 00 00 */ unsigned char eDy[4]; /* +0x0014 40 00 00 00 */ }; struct _ALPC_DATA_VIEW_ATTR { unsigned long Flags; /* +0x0000 */ void *SectionHandle; /* +0x0008 */ void *ViewBase; /* +0x0010 */ unsigned long long ViewSize; /* +0x0018 */ }; struct _CM_PNP_BIOS_DEVICE_NODE { unsigned short Size; /* +0x0000 */ unsigned char Node; /* +0x0002 */ unsigned long ProductId; /* +0x0003 */ unsigned char DeviceType[3]; /* +0x0007 52 19 00 00 */ unsigned short DeviceAttributes; /* +0x000a */ }; struct _PLUGPLAY_CONTROL_TARGET_RELATION_DATA { void *UserFileHandle; /* +0x0000 */ long Status; /* +0x0008 */ unsigned long DeviceInstanceLen; /* +0x000c */ unsigned char DeviceInstance[8]; /* +0x0010 71 06 00 00 */ }; struct _FILE_POSITION_INFORMATION { unsigned char CurrentByteOffset[8]; /* +0x0000 0e 19 00 00 */ }; struct DISPLAYCONFIG_SOURCE_DEVICE_NAME { unsigned char header[20]; /* +0x0000 38 2c 00 00 */ unsigned char viewGdiDeviceName[64]; /* +0x0014 89 1f 00 00 */ }; struct _PLUGPLAY_CONTROL_DEVICE_RELATIONS_DATA { unsigned char DeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned char Operation[4]; /* +0x0010 3f 16 00 00 */ unsigned long BufferLength; /* +0x0014 */ unsigned char Buffer[8]; /* +0x0018 71 06 00 00 */ }; struct tagEMRCREATEPALETTE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihPal; /* +0x0008 */ unsigned char lgpl[8]; /* +0x000c 14 3a 00 00 */ }; struct tagEMRCREATEBRUSHINDIRECT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihBrush; /* +0x0008 */ unsigned char lb[12]; /* +0x000c 24 22 00 00 */ }; struct _JOBOBJECT_BASIC_UI_RESTRICTIONS { unsigned long UIRestrictionsClass; /* +0x0000 */ }; struct tagSTYLEBUFA { unsigned long dwStyle; /* +0x0000 */ unsigned char szDescription[32]; /* +0x0004 e3 2a 00 00 */ }; struct _FILE_NUMA_NODE_INFORMATION { unsigned short NodeNumber; /* +0x0000 */ }; struct pvalueA { char *pv_valuename; /* +0x0000 */ unsigned char pv_valuelen[8]; /* +0x0008 74 00 00 00 */ void *pv_value_context; /* +0x0010 */ unsigned long pv_type; /* +0x0018 */ }; struct _RTL_DYNAMIC_HASH_TABLE_ENUMERATOR { unsigned char HashEntry[24]; /* +0x0000 73 3b 00 00 */ unsigned char ChainHead[8]; /* +0x0018 1c 2e 00 00 */ unsigned long BucketIndex; /* +0x0020 */ }; struct _CSTRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned char Buffer[8]; /* +0x0008 4f 10 00 00 */ }; struct _SECURITY_CAPABILITIES { void *AppContainerSid; /* +0x0000 */ unsigned char Capabilities[8]; /* +0x0008 55 24 00 00 */ unsigned long CapabilityCount; /* +0x0010 */ unsigned long Reserved; /* +0x0014 */ }; struct _PROCESS_DEVICEMAP_INFORMATION { /* unsigned char Set[0]; +0x0000 3b 63 00 00 */ unsigned char Query[40]; /* +0x0000 3c 63 00 00 */ }; struct _PROCESS_WINDOW_INFORMATION { unsigned long WindowFlags; /* +0x0000 */ unsigned short WindowTitleLength; /* +0x0004 */ unsigned char WindowTitle[2]; /* +0x0006 ab 19 00 00 */ }; struct _TRANSACTION_NOTIFICATION { void *TransactionKey; /* +0x0000 */ unsigned long TransactionNotification; /* +0x0008 */ unsigned char TmVirtualClock[8]; /* +0x0010 0e 19 00 00 */ unsigned long ArgumentLength; /* +0x0018 */ }; struct tagBITMAPINFO { unsigned char bmiHeader[40]; /* +0x0000 cf 36 00 00 */ unsigned char bmiColors[4]; /* +0x0028 47 63 00 00 */ }; struct _TXFS_QUERY_RM_INFORMATION { unsigned long BytesRequired; /* +0x0000 */ unsigned long long TailLsn; /* +0x0008 */ unsigned long long CurrentLsn; /* +0x0010 */ unsigned long long ArchiveTailLsn; /* +0x0018 */ unsigned long long LogContainerSize; /* +0x0020 */ unsigned char HighestVirtualClock[8]; /* +0x0028 0e 19 00 00 */ unsigned long LogContainerCount; /* +0x0030 */ unsigned long LogContainerCountMax; /* +0x0034 */ unsigned long LogContainerCountMin; /* +0x0038 */ unsigned long LogGrowthIncrement; /* +0x003c */ unsigned long LogAutoShrinkPercentage; /* +0x0040 */ unsigned long Flags; /* +0x0044 */ unsigned short LoggingMode; /* +0x0048 */ unsigned short Reserved; /* +0x004a */ unsigned long RmState; /* +0x004c */ unsigned long long LogCapacity; /* +0x0050 */ unsigned long long LogFree; /* +0x0058 */ unsigned long long TopsSize; /* +0x0060 */ unsigned long long TopsUsed; /* +0x0068 */ unsigned long long TransactionCount; /* +0x0070 */ unsigned long long OnePCCount; /* +0x0078 */ unsigned long long TwoPCCount; /* +0x0080 */ unsigned long long NumberLogFileFull; /* +0x0088 */ unsigned long long OldestTransactionAge; /* +0x0090 */ unsigned char RMName[16]; /* +0x0098 6b 10 00 00 */ unsigned long TmLogPathOffset; /* +0x00a8 */ }; struct _COMMTIMEOUTS { unsigned long ReadIntervalTimeout; /* +0x0000 */ unsigned long ReadTotalTimeoutMultiplier; /* +0x0004 */ unsigned long ReadTotalTimeoutConstant; /* +0x0008 */ unsigned long WriteTotalTimeoutMultiplier; /* +0x000c */ unsigned long WriteTotalTimeoutConstant; /* +0x0010 */ }; struct IMAGE_AUX_SYMBOL_TOKEN_DEF { unsigned char bAuxType; /* +0x0000 */ unsigned char bReserved; /* +0x0001 */ unsigned long SymbolTableIndex; /* +0x0002 */ unsigned char rgbReserved[12]; /* +0x0006 d6 1e 00 00 */ }; struct _REPARSE_GUID_DATA_BUFFER { unsigned long ReparseTag; /* +0x0000 */ unsigned short ReparseDataLength; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned char ReparseGuid[20]; /* +0x0008 6b 10 00 00 */ }; struct _RTL_PROCESS_BACKTRACES_CONTROL { unsigned long ControlCode; /* +0x0000 */ unsigned long ControlSize; /* +0x0004 */ /* unsigned char ControlData[0]; +0x0008 d7 18 00 00 */ unsigned char DatabaseCreate[24]; /* +0x0008 7c 63 00 00 */ }; struct tagLOGCOLORSPACEA { unsigned long lcsSignature; /* +0x0000 */ unsigned long lcsVersion; /* +0x0004 */ unsigned long lcsSize; /* +0x0008 */ long lcsCSType; /* +0x000c */ long lcsIntent; /* +0x0010 */ unsigned char lcsEndpoints[36]; /* +0x0014 f9 32 00 00 */ unsigned long lcsGammaRed; /* +0x0038 */ unsigned long lcsGammaGreen; /* +0x003c */ unsigned long lcsGammaBlue; /* +0x0040 */ unsigned char lcsFilename[260]; /* +0x0044 b5 2b 00 00 */ }; struct __m128i { /* unsigned char m128i_i8[0]; +0x0000 98 31 00 00 */ /* unsigned char m128i_i16[0]; +0x0000 99 31 00 00 */ /* unsigned char m128i_i32[0]; +0x0000 74 29 00 00 */ /* unsigned char m128i_i64[0]; +0x0000 9a 31 00 00 */ /* unsigned char m128i_u8[0]; +0x0000 2d 11 00 00 */ /* unsigned char m128i_u16[0]; +0x0000 9b 31 00 00 */ /* unsigned char m128i_u32[0]; +0x0000 9c 31 00 00 */ unsigned char m128i_u64[16]; /* +0x0000 d1 1e 00 00 */ }; struct _TOKEN_PRIMARY_GROUP { void *PrimaryGroup; /* +0x0000 */ }; struct _CURDIR { unsigned char DosPath[16]; /* +0x0000 c1 18 00 00 */ void *Handle; /* +0x0010 */ }; struct _wireSAFEARR_DISPATCH { unsigned long Size; /* +0x0000 */ unsigned char apDispatch[8]; /* +0x0008 96 2f 00 00 */ }; struct _SECURITY_QUALITY_OF_SERVICE { unsigned long Length; /* +0x0000 */ unsigned char ImpersonationLevel[4]; /* +0x0004 1d 17 00 00 */ unsigned char ContextTrackingMode; /* +0x0008 */ unsigned char EffectiveOnly; /* +0x0009 */ }; struct tagPELARRAY { long paXCount; /* +0x0000 */ long paYCount; /* +0x0004 */ long paXExt; /* +0x0008 */ long paYExt; /* +0x000c */ unsigned char paRGBs; /* +0x0010 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned long crc; /* +0x0000 */ unsigned char rgbReserved[14]; /* +0x0004 d3 63 00 00 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned long Length; /* +0x0000 */ unsigned short NumberOfRelocations; /* +0x0004 */ unsigned short NumberOfLinenumbers; /* +0x0006 */ unsigned long CheckSum; /* +0x0008 */ short Number; /* +0x000c */ unsigned char Selection; /* +0x000e */ unsigned char bReserved; /* +0x000f */ short HighNumber; /* +0x0010 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned char Name[18]; /* +0x0000 d8 63 00 00 */ }; struct _IMAGE_AUX_SYMBOL:: { unsigned long TagIndex; /* +0x0000 */ }; struct _IMAGE_AUX_SYMBOL:::::: { unsigned char Dimension[8]; /* +0x0000 8c 33 00 00 */ }; struct _IMAGE_AUX_SYMBOL:::::: { unsigned long PointerToLinenumber; /* +0x0000 */ unsigned long PointerToNextFunction; /* +0x0004 */ }; struct _IMAGE_AUX_SYMBOL:::::: { unsigned short Linenumber; /* +0x0000 */ unsigned short Size; /* +0x0002 */ }; struct _PROCESS_DEVICEMAP_INFORMATION_EX { /* unsigned char Set[0]; +0x0000 ee 63 00 00 */ unsigned char Query[40]; /* +0x0000 ef 63 00 00 */ unsigned long Flags; /* +0x0028 */ }; struct _FILE_LINK_ENTRY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ long long ParentFileId; /* +0x0008 */ unsigned long FileNameLength; /* +0x0010 */ unsigned char FileName[4]; /* +0x0014 ab 19 00 00 */ }; struct _FP_IEEE_VALUE:: { /* unsigned char RoundingMode[0]; +0x0000 05 43 00 00 */ /* unsigned char Inexact[0]; +0x0000 e4 21 00 00 */ /* unsigned char Underflow[0]; +0x0000 68 26 00 00 */ /* unsigned char Overflow[0]; +0x0000 69 26 00 00 */ /* unsigned char ZeroDivide[0]; +0x0000 5a 2b 00 00 */ /* unsigned char InvalidOperation[0]; +0x0000 16 27 00 00 */ /* unsigned char OperandValid[0]; +0x0000 17 27 00 00 */ /* unsigned char Format[0]; +0x0000 4a 19 00 00 */ /* unsigned char Precision[0]; +0x0000 4b 19 00 00 */ /* unsigned char Operation[0]; +0x0000 f4 63 00 00 */ /* unsigned char Spare[0]; +0x0000 f5 63 00 00 */ unsigned char HardwareException[4]; /* +0x0000 f3 21 00 00 */ }; struct _FP_IEEE_VALUE:: { short I16Value; /* +0x0000 */ unsigned short U16Value; /* +0x0000 */ long I32Value; /* +0x0000 */ unsigned long U32Value; /* +0x0000 */ void *StringValue; /* +0x0000 */ unsigned long CompareValue; /* +0x0000 */ /* unsigned char Fp32Value[0]; +0x0000 f8 63 00 00 */ /* unsigned char I64Value[0]; +0x0000 0e 19 00 00 */ /* unsigned char U64Value[0]; +0x0000 9e 2a 00 00 */ /* unsigned char Fp64Value[0]; +0x0000 f9 63 00 00 */ /* unsigned char Fp80Value[0]; +0x0000 a8 26 00 00 */ unsigned char Fp128Value[16]; /* +0x0000 a5 24 00 00 */ }; struct tagCURSORSHAPE { unsigned char xHotSpot[4]; /* +0x0000 74 00 00 00 */ unsigned char yHotSpot[4]; /* +0x0004 74 00 00 00 */ unsigned char cx[4]; /* +0x0008 74 00 00 00 */ unsigned char cy[4]; /* +0x000c 74 00 00 00 */ unsigned char cbWidth[4]; /* +0x0010 74 00 00 00 */ unsigned char Planes; /* +0x0014 */ unsigned char BitsPixel; /* +0x0015 */ }; struct tagI_RpcProxyCallbackInterface { unsigned char IsValidMachineFn[8]; /* +0x0000 79 35 00 00 */ unsigned char GetClientAddressFn[8]; /* +0x0008 38 42 00 00 */ unsigned char GetConnectionTimeoutFn[8]; /* +0x0010 ee 28 00 00 */ unsigned char PerformCalloutFn[8]; /* +0x0018 6b 2a 00 00 */ unsigned char FreeCalloutStateFn[8]; /* +0x0020 3e 33 00 00 */ unsigned char GetClientSessionAndResourceUUIDFn[8]; /* +0x0028 02 64 00 00 */ unsigned char ProxyFilterIfFn[8]; /* +0x0030 05 64 00 00 */ unsigned char RpcProxyUpdatePerfCounterFn[8]; /* +0x0038 ed 32 00 00 */ unsigned char RpcProxyUpdatePerfCounterBackendServerFn[8]; /* +0x0040 7f 34 00 00 */ }; struct _tagStartParam { unsigned char iid[16]; /* +0x0000 6b 10 00 00 */ unsigned char pIBindCtx[8]; /* +0x0010 90 25 00 00 */ unsigned char pItf[8]; /* +0x0018 23 1c 00 00 */ }; struct _QUERY_SERVICE_CONFIGA { unsigned long dwServiceType; /* +0x0000 */ unsigned long dwStartType; /* +0x0004 */ unsigned long dwErrorControl; /* +0x0008 */ char *lpBinaryPathName; /* +0x0010 */ char *lpLoadOrderGroup; /* +0x0018 */ unsigned long dwTagId; /* +0x0020 */ char *lpDependencies; /* +0x0028 */ char *lpServiceStartName; /* +0x0030 */ char *lpDisplayName; /* +0x0038 */ }; struct _XSAVE_FEATURE { unsigned long FeatureId; /* +0x0000 */ /* unsigned char Vendors[0]; +0x0008 1d 64 00 00 */ unsigned long long Unused; /* +0x0008 */ }; struct _ALPC_MESSAGE_ATTRIBUTES { unsigned long AllocatedAttributes; /* +0x0000 */ unsigned long ValidAttributes; /* +0x0004 */ }; struct _FILE_PROCESS_IDS_USING_FILE_INFORMATION { unsigned long NumberOfProcessIdsInList; /* +0x0000 */ unsigned char ProcessIdList[8]; /* +0x0008 34 35 00 00 */ }; struct _CM_MONITOR_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned short HorizontalScreenSize; /* +0x0004 */ unsigned short VerticalScreenSize; /* +0x0006 */ unsigned short HorizontalResolution; /* +0x0008 */ unsigned short VerticalResolution; /* +0x000a */ unsigned short HorizontalDisplayTimeLow; /* +0x000c */ unsigned short HorizontalDisplayTime; /* +0x000e */ unsigned short HorizontalDisplayTimeHigh; /* +0x0010 */ unsigned short HorizontalBackPorchLow; /* +0x0012 */ unsigned short HorizontalBackPorch; /* +0x0014 */ unsigned short HorizontalBackPorchHigh; /* +0x0016 */ unsigned short HorizontalFrontPorchLow; /* +0x0018 */ unsigned short HorizontalFrontPorch; /* +0x001a */ unsigned short HorizontalFrontPorchHigh; /* +0x001c */ unsigned short HorizontalSyncLow; /* +0x001e */ unsigned short HorizontalSync; /* +0x0020 */ unsigned short HorizontalSyncHigh; /* +0x0022 */ unsigned short VerticalBackPorchLow; /* +0x0024 */ unsigned short VerticalBackPorch; /* +0x0026 */ unsigned short VerticalBackPorchHigh; /* +0x0028 */ unsigned short VerticalFrontPorchLow; /* +0x002a */ unsigned short VerticalFrontPorch; /* +0x002c */ unsigned short VerticalFrontPorchHigh; /* +0x002e */ unsigned short VerticalSyncLow; /* +0x0030 */ unsigned short VerticalSync; /* +0x0032 */ unsigned short VerticalSyncHigh; /* +0x0034 */ }; struct _IMAGE_RESOURCE_DIRECTORY_STRING { unsigned short Length; /* +0x0000 */ unsigned char NameString[2]; /* +0x0002 6d 2b 00 00 */ }; struct _PORT_DATA_INFORMATION { unsigned long CountDataEntries; /* +0x0000 */ unsigned char DataEntries[16]; /* +0x0008 30 64 00 00 */ }; struct _ALPC_HANDLE_ATTR { unsigned long Flags; /* +0x0000 */ void *Handle; /* +0x0008 */ unsigned long ObjectType; /* +0x0010 */ unsigned long DesiredAccess; /* +0x0014 */ }; struct _ACTIVATION_CONTEXT_SECTION_KEYED_DATA_2600 { unsigned long Size; /* +0x0000 */ unsigned long DataFormatVersion; /* +0x0004 */ void *Data; /* +0x0008 */ unsigned long Length; /* +0x0010 */ void *SectionGlobalData; /* +0x0018 */ unsigned long SectionGlobalDataLength; /* +0x0020 */ void *SectionBase; /* +0x0028 */ unsigned long SectionTotalLength; /* +0x0030 */ unsigned char ActivationContext[8]; /* +0x0038 e7 20 00 00 */ unsigned long AssemblyRosterIndex; /* +0x0040 */ unsigned long Flags; /* +0x0044 */ }; struct _SERVICE_TRIGGER_INFO { unsigned long cTriggers; /* +0x0000 */ unsigned char pTriggers[8]; /* +0x0008 3c 24 00 00 */ unsigned char *pReserved; /* +0x0010 */ }; struct _PROCESS_WS_WATCH_INFORMATION { void *FaultingPc; /* +0x0000 */ void *FaultingVa; /* +0x0008 */ }; struct _COVERAGE_UNLOADED_MODULE_ENTRY { unsigned char NextEntry[16]; /* +0x0000 7d 1a 00 00 */ unsigned char BaseDllName[16]; /* +0x0010 c1 18 00 00 */ unsigned char FullDllName[16]; /* +0x0020 c1 18 00 00 */ unsigned long CoverageSectionSize; /* +0x0030 */ void *CoverageSection; /* +0x0038 */ }; struct _tagCODEBASEHOLD { unsigned long cbSize; /* +0x0000 */ unsigned char szDistUnit[8]; /* +0x0008 71 06 00 00 */ unsigned char szCodeBase[8]; /* +0x0010 71 06 00 00 */ unsigned long dwVersionMS; /* +0x0018 */ unsigned long dwVersionLS; /* +0x001c */ unsigned long dwStyle; /* +0x0020 */ }; struct _RTLP_PROCESS_REFLECTION_CONTEXT { unsigned long long ReflectionContextSize; /* +0x0000 */ unsigned long ReflectionFlags; /* +0x0008 */ unsigned char ReflectionRoutine[8]; /* +0x0010 da 22 00 00 */ void *ReflectionParameter; /* +0x0018 */ void *ReflectedProcessCreatedEvent; /* +0x0020 */ void *ReflectedProcessHandlesDuplicatedEvent; /* +0x0028 */ void *ReflectionStartEvent; /* +0x0030 */ unsigned char ReflectionInformation[32]; /* +0x0038 e6 26 00 00 */ }; struct pvalueW { unsigned char pv_valuename[8]; /* +0x0000 71 06 00 00 */ unsigned char pv_valuelen[8]; /* +0x0008 74 00 00 00 */ void *pv_value_context; /* +0x0010 */ unsigned long pv_type; /* +0x0018 */ }; struct _RPC_SYNTAX_IDENTIFIER { unsigned char SyntaxGUID[16]; /* +0x0000 6b 10 00 00 */ unsigned char SyntaxVersion[4]; /* +0x0010 43 30 00 00 */ }; struct _ENABLE_TRACE_PARAMETERS { unsigned long Version; /* +0x0000 */ unsigned long EnableProperty; /* +0x0004 */ unsigned long ControlFlags; /* +0x0008 */ unsigned char SourceId[20]; /* +0x000c 6b 10 00 00 */ unsigned char EnableFilterDesc[8]; /* +0x0020 bd 33 00 00 */ }; struct _NETRESOURCEA { unsigned long dwScope; /* +0x0000 */ unsigned long dwType; /* +0x0004 */ unsigned long dwDisplayType; /* +0x0008 */ unsigned long dwUsage; /* +0x000c */ char *lpLocalName; /* +0x0010 */ char *lpRemoteName; /* +0x0018 */ char *lpComment; /* +0x0020 */ char *lpProvider; /* +0x0028 */ }; struct tagRAWINPUTHEADER { unsigned long dwType; /* +0x0000 */ unsigned long dwSize; /* +0x0004 */ void *hDevice; /* +0x0008 */ unsigned long long wParam; /* +0x0010 */ }; struct _EXCEPTION_REGISTRATION_RECORD { unsigned char Next[8]; /* +0x0000 3d 26 00 00 */ unsigned char Handler[8]; /* +0x0008 ef 1e 00 00 */ }; struct _KEY_FULL_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 0e 19 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long ClassOffset; /* +0x000c */ unsigned long ClassLength; /* +0x0010 */ unsigned long SubKeys; /* +0x0014 */ unsigned long MaxNameLen; /* +0x0018 */ unsigned long MaxClassLen; /* +0x001c */ unsigned long Values; /* +0x0020 */ unsigned long MaxValueNameLen; /* +0x0024 */ unsigned long MaxValueDataLen; /* +0x0028 */ unsigned char Class[4]; /* +0x002c ab 19 00 00 */ }; struct _SYSTEM_BASIC_INFORMATION { unsigned long Reserved; /* +0x0000 */ unsigned long TimerResolution; /* +0x0004 */ unsigned long PageSize; /* +0x0008 */ unsigned long NumberOfPhysicalPages; /* +0x000c */ unsigned long LowestPhysicalPageNumber; /* +0x0010 */ unsigned long HighestPhysicalPageNumber; /* +0x0014 */ unsigned long AllocationGranularity; /* +0x0018 */ unsigned long long MinimumUserModeAddress; /* +0x0020 */ unsigned long long MaximumUserModeAddress; /* +0x0028 */ unsigned long long ActiveProcessorsAffinityMask; /* +0x0030 */ char NumberOfProcessors; /* +0x0038 */ }; struct _FILE_SFIO_VOLUME_INFORMATION { unsigned long MaximumRequestsPerPeriod; /* +0x0000 */ unsigned long MinimumPeriod; /* +0x0004 */ unsigned long MinimumTransferSize; /* +0x0008 */ }; struct _HEAP_BLOCK_SETTABLE_INFORMATION { unsigned long long Settable; /* +0x0000 */ unsigned short TagIndex; /* +0x0008 */ unsigned short AllocatorBackTraceIndex; /* +0x000a */ }; struct _KLDR_DATA_TABLE_ENTRY32 { unsigned char InLoadOrderLinks[8]; /* +0x0000 ee 26 00 00 */ unsigned long __Undefined1; /* +0x0008 */ unsigned long __Undefined2; /* +0x000c */ unsigned long __Undefined3; /* +0x0010 */ unsigned long NonPagedDebugInfo; /* +0x0014 */ unsigned long DllBase; /* +0x0018 */ unsigned long EntryPoint; /* +0x001c */ unsigned long SizeOfImage; /* +0x0020 */ unsigned char FullDllName[8]; /* +0x0024 f1 20 00 00 */ unsigned char BaseDllName[8]; /* +0x002c f1 20 00 00 */ unsigned long Flags; /* +0x0034 */ unsigned short LoadCount; /* +0x0038 */ unsigned short __Undefined5; /* +0x003a */ unsigned long __Undefined6; /* +0x003c */ unsigned long CheckSum; /* +0x0040 */ unsigned long TimeDateStamp; /* +0x0044 */ }; struct tagWNODE_EVENT_REFERENCE { unsigned char WnodeHeader[48]; /* +0x0000 47 30 00 00 */ unsigned char TargetGuid[16]; /* +0x0030 6b 10 00 00 */ unsigned long TargetDataBlockSize; /* +0x0040 */ unsigned long TargetInstanceIndex; /* +0x0044 */ unsigned char TargetInstanceName[4]; /* +0x0044 f7 64 00 00 */ }; struct _TXFS_LIST_TRANSACTIONS_ENTRY { unsigned char TransactionId[16]; /* +0x0000 6b 10 00 00 */ unsigned long TransactionState; /* +0x0010 */ unsigned long Reserved1; /* +0x0014 */ unsigned long Reserved2; /* +0x0018 */ long long Reserved3; /* +0x0020 */ }; struct _FILE_PIPE_PEEK_BUFFER { unsigned long NamedPipeState; /* +0x0000 */ unsigned long ReadDataAvailable; /* +0x0004 */ unsigned long NumberOfMessages; /* +0x0008 */ unsigned long MessageLength; /* +0x000c */ unsigned char Data[4]; /* +0x0010 6d 2b 00 00 */ }; struct ANON_OBJECT_HEADER_V2 { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned char ClassID[16]; /* +0x000c 6b 10 00 00 */ unsigned long SizeOfData; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long MetaDataSize; /* +0x0024 */ unsigned long MetaDataOffset; /* +0x0028 */ }; struct _PLUGPLAY_CONTROL_CONFLICT_STRINGS { unsigned long NullDeviceInstance; /* +0x0000 */ unsigned char DeviceInstanceStrings[4]; /* +0x0004 ab 19 00 00 */ }; struct _MUTANT_OWNER_INFORMATION { unsigned char ClientId[16]; /* +0x0000 0f 19 00 00 */ }; struct _COSERVERINFO { unsigned long dwReserved1; /* +0x0000 */ unsigned char pwszName[8]; /* +0x0008 71 06 00 00 */ unsigned char pAuthInfo[8]; /* +0x0010 2c 65 00 00 */ unsigned long dwReserved2; /* +0x0018 */ }; struct _TRACE_LOGFILE_HEADER64 { unsigned long BufferSize; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned char VersionDetail[4]; /* +0x0004 43 65 00 00 */ unsigned long ProviderVersion; /* +0x0008 */ unsigned long NumberOfProcessors; /* +0x000c */ unsigned char EndTime[8]; /* +0x0010 0e 19 00 00 */ unsigned long TimerResolution; /* +0x0018 */ unsigned long MaximumFileSize; /* +0x001c */ unsigned long LogFileMode; /* +0x0020 */ unsigned long BuffersWritten; /* +0x0024 */ /* unsigned char LogInstanceGuid[0]; +0x0028 6b 10 00 00 */ unsigned long StartBuffers; /* +0x0028 */ unsigned long PointerSize; /* +0x002c */ unsigned long EventsLost; /* +0x0030 */ unsigned long CpuSpeedInMHz; /* +0x0034 */ unsigned long long LoggerName; /* +0x0038 */ unsigned long long LogFileName; /* +0x0040 */ unsigned char TimeZone[176]; /* +0x0048 44 35 00 00 */ unsigned char BootTime[8]; /* +0x00f8 0e 19 00 00 */ unsigned char PerfFreq[8]; /* +0x0100 0e 19 00 00 */ unsigned char StartTime[8]; /* +0x0108 0e 19 00 00 */ unsigned long ReservedFlags; /* +0x0110 */ unsigned long BuffersLost; /* +0x0114 */ }; struct _RPC_CLIENT_INTERFACE { unsigned char Length[4]; /* +0x0000 75 00 00 00 */ unsigned char InterfaceId[20]; /* +0x0004 6d 20 00 00 */ unsigned char TransferSyntax[24]; /* +0x0018 6d 20 00 00 */ unsigned char DispatchTable[8]; /* +0x0030 5d 22 00 00 */ unsigned char RpcProtseqEndpointCount[8]; /* +0x0038 75 00 00 00 */ unsigned char RpcProtseqEndpoint[8]; /* +0x0040 8c 26 00 00 */ unsigned long long Reserved; /* +0x0048 */ unsigned char InterpreterInfo[8]; /* +0x0050 3d 11 00 00 */ unsigned char Flags[8]; /* +0x0058 75 00 00 00 */ }; struct _GENERIC_MAPPING { unsigned long GenericRead; /* +0x0000 */ unsigned long GenericWrite; /* +0x0004 */ unsigned long GenericExecute; /* +0x0008 */ unsigned long GenericAll; /* +0x000c */ }; struct tagSTATSTG { unsigned char pwcsName[8]; /* +0x0000 71 06 00 00 */ unsigned long type; /* +0x0008 */ unsigned char cbSize[8]; /* +0x0010 9e 2a 00 00 */ unsigned char mtime[8]; /* +0x0018 0d 10 00 00 */ unsigned char ctime[8]; /* +0x0020 0d 10 00 00 */ unsigned char atime[8]; /* +0x0028 0d 10 00 00 */ unsigned long grfMode; /* +0x0030 */ unsigned long grfLocksSupported; /* +0x0034 */ unsigned char clsid[16]; /* +0x0038 6b 10 00 00 */ unsigned long grfStateBits; /* +0x0048 */ unsigned long reserved; /* +0x004c */ }; struct COPYFILE2_EXTENDED_PARAMETERS { unsigned long dwSize; /* +0x0000 */ unsigned long dwCopyFlags; /* +0x0004 */ unsigned char pfCancel[8]; /* +0x0008 74 06 00 00 */ unsigned char pProgressRoutine[8]; /* +0x0010 d3 2f 00 00 */ void *pvCallbackContext; /* +0x0018 */ }; struct _FILE_PREFETCH_EX { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ void *Context; /* +0x0008 */ unsigned char Prefetch[8]; /* +0x0010 34 35 00 00 */ }; struct _CM_FULL_RESOURCE_DESCRIPTOR { unsigned char InterfaceType[4]; /* +0x0000 df 15 00 00 */ unsigned long BusNumber; /* +0x0004 */ unsigned char PartialResourceList[28]; /* +0x0008 67 65 00 00 */ }; struct _TOKEN_PRIVILEGES { unsigned long PrivilegeCount; /* +0x0000 */ unsigned char Privileges[12]; /* +0x0004 11 34 00 00 */ }; struct tagRPCOLEMESSAGE { void *reserved1; /* +0x0000 */ unsigned long dataRepresentation; /* +0x0008 */ void *Buffer; /* +0x0010 */ unsigned long cbBuffer; /* +0x0018 */ unsigned long iMethod; /* +0x001c */ unsigned char reserved2[40]; /* +0x0020 6c 65 00 00 */ unsigned long rpcFlags; /* +0x0048 */ }; struct _PORT_MESSAGE:::: { short Type; /* +0x0000 */ short DataInfoOffset; /* +0x0002 */ }; struct _PORT_MESSAGE:::: { short DataLength; /* +0x0000 */ short TotalLength; /* +0x0002 */ }; struct _FILE_FS_ATTRIBUTE_INFORMATION { unsigned long FileSystemAttributes; /* +0x0000 */ long MaximumComponentNameLength; /* +0x0004 */ unsigned long FileSystemNameLength; /* +0x0008 */ unsigned char FileSystemName[4]; /* +0x000c ab 19 00 00 */ }; struct _TRACE_GUID_INFO { unsigned long InstanceCount; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ }; struct _MUICCHEADER { unsigned char ulMaxStringsSize[4]; /* +0x0000 75 00 00 00 */ unsigned char ulSizeStrings[4]; /* +0x0004 75 00 00 00 */ unsigned char ulMaxNumInstalledCultures[4]; /* +0x0008 75 00 00 00 */ unsigned char ulNumInstalledCultures[4]; /* +0x000c 75 00 00 00 */ unsigned char ulMaxNumUnverifiedCultures[4]; /* +0x0010 75 00 00 00 */ unsigned char ulNumUnverifiedCultures[4]; /* +0x0014 75 00 00 00 */ }; struct _SYSTEM_VDM_INSTEMUL_INFO { unsigned long SegmentNotPresent; /* +0x0000 */ unsigned long VdmOpcode0F; /* +0x0004 */ unsigned long OpcodeESPrefix; /* +0x0008 */ unsigned long OpcodeCSPrefix; /* +0x000c */ unsigned long OpcodeSSPrefix; /* +0x0010 */ unsigned long OpcodeDSPrefix; /* +0x0014 */ unsigned long OpcodeFSPrefix; /* +0x0018 */ unsigned long OpcodeGSPrefix; /* +0x001c */ unsigned long OpcodeOPER32Prefix; /* +0x0020 */ unsigned long OpcodeADDR32Prefix; /* +0x0024 */ unsigned long OpcodeINSB; /* +0x0028 */ unsigned long OpcodeINSW; /* +0x002c */ unsigned long OpcodeOUTSB; /* +0x0030 */ unsigned long OpcodeOUTSW; /* +0x0034 */ unsigned long OpcodePUSHF; /* +0x0038 */ unsigned long OpcodePOPF; /* +0x003c */ unsigned long OpcodeINTnn; /* +0x0040 */ unsigned long OpcodeINTO; /* +0x0044 */ unsigned long OpcodeIRET; /* +0x0048 */ unsigned long OpcodeINBimm; /* +0x004c */ unsigned long OpcodeINWimm; /* +0x0050 */ unsigned long OpcodeOUTBimm; /* +0x0054 */ unsigned long OpcodeOUTWimm; /* +0x0058 */ unsigned long OpcodeINB; /* +0x005c */ unsigned long OpcodeINW; /* +0x0060 */ unsigned long OpcodeOUTB; /* +0x0064 */ unsigned long OpcodeOUTW; /* +0x0068 */ unsigned long OpcodeLOCKPrefix; /* +0x006c */ unsigned long OpcodeREPNEPrefix; /* +0x0070 */ unsigned long OpcodeREPPrefix; /* +0x0074 */ unsigned long OpcodeHLT; /* +0x0078 */ unsigned long OpcodeCLI; /* +0x007c */ unsigned long OpcodeSTI; /* +0x0080 */ unsigned long BopCount; /* +0x0084 */ }; struct provider_info { unsigned char pi_R0_1val[8]; /* +0x0000 82 19 00 00 */ unsigned char pi_R0_allvals[8]; /* +0x0008 82 19 00 00 */ unsigned char pi_R3_1val[8]; /* +0x0010 82 19 00 00 */ unsigned char pi_R3_allvals[8]; /* +0x0018 82 19 00 00 */ unsigned long pi_flags; /* +0x0020 */ void *pi_key_context; /* +0x0028 */ }; struct _RPC_SECURITY_QOS_V4_A { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _PATHNAME_BUFFER { unsigned long PathNameLength; /* +0x0000 */ unsigned char Name[4]; /* +0x0004 ab 19 00 00 */ }; struct _GROUP_AFFINITY { unsigned long long Mask; /* +0x0000 */ unsigned short Group; /* +0x0008 */ unsigned char Reserved[6]; /* +0x000a c5 65 00 00 */ }; struct _ALPC_SERVER_INFORMATION { /* unsigned char In[0]; +0x0000 c8 65 00 00 */ unsigned char Out[32]; /* +0x0000 c9 65 00 00 */ }; struct _ALPC_SERVER_INFORMATION:::: { unsigned char ThreadBlocked; /* +0x0000 */ void *ConnectedProcessId; /* +0x0008 */ unsigned char ConnectionPortName[16]; /* +0x0010 c1 18 00 00 */ }; struct _ALPC_SERVER_INFORMATION:::: { void *ThreadHandle; /* +0x0000 */ }; struct DISPLAYCONFIG_PATH_INFO { unsigned char sourceInfo[20]; /* +0x0000 d2 65 00 00 */ unsigned char targetInfo[48]; /* +0x0014 d3 65 00 00 */ unsigned char flags[4]; /* +0x0044 75 00 00 00 */ }; struct _SYSTEM_DPC_BEHAVIOR_INFORMATION { unsigned long Spare; /* +0x0000 */ unsigned long DpcQueueDepth; /* +0x0004 */ unsigned long MinimumDpcRate; /* +0x0008 */ unsigned long AdjustDpcThreshold; /* +0x000c */ unsigned long IdealDpcRate; /* +0x0010 */ }; struct _CONSOLE_SELECTION_INFO { unsigned long dwFlags; /* +0x0000 */ unsigned char dwSelectionAnchor[4]; /* +0x0004 6a 21 00 00 */ unsigned char srSelection[8]; /* +0x0008 28 2e 00 00 */ }; struct _EISA_DMA_CONFIGURATION { unsigned char ConfigurationByte0[1]; /* +0x0000 e6 65 00 00 */ unsigned char ConfigurationByte1[1]; /* +0x0001 e7 65 00 00 */ }; struct _MEMORYSTATUSEX { unsigned long dwLength; /* +0x0000 */ unsigned long dwMemoryLoad; /* +0x0004 */ unsigned long long ullTotalPhys; /* +0x0008 */ unsigned long long ullAvailPhys; /* +0x0010 */ unsigned long long ullTotalPageFile; /* +0x0018 */ unsigned long long ullAvailPageFile; /* +0x0020 */ unsigned long long ullTotalVirtual; /* +0x0028 */ unsigned long long ullAvailVirtual; /* +0x0030 */ unsigned long long ullAvailExtendedVirtual; /* +0x0038 */ }; struct _RTL_GENERIC_TABLE { unsigned char TableRoot[8]; /* +0x0000 de 18 00 00 */ unsigned char InsertOrderList[16]; /* +0x0008 7d 1a 00 00 */ unsigned char OrderedPointer[8]; /* +0x0018 1c 2e 00 00 */ unsigned long WhichOrderedElement; /* +0x0020 */ unsigned long NumberGenericTableElements; /* +0x0024 */ unsigned char CompareRoutine[8]; /* +0x0028 f8 65 00 00 */ unsigned char AllocateRoutine[8]; /* +0x0030 f9 65 00 00 */ unsigned char FreeRoutine[8]; /* +0x0038 63 65 00 00 */ void *TableContext; /* +0x0040 */ }; struct tagCHARSETINFO { unsigned char ciCharset[4]; /* +0x0000 75 00 00 00 */ unsigned char ciACP[4]; /* +0x0004 75 00 00 00 */ unsigned char fs[24]; /* +0x0008 19 28 00 00 */ }; struct tagPROPSPEC { unsigned long ulKind; /* +0x0000 */ unsigned long propid; /* +0x0008 */ unsigned char lpwstr[8]; /* +0x0008 71 06 00 00 */ }; struct _ICONINFOEXA { unsigned long cbSize; /* +0x0000 */ unsigned char fIcon[4]; /* +0x0004 74 00 00 00 */ unsigned long xHotspot; /* +0x0008 */ unsigned long yHotspot; /* +0x000c */ unsigned char hbmMask[8]; /* +0x0010 67 21 00 00 */ unsigned char hbmColor[8]; /* +0x0018 67 21 00 00 */ unsigned short wResID; /* +0x0020 */ unsigned char szModName[260]; /* +0x0022 b5 2b 00 00 */ unsigned char szResName[266]; /* +0x0126 b5 2b 00 00 */ }; struct _IO_ERROR_LOG_PACKET { unsigned char MajorFunctionCode; /* +0x0000 */ unsigned char RetryCount; /* +0x0001 */ unsigned short DumpDataSize; /* +0x0002 */ unsigned short NumberOfStrings; /* +0x0004 */ unsigned short StringOffset; /* +0x0006 */ unsigned short EventCategory; /* +0x0008 */ long ErrorCode; /* +0x000c */ unsigned long UniqueErrorValue; /* +0x0010 */ long FinalStatus; /* +0x0014 */ unsigned long SequenceNumber; /* +0x0018 */ unsigned long IoControlCode; /* +0x001c */ unsigned char DeviceOffset[8]; /* +0x0020 0e 19 00 00 */ unsigned char DumpData[8]; /* +0x0028 d4 18 00 00 */ }; struct _WIN32_FIND_DATAA { unsigned long dwFileAttributes; /* +0x0000 */ unsigned char ftCreationTime[8]; /* +0x0004 0d 10 00 00 */ unsigned char ftLastAccessTime[8]; /* +0x000c 0d 10 00 00 */ unsigned char ftLastWriteTime[8]; /* +0x0014 0d 10 00 00 */ unsigned long nFileSizeHigh; /* +0x001c */ unsigned long nFileSizeLow; /* +0x0020 */ unsigned long dwReserved0; /* +0x0024 */ unsigned long dwReserved1; /* +0x0028 */ unsigned char cFileName[260]; /* +0x002c b5 2b 00 00 */ unsigned char cAlternateFileName[16]; /* +0x0130 29 66 00 00 */ }; struct _JUMP_BUFFER { unsigned long long Frame; /* +0x0000 */ unsigned long long Rbx; /* +0x0008 */ unsigned long long Rsp; /* +0x0010 */ unsigned long long Rbp; /* +0x0018 */ unsigned long long Rsi; /* +0x0020 */ unsigned long long Rdi; /* +0x0028 */ unsigned long long R12; /* +0x0030 */ unsigned long long R13; /* +0x0038 */ unsigned long long R14; /* +0x0040 */ unsigned long long R15; /* +0x0048 */ unsigned long long Rip; /* +0x0050 */ unsigned long MxCsr; /* +0x0058 */ unsigned short FpCsr; /* +0x005c */ unsigned short Spare; /* +0x005e */ unsigned char Xmm6[16]; /* +0x0060 2e 66 00 00 */ unsigned char Xmm7[16]; /* +0x0070 2e 66 00 00 */ unsigned char Xmm8[16]; /* +0x0080 2e 66 00 00 */ unsigned char Xmm9[16]; /* +0x0090 2e 66 00 00 */ unsigned char Xmm10[16]; /* +0x00a0 2e 66 00 00 */ unsigned char Xmm11[16]; /* +0x00b0 2e 66 00 00 */ unsigned char Xmm12[16]; /* +0x00c0 2e 66 00 00 */ unsigned char Xmm13[16]; /* +0x00d0 2e 66 00 00 */ unsigned char Xmm14[16]; /* +0x00e0 2e 66 00 00 */ unsigned char Xmm15[16]; /* +0x00f0 2e 66 00 00 */ }; struct _DEDUP_QUERY_FILE_HASHES_INPUT_BUFFER { unsigned long Version; /* +0x0000 */ unsigned long QueryFlags; /* +0x0004 */ unsigned long HashAlgorithm; /* +0x0008 */ unsigned char RangeOffsetInFile[8]; /* +0x0010 0e 19 00 00 */ unsigned char RangeLength[8]; /* +0x0018 0e 19 00 00 */ }; struct _SYSTEM_LOOKASIDE_INFORMATION { unsigned short CurrentDepth; /* +0x0000 */ unsigned short MaximumDepth; /* +0x0002 */ unsigned long TotalAllocates; /* +0x0004 */ unsigned long AllocateMisses; /* +0x0008 */ unsigned long TotalFrees; /* +0x000c */ unsigned long FreeMisses; /* +0x0010 */ unsigned long Type; /* +0x0014 */ unsigned long Tag; /* +0x0018 */ unsigned long Size; /* +0x001c */ }; struct _MUTANT_BASIC_INFORMATION { long CurrentCount; /* +0x0000 */ unsigned char OwnedByCaller; /* +0x0004 */ unsigned char AbandonedState; /* +0x0005 */ }; struct _SYSTEM_FILECACHE_INFORMATION { unsigned long long CurrentSize; /* +0x0000 */ unsigned long long PeakSize; /* +0x0008 */ unsigned long PageFaultCount; /* +0x0010 */ unsigned long long MinimumWorkingSet; /* +0x0018 */ unsigned long long MaximumWorkingSet; /* +0x0020 */ unsigned long long CurrentSizeIncludingTransitionInPages; /* +0x0028 */ unsigned long long PeakSizeIncludingTransitionInPages; /* +0x0030 */ unsigned long TransitionRePurposeCount; /* +0x0038 */ unsigned long Flags; /* +0x003c */ }; struct _MEMORY_FRAME_INFORMATION { /* unsigned char UseDescription[0]; +0x0000 4c 66 00 00 */ /* unsigned char ListDescription[0]; +0x0000 4d 66 00 00 */ /* unsigned char Reserved0[0]; +0x0000 4e 66 00 00 */ /* unsigned char Pinned[0]; +0x0000 06 26 00 00 */ /* unsigned char DontUse[0]; +0x0000 12 30 00 00 */ /* unsigned char Priority[0]; +0x0000 4f 66 00 00 */ unsigned char Reserved[8]; /* +0x0000 50 66 00 00 */ }; struct tagEMRGLSBOUNDEDRECORD { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long cbData; /* +0x0018 */ unsigned char Data[4]; /* +0x001c d7 18 00 00 */ }; struct _IMAGE_OS2_HEADER { unsigned short ne_magic; /* +0x0000 */ char ne_ver; /* +0x0002 */ char ne_rev; /* +0x0003 */ unsigned short ne_enttab; /* +0x0004 */ unsigned short ne_cbenttab; /* +0x0006 */ long ne_crc; /* +0x0008 */ unsigned short ne_flags; /* +0x000c */ unsigned short ne_autodata; /* +0x000e */ unsigned short ne_heap; /* +0x0010 */ unsigned short ne_stack; /* +0x0012 */ long ne_csip; /* +0x0014 */ long ne_sssp; /* +0x0018 */ unsigned short ne_cseg; /* +0x001c */ unsigned short ne_cmod; /* +0x001e */ unsigned short ne_cbnrestab; /* +0x0020 */ unsigned short ne_segtab; /* +0x0022 */ unsigned short ne_rsrctab; /* +0x0024 */ unsigned short ne_restab; /* +0x0026 */ unsigned short ne_modtab; /* +0x0028 */ unsigned short ne_imptab; /* +0x002a */ long ne_nrestab; /* +0x002c */ unsigned short ne_cmovent; /* +0x0030 */ unsigned short ne_align; /* +0x0032 */ unsigned short ne_cres; /* +0x0034 */ unsigned char ne_exetyp; /* +0x0036 */ unsigned char ne_flagsothers; /* +0x0037 */ unsigned short ne_pretthunks; /* +0x0038 */ unsigned short ne_psegrefbytes; /* +0x003a */ unsigned short ne_swaparea; /* +0x003c */ unsigned short ne_expver; /* +0x003e */ }; struct _KEY_SET_VIRTUALIZATION_INFORMATION { /* unsigned char VirtualTarget[0]; +0x0000 53 19 00 00 */ /* unsigned char VirtualStore[0]; +0x0000 e3 21 00 00 */ /* unsigned char VirtualSource[0]; +0x0000 e4 21 00 00 */ unsigned char Reserved[4]; /* +0x0000 f4 32 00 00 */ }; struct _ACTIVATION_CONTEXT_RUN_LEVEL_INFORMATION { unsigned long ulFlags; /* +0x0000 */ unsigned char RunLevel[4]; /* +0x0004 c7 17 00 00 */ unsigned long UiAccess; /* +0x0008 */ }; struct DISPLAYCONFIG_PATH_TARGET_INFO { unsigned char adapterId[8]; /* +0x0000 90 1e 00 00 */ unsigned char id[4]; /* +0x0008 75 00 00 00 */ unsigned char modeInfoIdx[4]; /* +0x000c 75 00 00 00 */ unsigned char outputTechnology[4]; /* +0x0010 b3 16 00 00 */ unsigned char rotation[4]; /* +0x0014 95 17 00 00 */ unsigned char scaling[4]; /* +0x0018 d5 15 00 00 */ unsigned char refreshRate[8]; /* +0x001c 55 42 00 00 */ unsigned char scanLineOrdering[4]; /* +0x0024 55 16 00 00 */ unsigned char targetAvailable[4]; /* +0x0028 74 00 00 00 */ unsigned char statusFlags[4]; /* +0x002c 75 00 00 00 */ }; struct tagACTCTX_SECTION_KEYED_DATA_ASSEMBLY_METADATA { void *lpInformation; /* +0x0000 */ void *lpSectionBase; /* +0x0008 */ unsigned long ulSectionLength; /* +0x0010 */ void *lpSectionGlobalDataBase; /* +0x0018 */ unsigned long ulSectionGlobalDataLength; /* +0x0020 */ }; struct tagHANDLETABLE { unsigned char objectHandle[8]; /* +0x0000 69 66 00 00 */ }; struct _FILE_FS_DEVICE_INFORMATION { unsigned long DeviceType; /* +0x0000 */ unsigned long Characteristics; /* +0x0004 */ }; struct __m256i { /* unsigned char m256i_i8[0]; +0x0000 e3 2a 00 00 */ /* unsigned char m256i_i16[0]; +0x0000 73 66 00 00 */ /* unsigned char m256i_i32[0]; +0x0000 74 66 00 00 */ /* unsigned char m256i_i64[0]; +0x0000 26 37 00 00 */ /* unsigned char m256i_u8[0]; +0x0000 9b 14 00 00 */ /* unsigned char m256i_u16[0]; +0x0000 2c 35 00 00 */ /* unsigned char m256i_u32[0]; +0x0000 75 66 00 00 */ unsigned char m256i_u64[32]; /* +0x0000 3a 62 00 00 */ }; struct _IMAGE_TLS_DIRECTORY64 { unsigned long long StartAddressOfRawData; /* +0x0000 */ unsigned long long EndAddressOfRawData; /* +0x0008 */ unsigned long long AddressOfIndex; /* +0x0010 */ unsigned long long AddressOfCallBacks; /* +0x0018 */ unsigned long SizeOfZeroFill; /* +0x0020 */ unsigned long Characteristics; /* +0x0024 */ }; struct _NT_TIB { unsigned char ExceptionList[8]; /* +0x0000 3d 26 00 00 */ void *StackBase; /* +0x0008 */ void *StackLimit; /* +0x0010 */ void *SubSystemTib; /* +0x0018 */ void *FiberData; /* +0x0020 */ unsigned long Version; /* +0x0020 */ void *ArbitraryUserPointer; /* +0x0028 */ unsigned char Self[8]; /* +0x0030 25 2e 00 00 */ }; struct _SYSTEM_POOL_ENTRY { unsigned char Allocated; /* +0x0000 */ unsigned char Spare0; /* +0x0001 */ unsigned short AllocatorBackTraceIndex; /* +0x0002 */ unsigned long Size; /* +0x0004 */ /* unsigned char Tag[0]; +0x0008 a3 10 00 00 */ unsigned long TagUlong; /* +0x0008 */ void *ProcessChargedQuota; /* +0x0008 */ }; struct _PS_CREATE_INFO { unsigned long long Size; /* +0x0000 */ unsigned char State[8]; /* +0x0008 4d 17 00 00 */ /* unsigned char InitState[0]; +0x0010 85 66 00 00 */ /* unsigned char FailSection[0]; +0x0010 86 66 00 00 */ /* unsigned char ExeFormat[0]; +0x0010 87 66 00 00 */ /* unsigned char ExeName[0]; +0x0010 88 66 00 00 */ unsigned char SuccessState[72]; /* +0x0010 89 66 00 00 */ }; struct _ALPC_CONTEXT_ATTR { void *PortContext; /* +0x0000 */ void *MessageContext; /* +0x0008 */ unsigned long Sequence; /* +0x0010 */ unsigned long MessageId; /* +0x0014 */ unsigned long CallbackId; /* +0x0018 */ }; struct _DRAWPATRECT { unsigned char ptPosition[8]; /* +0x0000 1b 1a 00 00 */ unsigned char ptSize[8]; /* +0x0008 1b 1a 00 00 */ unsigned short wStyle; /* +0x0010 */ unsigned short wPattern; /* +0x0012 */ }; struct DISPLAYCONFIG_MODE_INFO { unsigned char infoType[4]; /* +0x0000 fd 17 00 00 */ unsigned char id[4]; /* +0x0004 75 00 00 00 */ unsigned char adapterId[8]; /* +0x0008 90 1e 00 00 */ /* unsigned char targetMode[0]; +0x0010 39 2c 00 00 */ unsigned char sourceMode[48]; /* +0x0010 a8 66 00 00 */ }; struct _POINTFLOAT { unsigned char x[4]; /* +0x0000 40 00 00 00 */ unsigned char y[4]; /* +0x0004 40 00 00 00 */ }; struct _SYSTEM_HANDLE_TABLE_ENTRY_INFO_EX { void *Object; /* +0x0000 */ unsigned long long UniqueProcessId; /* +0x0008 */ unsigned long long HandleValue; /* +0x0010 */ unsigned long GrantedAccess; /* +0x0018 */ unsigned short CreatorBackTraceIndex; /* +0x001c */ unsigned short ObjectTypeIndex; /* +0x001e */ unsigned long HandleAttributes; /* +0x0020 */ unsigned long Reserved; /* +0x0024 */ }; struct tagEMRBITBLT { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ long xDest; /* +0x0018 */ long yDest; /* +0x001c */ long cxDest; /* +0x0020 */ long cyDest; /* +0x0024 */ unsigned long dwRop; /* +0x0028 */ long xSrc; /* +0x002c */ long ySrc; /* +0x0030 */ unsigned char xformSrc[24]; /* +0x0034 b6 18 00 00 */ unsigned long crBkColorSrc; /* +0x004c */ unsigned long iUsageSrc; /* +0x0050 */ unsigned long offBmiSrc; /* +0x0054 */ unsigned long cbBmiSrc; /* +0x0058 */ unsigned long offBitsSrc; /* +0x005c */ unsigned long cbBitsSrc; /* +0x0060 */ }; struct tagOleMenuGroupWidths { unsigned char width[24]; /* +0x0000 c7 66 00 00 */ }; struct tagCAFLT { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 40 06 00 00 */ }; struct _MUILANGCFGNODE { short LangSpec; /* +0x0000 */ unsigned short FallbackTypes; /* +0x0002 */ unsigned short Reserved; /* +0x0004 */ unsigned char FallbackSpecs[6]; /* +0x0006 cd 66 00 00 */ }; struct tagMDINEXTMENU { unsigned char hmenuIn[8]; /* +0x0000 b5 1e 00 00 */ unsigned char hmenuNext[8]; /* +0x0008 b5 1e 00 00 */ unsigned char hwndNext[8]; /* +0x0010 97 13 00 00 */ }; struct _SYSTEM_VERIFIER_CANCELLATION_INFORMATION { unsigned long CancelProbability; /* +0x0000 */ unsigned long CancelThreshold; /* +0x0004 */ unsigned long CompletionThreshold; /* +0x0008 */ unsigned long CancellationVerifierDisabled; /* +0x000c */ unsigned long AvailableIssues; /* +0x0010 */ unsigned char Issues[4096]; /* +0x0018 da 66 00 00 */ }; struct _NTFS_STATISTICS:: { unsigned long Calls; /* +0x0000 */ unsigned long Clusters; /* +0x0004 */ unsigned long Hints; /* +0x0008 */ unsigned long RunsReturned; /* +0x000c */ unsigned long HintsHonored; /* +0x0010 */ unsigned long HintsClusters; /* +0x0014 */ unsigned long Cache; /* +0x0018 */ unsigned long CacheClusters; /* +0x001c */ unsigned long CacheMiss; /* +0x0020 */ unsigned long CacheMissClusters; /* +0x0024 */ }; struct _NTFS_STATISTICS:: { unsigned short Write; /* +0x0000 */ unsigned short Create; /* +0x0002 */ unsigned short SetInfo; /* +0x0004 */ unsigned short Flush; /* +0x0006 */ }; struct _NTFS_STATISTICS:: { unsigned short Write; /* +0x0000 */ unsigned short Create; /* +0x0002 */ unsigned short SetInfo; /* +0x0004 */ }; struct _APPLICATIONLAUNCH_SETTING_VALUE { unsigned char ActivationTime[8]; /* +0x0000 0e 19 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long ButtonInstanceID; /* +0x000c */ }; struct _userCLIPFORMAT::__MIDL_IWinTypes_0001 { unsigned long dwValue; /* +0x0000 */ unsigned char pwszName[8]; /* +0x0000 71 06 00 00 */ }; struct _MEMORY_REGION_INFORMATION { void *AllocationBase; /* +0x0000 */ unsigned long AllocationProtect; /* +0x0008 */ unsigned long RegionType; /* +0x000c */ unsigned long long RegionSize; /* +0x0010 */ unsigned long long CommitSize; /* +0x0018 */ }; struct _userHMETAFILEPICT { long fContext; /* +0x0000 */ }; struct _userHMETAFILEPICT::__MIDL_IWinTypes_0005 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 12 67 00 00 */ long long hInproc64; /* +0x0000 */ }; struct tagCALPSTR { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 ca 11 00 00 */ }; struct _RPC_SECURITY_QOS_V5_W { unsigned long Version; /* +0x0000 */ unsigned long Capabilities; /* +0x0004 */ unsigned long IdentityTracking; /* +0x0008 */ unsigned long ImpersonationType; /* +0x000c */ unsigned long AdditionalSecurityInfoType; /* +0x0010 */ }; struct _SYSTEM_NUMA_INFORMATION { unsigned long HighestNodeNumber; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ /* unsigned char ActiveProcessorsGroupAffinity[0]; +0x0008 2a 67 00 00 */ /* unsigned char AvailableMemory[0]; +0x0008 2b 67 00 00 */ unsigned char Pad[1024]; /* +0x0008 2c 67 00 00 */ }; struct _RTL_UNLOAD_EVENT_TRACE64 { unsigned long long BaseAddress; /* +0x0000 */ unsigned long long SizeOfImage; /* +0x0008 */ unsigned long Sequence; /* +0x0010 */ unsigned long TimeDateStamp; /* +0x0014 */ unsigned long CheckSum; /* +0x0018 */ unsigned char ImageName[64]; /* +0x001c 89 1f 00 00 */ unsigned char Version[12]; /* +0x005c cc 1f 00 00 */ }; struct _KEY_NODE_INFORMATION { unsigned char LastWriteTime[8]; /* +0x0000 0e 19 00 00 */ unsigned long TitleIndex; /* +0x0008 */ unsigned long ClassOffset; /* +0x000c */ unsigned long ClassLength; /* +0x0010 */ unsigned long NameLength; /* +0x0014 */ unsigned char Name[8]; /* +0x0018 ab 19 00 00 */ }; struct _CM_PARTIAL_RESOURCE_LIST { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long Count; /* +0x0004 */ unsigned char PartialDescriptors[20]; /* +0x0008 37 67 00 00 */ }; struct _MALLOC_FREE_STRUCT { unsigned char pfnAllocate[8]; /* +0x0000 1e 11 00 00 */ unsigned char pfnFree[8]; /* +0x0008 21 11 00 00 */ }; struct _tagDATAINFO { unsigned long ulTotalSize; /* +0x0000 */ unsigned long ulavrPacketSize; /* +0x0004 */ unsigned long ulConnectSpeed; /* +0x0008 */ unsigned long ulProcessorSpeed; /* +0x000c */ }; struct _PLUGPLAY_CONTROL_QUERY_AND_REMOVE_DATA { unsigned char DeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned char VetoType[4]; /* +0x0014 37 16 00 00 */ unsigned char VetoName[8]; /* +0x0018 71 06 00 00 */ unsigned long VetoNameLength; /* +0x0020 */ }; struct _RTL_HEAP_TAG_INFO { unsigned long NumberOfAllocations; /* +0x0000 */ unsigned long NumberOfFrees; /* +0x0004 */ unsigned long long BytesAllocated; /* +0x0008 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V2_W { unsigned char TransportCredentials[8]; /* +0x0000 7e 25 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned short *ServerCertificateSubject; /* +0x0020 */ unsigned char ProxyCredentials[8]; /* +0x0028 7e 25 00 00 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x0030 */ unsigned long *ProxyAuthnSchemes; /* +0x0038 */ }; struct CONFIRMSAFETY { unsigned char clsid[16]; /* +0x0000 6b 10 00 00 */ unsigned char pUnk[8]; /* +0x0010 23 1c 00 00 */ unsigned long dwFlags; /* +0x0018 */ }; struct _FILE_NOTIFY_INFORMATION { unsigned long NextEntryOffset; /* +0x0000 */ unsigned long Action; /* +0x0004 */ unsigned long FileNameLength; /* +0x0008 */ unsigned char FileName[4]; /* +0x000c ab 19 00 00 */ }; struct _ENLISTMENT_CRM_INFORMATION { unsigned char CrmTransactionManagerId[16]; /* +0x0000 6b 10 00 00 */ unsigned char CrmResourceManagerId[16]; /* +0x0010 6b 10 00 00 */ unsigned char CrmEnlistmentId[16]; /* +0x0020 6b 10 00 00 */ }; struct _EXCEPTION_RECORD64 { long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned long long ExceptionRecord; /* +0x0008 */ unsigned long long ExceptionAddress; /* +0x0010 */ unsigned long NumberParameters; /* +0x0018 */ unsigned long __unusedAlignment; /* +0x001c */ unsigned char ExceptionInformation[120]; /* +0x0020 65 19 00 00 */ }; struct _WNF_UPDATE_DESCRIPTOR { unsigned char StateName[8]; /* +0x0000 a1 19 00 00 */ unsigned char TypeId[8]; /* +0x0008 13 36 00 00 */ unsigned char StateData[8]; /* +0x0010 3d 11 00 00 */ unsigned long Length; /* +0x0018 */ void *ExplicitScope; /* +0x0020 */ }; struct _SD_QUERY_STATS_INPUT { unsigned long Reserved; /* +0x0000 */ }; struct tagEMRRESIZEPALETTE { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihPal; /* +0x0008 */ unsigned long cEntries; /* +0x000c */ }; struct _FP_128 { unsigned char W[16]; /* +0x0000 2b 23 00 00 */ }; struct _LUID_AND_ATTRIBUTES { unsigned char Luid[8]; /* +0x0000 90 1e 00 00 */ unsigned long Attributes; /* +0x0008 */ }; struct _SID { unsigned char Revision; /* +0x0000 */ unsigned char SubAuthorityCount; /* +0x0001 */ unsigned char IdentifierAuthority[6]; /* +0x0002 bf 19 00 00 */ unsigned char SubAuthority[4]; /* +0x0008 d4 18 00 00 */ }; struct _OBJECT_TYPE_LIST { unsigned short Level; /* +0x0000 */ unsigned short Sbz; /* +0x0002 */ unsigned char ObjectType[8]; /* +0x0008 26 1c 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTES_AND_OPERATION_INFORMATION { unsigned char Attributes[8]; /* +0x0000 71 62 00 00 */ unsigned char Operations[8]; /* +0x0008 ff 2d 00 00 */ }; struct _FILE_FS_OBJECTID_INFORMATION { unsigned char ObjectId[16]; /* +0x0000 2d 11 00 00 */ unsigned char ExtendedInfo[48]; /* +0x0010 98 24 00 00 */ }; struct _TIME_ZONE_INFORMATION { long Bias; /* +0x0000 */ unsigned char StandardName[64]; /* +0x0004 89 1f 00 00 */ unsigned char StandardDate[16]; /* +0x0044 8a 1f 00 00 */ long StandardBias; /* +0x0054 */ unsigned char DaylightName[64]; /* +0x0058 89 1f 00 00 */ unsigned char DaylightDate[16]; /* +0x0098 8a 1f 00 00 */ long DaylightBias; /* +0x00a8 */ }; struct _POWER_MONITOR_INVOCATION { unsigned char On; /* +0x0000 */ unsigned char Console; /* +0x0001 */ }; struct _SYSTEM_FIRMWARE_TABLE_HANDLER { unsigned long ProviderSignature; /* +0x0000 */ unsigned char Register; /* +0x0004 */ unsigned char FirmwareTableHandler[8]; /* +0x0008 40 20 00 00 */ void *DriverObject; /* +0x0010 */ }; struct tagNCCALCSIZE_PARAMS { unsigned char rgrc[48]; /* +0x0000 d5 67 00 00 */ unsigned char lppos[8]; /* +0x0030 39 32 00 00 */ }; struct _IMAGE_DELAYLOAD_DESCRIPTOR:: { unsigned long AllAttributes; /* +0x0000 */ /* unsigned char RvaBased[0]; +0x0000 53 19 00 00 */ unsigned char ReservedAttributes[4]; /* +0x0000 54 19 00 00 */ }; struct _PROCESS_MITIGATION_ASLR_POLICY { unsigned long Flags; /* +0x0000 */ /* unsigned char EnableStackRandomization[0]; +0x0000 53 19 00 00 */ /* unsigned char EnableForceRelocateImages[0]; +0x0000 e3 21 00 00 */ /* unsigned char EnableHighEntropy[0]; +0x0000 e4 21 00 00 */ /* unsigned char DisallowStrippedImages[0]; +0x0000 68 26 00 00 */ unsigned char ReservedFlags[4]; /* +0x0000 db 67 00 00 */ }; struct _QUERY_SERVICE_LOCK_STATUSA { unsigned long fIsLocked; /* +0x0000 */ char *lpLockOwner; /* +0x0008 */ unsigned long dwLockDuration; /* +0x0010 */ }; struct _RTL_PROCESS_MODULE_INFORMATION { void *Section; /* +0x0000 */ void *MappedBase; /* +0x0008 */ void *ImageBase; /* +0x0010 */ unsigned long ImageSize; /* +0x0018 */ unsigned long Flags; /* +0x001c */ unsigned short LoadOrderIndex; /* +0x0020 */ unsigned short InitOrderIndex; /* +0x0022 */ unsigned short LoadCount; /* +0x0024 */ unsigned short OffsetToFileName; /* +0x0026 */ unsigned char FullPathName[256]; /* +0x0028 86 13 00 00 */ }; struct tagEMRGRADIENTFILL { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned char rclBounds[16]; /* +0x0008 b5 18 00 00 */ unsigned long nVer; /* +0x0018 */ unsigned long nTri; /* +0x001c */ unsigned long ulMode; /* +0x0020 */ unsigned char Ver[16]; /* +0x0024 f4 67 00 00 */ }; struct _LDR_DLL_UNLOADED_NOTIFICATION_DATA { unsigned long Flags; /* +0x0000 */ unsigned char FullDllName[8]; /* +0x0008 8d 61 00 00 */ unsigned char BaseDllName[8]; /* +0x0010 8d 61 00 00 */ void *DllBase; /* +0x0018 */ unsigned long SizeOfImage; /* +0x0020 */ }; struct tagTPMPARAMS { unsigned char cbSize[4]; /* +0x0000 75 00 00 00 */ unsigned char rcExclude[16]; /* +0x0004 06 1a 00 00 */ }; struct _TXFS_READ_BACKUP_INFORMATION_OUT { unsigned long BufferLength; /* +0x0000 */ unsigned char Buffer[4]; /* +0x0000 d7 18 00 00 */ }; struct _HEAP_BLOCK_INFORMATION { unsigned long long Address; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long long DataSize; /* +0x0010 */ unsigned long long OverheadSize; /* +0x0018 */ unsigned long long NextBlockInformationOffset; /* +0x0020 */ }; struct _TP_DEBUG_FREE_INFO { unsigned long FreeListSize; /* +0x0000 */ }; struct _SYSDBG_PHYSICAL { unsigned char Address[8]; /* +0x0000 0e 19 00 00 */ void *Buffer; /* +0x0008 */ unsigned long Request; /* +0x0010 */ }; struct _PREFIX_TABLE_ENTRY { short NodeTypeCode; /* +0x0000 */ short NameLength; /* +0x0002 */ unsigned char NextPrefixTree[8]; /* +0x0008 ad 35 00 00 */ unsigned char Links[24]; /* +0x0010 dd 18 00 00 */ unsigned char Prefix[8]; /* +0x0028 13 21 00 00 */ }; struct tagFORMATETC { unsigned short cfFormat; /* +0x0000 */ unsigned char ptd[8]; /* +0x0008 11 3a 00 00 */ unsigned long dwAspect; /* +0x0010 */ long lindex; /* +0x0014 */ unsigned long tymed; /* +0x0018 */ }; struct _PAGEDIR_INFORMATION { /* unsigned char DontUse[0]; +0x0000 11 30 00 00 */ /* unsigned char PageDirectoryBase[0]; +0x0000 12 30 00 00 */ unsigned char Reserved[8]; /* +0x0000 13 30 00 00 */ }; struct _ENLISTMENT_BASIC_INFORMATION { unsigned char EnlistmentId[16]; /* +0x0000 6b 10 00 00 */ unsigned char TransactionId[16]; /* +0x0010 6b 10 00 00 */ unsigned char ResourceManagerId[16]; /* +0x0020 6b 10 00 00 */ }; struct _TEB_ACTIVE_FRAME_CONTEXT { unsigned long Flags; /* +0x0000 */ unsigned char FrameName[8]; /* +0x0008 4f 10 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_RELATIVE_V1:: { /* unsigned char pInt64[0]; +0x0000 d4 18 00 00 */ /* unsigned char pUint64[0]; +0x0000 d4 18 00 00 */ /* unsigned char ppString[0]; +0x0000 d4 18 00 00 */ /* unsigned char pFqbn[0]; +0x0000 d4 18 00 00 */ unsigned char pOctetString[4]; /* +0x0000 d4 18 00 00 */ }; struct _IMAGE_ROM_OPTIONAL_HEADER { unsigned short Magic; /* +0x0000 */ unsigned char MajorLinkerVersion; /* +0x0002 */ unsigned char MinorLinkerVersion; /* +0x0003 */ unsigned long SizeOfCode; /* +0x0004 */ unsigned long SizeOfInitializedData; /* +0x0008 */ unsigned long SizeOfUninitializedData; /* +0x000c */ unsigned long AddressOfEntryPoint; /* +0x0010 */ unsigned long BaseOfCode; /* +0x0014 */ unsigned long BaseOfData; /* +0x0018 */ unsigned long BaseOfBss; /* +0x001c */ unsigned long GprMask; /* +0x0020 */ unsigned char CprMask[16]; /* +0x0024 2b 23 00 00 */ unsigned long GpValue; /* +0x0034 */ }; struct COPYFILE2_MESSAGE { unsigned char Type[4]; /* +0x0000 c5 15 00 00 */ unsigned long dwPadding; /* +0x0004 */ }; struct COPYFILE2_MESSAGE:::: { unsigned char CopyPhase[4]; /* +0x0000 7d 16 00 00 */ unsigned long dwStreamNumber; /* +0x0004 */ unsigned char hrFailure[4]; /* +0x0008 08 00 00 00 */ unsigned long dwReserved; /* +0x000c */ unsigned char uliChunkNumber[8]; /* +0x0010 9e 2a 00 00 */ unsigned char uliStreamSize[8]; /* +0x0018 9e 2a 00 00 */ unsigned char uliStreamBytesTransferred[8]; /* +0x0020 9e 2a 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0028 9e 2a 00 00 */ unsigned char uliTotalBytesTransferred[8]; /* +0x0030 9e 2a 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwReserved; /* +0x0000 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x0010 */ unsigned char uliStreamSize[8]; /* +0x0018 9e 2a 00 00 */ unsigned char uliStreamBytesTransferred[8]; /* +0x0020 9e 2a 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0028 9e 2a 00 00 */ unsigned char uliTotalBytesTransferred[8]; /* +0x0030 9e 2a 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x0010 */ unsigned char uliStreamSize[8]; /* +0x0018 9e 2a 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0020 9e 2a 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x0010 */ unsigned char uliChunkNumber[8]; /* +0x0018 9e 2a 00 00 */ unsigned char uliChunkSize[8]; /* +0x0020 9e 2a 00 00 */ unsigned char uliStreamSize[8]; /* +0x0028 9e 2a 00 00 */ unsigned char uliStreamBytesTransferred[8]; /* +0x0030 9e 2a 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0038 9e 2a 00 00 */ unsigned char uliTotalBytesTransferred[8]; /* +0x0040 9e 2a 00 00 */ }; struct COPYFILE2_MESSAGE:::: { unsigned long dwStreamNumber; /* +0x0000 */ unsigned long dwReserved; /* +0x0004 */ void *hSourceFile; /* +0x0008 */ void *hDestinationFile; /* +0x0010 */ unsigned char uliChunkNumber[8]; /* +0x0018 9e 2a 00 00 */ unsigned char uliChunkSize[8]; /* +0x0020 9e 2a 00 00 */ unsigned char uliStreamSize[8]; /* +0x0028 9e 2a 00 00 */ unsigned char uliTotalFileSize[8]; /* +0x0030 9e 2a 00 00 */ }; struct _SYSTEM_MEMORY_LIST_INFORMATION { unsigned long long ZeroPageCount; /* +0x0000 */ unsigned long long FreePageCount; /* +0x0008 */ unsigned long long ModifiedPageCount; /* +0x0010 */ unsigned long long ModifiedNoWritePageCount; /* +0x0018 */ unsigned long long BadPageCount; /* +0x0020 */ unsigned char PageCountByPriority[64]; /* +0x0028 4b 26 00 00 */ unsigned char RepurposedPagesByPriority[64]; /* +0x0068 4b 26 00 00 */ unsigned long long ModifiedPageCountPageFile; /* +0x00a8 */ }; struct _INPUT_RECORD { unsigned short EventType; /* +0x0000 */ }; struct _TXFS_LIST_TRANSACTION_LOCKED_FILES_ENTRY { unsigned long long Offset; /* +0x0000 */ unsigned long NameFlags; /* +0x0008 */ long long FileId; /* +0x0010 */ unsigned long Reserved1; /* +0x0018 */ unsigned long Reserved2; /* +0x001c */ long long Reserved3; /* +0x0020 */ unsigned char FileName[8]; /* +0x0028 ab 19 00 00 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_W { unsigned char TransportCredentials[8]; /* +0x0000 7e 25 00 00 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned short *ServerCertificateSubject; /* +0x0020 */ }; struct _ACL_SIZE_INFORMATION { unsigned long AceCount; /* +0x0000 */ unsigned long AclBytesInUse; /* +0x0004 */ unsigned long AclBytesFree; /* +0x0008 */ }; struct _TIMER_BASIC_INFORMATION { unsigned char RemainingTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char TimerState; /* +0x0008 */ }; struct _IMAGE_TLS_DIRECTORY32 { unsigned long StartAddressOfRawData; /* +0x0000 */ unsigned long EndAddressOfRawData; /* +0x0004 */ unsigned long AddressOfIndex; /* +0x0008 */ unsigned long AddressOfCallBacks; /* +0x000c */ unsigned long SizeOfZeroFill; /* +0x0010 */ unsigned long Characteristics; /* +0x0014 */ }; struct _REASON_BUFFER { unsigned long Flags; /* +0x0000 */ unsigned long long ResourceFileNameOffset; /* +0x0008 */ unsigned short ResourceReasonId; /* +0x0010 */ unsigned long StringCount; /* +0x0014 */ unsigned long long SubstitutionStringsOffset; /* +0x0018 */ unsigned long long SimpleStringOffset; /* +0x0008 */ }; struct _WORKER_FACTORY_BASIC_INFORMATION { unsigned char Timeout[8]; /* +0x0000 0e 19 00 00 */ unsigned char RetryTimeout[8]; /* +0x0008 0e 19 00 00 */ unsigned char IdleTimeout[8]; /* +0x0010 0e 19 00 00 */ unsigned char Paused; /* +0x0018 */ unsigned char TimerSet; /* +0x0019 */ unsigned char QueuedToExWorker; /* +0x001a */ unsigned char MayCreate; /* +0x001b */ unsigned char CreateInProgress; /* +0x001c */ unsigned char InsertedIntoQueue; /* +0x001d */ unsigned char Shutdown; /* +0x001e */ unsigned long BindingCount; /* +0x0020 */ unsigned long ThreadMinimum; /* +0x0024 */ unsigned long ThreadMaximum; /* +0x0028 */ unsigned long PendingWorkerCount; /* +0x002c */ unsigned long WaitingWorkerCount; /* +0x0030 */ unsigned long TotalWorkerCount; /* +0x0034 */ unsigned long ReleaseCount; /* +0x0038 */ long long InfiniteWaitGoal; /* +0x0040 */ unsigned char StartRoutine[8]; /* +0x0048 da 22 00 00 */ void *StartParameter; /* +0x0050 */ void *ProcessId; /* +0x0058 */ unsigned long long StackReserve; /* +0x0060 */ unsigned long long StackCommit; /* +0x0068 */ long LastThreadCreationStatus; /* +0x0070 */ }; struct tagELEMDESC { unsigned char tdesc[16]; /* +0x0000 d2 28 00 00 */ /* unsigned char idldesc[0]; +0x0010 b9 33 00 00 */ unsigned char paramdesc[16]; /* +0x0010 ad 68 00 00 */ }; struct _IMAGE_BOUND_IMPORT_DESCRIPTOR { unsigned long TimeDateStamp; /* +0x0000 */ unsigned short OffsetModuleName; /* +0x0004 */ unsigned short NumberOfModuleForwarderRefs; /* +0x0006 */ }; struct _TOKEN_DEVICE_CLAIMS { void *DeviceClaims; /* +0x0000 */ }; struct _TEB_ACTIVE_FRAME { unsigned long Flags; /* +0x0000 */ unsigned char Previous[8]; /* +0x0008 28 34 00 00 */ unsigned char Context[8]; /* +0x0010 b3 29 00 00 */ }; struct _ACCESS_REASONS { unsigned char Data[128]; /* +0x0000 db 35 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length64; /* +0x0000 */ unsigned long Alignment64; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 0e 19 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 0e 19 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length48; /* +0x0000 */ unsigned long Alignment48; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 0e 19 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 0e 19 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length40; /* +0x0000 */ unsigned long Alignment40; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 0e 19 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 0e 19 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Priority; /* +0x0000 */ unsigned long Reserved1; /* +0x0004 */ unsigned long Reserved2; /* +0x0008 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length; /* +0x0000 */ unsigned long MinBusNumber; /* +0x0004 */ unsigned long MaxBusNumber; /* +0x0008 */ unsigned long Reserved; /* +0x000c */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long Length; /* +0x0000 */ unsigned long Alignment; /* +0x0004 */ unsigned char MinimumAddress[8]; /* +0x0008 0e 19 00 00 */ unsigned char MaximumAddress[8]; /* +0x0010 0e 19 00 00 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long RequestLine; /* +0x0000 */ unsigned long Reserved; /* +0x0004 */ unsigned long Channel; /* +0x0008 */ unsigned long TransferWidth; /* +0x000c */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long MinimumChannel; /* +0x0000 */ unsigned long MaximumChannel; /* +0x0004 */ }; struct _IO_RESOURCE_DESCRIPTOR:::: { unsigned long MinimumVector; /* +0x0000 */ unsigned long MaximumVector; /* +0x0004 */ unsigned char AffinityPolicy[4]; /* +0x0008 93 16 00 00 */ unsigned char PriorityPolicy[4]; /* +0x000c 1b 16 00 00 */ unsigned long long TargetedProcessors; /* +0x0010 */ }; struct _XSAVE_SUPPORTED_CPU { unsigned char CpuInfo[32]; /* +0x0000 ad 1f 00 00 */ /* unsigned char CpuErrata[0]; +0x0020 d1 24 00 00 */ unsigned long long Unused; /* +0x0020 */ }; struct _PLUGPLAY_CONTROL_PROPERTY_DATA { unsigned char DeviceInstance[16]; /* +0x0000 c1 18 00 00 */ unsigned long PropertyType; /* +0x0010 */ void *Buffer; /* +0x0018 */ unsigned long BufferSize; /* +0x0020 */ }; struct _HARDWARE_COUNTER { unsigned char Type[4]; /* +0x0000 c9 17 00 00 */ unsigned long Reserved; /* +0x0004 */ unsigned long long Index; /* +0x0008 */ }; struct _INPUT_RECORD:: { /* unsigned char KeyEvent[0]; +0x0000 c0 69 00 00 */ /* unsigned char MouseEvent[0]; +0x0000 b3 34 00 00 */ /* unsigned char WindowBufferSizeEvent[0]; +0x0000 c1 69 00 00 */ /* unsigned char MenuEvent[0]; +0x0000 6e 38 00 00 */ unsigned char FocusEvent[16]; /* +0x0000 48 67 00 00 */ }; struct _IMAGE_LINENUMBER:: { unsigned long SymbolTableIndex; /* +0x0000 */ unsigned long VirtualAddress; /* +0x0000 */ }; struct _IMAGE_DATA_DIRECTORY { unsigned long VirtualAddress; /* +0x0000 */ unsigned long Size; /* +0x0004 */ }; struct _REMOTE_PORT_VIEW { unsigned long Length; /* +0x0000 */ unsigned long long ViewSize; /* +0x0008 */ void *ViewBase; /* +0x0010 */ }; struct _FSCTL_INTEGRITY_INFORMATION_BUFFER { unsigned short ChecksumAlgorithm; /* +0x0000 */ unsigned short Reserved; /* +0x0002 */ unsigned long Flags; /* +0x0004 */ }; struct _PSFEATURE_CUSTPAPER { long lOrientation; /* +0x0000 */ long lWidth; /* +0x0004 */ long lHeight; /* +0x0008 */ long lWidthOffset; /* +0x000c */ long lHeightOffset; /* +0x0010 */ }; struct tagNEWTEXTMETRICEXW { unsigned char ntmTm[76]; /* +0x0000 56 41 00 00 */ unsigned char ntmFontSig[24]; /* +0x004c 19 28 00 00 */ }; struct tagCUSTDATAITEM { unsigned char guid[16]; /* +0x0000 6b 10 00 00 */ unsigned char varValue[24]; /* +0x0010 a5 21 00 00 */ }; struct _RGNDATAHEADER { unsigned long dwSize; /* +0x0000 */ unsigned long iType; /* +0x0004 */ unsigned long nCount; /* +0x0008 */ unsigned long nRgnSize; /* +0x000c */ unsigned char rcBound[16]; /* +0x0010 06 1a 00 00 */ }; struct _SECURITY_SEED_AND_LENGTH { unsigned char Length; /* +0x0000 */ unsigned char Seed; /* +0x0001 */ }; struct tagEMRFORMAT { unsigned long dSignature; /* +0x0000 */ unsigned long nVersion; /* +0x0004 */ unsigned long cbData; /* +0x0008 */ unsigned long offData; /* +0x000c */ }; struct _PS_CREATE_INFO:::: { unsigned long OutputFlags; /* +0x0000 */ /* unsigned char ProtectedProcess[0]; +0x0000 94 26 00 00 */ /* unsigned char AddressSpaceOverride[0]; +0x0000 95 26 00 00 */ /* unsigned char DevOverrideEnabled[0]; +0x0000 96 26 00 00 */ /* unsigned char ManifestDetected[0]; +0x0000 25 2d 00 00 */ unsigned char SpareBits1[1]; /* +0x0000 92 19 00 00 */ unsigned char SpareBits2[1]; /* +0x0001 ec 69 00 00 */ unsigned char SpareBits3[6]; /* +0x0002 2a 34 00 00 */ void *FileHandle; /* +0x0008 */ void *SectionHandle; /* +0x0010 */ unsigned long long UserProcessParametersNative; /* +0x0018 */ unsigned long UserProcessParametersWow64; /* +0x0020 */ unsigned long CurrentParameterFlags; /* +0x0024 */ unsigned long long PebAddressNative; /* +0x0028 */ unsigned long PebAddressWow64; /* +0x0030 */ unsigned long long ManifestAddress; /* +0x0038 */ unsigned long ManifestSize; /* +0x0040 */ }; struct _PS_CREATE_INFO:::: { void *IFEOKey; /* +0x0000 */ }; struct _PS_CREATE_INFO:::: { unsigned short DllCharacteristics; /* +0x0000 */ }; struct _PS_CREATE_INFO:::: { void *FileHandle; /* +0x0000 */ }; struct _PS_CREATE_INFO:::: { unsigned long InitFlags; /* +0x0000 */ /* unsigned char WriteOutputOnExit[0]; +0x0000 94 26 00 00 */ /* unsigned char DetectManifest[0]; +0x0000 95 26 00 00 */ /* unsigned char IFEOSkipDebugger[0]; +0x0000 96 26 00 00 */ /* unsigned char IFEODoNotPropagateKeyState[0]; +0x0000 25 2d 00 00 */ unsigned char SpareBits1[1]; /* +0x0000 92 19 00 00 */ unsigned char SpareBits2[1]; /* +0x0001 ec 69 00 00 */ unsigned char ProhibitedImageCharacteristics[2]; /* +0x0002 2a 34 00 00 */ unsigned long AdditionalFileAccess; /* +0x0004 */ }; struct _RTL_HEAP_TAG { unsigned long NumberOfAllocations; /* +0x0000 */ unsigned long NumberOfFrees; /* +0x0004 */ unsigned long long BytesAllocated; /* +0x0008 */ unsigned short TagIndex; /* +0x0010 */ unsigned short CreatorBackTraceIndex; /* +0x0012 */ unsigned char TagName[52]; /* +0x0014 fb 69 00 00 */ }; struct _SYSTEM_FIRMWARE_TABLE_INFORMATION { unsigned long ProviderSignature; /* +0x0000 */ unsigned char Action[4]; /* +0x0004 77 18 00 00 */ unsigned long TableID; /* +0x0008 */ unsigned long TableBufferLength; /* +0x000c */ unsigned char TableBuffer[4]; /* +0x0010 d7 18 00 00 */ }; struct _SD_GLOBAL_CHANGE_OUTPUT { unsigned long Flags; /* +0x0000 */ unsigned long ChangeType; /* +0x0004 */ /* unsigned char SdChange[0]; +0x0008 0e 29 00 00 */ /* unsigned char SdQueryStats[0]; +0x0008 4e 3b 00 00 */ unsigned char SdEnumSds[64]; /* +0x0008 8e 66 00 00 */ }; struct tagLOGBRUSH { unsigned char lbStyle[4]; /* +0x0000 75 00 00 00 */ unsigned long lbColor; /* +0x0004 */ unsigned long long lbHatch; /* +0x0008 */ }; struct PackageManagerInternal::DeploymentRequestStatus { unsigned char state[4]; /* +0x0000 a5 17 00 00 */ unsigned char percentage[4]; /* +0x0004 75 00 00 00 */ unsigned char errorCode[4]; /* +0x0008 08 00 00 00 */ }; struct _IO_STATUS_BLOCK { long Status; /* +0x0000 */ void *Pointer; /* +0x0000 */ unsigned long long Information; /* +0x0008 */ }; struct _xml_error { unsigned char _nLine[8]; /* +0x0000 75 00 00 00 */ unsigned char _pchBuf[8]; /* +0x0008 71 06 00 00 */ unsigned char _cchBuf[4]; /* +0x0010 75 00 00 00 */ unsigned char _ich[4]; /* +0x0014 75 00 00 00 */ unsigned char _pszFound[8]; /* +0x0018 71 06 00 00 */ unsigned char _pszExpected[8]; /* +0x0020 71 06 00 00 */ unsigned long _reserved1; /* +0x0028 */ unsigned long _reserved2; /* +0x002c */ }; struct _RemotableHandle::__MIDL_IWinTypes_0009 { long hInproc; /* +0x0000 */ long hRemote; /* +0x0000 */ }; struct _PROCESS_EXTENDED_BASIC_INFORMATION64 { unsigned long long Size; /* +0x0000 */ unsigned char BasicInfo[48]; /* +0x0008 4c 6a 00 00 */ /* unsigned char Flags[0]; +0x0038 75 00 00 00 */ /* unsigned char IsProtectedProcess[0]; +0x0038 52 25 00 00 */ /* unsigned char IsWow64Process[0]; +0x0038 53 25 00 00 */ /* unsigned char IsProcessDeleting[0]; +0x0038 54 25 00 00 */ /* unsigned char IsCrossSessionCreate[0]; +0x0038 4d 6a 00 00 */ unsigned char SpareBits[8]; /* +0x0038 4e 6a 00 00 */ }; struct _OVERLAPPED { unsigned long long Internal; /* +0x0000 */ unsigned long long InternalHigh; /* +0x0008 */ unsigned long Offset; /* +0x0010 */ unsigned long OffsetHigh; /* +0x0014 */ void *Pointer; /* +0x0010 */ void *hEvent; /* +0x0018 */ }; struct tagRID_DEVICE_INFO_HID { unsigned long dwVendorId; /* +0x0000 */ unsigned long dwProductId; /* +0x0004 */ unsigned long dwVersionNumber; /* +0x0008 */ unsigned short usUsagePage; /* +0x000c */ unsigned short usUsage; /* +0x000e */ }; struct tagOIFI { unsigned char cb[4]; /* +0x0000 75 00 00 00 */ unsigned char fMDIApp[4]; /* +0x0004 74 00 00 00 */ unsigned char hwndFrame[8]; /* +0x0008 97 13 00 00 */ unsigned char haccel[8]; /* +0x0010 78 29 00 00 */ unsigned char cAccelEntries[8]; /* +0x0018 75 00 00 00 */ }; struct IMAGE_LOAD_CONFIG_DIRECTORY64 { unsigned long Size; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long GlobalFlagsClear; /* +0x000c */ unsigned long GlobalFlagsSet; /* +0x0010 */ unsigned long CriticalSectionDefaultTimeout; /* +0x0014 */ unsigned long long DeCommitFreeBlockThreshold; /* +0x0018 */ unsigned long long DeCommitTotalFreeThreshold; /* +0x0020 */ unsigned long long LockPrefixTable; /* +0x0028 */ unsigned long long MaximumAllocationSize; /* +0x0030 */ unsigned long long VirtualMemoryThreshold; /* +0x0038 */ unsigned long long ProcessAffinityMask; /* +0x0040 */ unsigned long ProcessHeapFlags; /* +0x0048 */ unsigned short CSDVersion; /* +0x004c */ unsigned short Reserved1; /* +0x004e */ unsigned long long EditList; /* +0x0050 */ unsigned long long SecurityCookie; /* +0x0058 */ unsigned long long SEHandlerTable; /* +0x0060 */ unsigned long long SEHandlerCount; /* +0x0068 */ }; struct _RTL_DYNAMIC_TIME_ZONE_INFORMATION { unsigned char tzi[172]; /* +0x0000 b4 41 00 00 */ unsigned char TimeZoneKeyName[256]; /* +0x00ac 8b 1f 00 00 */ unsigned char DynamicDaylightTimeDisabled; /* +0x01ac */ }; struct _THREAD_UMS_INFORMATION { unsigned char Command[8]; /* +0x0000 65 16 00 00 */ unsigned char CompletionList[8]; /* +0x0008 b8 1f 00 00 */ unsigned char UmsContext[8]; /* +0x0010 2d 21 00 00 */ }; struct _PS_STD_HANDLE_INFO { unsigned long Flags; /* +0x0000 */ /* unsigned char StdHandleState[0]; +0x0000 05 43 00 00 */ unsigned char PseudoHandleMask[4]; /* +0x0000 68 6a 00 00 */ unsigned long StdHandleSubsystemType; /* +0x0004 */ }; struct _UNIVERSAL_NAME_INFOA { char *lpUniversalName; /* +0x0000 */ }; struct _FILE_INTERNAL_INFORMATION { unsigned char IndexNumber[8]; /* +0x0000 0e 19 00 00 */ }; struct _RTL_BITMAP_EX { unsigned long long SizeOfBitMap; /* +0x0000 */ unsigned long long *Buffer; /* +0x0008 */ }; struct tagEMRSETMAPPERFLAGS { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long dwFlags; /* +0x0008 */ }; struct _SYSTEM_POWER_STATUS { unsigned char ACLineStatus; /* +0x0000 */ unsigned char BatteryFlag; /* +0x0001 */ unsigned char BatteryLifePercent; /* +0x0002 */ unsigned char Reserved1; /* +0x0003 */ unsigned long BatteryLifeTime; /* +0x0004 */ unsigned long BatteryFullLifeTime; /* +0x0008 */ }; struct _PLUGPLAY_CONTROL_RETRIEVE_DOCK_DATA { unsigned long DeviceInstanceLength; /* +0x0000 */ unsigned char DeviceInstance[8]; /* +0x0008 71 06 00 00 */ }; struct DISPLAYCONFIG_TARGET_MODE { unsigned char targetVideoSignalInfo[48]; /* +0x0000 9c 6a 00 00 */ }; struct tagCBT_CREATEWNDA { unsigned char lpcs[8]; /* +0x0000 75 38 00 00 */ unsigned char hwndInsertAfter[8]; /* +0x0008 97 13 00 00 */ }; struct _FILEMUIINFO { unsigned long dwSize; /* +0x0000 */ unsigned long dwVersion; /* +0x0004 */ unsigned long dwFileType; /* +0x0008 */ unsigned char pChecksum[16]; /* +0x000c 2d 11 00 00 */ unsigned char pServiceChecksum[16]; /* +0x001c 2d 11 00 00 */ unsigned long dwLanguageNameOffset; /* +0x002c */ unsigned long dwTypeIDMainSize; /* +0x0030 */ unsigned long dwTypeIDMainOffset; /* +0x0034 */ unsigned long dwTypeNameMainOffset; /* +0x0038 */ unsigned long dwTypeIDMUISize; /* +0x003c */ unsigned long dwTypeIDMUIOffset; /* +0x0040 */ unsigned long dwTypeNameMUIOffset; /* +0x0044 */ unsigned char abBuffer[8]; /* +0x0048 fb 10 00 00 */ }; struct _IO_COUNTERS { unsigned long long ReadOperationCount; /* +0x0000 */ unsigned long long WriteOperationCount; /* +0x0008 */ unsigned long long OtherOperationCount; /* +0x0010 */ unsigned long long ReadTransferCount; /* +0x0018 */ unsigned long long WriteTransferCount; /* +0x0020 */ unsigned long long OtherTransferCount; /* +0x0028 */ }; struct _SD_ENUM_SDS_ENTRY { unsigned long Hash; /* +0x0000 */ unsigned long SecurityId; /* +0x0004 */ unsigned long long Offset; /* +0x0008 */ unsigned long Length; /* +0x0010 */ unsigned char Descriptor[4]; /* +0x0014 d7 18 00 00 */ }; struct tagRID_DEVICE_INFO_KEYBOARD { unsigned long dwType; /* +0x0000 */ unsigned long dwSubType; /* +0x0004 */ unsigned long dwKeyboardMode; /* +0x0008 */ unsigned long dwNumberOfFunctionKeys; /* +0x000c */ unsigned long dwNumberOfIndicators; /* +0x0010 */ unsigned long dwNumberOfKeysTotal; /* +0x0014 */ }; struct _EVENT_FILTER_DESCRIPTOR { unsigned long long Ptr; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned long Type; /* +0x000c */ }; struct _userHPALETTE { long fContext; /* +0x0000 */ }; struct _userHPALETTE::__MIDL_IWinTypes_0008 { long hInproc; /* +0x0000 */ /* unsigned char hRemote[0]; +0x0000 15 3a 00 00 */ long long hInproc64; /* +0x0000 */ }; struct _userBITMAP { long bmType; /* +0x0000 */ long bmWidth; /* +0x0004 */ long bmHeight; /* +0x0008 */ long bmWidthBytes; /* +0x000c */ unsigned short bmPlanes; /* +0x0010 */ unsigned short bmBitsPixel; /* +0x0012 */ unsigned long cbSize; /* +0x0014 */ unsigned char pBuffer[4]; /* +0x0018 d7 18 00 00 */ }; struct ANON_OBJECT_HEADER_BIGOBJ { unsigned short Sig1; /* +0x0000 */ unsigned short Sig2; /* +0x0002 */ unsigned short Version; /* +0x0004 */ unsigned short Machine; /* +0x0006 */ unsigned long TimeDateStamp; /* +0x0008 */ unsigned char ClassID[16]; /* +0x000c 6b 10 00 00 */ unsigned long SizeOfData; /* +0x001c */ unsigned long Flags; /* +0x0020 */ unsigned long MetaDataSize; /* +0x0024 */ unsigned long MetaDataOffset; /* +0x0028 */ unsigned long NumberOfSections; /* +0x002c */ unsigned long PointerToSymbolTable; /* +0x0030 */ unsigned long NumberOfSymbols; /* +0x0034 */ }; struct _FILE_DISPOSITION_INFORMATION { unsigned char DeleteFile; /* +0x0000 */ }; struct _FILE_PIPE_WAIT_FOR_BUFFER { unsigned char Timeout[8]; /* +0x0000 0e 19 00 00 */ unsigned long NameLength; /* +0x0008 */ unsigned char TimeoutSpecified; /* +0x000c */ unsigned char Name[2]; /* +0x000e ab 19 00 00 */ }; struct HSTRING_HEADER:: { void *Reserved1; /* +0x0000 */ unsigned char Reserved2[24]; /* +0x0000 0a 6b 00 00 */ }; struct _PROCESS_HANDLE_TRACING_ENTRY { void *Handle; /* +0x0000 */ unsigned char ClientId[16]; /* +0x0008 0f 19 00 00 */ unsigned long Type; /* +0x0018 */ unsigned char Stacks[128]; /* +0x0020 0f 6b 00 00 */ }; struct _REQUEST_OPLOCK_OUTPUT_BUFFER { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureLength; /* +0x0002 */ unsigned long OriginalOplockLevel; /* +0x0004 */ unsigned long NewOplockLevel; /* +0x0008 */ unsigned long Flags; /* +0x000c */ unsigned long AccessMode; /* +0x0010 */ unsigned short ShareMode; /* +0x0014 */ }; struct PACKAGE_INFO { unsigned char reserved[4]; /* +0x0000 75 00 00 00 */ unsigned char flags[4]; /* +0x0004 75 00 00 00 */ unsigned char path[8]; /* +0x0008 71 06 00 00 */ unsigned char packageFullName[8]; /* +0x0010 71 06 00 00 */ unsigned char packageFamilyName[8]; /* +0x0018 71 06 00 00 */ unsigned char packageId[48]; /* +0x0020 15 6b 00 00 */ }; struct _SE_IMPERSONATION_STATE { void *Token; /* +0x0000 */ unsigned char CopyOnOpen; /* +0x0008 */ unsigned char EffectiveOnly; /* +0x0009 */ unsigned char Level[4]; /* +0x000c 1d 17 00 00 */ }; struct _currencyfmtA { unsigned char NumDigits[4]; /* +0x0000 75 00 00 00 */ unsigned char LeadingZero[4]; /* +0x0004 75 00 00 00 */ unsigned char Grouping[8]; /* +0x0008 75 00 00 00 */ char *lpDecimalSep; /* +0x0010 */ char *lpThousandSep; /* +0x0018 */ unsigned char NegativeOrder[4]; /* +0x0020 75 00 00 00 */ unsigned char PositiveOrder[4]; /* +0x0024 75 00 00 00 */ char *lpCurrencySymbol; /* +0x0028 */ }; struct tagDRAWITEMSTRUCT { unsigned char CtlType[4]; /* +0x0000 75 00 00 00 */ unsigned char CtlID[4]; /* +0x0004 75 00 00 00 */ unsigned char itemID[4]; /* +0x0008 75 00 00 00 */ unsigned char itemAction[4]; /* +0x000c 75 00 00 00 */ unsigned char itemState[8]; /* +0x0010 75 00 00 00 */ unsigned char hwndItem[8]; /* +0x0018 97 13 00 00 */ unsigned char hDC[8]; /* +0x0020 06 27 00 00 */ unsigned char rcItem[16]; /* +0x0028 06 1a 00 00 */ unsigned long long itemData; /* +0x0038 */ }; struct _TypeDescriptor { unsigned char pVFTable[8]; /* +0x0000 3d 11 00 00 */ void *spare; /* +0x0008 */ /* unsigned char name[0]; +0x0010 3f 6b 00 00 */ }; struct tagSOLE_AUTHENTICATION_LIST { unsigned long cAuthInfo; /* +0x0000 */ unsigned char aAuthInfo[8]; /* +0x0008 81 2c 00 00 */ }; struct _IO_STATUS_BLOCK32 { long Status; /* +0x0000 */ unsigned long Information; /* +0x0004 */ }; struct tagGCP_RESULTSW { unsigned long lStructSize; /* +0x0000 */ unsigned char lpOutString[8]; /* +0x0008 71 06 00 00 */ unsigned char lpOrder[8]; /* +0x0010 75 06 00 00 */ unsigned char lpDx[8]; /* +0x0018 74 06 00 00 */ unsigned char lpCaretPos[8]; /* +0x0020 74 06 00 00 */ char *lpClass; /* +0x0028 */ unsigned char lpGlyphs[8]; /* +0x0030 71 06 00 00 */ unsigned char nGlyphs[4]; /* +0x0038 75 00 00 00 */ unsigned char nMaxFit[4]; /* +0x003c 74 00 00 00 */ }; struct _RPC_ASYNC_NOTIFICATION_INFO:: { unsigned char hWnd[8]; /* +0x0000 97 13 00 00 */ unsigned char Msg[8]; /* +0x0008 75 00 00 00 */ }; struct _RPC_ASYNC_NOTIFICATION_INFO:: { void *hIOPort; /* +0x0000 */ unsigned long dwNumberOfBytesTransferred; /* +0x0008 */ unsigned long long dwCompletionKey; /* +0x0010 */ unsigned char lpOverlapped[8]; /* +0x0018 73 22 00 00 */ }; struct _RPC_ASYNC_NOTIFICATION_INFO:: { unsigned char NotificationRoutine[8]; /* +0x0000 71 19 00 00 */ void *hThread; /* +0x0008 */ }; struct _CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1 { unsigned long Name; /* +0x0000 */ unsigned short ValueType; /* +0x0004 */ unsigned short Reserved; /* +0x0006 */ unsigned long Flags; /* +0x0008 */ unsigned long ValueCount; /* +0x000c */ }; struct tagLOGFONTA { long lfHeight; /* +0x0000 */ long lfWidth; /* +0x0004 */ long lfEscapement; /* +0x0008 */ long lfOrientation; /* +0x000c */ long lfWeight; /* +0x0010 */ unsigned char lfItalic; /* +0x0014 */ unsigned char lfUnderline; /* +0x0015 */ unsigned char lfStrikeOut; /* +0x0016 */ unsigned char lfCharSet; /* +0x0017 */ unsigned char lfOutPrecision; /* +0x0018 */ unsigned char lfClipPrecision; /* +0x0019 */ unsigned char lfQuality; /* +0x001a */ unsigned char lfPitchAndFamily; /* +0x001b */ unsigned char lfFaceName[32]; /* +0x001c e3 2a 00 00 */ }; struct _SYSTEM_CRASH_DUMP_STATE_INFORMATION { unsigned char CrashDumpConfigurationClass[4]; /* +0x0000 c3 17 00 00 */ }; struct DISPLAYCONFIG_ADAPTER_NAME { unsigned char header[20]; /* +0x0000 38 2c 00 00 */ unsigned char adapterDevicePath[256]; /* +0x0014 8b 1f 00 00 */ }; struct _FILE_PIPE_INFORMATION { unsigned long ReadMode; /* +0x0000 */ unsigned long CompletionMode; /* +0x0004 */ }; struct _POWER_IDLE_RESILIENCY { unsigned long CoalescingTimeout; /* +0x0000 */ unsigned long IdleResiliencyPeriod; /* +0x0004 */ }; struct _IMAGE_IMPORT_BY_NAME { unsigned short Hint; /* +0x0000 */ unsigned char Name[2]; /* +0x0002 6d 2b 00 00 */ }; struct _QUOTA_LIMITS_EX { unsigned long long PagedPoolLimit; /* +0x0000 */ unsigned long long NonPagedPoolLimit; /* +0x0008 */ unsigned long long MinimumWorkingSetSize; /* +0x0010 */ unsigned long long MaximumWorkingSetSize; /* +0x0018 */ unsigned long long PagefileLimit; /* +0x0020 */ unsigned char TimeLimit[8]; /* +0x0028 0e 19 00 00 */ unsigned long long WorkingSetLimit; /* +0x0030 */ unsigned long long Reserved2; /* +0x0038 */ unsigned long long Reserved3; /* +0x0040 */ unsigned long long Reserved4; /* +0x0048 */ unsigned long Flags; /* +0x0050 */ unsigned char CpuRateLimit[4]; /* +0x0054 24 43 00 00 */ }; struct tagEMREXTSELECTCLIPRGN { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long cbRgnData; /* +0x0008 */ unsigned long iMode; /* +0x000c */ unsigned char RgnData[4]; /* +0x0010 d7 18 00 00 */ }; struct _CM_KEYBOARD_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned char Type; /* +0x0004 */ unsigned char Subtype; /* +0x0005 */ unsigned short KeyboardFlags; /* +0x0006 */ }; struct _IMAGE_BASE_RELOCATION { unsigned long VirtualAddress; /* +0x0000 */ unsigned long SizeOfBlock; /* +0x0004 */ }; struct _SYSTEM_ERROR_PORT_TIMEOUTS { unsigned long StartTimeout; /* +0x0000 */ unsigned long CommTimeout; /* +0x0004 */ }; struct tagSERIALIZEDPROPERTYVALUE { unsigned long dwType; /* +0x0000 */ unsigned char rgb[4]; /* +0x0004 d7 18 00 00 */ }; struct tagHW_PROFILE_INFOA { unsigned long dwDockInfo; /* +0x0000 */ unsigned char szHwProfileGuid[39]; /* +0x0004 25 6c 00 00 */ unsigned char szHwProfileName[81]; /* +0x002b 66 35 00 00 */ }; struct _SLIST_HEADER:: { /* unsigned char Depth[0]; +0x0000 61 6c 00 00 */ unsigned char Sequence[8]; /* +0x0000 62 6c 00 00 */ /* unsigned char HeaderType[0]; +0x0008 ef 18 00 00 */ /* unsigned char Reserved[0]; +0x0008 5a 28 00 00 */ unsigned char NextEntry[8]; /* +0x0008 53 26 00 00 */ }; struct _SLIST_HEADER:: { /* unsigned char Depth[0]; +0x0000 61 6c 00 00 */ /* unsigned char Sequence[0]; +0x0000 65 6c 00 00 */ unsigned char NextEntry[8]; /* +0x0000 66 6c 00 00 */ /* unsigned char HeaderType[0]; +0x0008 ef 18 00 00 */ /* unsigned char Init[0]; +0x0008 50 26 00 00 */ /* unsigned char Reserved[0]; +0x0008 67 6c 00 00 */ unsigned char Region[8]; /* +0x0008 68 6c 00 00 */ }; struct tagEMRSETPALETTEENTRIES { unsigned char emr[8]; /* +0x0000 b4 18 00 00 */ unsigned long ihPal; /* +0x0008 */ unsigned long iStart; /* +0x000c */ unsigned long cEntries; /* +0x0010 */ unsigned char aPalEntries[4]; /* +0x0014 ac 2d 00 00 */ }; struct _PROCESS_DEVICEMAP_INFORMATION:::: { unsigned long DriveMap; /* +0x0000 */ unsigned char DriveType[32]; /* +0x0004 9b 14 00 00 */ }; struct _PROCESS_DEVICEMAP_INFORMATION:::: { void *DirectoryHandle; /* +0x0000 */ }; struct _JOURNAL_TRANSACTION_BOUNDARY_INFORMATION { unsigned char Action[8]; /* +0x0000 fd 15 00 00 */ unsigned long long RecordNumber; /* +0x0008 */ unsigned char TimeStamp[8]; /* +0x0010 0e 19 00 00 */ unsigned char TransactionID[16]; /* +0x0018 6b 10 00 00 */ }; struct _EX_ATTRIBUTE_INFORMATION_REGISTRATION { unsigned char QueryRoutine[8]; /* +0x0000 53 41 00 00 */ unsigned char SetRoutine[8]; /* +0x0008 36 26 00 00 */ }; struct _JOBOBJECT_FREEZE_INFORMATION { unsigned long Flags; /* +0x0000 */ /* unsigned char FreezeOperation[0]; +0x0000 53 19 00 00 */ /* unsigned char FilterOperation[0]; +0x0000 e3 21 00 00 */ unsigned char Reserved[4]; /* +0x0000 c0 22 00 00 */ unsigned char Freeze; /* +0x0004 */ unsigned char Reserved0[3]; /* +0x0005 52 19 00 00 */ unsigned char WakeFilter[8]; /* +0x0008 37 39 00 00 */ }; struct _IMAGE_SYMBOL:: { unsigned char ShortName[8]; /* +0x0000 fb 10 00 00 */ }; struct _IMAGE_SYMBOL:::: { unsigned long Short; /* +0x0000 */ unsigned long Long; /* +0x0004 */ }; struct _CM_SONIC_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned short DataConfigurationRegister; /* +0x0004 */ unsigned char EthernetAddress[8]; /* +0x0006 fb 10 00 00 */ }; struct _SD_ENUM_SDS_INPUT { unsigned long long StartingOffset; /* +0x0000 */ unsigned long long MaxSDEntriesToReturn; /* +0x0008 */ }; struct _PROCESS_HANDLE_SNAPSHOT_INFORMATION { unsigned long long NumberOfHandles; /* +0x0000 */ unsigned long long Reserved; /* +0x0008 */ unsigned char Handles[40]; /* +0x0010 c8 6c 00 00 */ }; struct _TP_CALLBACK_ENVIRON_V3:: { unsigned long Flags; /* +0x0000 */ }; struct _TP_CALLBACK_ENVIRON_V3:::: { /* unsigned char LongFunction[0]; +0x0000 53 19 00 00 */ /* unsigned char Persistent[0]; +0x0000 e3 21 00 00 */ unsigned char Private[4]; /* +0x0000 c0 22 00 00 */ }; struct _WINDOW_BUFFER_SIZE_RECORD { unsigned char dwSize[4]; /* +0x0000 6a 21 00 00 */ }; struct IMAGE_LOAD_CONFIG_DIRECTORY32 { unsigned long Size; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned long GlobalFlagsClear; /* +0x000c */ unsigned long GlobalFlagsSet; /* +0x0010 */ unsigned long CriticalSectionDefaultTimeout; /* +0x0014 */ unsigned long DeCommitFreeBlockThreshold; /* +0x0018 */ unsigned long DeCommitTotalFreeThreshold; /* +0x001c */ unsigned long LockPrefixTable; /* +0x0020 */ unsigned long MaximumAllocationSize; /* +0x0024 */ unsigned long VirtualMemoryThreshold; /* +0x0028 */ unsigned long ProcessHeapFlags; /* +0x002c */ unsigned long ProcessAffinityMask; /* +0x0030 */ unsigned short CSDVersion; /* +0x0034 */ unsigned short Reserved1; /* +0x0036 */ unsigned long EditList; /* +0x0038 */ unsigned long SecurityCookie; /* +0x003c */ unsigned long SEHandlerTable; /* +0x0040 */ unsigned long SEHandlerCount; /* +0x0044 */ }; struct NTFS_EXTENDED_VOLUME_DATA { unsigned long ByteCount; /* +0x0000 */ unsigned short MajorVersion; /* +0x0004 */ unsigned short MinorVersion; /* +0x0006 */ unsigned long BytesPerPhysicalSector; /* +0x0008 */ }; struct STARTING_LCN_INPUT_BUFFER { unsigned char StartingLcn[8]; /* +0x0000 0e 19 00 00 */ }; struct VOLUME_BITMAP_BUFFER { unsigned char StartingLcn[8]; /* +0x0000 0e 19 00 00 */ unsigned char BitmapSize[8]; /* +0x0008 0e 19 00 00 */ unsigned char Buffer[8]; /* +0x0010 d7 18 00 00 */ }; struct STARTING_VCN_INPUT_BUFFER { unsigned char StartingVcn[8]; /* +0x0000 0e 19 00 00 */ }; struct NTFS_FILE_RECORD_OUTPUT_BUFFER { unsigned char FileReferenceNumber[8]; /* +0x0000 0e 19 00 00 */ unsigned long FileRecordLength; /* +0x0008 */ unsigned char FileRecordBuffer[4]; /* +0x000c d7 18 00 00 */ }; struct FIND_BY_SID_DATA { unsigned long Restart; /* +0x0000 */ unsigned char Sid[12]; /* +0x0004 f1 26 00 00 */ }; struct CREATE_USN_JOURNAL_DATA { unsigned long long MaximumSize; /* +0x0000 */ unsigned long long AllocationDelta; /* +0x0008 */ }; struct READ_USN_JOURNAL_DATA { long long StartUsn; /* +0x0000 */ unsigned long ReasonMask; /* +0x0008 */ unsigned long ReturnOnlyOnClose; /* +0x000c */ unsigned long long Timeout; /* +0x0010 */ unsigned long long BytesToWaitFor; /* +0x0018 */ unsigned long long UsnJournalID; /* +0x0020 */ }; struct USN_RECORD { unsigned long RecordLength; /* +0x0000 */ unsigned short MajorVersion; /* +0x0004 */ unsigned short MinorVersion; /* +0x0006 */ unsigned long long FileReferenceNumber; /* +0x0008 */ unsigned long long ParentFileReferenceNumber; /* +0x0010 */ long long Usn; /* +0x0018 */ unsigned char TimeStamp[8]; /* +0x0020 0e 19 00 00 */ unsigned long Reason; /* +0x0028 */ unsigned long SourceInfo; /* +0x002c */ unsigned long SecurityId; /* +0x0030 */ unsigned long FileAttributes; /* +0x0034 */ unsigned short FileNameLength; /* +0x0038 */ unsigned short FileNameOffset; /* +0x003a */ unsigned char FileName[4]; /* +0x003c ab 19 00 00 */ }; struct USN_JOURNAL_DATA { unsigned long long UsnJournalID; /* +0x0000 */ long long FirstUsn; /* +0x0008 */ long long NextUsn; /* +0x0010 */ long long LowestValidUsn; /* +0x0018 */ long long MaxUsn; /* +0x0020 */ unsigned long long MaximumSize; /* +0x0028 */ unsigned long long AllocationDelta; /* +0x0030 */ }; struct DELETE_USN_JOURNAL_DATA { unsigned long long UsnJournalID; /* +0x0000 */ unsigned long DeleteFlags; /* +0x0008 */ }; struct MARK_HANDLE_INFO { unsigned long UsnSourceInfo; /* +0x0000 */ unsigned long CopyNumber; /* +0x0000 */ void *VolumeHandle; /* +0x0008 */ unsigned long HandleInfo; /* +0x0010 */ }; struct MARK_HANDLE_INFO32 { unsigned long UsnSourceInfo; /* +0x0000 */ unsigned long CopyNumber; /* +0x0000 */ unsigned char VolumeHandle[4]; /* +0x0004 75 00 00 00 */ unsigned long HandleInfo; /* +0x0008 */ }; struct BULK_SECURITY_TEST_DATA { unsigned long DesiredAccess; /* +0x0000 */ unsigned char SecurityIds[4]; /* +0x0004 d4 18 00 00 */ }; struct SET_POWER_SETTING_VALUE { unsigned long Version; /* +0x0000 */ unsigned char Guid[16]; /* +0x0004 6b 10 00 00 */ unsigned char PowerCondition[4]; /* +0x0014 f1 15 00 00 */ unsigned long DataLength; /* +0x0018 */ unsigned char Data[4]; /* +0x001c d7 18 00 00 */ }; struct BATTERY_REPORTING_SCALE { unsigned long Granularity; /* +0x0000 */ unsigned long Capacity; /* +0x0004 */ }; struct POWER_STATE_NOTIFY_HANDLER { unsigned char Handler[8]; /* +0x0000 ff 6c 00 00 */ void *Context; /* +0x0008 */ }; struct PROCESSOR_IDLE_TIMES { unsigned long long StartTime; /* +0x0000 */ unsigned long long EndTime; /* +0x0008 */ unsigned char Reserved[16]; /* +0x0010 2b 23 00 00 */ }; struct PPM_WMI_LEGACY_PERFSTATE { unsigned long Frequency; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned long PercentFrequency; /* +0x0008 */ }; struct PPM_WMI_PERF_STATE { unsigned long Frequency; /* +0x0000 */ unsigned long Power; /* +0x0004 */ unsigned char PercentFrequency; /* +0x0008 */ unsigned char IncreaseLevel; /* +0x0009 */ unsigned char DecreaseLevel; /* +0x000a */ unsigned char Type; /* +0x000b */ unsigned long IncreaseTime; /* +0x000c */ unsigned long DecreaseTime; /* +0x0010 */ unsigned long long Control; /* +0x0018 */ unsigned long long Status; /* +0x0020 */ unsigned long HitCount; /* +0x0028 */ unsigned long Reserved1; /* +0x002c */ unsigned long long Reserved2; /* +0x0030 */ unsigned long long Reserved3; /* +0x0038 */ }; struct PPM_WMI_PERF_STATES { unsigned long Count; /* +0x0000 */ unsigned long MaxFrequency; /* +0x0004 */ unsigned long CurrentState; /* +0x0008 */ unsigned long MaxPerfState; /* +0x000c */ unsigned long MinPerfState; /* +0x0010 */ unsigned long LowestPerfState; /* +0x0014 */ unsigned long ThermalConstraint; /* +0x0018 */ unsigned char BusyAdjThreshold; /* +0x001c */ unsigned char PolicyType; /* +0x001d */ unsigned char Type; /* +0x001e */ unsigned char Reserved; /* +0x001f */ unsigned long TimerInterval; /* +0x0020 */ unsigned long long TargetProcessors; /* +0x0028 */ unsigned long PStateHandler; /* +0x0030 */ unsigned long PStateContext; /* +0x0034 */ unsigned long TStateHandler; /* +0x0038 */ unsigned long TStateContext; /* +0x003c */ unsigned long FeedbackHandler; /* +0x0040 */ unsigned long Reserved1; /* +0x0044 */ unsigned long long Reserved2; /* +0x0048 */ unsigned char State[64]; /* +0x0050 08 6d 00 00 */ }; struct PPM_WMI_PERF_STATES_EX { unsigned long Count; /* +0x0000 */ unsigned long MaxFrequency; /* +0x0004 */ unsigned long CurrentState; /* +0x0008 */ unsigned long MaxPerfState; /* +0x000c */ unsigned long MinPerfState; /* +0x0010 */ unsigned long LowestPerfState; /* +0x0014 */ unsigned long ThermalConstraint; /* +0x0018 */ unsigned char BusyAdjThreshold; /* +0x001c */ unsigned char PolicyType; /* +0x001d */ unsigned char Type; /* +0x001e */ unsigned char Reserved; /* +0x001f */ unsigned long TimerInterval; /* +0x0020 */ void *TargetProcessors; /* +0x0028 */ unsigned long PStateHandler; /* +0x0030 */ unsigned long PStateContext; /* +0x0034 */ unsigned long TStateHandler; /* +0x0038 */ unsigned long TStateContext; /* +0x003c */ unsigned long FeedbackHandler; /* +0x0040 */ unsigned long Reserved1; /* +0x0044 */ unsigned long long Reserved2; /* +0x0048 */ unsigned char State[64]; /* +0x0050 08 6d 00 00 */ }; struct PPM_IDLE_STATE_ACCOUNTING { unsigned long IdleTransitions; /* +0x0000 */ unsigned long FailedTransitions; /* +0x0004 */ unsigned long InvalidBucketIndex; /* +0x0008 */ unsigned long long TotalTime; /* +0x0010 */ unsigned char IdleTimeBuckets[24]; /* +0x0018 8d 27 00 00 */ }; struct PPM_IDLE_ACCOUNTING { unsigned long StateCount; /* +0x0000 */ unsigned long TotalTransitions; /* +0x0004 */ unsigned long ResetCount; /* +0x0008 */ unsigned long long StartTime; /* +0x0010 */ unsigned char State[48]; /* +0x0018 0f 6d 00 00 */ }; struct PPM_IDLE_STATE_ACCOUNTING_EX { unsigned long long TotalTime; /* +0x0000 */ unsigned long IdleTransitions; /* +0x0008 */ unsigned long FailedTransitions; /* +0x000c */ unsigned long InvalidBucketIndex; /* +0x0010 */ unsigned long MinTimeUs; /* +0x0014 */ unsigned long MaxTimeUs; /* +0x0018 */ unsigned char IdleTimeBuckets[384]; /* +0x0020 12 6d 00 00 */ }; struct PPM_IDLE_ACCOUNTING_EX { unsigned long StateCount; /* +0x0000 */ unsigned long TotalTransitions; /* +0x0004 */ unsigned long ResetCount; /* +0x0008 */ unsigned long long StartTime; /* +0x0010 */ unsigned char State[416]; /* +0x0018 15 6d 00 00 */ }; struct PPM_PERFSTATE_EVENT { unsigned long State; /* +0x0000 */ unsigned long Status; /* +0x0004 */ unsigned long Latency; /* +0x0008 */ unsigned long Speed; /* +0x000c */ unsigned long Processor; /* +0x0010 */ }; struct PPM_PERFSTATE_DOMAIN_EVENT { unsigned long State; /* +0x0000 */ unsigned long Latency; /* +0x0004 */ unsigned long Speed; /* +0x0008 */ unsigned long long Processors; /* +0x0010 */ }; struct PPM_IDLESTATE_EVENT { unsigned long NewState; /* +0x0000 */ unsigned long OldState; /* +0x0004 */ unsigned long long Processors; /* +0x0008 */ }; struct PPM_THERMALCHANGE_EVENT { unsigned long ThermalConstraint; /* +0x0000 */ unsigned long long Processors; /* +0x0008 */ }; struct SYSTEM_POWER_LEVEL { unsigned char Enable; /* +0x0000 */ unsigned char Spare[3]; /* +0x0001 52 19 00 00 */ unsigned long BatteryLevel; /* +0x0004 */ unsigned char PowerPolicy[12]; /* +0x0008 6a 27 00 00 */ unsigned char MinSystemState[4]; /* +0x0014 c5 16 00 00 */ }; struct PROCESSOR_IDLESTATE_INFO { unsigned long TimeCheck; /* +0x0000 */ unsigned char DemotePercent; /* +0x0004 */ unsigned char PromotePercent; /* +0x0005 */ unsigned char Spare[2]; /* +0x0006 0c 21 00 00 */ }; struct PROCESSOR_IDLESTATE_POLICY { unsigned short Revision; /* +0x0000 */ }; struct PROCESSOR_IDLESTATE_POLICY:: { unsigned short AsUSHORT; /* +0x0000 */ /* unsigned char AllowScaling[0]; +0x0000 2b 34 00 00 */ /* unsigned char Disabled[0]; +0x0000 2c 34 00 00 */ unsigned char Reserved[2]; /* +0x0000 28 6d 00 00 */ }; struct PROCESSOR_PERFSTATE_POLICY { unsigned long Revision; /* +0x0000 */ unsigned char MaxThrottle; /* +0x0004 */ unsigned char MinThrottle; /* +0x0005 */ unsigned char BusyAdjThreshold; /* +0x0006 */ unsigned char Spare; /* +0x0007 */ unsigned char Flags[1]; /* +0x0007 2b 6d 00 00 */ unsigned long TimeCheck; /* +0x0008 */ unsigned long IncreaseTime; /* +0x000c */ unsigned long DecreaseTime; /* +0x0010 */ unsigned long IncreasePercent; /* +0x0014 */ unsigned long DecreasePercent; /* +0x0018 */ }; struct PROCESSOR_PERFSTATE_POLICY:::: { unsigned char AsUCHAR; /* +0x0000 */ /* unsigned char NoDomainAccounting[0]; +0x0000 94 26 00 00 */ /* unsigned char IncreasePolicy[0]; +0x0000 2e 6d 00 00 */ /* unsigned char DecreasePolicy[0]; +0x0000 97 26 00 00 */ unsigned char Reserved[1]; /* +0x0000 26 2d 00 00 */ }; struct SYSTEM_BATTERY_STATE { unsigned char AcOnLine; /* +0x0000 */ unsigned char BatteryPresent; /* +0x0001 */ unsigned char Charging; /* +0x0002 */ unsigned char Discharging; /* +0x0003 */ unsigned char Spare1[4]; /* +0x0004 a3 10 00 00 */ unsigned long MaxCapacity; /* +0x0008 */ unsigned long RemainingCapacity; /* +0x000c */ unsigned long Rate; /* +0x0010 */ unsigned long EstimatedTime; /* +0x0014 */ unsigned long DefaultAlert1; /* +0x0018 */ unsigned long DefaultAlert2; /* +0x001c */ }; struct RTL_ACE_DATA { unsigned char AceType; /* +0x0000 */ unsigned char InheritFlags; /* +0x0001 */ unsigned char AceFlags; /* +0x0002 */ unsigned long Mask; /* +0x0004 */ unsigned char Sid[8]; /* +0x0008 1a 10 00 00 */ }; struct SHELLHOOKINFO { unsigned char hwnd[8]; /* +0x0000 97 13 00 00 */ unsigned char rc[16]; /* +0x0008 06 1a 00 00 */ }; struct POWERBROADCAST_SETTING { unsigned char PowerSetting[16]; /* +0x0000 6b 10 00 00 */ unsigned long DataLength; /* +0x0010 */ unsigned char Data[4]; /* +0x0014 d7 18 00 00 */ }; struct BSMINFO { unsigned char cbSize[8]; /* +0x0000 75 00 00 00 */ unsigned char hdesk[8]; /* +0x0008 3f 6d 00 00 */ unsigned char hwnd[8]; /* +0x0010 97 13 00 00 */ unsigned char luid[8]; /* +0x0018 90 1e 00 00 */ }; struct FLASHWINFO { unsigned char cbSize[8]; /* +0x0000 75 00 00 00 */ unsigned char hwnd[8]; /* +0x0008 97 13 00 00 */ unsigned long dwFlags; /* +0x0010 */ unsigned char uCount[4]; /* +0x0014 75 00 00 00 */ unsigned long dwTimeout; /* +0x0018 */ }; struct DLGTEMPLATE { unsigned long style; /* +0x0000 */ unsigned long dwExtendedStyle; /* +0x0004 */ unsigned short cdit; /* +0x0008 */ short x; /* +0x000a */ short y; /* +0x000c */ short cx; /* +0x000e */ short cy; /* +0x0010 */ }; struct DLGITEMTEMPLATE { unsigned long style; /* +0x0000 */ unsigned long dwExtendedStyle; /* +0x0004 */ short x; /* +0x0008 */ short y; /* +0x000a */ short cx; /* +0x000c */ short cy; /* +0x000e */ unsigned short id; /* +0x0010 */ }; struct MENUITEMTEMPLATEHEADER { unsigned short versionNumber; /* +0x0000 */ unsigned short offset; /* +0x0002 */ }; struct RPC_STATS_VECTOR { unsigned char Count[4]; /* +0x0000 75 00 00 00 */ unsigned char Stats[4]; /* +0x0004 d4 18 00 00 */ }; struct RPC_IF_ID_VECTOR { unsigned long Count; /* +0x0000 */ unsigned char IfId[8]; /* +0x0008 4f 6d 00 00 */ }; struct RPC_CLIENT_INFORMATION1 { unsigned char *UserName; /* +0x0000 */ unsigned char *ComputerName; /* +0x0008 */ unsigned short Privilege; /* +0x0010 */ unsigned long AuthFlags; /* +0x0014 */ }; struct RPC_DISPATCH_TABLE { unsigned char DispatchTableCount[8]; /* +0x0000 75 00 00 00 */ unsigned char DispatchTable[8]; /* +0x0008 54 6d 00 00 */ long long Reserved; /* +0x0010 */ }; struct { unsigned char pad[16]; /* +0x0000 86 2a 00 00 */ void *userContext; /* +0x0010 */ }; struct ARRAY_INFO { long Dimension; /* +0x0000 */ unsigned long *BufferConformanceMark; /* +0x0008 */ unsigned long *BufferVarianceMark; /* +0x0010 */ unsigned long *MaxCountArray; /* +0x0018 */ unsigned long *OffsetArray; /* +0x0020 */ unsigned long *ActualCountArray; /* +0x0028 */ }; struct _LDOUBLE { unsigned char ld[10]; /* +0x0000 e0 31 00 00 */ }; struct _CRT_DOUBLE { unsigned char x[8]; /* +0x0000 41 00 00 00 */ }; struct _CRT_FLOAT { unsigned char f[4]; /* +0x0000 40 00 00 00 */ }; struct NUMPARSE { unsigned char cDig[4]; /* +0x0000 74 00 00 00 */ unsigned long dwInFlags; /* +0x0004 */ unsigned long dwOutFlags; /* +0x0008 */ unsigned char cchUsed[4]; /* +0x000c 74 00 00 00 */ unsigned char nBaseShift[4]; /* +0x0010 74 00 00 00 */ unsigned char nPwr10[4]; /* +0x0014 74 00 00 00 */ }; struct UDATE { unsigned char st[16]; /* +0x0000 8a 1f 00 00 */ unsigned short wDayOfYear; /* +0x0010 */ }; struct __m256d { unsigned char m256d_f64[32]; /* +0x0000 83 6d 00 00 */ }; struct OFFSETINSTANCEDATAANDLENGTH { unsigned long OffsetInstanceData; /* +0x0000 */ unsigned long LengthInstanceData; /* +0x0004 */ }; struct _SC_ACTION { unsigned char Type[4]; /* +0x0000 01 18 00 00 */ unsigned long Delay; /* +0x0004 */ }; struct _TOKEN_MANDATORY_POLICY { unsigned long Policy; /* +0x0000 */ }; struct _wireBRECORD { unsigned long fFlags; /* +0x0000 */ unsigned long clSize; /* +0x0004 */ unsigned char pRecInfo[8]; /* +0x0008 a4 3b 00 00 */ unsigned char *pRecord; /* +0x0010 */ }; struct tagCABSTRBLOB { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 85 3a 00 00 */ }; struct tagWCRANGE { unsigned char wcLow[2]; /* +0x0000 71 00 00 00 */ unsigned short cGlyphs; /* +0x0002 */ }; struct _LDR_VERIFY_IMAGE_INFO { unsigned long Size; /* +0x0000 */ unsigned long Flags; /* +0x0004 */ unsigned char CallbackInfo[16]; /* +0x0008 2d 31 00 00 */ unsigned char SectionInfo[32]; /* +0x0018 bf 6d 00 00 */ unsigned short ImageCharacteristics; /* +0x0038 */ }; struct tagSTATPROPSETSTG { unsigned char fmtid[16]; /* +0x0000 6b 10 00 00 */ unsigned char clsid[16]; /* +0x0010 6b 10 00 00 */ unsigned long grfFlags; /* +0x0020 */ unsigned char mtime[8]; /* +0x0024 0d 10 00 00 */ unsigned char ctime[8]; /* +0x002c 0d 10 00 00 */ unsigned char atime[8]; /* +0x0034 0d 10 00 00 */ unsigned long dwOSVersion; /* +0x003c */ }; struct _VIRTUAL_STORAGE_TYPE { unsigned long DeviceId; /* +0x0000 */ unsigned char VendorId[16]; /* +0x0004 6b 10 00 00 */ }; struct _IO_RESOURCE_REQUIREMENTS_LIST { unsigned long ListSize; /* +0x0000 */ unsigned char InterfaceType[4]; /* +0x0004 df 15 00 00 */ unsigned long BusNumber; /* +0x0008 */ unsigned long SlotNumber; /* +0x000c */ unsigned char Reserved[12]; /* +0x0010 fa 18 00 00 */ unsigned long AlternativeLists; /* +0x001c */ unsigned char List[40]; /* +0x0020 d9 6d 00 00 */ }; struct _OBJECT_ATTRIBUTES64 { unsigned long Length; /* +0x0000 */ unsigned long long RootDirectory; /* +0x0008 */ unsigned long long ObjectName; /* +0x0010 */ unsigned long Attributes; /* +0x0018 */ unsigned long long SecurityDescriptor; /* +0x0020 */ unsigned long long SecurityQualityOfService; /* +0x0028 */ }; struct _RTL_PROCESS_MODULE_INFORMATION_EX { unsigned short NextOffset; /* +0x0000 */ unsigned char BaseInfo[296]; /* +0x0008 3a 32 00 00 */ unsigned long ImageChecksum; /* +0x0130 */ unsigned long TimeDateStamp; /* +0x0134 */ void *DefaultBase; /* +0x0138 */ }; struct _ALPC_PORT_COMPLETION_LIST_INFORMATION { void *Buffer; /* +0x0000 */ unsigned long Size; /* +0x0008 */ unsigned long ConcurrencyCount; /* +0x000c */ unsigned long AttributeFlags; /* +0x0010 */ }; struct _ZONEATTRIBUTES { unsigned long cbSize; /* +0x0000 */ unsigned char szDisplayName[520]; /* +0x0004 0d 21 00 00 */ unsigned char szDescription[400]; /* +0x020c fe 6d 00 00 */ unsigned char szIconPath[520]; /* +0x039c 0d 21 00 00 */ unsigned long dwTemplateMinLevel; /* +0x05a4 */ unsigned long dwTemplateRecommended; /* +0x05a8 */ unsigned long dwTemplateCurrentLevel; /* +0x05ac */ unsigned long dwFlags; /* +0x05b0 */ }; struct _SYSTEM_LOW_PRIORITY_IO_INFORMATION { unsigned long LowPriReadOperations; /* +0x0000 */ unsigned long LowPriWriteOperations; /* +0x0004 */ unsigned long KernelBumpedToNormalOperations; /* +0x0008 */ unsigned long LowPriPagingReadOperations; /* +0x000c */ unsigned long KernelPagingReadsBumpedToNormal; /* +0x0010 */ unsigned long LowPriPagingWriteOperations; /* +0x0014 */ unsigned long KernelPagingWritesBumpedToNormal; /* +0x0018 */ unsigned long BoostedIrpCount; /* +0x001c */ unsigned long BoostedPagingIrpCount; /* +0x0020 */ unsigned long BlanketBoostCount; /* +0x0024 */ }; struct _FILE_TYPE_NOTIFICATION_INPUT { unsigned long Flags; /* +0x0000 */ unsigned long NumFileTypeIDs; /* +0x0004 */ unsigned char FileTypeID[16]; /* +0x0008 7c 26 00 00 */ }; struct _LDBL12 { unsigned char ld12[12]; /* +0x0000 d6 1e 00 00 */ }; struct POWER_ACTION_POLICY { unsigned char Action[4]; /* +0x0000 bf 15 00 00 */ unsigned long Flags; /* +0x0004 */ unsigned long EventCode; /* +0x0008 */ }; struct MENUITEMTEMPLATE { unsigned short mtOption; /* +0x0000 */ unsigned short mtID; /* +0x0002 */ unsigned char mtString[2]; /* +0x0004 ab 19 00 00 */ }; struct _EVENT_TRACE_LOGFILEW { unsigned char LogFileName[8]; /* +0x0000 71 06 00 00 */ unsigned char LoggerName[8]; /* +0x0008 71 06 00 00 */ long long CurrentTime; /* +0x0010 */ unsigned long BuffersRead; /* +0x0018 */ unsigned long LogFileMode; /* +0x001c */ unsigned long ProcessTraceMode; /* +0x001c */ unsigned char CurrentEvent[88]; /* +0x0020 cc 35 00 00 */ unsigned char LogfileHeader[280]; /* +0x0078 cd 35 00 00 */ unsigned char BufferCallback[8]; /* +0x0190 81 2a 00 00 */ unsigned long BufferSize; /* +0x0198 */ unsigned long Filled; /* +0x019c */ unsigned long EventsLost; /* +0x01a0 */ /* unsigned char EventCallback[0]; +0x01a8 d1 35 00 00 */ unsigned char EventRecordCallback[8]; /* +0x01a8 d5 35 00 00 */ unsigned long IsKernelTrace; /* +0x01b0 */ void *Context; /* +0x01b8 */ }; struct tagINTERFACEINFO { unsigned char pUnk[8]; /* +0x0000 23 1c 00 00 */ unsigned char iid[16]; /* +0x0008 6b 10 00 00 */ unsigned short wMethod; /* +0x0018 */ }; struct _MCI_STATS:: { unsigned short McaErrorCode; /* +0x0000 */ unsigned short ModelErrorCode; /* +0x0002 */ /* unsigned char OtherInformation[0]; +0x0004 41 6e 00 00 */ /* unsigned char ContextCorrupt[0]; +0x0004 42 6e 00 00 */ /* unsigned char AddressValid[0]; +0x0004 43 6e 00 00 */ /* unsigned char MiscValid[0]; +0x0004 44 6e 00 00 */ /* unsigned char ErrorEnabled[0]; +0x0004 65 2b 00 00 */ /* unsigned char UncorrectedError[0]; +0x0004 45 6e 00 00 */ /* unsigned char StatusOverFlow[0]; +0x0004 99 29 00 00 */ unsigned char Valid[4]; /* +0x0004 f3 21 00 00 */ }; struct _TEB_ACTIVE_FRAME_EX { unsigned char BasicFrame[24]; /* +0x0000 6a 2c 00 00 */ void *ExtensionIdentifier; /* +0x0018 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_V1 { unsigned char Name[16]; /* +0x0000 c1 18 00 00 */ unsigned short ValueType; /* +0x0010 */ unsigned short Reserved; /* +0x0012 */ unsigned long Flags; /* +0x0014 */ unsigned long ValueCount; /* +0x0018 */ }; struct MOVE_FILE_RECORD_DATA { void *FileHandle; /* +0x0000 */ unsigned char SourceFileRecord[8]; /* +0x0008 0e 19 00 00 */ unsigned char TargetFileRecord[8]; /* +0x0010 0e 19 00 00 */ }; struct _PS_CPU_QUOTA_SET_INFORMATION { long long SessionHandle; /* +0x0000 */ unsigned long Weight; /* +0x0008 */ }; struct NTFS_VOLUME_DATA_BUFFER { unsigned char VolumeSerialNumber[8]; /* +0x0000 0e 19 00 00 */ unsigned char NumberSectors[8]; /* +0x0008 0e 19 00 00 */ unsigned char TotalClusters[8]; /* +0x0010 0e 19 00 00 */ unsigned char FreeClusters[8]; /* +0x0018 0e 19 00 00 */ unsigned char TotalReserved[8]; /* +0x0020 0e 19 00 00 */ unsigned long BytesPerSector; /* +0x0028 */ unsigned long BytesPerCluster; /* +0x002c */ unsigned long BytesPerFileRecordSegment; /* +0x0030 */ unsigned long ClustersPerFileRecordSegment; /* +0x0034 */ unsigned char MftValidDataLength[8]; /* +0x0038 0e 19 00 00 */ unsigned char MftStartLcn[8]; /* +0x0040 0e 19 00 00 */ unsigned char Mft2StartLcn[8]; /* +0x0048 0e 19 00 00 */ unsigned char MftZoneStart[8]; /* +0x0050 0e 19 00 00 */ unsigned char MftZoneEnd[8]; /* +0x0058 0e 19 00 00 */ }; struct _SYSTEM_MEMORY_INFORMATION { unsigned long long PagedPoolCommitPageCount; /* +0x0000 */ unsigned long long NonPagedPoolPageCount; /* +0x0008 */ unsigned long long MdlPageCount; /* +0x0010 */ unsigned long long CommitPageCount; /* +0x0018 */ }; struct _MESSAGE_RESOURCE_DATA { unsigned long NumberOfBlocks; /* +0x0000 */ unsigned char Blocks[12]; /* +0x0004 7c 6e 00 00 */ }; struct _TOKEN_GROUPS { unsigned long GroupCount; /* +0x0000 */ unsigned char Groups[16]; /* +0x0008 f2 28 00 00 */ }; struct _UNWIND_HISTORY_TABLE_ENTRY { unsigned long long ImageBase; /* +0x0000 */ unsigned char FunctionEntry[8]; /* +0x0008 6d 25 00 00 */ }; struct _TRACE_LOGFILE_HEADER32 { unsigned long BufferSize; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned char VersionDetail[4]; /* +0x0004 9d 6e 00 00 */ unsigned long ProviderVersion; /* +0x0008 */ unsigned long NumberOfProcessors; /* +0x000c */ unsigned char EndTime[8]; /* +0x0010 0e 19 00 00 */ unsigned long TimerResolution; /* +0x0018 */ unsigned long MaximumFileSize; /* +0x001c */ unsigned long LogFileMode; /* +0x0020 */ unsigned long BuffersWritten; /* +0x0024 */ /* unsigned char LogInstanceGuid[0]; +0x0028 6b 10 00 00 */ unsigned long StartBuffers; /* +0x0028 */ unsigned long PointerSize; /* +0x002c */ unsigned long EventsLost; /* +0x0030 */ unsigned long CpuSpeedInMHz; /* +0x0034 */ unsigned char LoggerName[4]; /* +0x0038 75 00 00 00 */ unsigned char LogFileName[4]; /* +0x003c 75 00 00 00 */ unsigned char TimeZone[176]; /* +0x0040 44 35 00 00 */ unsigned char BootTime[8]; /* +0x00f0 0e 19 00 00 */ unsigned char PerfFreq[8]; /* +0x00f8 0e 19 00 00 */ unsigned char StartTime[8]; /* +0x0100 0e 19 00 00 */ unsigned long ReservedFlags; /* +0x0108 */ unsigned long BuffersLost; /* +0x010c */ }; struct _ASSEMBLY_STORAGE_MAP_RESOLUTION_CALLBACK_DATA_RESOLUTION_ENDING { void *ResolutionContext; /* +0x0000 */ }; struct _STREAM_EXTENT_ENTRY:: { unsigned char RetrievalPointers[32]; /* +0x0000 c4 2a 00 00 */ }; struct _TOKEN_AUDIT_POLICY { unsigned char PerUserPolicy[29]; /* +0x0000 d0 6e 00 00 */ }; struct tagRemSNB { unsigned long ulCntStr; /* +0x0000 */ unsigned long ulCntChar; /* +0x0004 */ unsigned char rgString[4]; /* +0x0008 ab 19 00 00 */ }; struct _PROCESS_STACK_ALLOCATION_INFORMATION { unsigned long long ReserveSize; /* +0x0000 */ unsigned long long ZeroBits; /* +0x0008 */ void *StackBase; /* +0x0010 */ }; struct FILE_ID_DESCRIPTOR { unsigned long dwSize; /* +0x0000 */ unsigned char Type[4]; /* +0x0004 a9 17 00 00 */ /* unsigned char FileId[0]; +0x0008 0e 19 00 00 */ unsigned char ObjectId[16]; /* +0x0008 6b 10 00 00 */ }; struct tagCACLIPDATA { unsigned long cElems; /* +0x0000 */ unsigned char pElems[8]; /* +0x0008 78 2f 00 00 */ }; struct _KSPIN_LOCK_QUEUE { unsigned char Next[8]; /* +0x0000 13 6f 00 00 */ unsigned char Lock[8]; /* +0x0008 14 6f 00 00 */ }; struct tagCOLORADJUSTMENT { unsigned short caSize; /* +0x0000 */ unsigned short caFlags; /* +0x0002 */ unsigned short caIlluminantIndex; /* +0x0004 */ unsigned short caRedGamma; /* +0x0006 */ unsigned short caGreenGamma; /* +0x0008 */ unsigned short caBlueGamma; /* +0x000a */ unsigned short caReferenceBlack; /* +0x000c */ unsigned short caReferenceWhite; /* +0x000e */ short caContrast; /* +0x0010 */ short caBrightness; /* +0x0012 */ short caColorfulness; /* +0x0014 */ short caRedGreenTint; /* +0x0016 */ }; struct MFT_ENUM_DATA { unsigned long long StartFileReferenceNumber; /* +0x0000 */ long long LowUsn; /* +0x0008 */ long long HighUsn; /* +0x0010 */ }; struct PACKAGE_VERSION { unsigned long long Version; /* +0x0000 */ unsigned short Revision; /* +0x0000 */ unsigned short Build; /* +0x0002 */ unsigned short Minor; /* +0x0004 */ unsigned short Major; /* +0x0006 */ }; struct _OBJECT_TYPES_INFORMATION { unsigned long NumberOfTypes; /* +0x0000 */ }; struct _MENU_EVENT_RECORD { unsigned char dwCommandId[4]; /* +0x0000 75 00 00 00 */ }; struct _DEBUG_EVENT:: { /* unsigned char Exception[0]; +0x0000 58 35 00 00 */ /* unsigned char CreateThread[0]; +0x0000 e1 6d 00 00 */ /* unsigned char CreateProcessInfo[0]; +0x0000 98 65 00 00 */ /* unsigned char ExitThread[0]; +0x0000 c3 29 00 00 */ /* unsigned char ExitProcess[0]; +0x0000 24 65 00 00 */ /* unsigned char LoadDll[0]; +0x0000 1f 42 00 00 */ /* unsigned char UnloadDll[0]; +0x0000 48 6f 00 00 */ /* unsigned char DebugString[0]; +0x0000 9d 43 00 00 */ unsigned char RipInfo[160]; /* +0x0000 20 68 00 00 */ }; struct _FILE_REMOTE_PROTOCOL_INFO { unsigned short StructureVersion; /* +0x0000 */ unsigned short StructureSize; /* +0x0002 */ unsigned long Protocol; /* +0x0004 */ unsigned short ProtocolMajorVersion; /* +0x0008 */ unsigned short ProtocolMinorVersion; /* +0x000a */ unsigned short ProtocolRevision; /* +0x000c */ unsigned short Reserved; /* +0x000e */ unsigned long Flags; /* +0x0010 */ }; struct _IMAGE_THUNK_DATA64:: { unsigned long long ForwarderString; /* +0x0000 */ unsigned long long Function; /* +0x0000 */ unsigned long long Ordinal; /* +0x0000 */ unsigned long long AddressOfData; /* +0x0000 */ }; struct __m128d { unsigned char m128d_f64[16]; /* +0x0000 5d 6f 00 00 */ }; struct _MOVE_FILE_DATA32 { unsigned char FileHandle[8]; /* +0x0000 75 00 00 00 */ unsigned char StartingVcn[8]; /* +0x0008 0e 19 00 00 */ unsigned char StartingLcn[8]; /* +0x0010 0e 19 00 00 */ unsigned long ClusterCount; /* +0x0018 */ }; struct _TOKEN_USER_CLAIMS { void *UserClaims; /* +0x0000 */ }; struct _SYSTEM_REF_TRACE_INFORMATION { unsigned char TraceEnable; /* +0x0000 */ unsigned char TracePermanent; /* +0x0001 */ unsigned char TraceProcessName[16]; /* +0x0008 c1 18 00 00 */ unsigned char TracePoolTags[16]; /* +0x0018 c1 18 00 00 */ }; struct _HEAP_INFORMATION_ITEM { unsigned long Level; /* +0x0000 */ unsigned long long Size; /* +0x0008 */ /* unsigned char ProcessHeapInformation[0]; +0x0010 d1 19 00 00 */ /* unsigned char HeapInformation[0]; +0x0010 16 19 00 00 */ /* unsigned char HeapRegionInformation[0]; +0x0010 b0 18 00 00 */ /* unsigned char HeapRangeInformation[0]; +0x0010 d5 38 00 00 */ /* unsigned char HeapBlockInformation[0]; +0x0010 5f 65 00 00 */ /* unsigned char HeapPerfInformation[0]; +0x0010 f2 18 00 00 */ unsigned long long DynamicStart; /* +0x0010 */ }; struct _API_SET_NAMESPACE_ENTRY { unsigned long NameOffset; /* +0x0000 */ unsigned long NameLength; /* +0x0004 */ unsigned long DataOffset; /* +0x0008 */ }; struct _RTL_CALLER_ALLOCATED_ACTIVATION_CONTEXT_STACK_FRAME_BASIC { unsigned long long Size; /* +0x0000 */ unsigned long Format; /* +0x0008 */ unsigned char Frame[24]; /* +0x0010 52 21 00 00 */ }; struct NTFS_FILE_RECORD_INPUT_BUFFER { unsigned char FileReferenceNumber[8]; /* +0x0000 0e 19 00 00 */ }; struct _IMAGE_SYMBOL_EX:: { unsigned char ShortName[8]; /* +0x0000 fb 10 00 00 */ }; struct _FILE_REMOTE_PROTOCOL_INFORMATION:: { unsigned char Reserved[64]; /* +0x0000 29 2e 00 00 */ }; struct _FILE_REMOTE_PROTOCOL_INFORMATION:: { unsigned char Reserved[32]; /* +0x0000 e0 6f 00 00 */ }; struct _IMAGE_RESOURCE_DIRECTORY { unsigned long Characteristics; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned short MajorVersion; /* +0x0008 */ unsigned short MinorVersion; /* +0x000a */ unsigned short NumberOfNamedEntries; /* +0x000c */ unsigned short NumberOfIdEntries; /* +0x000e */ }; struct _s__RTTIBaseClassArray { unsigned char arrayOfBaseClassDescriptors[4]; /* +0x0000 f2 6f 00 00 */ }; struct _SYSDBG_TRIAGE_DUMP { unsigned long Flags; /* +0x0000 */ unsigned long BugCheckCode; /* +0x0004 */ unsigned long long BugCheckParam1; /* +0x0008 */ unsigned long long BugCheckParam2; /* +0x0010 */ unsigned long long BugCheckParam3; /* +0x0018 */ unsigned long long BugCheckParam4; /* +0x0020 */ unsigned long ProcessHandles; /* +0x0028 */ unsigned long ThreadHandles; /* +0x002c */ unsigned char Handles[8]; /* +0x0030 1a 10 00 00 */ }; struct _SYSTEM_PLATFORM_BINARY_INFORMATION { void *HandoffBuffer; /* +0x0000 */ void *CommandLineBuffer; /* +0x0008 */ unsigned long HandoffBufferSize; /* +0x0010 */ unsigned long CommandLineBufferSize; /* +0x0014 */ }; struct _GDI_NONREMOTE { long fContext; /* +0x0000 */ }; struct _GDI_NONREMOTE::__MIDL_IWinTypes_0002 { long hInproc; /* +0x0000 */ unsigned char hRemote[8]; /* +0x0000 4c 70 00 00 */ }; struct tagCWPSTRUCT { long long lParam; /* +0x0000 */ unsigned long long wParam; /* +0x0008 */ unsigned char message[8]; /* +0x0010 75 00 00 00 */ unsigned char hwnd[8]; /* +0x0018 97 13 00 00 */ }; struct _SD_ENUM_SDS_OUTPUT { unsigned long long NextOffset; /* +0x0000 */ unsigned long long NumSDEntriesReturned; /* +0x0008 */ unsigned long long NumSDBytesReturned; /* +0x0010 */ unsigned char SDEntry[24]; /* +0x0018 78 70 00 00 */ }; struct PPM_WMI_IDLE_STATE { unsigned long Latency; /* +0x0000 */ unsigned long Power; /* +0x0004 */ unsigned long TimeCheck; /* +0x0008 */ unsigned char PromotePercent; /* +0x000c */ unsigned char DemotePercent; /* +0x000d */ unsigned char StateType; /* +0x000e */ unsigned char Reserved; /* +0x000f */ unsigned long StateFlags; /* +0x0010 */ unsigned long Context; /* +0x0014 */ unsigned long IdleHandler; /* +0x0018 */ unsigned long Reserved1; /* +0x001c */ }; struct LIST_ENTRY64 { unsigned long long Flink; /* +0x0000 */ unsigned long long Blink; /* +0x0008 */ }; struct _TXFS_GET_TRANSACTED_VERSION { unsigned long ThisBaseVersion; /* +0x0000 */ unsigned long LatestVersion; /* +0x0004 */ unsigned short ThisMiniVersion; /* +0x0008 */ unsigned short FirstMiniVersion; /* +0x000a */ unsigned short LatestMiniVersion; /* +0x000c */ }; struct PPM_WMI_IDLE_STATES_EX { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long TargetState; /* +0x0008 */ unsigned long OldState; /* +0x000c */ void *TargetProcessors; /* +0x0010 */ unsigned char State[32]; /* +0x0018 99 70 00 00 */ }; struct tagEXTLOGPEN32 { unsigned long elpPenStyle; /* +0x0000 */ unsigned long elpWidth; /* +0x0004 */ unsigned char elpBrushStyle[4]; /* +0x0008 75 00 00 00 */ unsigned long elpColor; /* +0x000c */ unsigned long elpHatch; /* +0x0010 */ unsigned long elpNumEntries; /* +0x0014 */ unsigned char elpStyleEntry[4]; /* +0x0018 d4 18 00 00 */ }; struct _REMOTE_NAME_INFOA { char *lpUniversalName; /* +0x0000 */ char *lpConnectionName; /* +0x0008 */ char *lpRemainingPath; /* +0x0010 */ }; struct XSAVE_CPU_ERRATA { unsigned long NumberOfErrata; /* +0x0000 */ unsigned char Errata[32]; /* +0x0008 a7 70 00 00 */ }; struct tagOLEVERB { long lVerb; /* +0x0000 */ unsigned char lpszVerbName[8]; /* +0x0008 71 06 00 00 */ unsigned long fuFlags; /* +0x0010 */ unsigned long grfAttribs; /* +0x0014 */ }; struct _ImageArchitectureHeader { /* unsigned char AmaskValue[0]; +0x0000 52 25 00 00 */ unsigned char AmaskShift[4]; /* +0x0000 c2 70 00 00 */ unsigned long FirstEntryRVA; /* +0x0004 */ }; struct _FILE_QUERY_ON_DISK_VOL_INFO_BUFFER { unsigned char DirectoryCount[8]; /* +0x0000 0e 19 00 00 */ unsigned char FileCount[8]; /* +0x0008 0e 19 00 00 */ unsigned short FsFormatMajVersion; /* +0x0010 */ unsigned short FsFormatMinVersion; /* +0x0012 */ unsigned char FsFormatName[28]; /* +0x0014 bb 2f 00 00 */ unsigned char FormatTime[8]; /* +0x0030 0e 19 00 00 */ unsigned char LastUpdateTime[8]; /* +0x0038 0e 19 00 00 */ unsigned char CopyrightInfo[68]; /* +0x0040 da 70 00 00 */ unsigned char AbstractInfo[68]; /* +0x0084 da 70 00 00 */ unsigned char FormattingImplementationInfo[68]; /* +0x00c8 da 70 00 00 */ unsigned char LastModifyingImplementationInfo[68]; /* +0x010c da 70 00 00 */ }; struct _RTL_HANDLE_TABLE_ENTRY { unsigned long Flags; /* +0x0000 */ unsigned char NextFree[8]; /* +0x0000 ce 30 00 00 */ }; struct NOTIFY_USER_POWER_SETTING { unsigned char Guid[16]; /* +0x0000 6b 10 00 00 */ }; struct _FILE_STANDARD_LINK_INFORMATION { unsigned long NumberOfAccessibleLinks; /* +0x0000 */ unsigned long TotalNumberOfLinks; /* +0x0004 */ unsigned char DeletePending; /* +0x0008 */ unsigned char Directory; /* +0x0009 */ }; struct _RPC_BINDING_VECTOR { unsigned long Count; /* +0x0000 */ unsigned char BindingH[8]; /* +0x0008 69 66 00 00 */ }; struct _BOOT_OPTIONS { unsigned long Version; /* +0x0000 */ unsigned long Length; /* +0x0004 */ unsigned long Timeout; /* +0x0008 */ unsigned long CurrentBootEntryId; /* +0x000c */ unsigned long NextBootEntryId; /* +0x0010 */ unsigned char HeadlessRedirection[4]; /* +0x0014 ab 19 00 00 */ }; struct MOVE_FILE_DATA { void *FileHandle; /* +0x0000 */ unsigned char StartingVcn[8]; /* +0x0008 0e 19 00 00 */ unsigned char StartingLcn[8]; /* +0x0010 0e 19 00 00 */ unsigned long ClusterCount; /* +0x0018 */ }; struct IMAGE_COR20_HEADER { unsigned long cb; /* +0x0000 */ unsigned short MajorRuntimeVersion; /* +0x0004 */ unsigned short MinorRuntimeVersion; /* +0x0006 */ unsigned char MetaData[8]; /* +0x0008 b4 20 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned long EntryPointToken; /* +0x0014 */ unsigned long EntryPointRVA; /* +0x0014 */ unsigned char Resources[8]; /* +0x0018 b4 20 00 00 */ unsigned char StrongNameSignature[8]; /* +0x0020 b4 20 00 00 */ unsigned char CodeManagerTable[8]; /* +0x0028 b4 20 00 00 */ unsigned char VTableFixups[8]; /* +0x0030 b4 20 00 00 */ unsigned char ExportAddressTableJumps[8]; /* +0x0038 b4 20 00 00 */ unsigned char ManagedNativeHeader[8]; /* +0x0040 b4 20 00 00 */ }; struct __m64 { unsigned long long m64_u64; /* +0x0000 */ /* unsigned char m64_f32[0]; +0x0000 2b 71 00 00 */ /* unsigned char m64_i8[0]; +0x0000 83 25 00 00 */ /* unsigned char m64_i16[0]; +0x0000 70 1a 00 00 */ /* unsigned char m64_i32[0]; +0x0000 2c 71 00 00 */ long long m64_i64; /* +0x0000 */ /* unsigned char m64_u8[0]; +0x0000 fb 10 00 00 */ /* unsigned char m64_u16[0]; +0x0000 8c 33 00 00 */ unsigned char m64_u32[8]; /* +0x0000 2d 71 00 00 */ }; struct _TOKEN_ACCESS_INFORMATION { unsigned char SidHash[8]; /* +0x0000 b1 43 00 00 */ unsigned char RestrictedSidHash[8]; /* +0x0008 b1 43 00 00 */ unsigned char Privileges[8]; /* +0x0010 8a 29 00 00 */ unsigned char AuthenticationId[8]; /* +0x0018 90 1e 00 00 */ unsigned char TokenType[4]; /* +0x0020 05 18 00 00 */ unsigned char ImpersonationLevel[4]; /* +0x0024 1d 17 00 00 */ unsigned char MandatoryPolicy[4]; /* +0x0028 f1 39 00 00 */ unsigned long Flags; /* +0x002c */ unsigned long AppContainerNumber; /* +0x0030 */ void *PackageSid; /* +0x0038 */ unsigned char CapabilitiesHash[8]; /* +0x0040 b1 43 00 00 */ }; struct _API_SET_VALUE_ARRAY { unsigned long Count; /* +0x0000 */ unsigned char Array[16]; /* +0x0004 37 71 00 00 */ }; struct _SERVICE_FAILURE_ACTIONSA { unsigned long dwResetPeriod; /* +0x0000 */ char *lpRebootMsg; /* +0x0008 */ char *lpCommand; /* +0x0010 */ unsigned long cActions; /* +0x0018 */ unsigned char lpsaActions[8]; /* +0x0020 19 32 00 00 */ }; struct _COMPRESSED_DATA_INFO { unsigned short CompressionFormatAndEngine; /* +0x0000 */ unsigned char CompressionUnitShift; /* +0x0002 */ unsigned char ChunkShift; /* +0x0003 */ unsigned char ClusterShift; /* +0x0004 */ unsigned char Reserved; /* +0x0005 */ unsigned short NumberOfChunks; /* +0x0006 */ unsigned char CompressedChunkSizes[4]; /* +0x0008 d4 18 00 00 */ }; struct _SYSTEM_TIMEOFDAY_INFORMATION { unsigned char BootTime[8]; /* +0x0000 0e 19 00 00 */ unsigned char CurrentTime[8]; /* +0x0008 0e 19 00 00 */ unsigned char TimeZoneBias[8]; /* +0x0010 0e 19 00 00 */ unsigned long TimeZoneId; /* +0x0018 */ unsigned long Reserved; /* +0x001c */ unsigned long long BootTimeBias; /* +0x0020 */ unsigned long long SleepTimeBias; /* +0x0028 */ }; struct _CM_EISA_FUNCTION_INFORMATION { unsigned long CompressedId; /* +0x0000 */ unsigned char IdSlotFlags1; /* +0x0004 */ unsigned char IdSlotFlags2; /* +0x0005 */ unsigned char MinorRevision; /* +0x0006 */ unsigned char MajorRevision; /* +0x0007 */ unsigned char Selections[26]; /* +0x0008 4b 71 00 00 */ unsigned char FunctionFlags; /* +0x0022 */ unsigned char TypeString[80]; /* +0x0023 90 31 00 00 */ unsigned char EisaMemory[63]; /* +0x0073 4c 71 00 00 */ unsigned char EisaIrq[14]; /* +0x00b2 4d 71 00 00 */ unsigned char EisaDma[8]; /* +0x00c0 4e 71 00 00 */ unsigned char EisaPort[60]; /* +0x00c8 4f 71 00 00 */ unsigned char InitializationData[60]; /* +0x0104 50 71 00 00 */ }; struct PPM_WMI_IDLE_STATES { unsigned long Type; /* +0x0000 */ unsigned long Count; /* +0x0004 */ unsigned long TargetState; /* +0x0008 */ unsigned long OldState; /* +0x000c */ unsigned long long TargetProcessors; /* +0x0010 */ unsigned char State[32]; /* +0x0018 99 70 00 00 */ }; struct _SYSTEM_HOTPATCH_MODULE_QUERY_PARAMETERS { unsigned long QueryFlags; /* +0x0000 */ void *ProcessHandle; /* +0x0008 */ }; struct _SL_HWID_DEVICE_INFO { unsigned long SizeBytes; /* +0x0000 */ unsigned char Type; /* +0x0004 */ unsigned char DeviceRemovalPolicy; /* +0x0005 */ unsigned char AuthenticationStatus; /* +0x0006 */ unsigned char Disposition; /* +0x0007 */ unsigned long DeviceNodeLevel; /* +0x0008 */ unsigned char Guid[16]; /* +0x000c 6b 10 00 00 */ unsigned char Data[4]; /* +0x001c d7 18 00 00 */ }; struct tagMSG { unsigned char hwnd[8]; /* +0x0000 97 13 00 00 */ unsigned char message[8]; /* +0x0008 75 00 00 00 */ unsigned long long wParam; /* +0x0010 */ long long lParam; /* +0x0018 */ unsigned long time; /* +0x0020 */ unsigned char pt[12]; /* +0x0024 1b 1a 00 00 */ }; struct tagCANDIDATELIST { unsigned long dwSize; /* +0x0000 */ unsigned long dwStyle; /* +0x0004 */ unsigned long dwCount; /* +0x0008 */ unsigned long dwSelection; /* +0x000c */ unsigned long dwPageStart; /* +0x0010 */ unsigned long dwPageSize; /* +0x0014 */ unsigned char dwOffset[4]; /* +0x0018 d4 18 00 00 */ }; struct _ACL_REVISION_INFORMATION { unsigned long AclRevision; /* +0x0000 */ }; struct PPM_IDLE_STATE_BUCKET_EX { unsigned long long TotalTimeUs; /* +0x0000 */ unsigned long MinTimeUs; /* +0x0008 */ unsigned long MaxTimeUs; /* +0x000c */ unsigned long Count; /* +0x0010 */ }; struct _IMAGE_IMPORT_DESCRIPTOR { unsigned long Characteristics; /* +0x0000 */ unsigned long OriginalFirstThunk; /* +0x0000 */ unsigned long TimeDateStamp; /* +0x0004 */ unsigned long ForwarderChain; /* +0x0008 */ unsigned long Name; /* +0x000c */ unsigned long FirstThunk; /* +0x0010 */ }; struct _PMD { unsigned char mdisp[4]; /* +0x0000 74 00 00 00 */ unsigned char pdisp[4]; /* +0x0004 74 00 00 00 */ unsigned char vdisp[4]; /* +0x0008 74 00 00 00 */ }; struct _RTL_BUFFER { unsigned char *Buffer; /* +0x0000 */ unsigned char *StaticBuffer; /* +0x0008 */ unsigned long long Size; /* +0x0010 */ unsigned long long StaticSize; /* +0x0018 */ unsigned long long ReservedForAllocatedSize; /* +0x0020 */ void *ReservedForIMalloc; /* +0x0028 */ }; struct _RPC_HTTP_TRANSPORT_CREDENTIALS_V3_W { void *TransportCredentials; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long AuthenticationTarget; /* +0x000c */ unsigned long NumberOfAuthnSchemes; /* +0x0010 */ unsigned long *AuthnSchemes; /* +0x0018 */ unsigned short *ServerCertificateSubject; /* +0x0020 */ void *ProxyCredentials; /* +0x0028 */ unsigned long NumberOfProxyAuthnSchemes; /* +0x0030 */ unsigned long *ProxyAuthnSchemes; /* +0x0038 */ }; struct tagHARDWAREHOOKSTRUCT { unsigned char hwnd[8]; /* +0x0000 97 13 00 00 */ unsigned char message[8]; /* +0x0008 75 00 00 00 */ unsigned long long wParam; /* +0x0010 */ long long lParam; /* +0x0018 */ }; struct _PSFEATURE_OUTPUT { unsigned char bPageIndependent[4]; /* +0x0000 74 00 00 00 */ unsigned char bSetPageDevice[4]; /* +0x0004 74 00 00 00 */ }; struct KEY_PID_ARRAY { void *PID; /* +0x0000 */ unsigned char KeyName[16]; /* +0x0008 c1 18 00 00 */ }; struct _RTL_STACK_CONTEXT { unsigned long NumberOfEntries; /* +0x0000 */ unsigned char Entry[16]; /* +0x0008 07 72 00 00 */ }; struct PACKAGE_ID { unsigned char reserved[4]; /* +0x0000 75 00 00 00 */ unsigned char processorArchitecture[4]; /* +0x0004 75 00 00 00 */ unsigned char version[8]; /* +0x0008 73 1f 00 00 */ unsigned char name[8]; /* +0x0010 71 06 00 00 */ unsigned char publisher[8]; /* +0x0018 71 06 00 00 */ unsigned char resourceId[8]; /* +0x0020 71 06 00 00 */ unsigned char publisherId[8]; /* +0x0028 71 06 00 00 */ }; struct PPM_THERMAL_POLICY_EVENT { unsigned char Mode; /* +0x0000 */ unsigned long long Processors; /* +0x0008 */ }; struct SYSTEM_POWER_CAPABILITIES { unsigned char PowerButtonPresent; /* +0x0000 */ unsigned char SleepButtonPresent; /* +0x0001 */ unsigned char LidPresent; /* +0x0002 */ unsigned char SystemS1; /* +0x0003 */ unsigned char SystemS2; /* +0x0004 */ unsigned char SystemS3; /* +0x0005 */ unsigned char SystemS4; /* +0x0006 */ unsigned char SystemS5; /* +0x0007 */ unsigned char HiberFilePresent; /* +0x0008 */ unsigned char FullWake; /* +0x0009 */ unsigned char VideoDimPresent; /* +0x000a */ unsigned char ApmPresent; /* +0x000b */ unsigned char UpsPresent; /* +0x000c */ unsigned char ThermalControl; /* +0x000d */ unsigned char ProcessorThrottle; /* +0x000e */ unsigned char ProcessorMinThrottle; /* +0x000f */ unsigned char ProcessorMaxThrottle; /* +0x0010 */ unsigned char FastSystemS4; /* +0x0011 */ unsigned char Hiberboot; /* +0x0012 */ unsigned char WakeAlarmPresent; /* +0x0013 */ unsigned char AoAc; /* +0x0014 */ unsigned char DiskSpinDown; /* +0x0015 */ unsigned char spare3[8]; /* +0x0016 fb 10 00 00 */ unsigned char SystemBatteriesPresent; /* +0x001e */ unsigned char BatteriesAreShortTerm; /* +0x001f */ unsigned char BatteryScale[24]; /* +0x0020 8a 72 00 00 */ unsigned char AcOnLineWake[4]; /* +0x0038 c5 16 00 00 */ unsigned char SoftLidWake[4]; /* +0x003c c5 16 00 00 */ unsigned char RtcWake[4]; /* +0x0040 c5 16 00 00 */ unsigned char MinDeviceWakeState[4]; /* +0x0044 c5 16 00 00 */ unsigned char DefaultLowLatencyWake[4]; /* +0x0048 c5 16 00 00 */ }; struct _EISA_PORT_CONFIGURATION { unsigned char Configuration[1]; /* +0x0000 88 68 00 00 */ unsigned short PortAddress; /* +0x0001 */ }; struct POWER_STATE_HANDLER { unsigned char Type[4]; /* +0x0000 05 16 00 00 */ unsigned char RtcWake; /* +0x0004 */ unsigned char Spare[3]; /* +0x0005 52 19 00 00 */ unsigned char Handler[8]; /* +0x0008 a9 6a 00 00 */ void *Context; /* +0x0010 */ }; struct DISPLAYCONFIG_TARGET_DEVICE_NAME { unsigned char header[20]; /* +0x0000 38 2c 00 00 */ unsigned char flags[4]; /* +0x0014 af 72 00 00 */ unsigned char outputTechnology[4]; /* +0x0018 b3 16 00 00 */ unsigned short edidManufactureId; /* +0x001c */ unsigned short edidProductCodeId; /* +0x001e */ unsigned char connectorInstance[4]; /* +0x0020 75 00 00 00 */ unsigned char monitorFriendlyDeviceName[128]; /* +0x0024 b7 26 00 00 */ unsigned char monitorDevicePath[256]; /* +0x00a4 8b 1f 00 00 */ }; struct _CLAIM_SECURITY_ATTRIBUTES_INFORMATION:: { unsigned char pAttributeV1[8]; /* +0x0000 c9 27 00 00 */ }; struct _KEY_FLAGS_INFORMATION { unsigned long Wow64Flags; /* +0x0000 */ unsigned long KeyFlags; /* +0x0004 */ unsigned long ControlFlags; /* +0x0008 */ }; struct _CM_VIDEO_DEVICE_DATA { unsigned short Version; /* +0x0000 */ unsigned short Revision; /* +0x0002 */ unsigned long VideoClock; /* +0x0004 */ }; struct _wireVARIANT { unsigned long clSize; /* +0x0000 */ unsigned long rpcReserved; /* +0x0004 */ unsigned short vt; /* +0x0008 */ unsigned short wReserved1; /* +0x000a */ unsigned short wReserved2; /* +0x000c */ unsigned short wReserved3; /* +0x000e */ long long llVal; /* +0x0010 */ long lVal; /* +0x0010 */ unsigned char bVal; /* +0x0010 */ short iVal; /* +0x0010 */ /* unsigned char fltVal[0]; +0x0010 40 00 00 00 */ /* unsigned char dblVal[0]; +0x0010 41 00 00 00 */ short boolVal; /* +0x0010 */ long scode; /* +0x0010 */ /* unsigned char cyVal[0]; +0x0010 75 23 00 00 */ /* unsigned char date[0]; +0x0010 41 00 00 00 */ /* unsigned char bstrVal[0]; +0x0010 8d 25 00 00 */ /* unsigned char punkVal[0]; +0x0010 23 1c 00 00 */ /* unsigned char pdispVal[0]; +0x0010 7b 2f 00 00 */ /* unsigned char parray[0]; +0x0010 e0 71 00 00 */ /* unsigned char brecVal[0]; +0x0010 96 1f 00 00 */ unsigned char *pbVal; /* +0x0010 */ short *piVal; /* +0x0010 */ long *plVal; /* +0x0010 */ long long *pllVal; /* +0x0010 */ /* unsigned char pfltVal[0]; +0x0010 40 06 00 00 */ /* unsigned char pdblVal[0]; +0x0010 41 06 00 00 */ short *pboolVal; /* +0x0010 */ long *pscode; /* +0x0010 */ /* unsigned char pcyVal[0]; +0x0010 76 23 00 00 */ /* unsigned char pdate[0]; +0x0010 41 06 00 00 */ /* unsigned char pbstrVal[0]; +0x0010 ca 41 00 00 */ /* unsigned char ppunkVal[0]; +0x0010 85 1c 00 00 */ /* unsigned char ppdispVal[0]; +0x0010 96 2f 00 00 */ /* unsigned char pparray[0]; +0x0010 e3 72 00 00 */ /* unsigned char pvarVal[0]; +0x0010 22 2d 00 00 */ char cVal; /* +0x0010 */ unsigned short uiVal; /* +0x0010 */ unsigned long ulVal; /* +0x0010 */ unsigned long long ullVal; /* +0x0010 */ /* unsigned char intVal[0]; +0x0010 74 00 00 00 */ /* unsigned char uintVal[0]; +0x0010 75 00 00 00 */ /* unsigned char decVal[0]; +0x0010 ec 26 00 00 */ /* unsigned char pdecVal[0]; +0x0010 ed 26 00 00 */ char *pcVal; /* +0x0010 */ unsigned short *puiVal; /* +0x0010 */ unsigned long *pulVal; /* +0x0010 */ unsigned long long *pullVal; /* +0x0010 */ /* unsigned char pintVal[0]; +0x0010 74 06 00 00 */ unsigned char puintVal[16]; /* +0x0010 75 06 00 00 */ }; struct _TOKEN_SECURITY_ATTRIBUTE_V1:: { long long *pInt64; /* +0x0000 */ unsigned long long *pUint64; /* +0x0000 */ /* unsigned char pString[0]; +0x0000 07 21 00 00 */ /* unsigned char pFqbn[0]; +0x0000 7f 30 00 00 */ unsigned char pOctetString[8]; /* +0x0000 88 33 00 00 */ }; struct RPC_IMPORT_CONTEXT_P { void *LookupContext; /* +0x0000 */ void *ProposedHandle; /* +0x0008 */ unsigned char Bindings[8]; /* +0x0010 00 73 00 00 */ }; struct _GDI_OBJECT::__MIDL_IAdviseSink_0002 { /* unsigned char hBitmap[0]; +0x0000 ea 31 00 00 */ /* unsigned char hPalette[0]; +0x0000 a4 29 00 00 */ unsigned char hGeneric[8]; /* +0x0000 8c 19 00 00 */ }; struct _OBJECT_HANDLE_FLAG_INFORMATION { unsigned char Inherit; /* +0x0000 */ unsigned char ProtectFromClose; /* +0x0001 */ }; struct tagMONITORINFO { unsigned long cbSize; /* +0x0000 */ unsigned char rcMonitor[16]; /* +0x0004 06 1a 00 00 */ unsigned char rcWork[16]; /* +0x0014 06 1a 00 00 */ unsigned long dwFlags; /* +0x0024 */ }; struct tagCOMPOSITIONFORM { unsigned long dwStyle; /* +0x0000 */ unsigned char ptCurrentPos[8]; /* +0x0004 1b 1a 00 00 */ unsigned char rcArea[16]; /* +0x000c 06 1a 00 00 */ }; struct _LDR_DATA_TABLE_ENTRY64 { unsigned char InLoadOrderLinks[16]; /* +0x0000 65 25 00 00 */ unsigned char InMemoryOrderLinks[16]; /* +0x0010 65 25 00 00 */ unsigned char InInitializationOrderLinks[16]; /* +0x0020 65 25 00 00 */ unsigned long long DllBase; /* +0x0030 */ unsigned long long EntryPoint; /* +0x0038 */ unsigned long SizeOfImage; /* +0x0040 */ unsigned char FullDllName[16]; /* +0x0048 b7 2f 00 00 */ unsigned char BaseDllName[16]; /* +0x0058 b7 2f 00 00 */ unsigned long Flags; /* +0x0068 */ unsigned short LoadCount; /* +0x006c */ unsigned short TlsIndex; /* +0x006e */ /* unsigned char HashLinks[0]; +0x0070 65 25 00 00 */ unsigned long long SectionPointer; /* +0x0070 */ unsigned long CheckSum; /* +0x0078 */ unsigned long TimeDateStamp; /* +0x0080 */ unsigned long long LoadedImports; /* +0x0080 */ }; struct tagRAWINPUT:: { /* unsigned char mouse[0]; +0x0000 6d 2f 00 00 */ /* unsigned char keyboard[0]; +0x0000 1e 28 00 00 */ unsigned char hid[24]; /* +0x0000 25 66 00 00 */ }; struct BITMAPV5HEADER { unsigned long bV5Size; /* +0x0000 */ long bV5Width; /* +0x0004 */ long bV5Height; /* +0x0008 */ unsigned short bV5Planes; /* +0x000c */ unsigned short bV5BitCount; /* +0x000e */ unsigned long bV5Compression; /* +0x0010 */ unsigned long bV5SizeImage; /* +0x0014 */ long bV5XPelsPerMeter; /* +0x0018 */ long bV5YPelsPerMeter; /* +0x001c */ unsigned long bV5ClrUsed; /* +0x0020 */ unsigned long bV5ClrImportant; /* +0x0024 */ unsigned long bV5RedMask; /* +0x0028 */ unsigned long bV5GreenMask; /* +0x002c */ unsigned long bV5BlueMask; /* +0x0030 */ unsigned long bV5AlphaMask; /* +0x0034 */ unsigned long bV5CSType; /* +0x0038 */ unsigned char bV5Endpoints[36]; /* +0x003c f9 32 00 00 */ unsigned long bV5GammaRed; /* +0x0060 */ unsigned long bV5GammaGreen; /* +0x0064 */ unsigned long bV5GammaBlue; /* +0x0068 */ unsigned long bV5Intent; /* +0x006c */ unsigned long bV5ProfileData; /* +0x0070 */ unsigned long bV5ProfileSize; /* +0x0074 */ unsigned long bV5Reserved; /* +0x0078 */ }; struct _MIDL_SERVER_INFO_ { unsigned char pStubDesc[8]; /* +0x0000 dc 2f 00 00 */ unsigned char DispatchTable[8]; /* +0x0008 22 74 00 00 */ unsigned char ProcString[8]; /* +0x0010 5e 22 00 00 */ unsigned char FmtStringOffset[8]; /* +0x0018 60 22 00 00 */ unsigned char ThunkTable[8]; /* +0x0020 f3 22 00 00 */ unsigned char pTransferSyntax[8]; /* +0x0028 7a 2b 00 00 */ unsigned long long nCount; /* +0x0030 */ unsigned char pSyntaxInfo[8]; /* +0x0038 75 28 00 00 */ }; struct RETRIEVAL_POINTERS_BUFFER { unsigned long ExtentCount; /* +0x0000 */ unsigned char StartingVcn[24]; /* +0x0008 0e 19 00 00 */ }; struct RETRIEVAL_POINTERS_BUFFER:: { unsigned char NextVcn[8]; /* +0x0000 0e 19 00 00 */ unsigned char Lcn[8]; /* +0x0008 0e 19 00 00 */ }; struct BITMAPV4HEADER { unsigned long bV4Size; /* +0x0000 */ long bV4Width; /* +0x0004 */ long bV4Height; /* +0x0008 */ unsigned short bV4Planes; /* +0x000c */ unsigned short bV4BitCount; /* +0x000e */ unsigned long bV4V4Compression; /* +0x0010 */ unsigned long bV4SizeImage; /* +0x0014 */ long bV4XPelsPerMeter; /* +0x0018 */ long bV4YPelsPerMeter; /* +0x001c */ unsigned long bV4ClrUsed; /* +0x0020 */ unsigned long bV4ClrImportant; /* +0x0024 */ unsigned long bV4RedMask; /* +0x0028 */ unsigned long bV4GreenMask; /* +0x002c */ unsigned long bV4BlueMask; /* +0x0030 */ unsigned long bV4AlphaMask; /* +0x0034 */ unsigned long bV4CSType; /* +0x0038 */ unsigned char bV4Endpoints[36]; /* +0x003c f9 32 00 00 */ unsigned long bV4GammaRed; /* +0x0060 */ unsigned long bV4GammaGreen; /* +0x0064 */ unsigned long bV4GammaBlue; /* +0x0068 */ }; struct __m256 { unsigned char m256_f32[32]; /* +0x0000 7e 74 00 00 */ }; struct _NDR64_CONSTANT_IID_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char Guid[16]; /* +0x0004 6b 10 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 29 75 00 00 unsigned char frag2[16]; +0x0008 2a 75 00 00 }; */ /* struct { unsigned char frag1[16]; +0x0000 28 75 00 00 unsigned char frag2[24]; +0x0010 2c 75 00 00 unsigned char frag3; +0x0028 }; */ struct __midl_frag298_t { unsigned char frag1[24]; /* +0x0000 27 75 00 00 */ unsigned char frag2[48]; /* +0x0018 2e 75 00 00 */ }; struct __midl_frag114_t { unsigned char frag1[24]; /* +0x0000 31 75 00 00 */ unsigned char frag2[16]; /* +0x0018 32 75 00 00 */ unsigned char frag3[16]; /* +0x0028 32 75 00 00 */ unsigned char frag4[16]; /* +0x0038 32 75 00 00 */ unsigned char frag5[16]; /* +0x0048 32 75 00 00 */ unsigned char frag6[16]; /* +0x0058 32 75 00 00 */ }; struct __midl_frag265_t { unsigned char frag1[24]; /* +0x0000 31 75 00 00 */ unsigned char frag2[16]; /* +0x0018 32 75 00 00 */ unsigned char frag3[16]; /* +0x0028 32 75 00 00 */ unsigned char frag4[16]; /* +0x0038 32 75 00 00 */ unsigned char frag5[16]; /* +0x0048 32 75 00 00 */ }; struct _NDR64_USER_MARSHAL_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short RoutineIndex; /* +0x0002 */ unsigned short TransmittedTypeWireAlignment; /* +0x0004 */ unsigned short MemoryAlignment; /* +0x0006 */ unsigned char UserTypeMemorySize[4]; /* +0x0008 75 00 00 00 */ unsigned char TransmittedTypeBufferSize[4]; /* +0x000c 75 00 00 00 */ unsigned char TransmittedType[8]; /* +0x0010 3d 11 00 00 */ }; struct _NDR64_POINTER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char Pointee[8]; /* +0x0008 3d 11 00 00 */ }; struct _MIDL_SERVER_INFO_ { unsigned char pStubDesc[8]; /* +0x0000 dc 2f 00 00 */ unsigned char DispatchTable[8]; /* +0x0008 3f 75 00 00 */ unsigned char ProcString[8]; /* +0x0010 5e 22 00 00 */ unsigned char FmtStringOffset[8]; /* +0x0018 60 22 00 00 */ unsigned char ThunkTable[8]; /* +0x0020 f3 22 00 00 */ unsigned char pTransferSyntax[8]; /* +0x0028 7a 2b 00 00 */ unsigned long long nCount; /* +0x0030 */ unsigned char pSyntaxInfo[8]; /* +0x0038 75 28 00 00 */ }; struct __midl_frag368_t { unsigned char frag1[24]; /* +0x0000 31 75 00 00 */ unsigned char frag2[16]; /* +0x0018 32 75 00 00 */ unsigned char frag3[16]; /* +0x0028 32 75 00 00 */ unsigned char frag4[16]; /* +0x0038 32 75 00 00 */ }; struct tagCInterfaceStubVtbl { unsigned char header[32]; /* +0x0000 44 75 00 00 */ unsigned char Vtbl[80]; /* +0x0020 45 75 00 00 */ }; struct _MIDL_STUB_DESC { void *RpcInterfaceInformation; /* +0x0000 */ unsigned char pfnAllocate[8]; /* +0x0008 1e 11 00 00 */ unsigned char pfnFree[8]; /* +0x0010 21 11 00 00 */ unsigned char IMPLICIT_HANDLE_INFO[8]; /* +0x0018 48 75 00 00 */ unsigned char apfnNdrRundownRoutines[8]; /* +0x0020 ea 22 00 00 */ unsigned char aGenericBindingRoutinePairs[8]; /* +0x0028 ed 22 00 00 */ unsigned char apfnExprEval[8]; /* +0x0030 f3 22 00 00 */ unsigned char aXmitQuintuple[8]; /* +0x0038 f6 22 00 00 */ unsigned char pFormatTypes[8]; /* +0x0040 5e 22 00 00 */ unsigned char fCheckBounds[4]; /* +0x0048 74 00 00 00 */ unsigned long Version; /* +0x004c */ unsigned char pMallocFreeStruct[8]; /* +0x0050 f8 22 00 00 */ long MIDLVersion; /* +0x0058 */ unsigned char CommFaultOffsets[8]; /* +0x0060 fb 22 00 00 */ unsigned char aUserMarshalQuadruple[8]; /* +0x0068 fe 22 00 00 */ unsigned char NotifyRoutineTable[8]; /* +0x0070 01 23 00 00 */ unsigned long long mFlags; /* +0x0078 */ unsigned char CsRoutineTables[8]; /* +0x0080 04 23 00 00 */ void *ProxyServerInfo; /* +0x0088 */ unsigned char pExprInfo[8]; /* +0x0090 07 23 00 00 */ }; struct __midl_frag226_t { unsigned char frag1[24]; /* +0x0000 31 75 00 00 */ unsigned char frag2[16]; /* +0x0018 32 75 00 00 */ unsigned char frag3[16]; /* +0x0028 32 75 00 00 */ }; struct __midl_frag387_t { unsigned char frag1[24]; /* +0x0000 31 75 00 00 */ unsigned char frag2[16]; /* +0x0018 32 75 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 56 75 00 00 unsigned char Vtbl[80]; +0x0010 57 75 00 00 }; */ struct _packagemanagerapi_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[2416]; /* +0x0002 5b 75 00 00 */ }; struct __midl_frag244_t { unsigned char frag1[4]; /* +0x0000 75 00 00 00 */ unsigned char frag2[4]; /* +0x0004 67 75 00 00 */ unsigned char frag3[8]; /* +0x0008 68 75 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 56 75 00 00 unsigned char Vtbl[56]; +0x0010 75 75 00 00 }; */ struct __midl_frag309_t { unsigned char frag1[16]; /* +0x0000 7c 75 00 00 */ unsigned char frag2[48]; /* +0x0010 2e 75 00 00 */ unsigned char frag3[16]; /* +0x0040 7d 75 00 00 */ }; struct __midl_frag13_t { unsigned char frag1[8]; /* +0x0000 80 75 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 56 75 00 00 unsigned char Vtbl[144]; +0x0010 85 75 00 00 }; */ /* struct { unsigned char header[16]; +0x0000 56 75 00 00 unsigned char Vtbl[64]; +0x0010 88 75 00 00 }; */ struct __midl_frag8_t { unsigned char frag1[4]; /* +0x0000 75 00 00 00 */ unsigned char frag2[8]; /* +0x0004 68 75 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 56 75 00 00 unsigned char Vtbl[32]; +0x0010 ef 30 00 00 }; */ /* struct { unsigned char header[16]; +0x0000 56 75 00 00 unsigned char Vtbl[152]; +0x0010 b6 75 00 00 }; */ struct __midl_frag6_t { unsigned char frag1[16]; /* +0x0000 c6 75 00 00 */ }; /* struct { unsigned char header[16]; +0x0000 56 75 00 00 unsigned char Vtbl[88]; +0x0010 27 34 00 00 }; */ struct _packagemanagerapi_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[662]; /* +0x0002 cc 75 00 00 */ }; struct tagProxyFileInfo { unsigned char pProxyVtblList[8]; /* +0x0000 d9 75 00 00 */ unsigned char pStubVtblList[8]; /* +0x0008 db 75 00 00 */ unsigned char pNamesArray[8]; /* +0x0010 dc 75 00 00 */ unsigned char pDelegatedIIDs[8]; /* +0x0018 dd 75 00 00 */ unsigned char pIIDLookupRtn[8]; /* +0x0020 e0 75 00 00 */ unsigned short TableSize; /* +0x0028 */ unsigned short TableVersion; /* +0x002a */ unsigned char pAsyncIIDLookup[8]; /* +0x0030 dd 75 00 00 */ long long Filler2; /* +0x0038 */ long long Filler3; /* +0x0040 */ long long Filler4; /* +0x0048 */ }; struct __midl_frag7_t { unsigned char frag1[16]; /* +0x0000 7c 75 00 00 */ unsigned char frag2[16]; /* +0x0010 7d 75 00 00 */ }; struct _NDR64_ARRAY_FLAGS { /* unsigned char HasPointerInfo[0]; +0x0000 94 26 00 00 */ /* unsigned char HasElementInfo[0]; +0x0000 95 26 00 00 */ /* unsigned char IsMultiDimensional[0]; +0x0000 96 26 00 00 */ /* unsigned char IsArrayofStrings[0]; +0x0000 25 2d 00 00 */ /* unsigned char Reserved1[0]; +0x0000 11 2d 00 00 */ /* unsigned char Reserved2[0]; +0x0000 98 26 00 00 */ /* unsigned char Reserved3[0]; +0x0000 99 26 00 00 */ unsigned char Reserved4[1]; /* +0x0000 9a 26 00 00 */ }; struct IRpcChannelBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 f8 75 00 00 */ unsigned char AddRef[8]; /* +0x0008 fa 75 00 00 */ unsigned char Release[8]; /* +0x0010 fa 75 00 00 */ unsigned char GetBuffer[8]; /* +0x0018 fd 75 00 00 */ unsigned char SendReceive[8]; /* +0x0020 00 76 00 00 */ unsigned char FreeBuffer[8]; /* +0x0028 03 76 00 00 */ unsigned char GetDestCtx[8]; /* +0x0030 06 76 00 00 */ unsigned char IsConnected[8]; /* +0x0038 08 76 00 00 */ }; struct _NDR64_STRUCTURE_FLAGS { /* unsigned char HasPointerInfo[0]; +0x0000 94 26 00 00 */ /* unsigned char HasMemberInfo[0]; +0x0000 95 26 00 00 */ /* unsigned char HasConfArray[0]; +0x0000 96 26 00 00 */ /* unsigned char HasOrigPointerInfo[0]; +0x0000 25 2d 00 00 */ /* unsigned char HasOrigMemberInfo[0]; +0x0000 11 2d 00 00 */ /* unsigned char Reserved1[0]; +0x0000 98 26 00 00 */ /* unsigned char Reserved2[0]; +0x0000 99 26 00 00 */ unsigned char Reserved3[1]; /* +0x0000 9a 26 00 00 */ }; struct _NDR64_EXPR_VAR { unsigned char ExprType; /* +0x0000 */ unsigned char VarType; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ unsigned char Offset[4]; /* +0x0004 75 00 00 00 */ }; struct _NDR64_ARRAY_ELEMENT_INFO { unsigned char ElementMemSize[8]; /* +0x0000 75 00 00 00 */ unsigned char Element[8]; /* +0x0008 3d 11 00 00 */ }; struct _NDR64_CONF_STRUCTURE_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 11 76 00 00 */ unsigned char Reserve; /* +0x0003 */ unsigned char MemorySize[4]; /* +0x0004 75 00 00 00 */ unsigned char ArrayDescription[8]; /* +0x0008 3d 11 00 00 */ }; struct _NDR64_POINTER_REPEAT_FLAGS { /* unsigned char SetCorrMark[0]; +0x0000 94 26 00 00 */ unsigned char Reserved[1]; /* +0x0000 18 76 00 00 */ }; struct IUnknownVtbl { unsigned char QueryInterface[8]; /* +0x0000 1d 76 00 00 */ unsigned char AddRef[8]; /* +0x0008 1f 76 00 00 */ unsigned char Release[8]; /* +0x0010 1f 76 00 00 */ }; struct _NDR64_PROC_FORMAT { unsigned char Flags[4]; /* +0x0000 75 00 00 00 */ unsigned char StackSize[4]; /* +0x0004 75 00 00 00 */ unsigned char ConstantClientBufferSize[4]; /* +0x0008 75 00 00 00 */ unsigned char ConstantServerBufferSize[4]; /* +0x000c 75 00 00 00 */ unsigned short RpcFlags; /* +0x0010 */ unsigned short FloatDoubleMask; /* +0x0012 */ unsigned short NumberOfParams; /* +0x0014 */ unsigned short ExtensionSize; /* +0x0016 */ }; struct _NDR64_EXPR_NOOP { unsigned char ExprType; /* +0x0000 */ unsigned char Size; /* +0x0001 */ unsigned short Reserved; /* +0x0002 */ }; struct _NDR64_EXPR_OPERATOR { unsigned char ExprType; /* +0x0000 */ unsigned char Operator; /* +0x0001 */ unsigned char CastType; /* +0x0002 */ unsigned char Reserved; /* +0x0003 */ }; enum _tagEXPR_TOKEN { FC_EXPR_START = 0, FC_EXPR_ILLEGAL = 0, FC_EXPR_CONST32 = 1, FC_EXPR_CONST64 = 2, FC_EXPR_VAR = 3, FC_EXPR_OPER = 4, FC_EXPR_NOOP = 5, FC_EXPR_END = 6 }; struct _NDR64_POINTER_INSTANCE_HEADER_FORMAT { unsigned char Offset[4]; /* +0x0000 75 00 00 00 */ unsigned char Reserved[4]; /* +0x0004 75 00 00 00 */ }; struct _NDR64_CONF_ARRAY_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 35 76 00 00 */ unsigned char Reserved; /* +0x0003 */ unsigned char ElementSize[4]; /* +0x0004 75 00 00 00 */ unsigned char ConfDescriptor[8]; /* +0x0008 3d 11 00 00 */ }; struct tagCInterfaceProxyVtbl { unsigned char header[16]; /* +0x0000 56 75 00 00 */ /* unsigned char Vtbl[0]; +0x0010 39 76 00 00 */ }; struct _NDR64_PARAM_FLAGS { /* unsigned char MustSize[0]; +0x0000 2b 34 00 00 */ /* unsigned char MustFree[0]; +0x0000 2c 34 00 00 */ /* unsigned char IsPipe[0]; +0x0000 2d 34 00 00 */ /* unsigned char IsIn[0]; +0x0000 2e 34 00 00 */ /* unsigned char IsOut[0]; +0x0000 2f 34 00 00 */ /* unsigned char IsReturn[0]; +0x0000 30 34 00 00 */ /* unsigned char IsBasetype[0]; +0x0000 31 34 00 00 */ /* unsigned char IsByValue[0]; +0x0000 32 34 00 00 */ /* unsigned char IsSimpleRef[0]; +0x0000 33 34 00 00 */ /* unsigned char IsDontCallFreeInst[0]; +0x0000 34 34 00 00 */ /* unsigned char SaveForAsyncFinish[0]; +0x0000 35 34 00 00 */ /* unsigned char IsPartialIgnore[0]; +0x0000 36 34 00 00 */ /* unsigned char IsForceAllocate[0]; +0x0000 37 34 00 00 */ /* unsigned char Reserved[0]; +0x0000 3d 76 00 00 */ unsigned char UseCache[2]; /* +0x0000 3e 76 00 00 */ }; struct tagCInterfaceProxyHeader { unsigned char pStublessProxyInfo[8]; /* +0x0000 3d 11 00 00 */ unsigned char piid[8]; /* +0x0008 96 1c 00 00 */ }; struct tagCInterfaceStubHeader { unsigned char piid[8]; /* +0x0000 96 1c 00 00 */ unsigned char pServerInfo[8]; /* +0x0008 44 76 00 00 */ unsigned long DispatchTableCount; /* +0x0010 */ unsigned char pDispatchTable[8]; /* +0x0018 45 76 00 00 */ }; struct _NDR64_EXPR_CONST64 { unsigned char ExprType; /* +0x0000 */ unsigned char Reserved; /* +0x0001 */ unsigned short Reserved1; /* +0x0002 */ long long ConstValue; /* +0x0008 */ }; struct _NDR64_CONF_VAR_ARRAY_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 35 76 00 00 */ unsigned char Reserved; /* +0x0003 */ unsigned char ElementSize[4]; /* +0x0004 75 00 00 00 */ unsigned char ConfDescriptor[8]; /* +0x0008 3d 11 00 00 */ unsigned char VarDescriptor[8]; /* +0x0010 3d 11 00 00 */ }; struct _NDR64_PARAM_FORMAT { unsigned char Type[8]; /* +0x0000 3d 11 00 00 */ unsigned char Attributes[2]; /* +0x0008 4e 76 00 00 */ unsigned short Reserved; /* +0x000a */ unsigned char StackOffset[4]; /* +0x000c 75 00 00 00 */ }; struct _NDR64_STRUCTURE_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 11 76 00 00 */ unsigned char Reserve; /* +0x0003 */ unsigned char MemorySize[4]; /* +0x0004 75 00 00 00 */ }; struct __midl_frag75_t { unsigned char frag1[4]; /* +0x0000 75 00 00 00 */ unsigned char frag2[4]; /* +0x0004 57 76 00 00 */ unsigned char frag3[16]; /* +0x0008 58 76 00 00 */ }; struct IRpcStubBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 5f 76 00 00 */ unsigned char AddRef[8]; /* +0x0008 62 76 00 00 */ unsigned char Release[8]; /* +0x0010 62 76 00 00 */ unsigned char Connect[8]; /* +0x0018 65 76 00 00 */ unsigned char Disconnect[8]; /* +0x0020 67 76 00 00 */ unsigned char Invoke[8]; /* +0x0028 6a 76 00 00 */ unsigned char IsIIDSupported[8]; /* +0x0030 6d 76 00 00 */ unsigned char CountRefs[8]; /* +0x0038 62 76 00 00 */ unsigned char DebugServerQueryInterface[8]; /* +0x0040 70 76 00 00 */ unsigned char DebugServerRelease[8]; /* +0x0048 73 76 00 00 */ }; struct _NDR64_REPEAT_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags[1]; /* +0x0001 76 76 00 00 */ unsigned short Reserved; /* +0x0002 */ unsigned char Increment[4]; /* +0x0004 75 00 00 00 */ unsigned char OffsetToArray[4]; /* +0x0008 75 00 00 00 */ unsigned char NumberOfPointers[4]; /* +0x000c 75 00 00 00 */ }; struct tagCStdPSFactoryBuffer { unsigned char lpVtbl[8]; /* +0x0000 80 76 00 00 */ long RefCount; /* +0x0008 */ unsigned char pProxyFileList[8]; /* +0x0010 9a 74 00 00 */ long Filler1; /* +0x0018 */ }; struct IRpcProxyBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 86 76 00 00 */ unsigned char AddRef[8]; /* +0x0008 89 76 00 00 */ unsigned char Release[8]; /* +0x0010 89 76 00 00 */ unsigned char Connect[8]; /* +0x0018 8c 76 00 00 */ unsigned char Disconnect[8]; /* +0x0020 8e 76 00 00 */ }; struct IPSFactoryBufferVtbl { unsigned char QueryInterface[8]; /* +0x0000 94 76 00 00 */ unsigned char AddRef[8]; /* +0x0008 97 76 00 00 */ unsigned char Release[8]; /* +0x0010 97 76 00 00 */ unsigned char CreateProxy[8]; /* +0x0018 9a 76 00 00 */ unsigned char CreateStub[8]; /* +0x0020 9d 76 00 00 */ }; enum WPP_DEFINE_BIT_NAMES { WPP_BLOCK_START_DEPLOYMENTCLIENT_WPP_GUID = 0, WPP_BIT_VERBOSE = 1, WPP_BIT_IFFAILEDMACROS = 2, WPP_BLOCK_END_DEPLOYMENTCLIENT_WPP_GUID = 3 }; enum RoVariant::States { StateIsNull = 0, StateIsObjNoRef = 1, StateIsObj = 3, StateIsPV = 7 }; /* enum { WPP_TRACE_OPTIONS = 43 }; */ enum _WPP_FLAG_LEN_ENUM { WPP_FLAG_LEN = 1 }; enum WPP_CTL_NAMES { WPP_CTL_DEPLOYMENTCLIENT_WPP_GUID = 0, WPP_LAST_CTL = 1 }; enum XWinRT::ComLock::Kind { Kind_Srw = 0, Kind_StaReentrancy = 1 }; struct XWinRT::XPlex { unsigned char pNext[8]; /* +0x0000 b0 76 00 00 */ }; struct XWinRT::detail::ReentrancyGuard<1> { unsigned char _hr[8]; /* +0x0000 08 00 00 00 */ unsigned char _pGuard[8]; /* +0x0008 8f 26 00 00 */ }; struct XWinRT::FakeStl::_align_type { /* unsigned char _val[0]; +0x0000 41 00 00 00 */ unsigned char _pad[8]; /* +0x0000 83 25 00 00 */ }; struct XWinRT::FakeStl::_align_type { /* unsigned char _val[0]; +0x0000 74 00 00 00 */ unsigned char _pad[4]; /* +0x0000 00 78 00 00 */ }; struct XWinRT::IntVersionTag { unsigned char _iVersion[4]; /* +0x0000 74 00 00 00 */ }; struct _WPP_TRACE_CONTROL_BLOCK { unsigned char Next[8]; /* +0x0000 3a 79 00 00 */ unsigned long long UmRegistrationHandle; /* +0x0008 */ unsigned long long Logger; /* +0x0010 */ /* unsigned char Win2kCb[0]; +0x0010 38 79 00 00 */ void *Ptr; /* +0x0010 */ unsigned char Cb[8]; /* +0x0010 3a 79 00 00 */ unsigned char FlagsLen; /* +0x0018 */ unsigned char Level; /* +0x0019 */ unsigned short Options; /* +0x001a */ unsigned char Flags[4]; /* +0x001c d4 18 00 00 */ unsigned char ControlGuid[8]; /* +0x0020 96 1c 00 00 */ }; struct RpcPackageInfo { unsigned char name[8]; /* +0x0000 71 06 00 00 */ unsigned char publisher[8]; /* +0x0008 71 06 00 00 */ unsigned char resources[8]; /* +0x0010 71 06 00 00 */ unsigned short processorArchitecture; /* +0x0018 */ unsigned long long packageVersion; /* +0x0020 */ unsigned char isFramework[8]; /* +0x0028 74 00 00 00 */ unsigned char packageMoniker[8]; /* +0x0030 71 06 00 00 */ unsigned char installLocation[8]; /* +0x0038 71 06 00 00 */ unsigned char nextPackage[8]; /* +0x0040 65 79 00 00 */ }; enum RpcPackageInstallState { RpcNotInstalled = 0, RpcStaged = 1, RpcInstalled = 2 }; struct RpcVisibilityInfo { unsigned char userSid[8]; /* +0x0000 71 06 00 00 */ unsigned char installState[8]; /* +0x0008 c3 79 00 00 */ unsigned char nextVisibility[8]; /* +0x0010 01 75 00 00 */ }; struct Common::RegistryKey { unsigned char registryKeyHandle[8]; /* +0x0000 ce 10 00 00 */ }; struct RoVariant::Accessor { unsigned char _pI[8]; /* +0x0000 7f 1c 00 00 */ unsigned char _hrState[8]; /* +0x0008 08 00 00 00 */ }; struct RoVariant::OutRef { unsigned char _pOwner[8]; /* +0x0000 4c 7c 00 00 */ unsigned char _pI[8]; /* +0x0008 7f 1c 00 00 */ }; struct WPP_PROJECT_CONTROL_BLOCK { /* unsigned char Control[0]; +0x0000 39 79 00 00 */ unsigned char ReserveSpace[40]; /* +0x0000 15 7d 00 00 */ }; struct _WPP_WIN2K_CONTROL_BLOCK { unsigned long long Logger; /* +0x0000 */ unsigned long Flags; /* +0x0008 */ unsigned long Level; /* +0x000c */ unsigned char ControlGuid[8]; /* +0x0010 96 1c 00 00 */ }; struct RpcRegisterPackageInfo { unsigned char packageMoniker[8]; /* +0x0000 71 06 00 00 */ unsigned char dependencyPackages[8]; /* +0x0008 61 80 00 00 */ unsigned char nextPackage[8]; /* +0x0010 63 80 00 00 */ }; struct DependencyPackageMonikerList { unsigned char dependencyPackageMoniker[8]; /* +0x0000 71 06 00 00 */ unsigned char nextDependency[8]; /* +0x0008 61 80 00 00 */ }; enum RO_ERROR_REPORTING_FLAGS { RO_ERROR_REPORTING_NONE = 0, RO_ERROR_REPORTING_SUPPRESSEXCEPTIONS = 1, RO_ERROR_REPORTING_FORCEEXCEPTIONS = 2, RO_ERROR_REPORTING_USESETERRORINFO = 4, RO_ERROR_REPORTING_SUPPRESSSETERRORINFO = 8 }; enum Windows::Foundation::Diagnostics::RoErrorReportingFlags { None = 0, SuppressExceptions = 1, ForceExceptions = 2, UseSetErrorInfo = 4, SuppressSetErrorInfo = 8 }; enum PACKAGE_OPERATION { Invalid = 0, InstallBegin = 1, InstallEnd = 2 }; enum _WPP_FLAG_LEN_ENUM_MAX { WPP_MAX_FLAG_LEN_CHECK = 1 }; /* enum { WPP_VER_WIN2K_CB_FORWARD_PTR = 1, WPP_VER_WHISTLER_CB_FORWARD_PTR = 2, WPP_VER_LH_CB_FORWARD_PTR = 3 }; */ struct Common::AutoBaseInterlockedCounter { unsigned char counter[8]; /* +0x0000 55 8c 00 00 */ }; struct Common::HeapManager { unsigned long id; /* +0x0000 */ unsigned long alloc; /* +0x0004 */ unsigned char headAllocation[8]; /* +0x0008 6e 8c 00 00 */ unsigned char next[8]; /* +0x0010 2b 3f 00 00 */ unsigned char prev[8]; /* +0x0018 2b 3f 00 00 */ unsigned char allocationCount[4]; /* +0x0020 45 1c 00 00 */ unsigned char orphanedAllocationCount[4]; /* +0x0024 45 1c 00 00 */ }; struct Common::AutoLock { unsigned char lock[8]; /* +0x0000 a2 8c 00 00 */ }; struct Common::TextWriter { void *handle; /* +0x0000 */ }; enum tagExtentMode { DVEXTENT_CONTENT = 0, DVEXTENT_INTEGRAL = 1 }; enum __MIDL___MIDL_itf_msopc_0001_0067_0002 { OPC_WRITE_DEFAULT = 0, OPC_WRITE_FORCE_ZIP32 = 1 }; struct Common::Event { unsigned char eventHandle[8]; /* +0x0000 19 3f 00 00 */ }; struct Common::ByteBuffer { unsigned char value[16]; /* +0x0000 e2 7b 00 00 */ unsigned long capacity; /* +0x0010 */ }; enum __MIDL___MIDL_itf_msopc_0001_0067_0001 { OPC_READ_DEFAULT = 0, OPC_VALIDATE_ON_LOAD = 1, OPC_CACHE_ON_ACCESS = 2 }; enum __MIDL___MIDL_itf_msopc_0000_0000_0003 { OPC_STREAM_IO_READ = 1, OPC_STREAM_IO_WRITE = 2 }; enum __MIDL___MIDL_itf_msopc_0001_0074_0002 { OPC_RELATIONSHIP_SELECT_BY_ID = 0, OPC_RELATIONSHIP_SELECT_BY_TYPE = 1 }; enum __MIDL___MIDL_itf_msopc_0001_0074_0003 { OPC_RELATIONSHIP_SIGN_USING_SELECTORS = 0, OPC_RELATIONSHIP_SIGN_PART = 1 }; enum __MIDL___MIDL_itf_msopc_0000_0000_0002 { OPC_COMPRESSION_NONE = -1, OPC_COMPRESSION_NORMAL = 0, OPC_COMPRESSION_MAXIMUM = 1, OPC_COMPRESSION_FAST = 2, OPC_COMPRESSION_SUPERFAST = 3 }; enum __MIDL___MIDL_itf_msopc_0000_0000_0001 { OPC_URI_TARGET_MODE_INTERNAL = 0, OPC_URI_TARGET_MODE_EXTERNAL = 1 }; enum __MIDL___MIDL_itf_msopc_0001_0074_0001 { OPC_CANONICALIZATION_NONE = 0, OPC_CANONICALIZATION_C14N = 1, OPC_CANONICALIZATION_C14N_WITH_COMMENTS = 2 }; enum __MIDL___MIDL_itf_msopc_0001_0074_0005 { OPC_SIGNATURE_TIME_FORMAT_MILLISECONDS = 0, OPC_SIGNATURE_TIME_FORMAT_SECONDS = 1, OPC_SIGNATURE_TIME_FORMAT_MINUTES = 2, OPC_SIGNATURE_TIME_FORMAT_DAYS = 3, OPC_SIGNATURE_TIME_FORMAT_MONTHS = 4, OPC_SIGNATURE_TIME_FORMAT_YEARS = 5 }; struct APPX_PACKAGE_SETTINGS { unsigned char forceZip32[8]; /* +0x0000 74 00 00 00 */ unsigned char hashMethod[8]; /* +0x0008 2f 1a 00 00 */ }; enum __MIDL___MIDL_itf_msopc_0001_0074_0004 { OPC_CERTIFICATE_IN_CERTIFICATE_PART = 0, OPC_CERTIFICATE_IN_SIGNATURE_PART = 1, OPC_CERTIFICATE_NOT_EMBEDDED = 2 }; enum Common::Deployment::StagingSession::StagingSessionState { UnInitialized = 0, Initialized = 1, Staging = 2, Updating = 3, Cancelled = 4, Completed = 5 }; /* struct { unsigned char frag1[8]; +0x0000 c7 95 00 00 unsigned char frag2[8]; +0x0008 29 75 00 00 unsigned char frag3[16]; +0x0010 2a 75 00 00 unsigned char frag4[8]; +0x0020 c7 95 00 00 unsigned char frag5[8]; +0x0028 29 75 00 00 unsigned char frag6[16]; +0x0030 2a 75 00 00 unsigned char frag7[8]; +0x0040 c7 95 00 00 unsigned char frag8[8]; +0x0048 29 75 00 00 unsigned char frag9[16]; +0x0050 2a 75 00 00 unsigned char frag10; +0x0060 }; */ struct __midl_frag31_t { unsigned char frag1[8]; /* +0x0000 80 75 00 00 */ unsigned char frag2[104]; /* +0x0008 c9 95 00 00 */ }; struct __midl_frag51_t { unsigned char frag1[16]; /* +0x0000 2a 75 00 00 */ unsigned char frag2[16]; /* +0x0010 2a 75 00 00 */ unsigned char frag3[16]; /* +0x0020 2a 75 00 00 */ unsigned char frag4[16]; /* +0x0030 2a 75 00 00 */ unsigned char frag5[16]; /* +0x0040 2a 75 00 00 */ unsigned char frag6[16]; /* +0x0050 2a 75 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 d1 95 00 00 unsigned char frag2[8]; +0x0008 d1 95 00 00 unsigned char frag3[8]; +0x0010 d1 95 00 00 unsigned char frag4[8]; +0x0018 d1 95 00 00 unsigned char frag5[8]; +0x0020 d2 95 00 00 unsigned char frag6[8]; +0x0028 d1 95 00 00 unsigned char frag7[8]; +0x0030 d1 95 00 00 unsigned char frag8[8]; +0x0038 d2 95 00 00 unsigned char frag9[8]; +0x0040 d1 95 00 00 unsigned char frag10[8]; +0x0048 d1 95 00 00 unsigned char frag11[8]; +0x0050 d1 95 00 00 unsigned char frag12[8]; +0x0058 d1 95 00 00 }; */ struct __midl_frag45_t { unsigned char frag1[32]; /* +0x0000 d0 95 00 00 */ unsigned char frag2[96]; /* +0x0020 d4 95 00 00 */ }; struct _packagemanagerrpc_MIDL_PROC_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[598]; /* +0x0002 d9 95 00 00 */ }; struct _NDR64_CONFORMANT_STRING_FORMAT { unsigned char Header[4]; /* +0x0000 dd 95 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 c7 95 00 00 unsigned char frag2[8]; +0x0008 29 75 00 00 unsigned char frag3[16]; +0x0010 2a 75 00 00 unsigned char frag4[8]; +0x0020 c7 95 00 00 unsigned char frag5[8]; +0x0028 29 75 00 00 unsigned char frag6[16]; +0x0030 2a 75 00 00 unsigned char frag7; +0x0040 }; */ struct __midl_frag33_t { unsigned char frag1[8]; /* +0x0000 80 75 00 00 */ unsigned char frag2[72]; /* +0x0008 e1 95 00 00 */ }; struct _packagemanagerrpc_MIDL_TYPE_FORMAT_STRING { short Pad; /* +0x0000 */ unsigned char Format[462]; /* +0x0002 e5 95 00 00 */ }; struct __midl_frag78_t { unsigned char frag1[16]; /* +0x0000 2a 75 00 00 */ unsigned char frag2[16]; /* +0x0010 2a 75 00 00 */ }; /* struct { unsigned char frag1[8]; +0x0000 d1 95 00 00 unsigned char frag2[8]; +0x0008 d1 95 00 00 unsigned char frag3[8]; +0x0010 d2 95 00 00 unsigned char frag4[8]; +0x0018 d1 95 00 00 unsigned char frag5[8]; +0x0020 d1 95 00 00 }; */ struct __midl_frag76_t { unsigned char frag1[32]; /* +0x0000 d0 95 00 00 */ unsigned char frag2[40]; /* +0x0020 ed 95 00 00 */ }; struct _NDR64_RANGED_STRING_FORMAT { unsigned char Header[4]; /* +0x0000 dd 95 00 00 */ unsigned char Reserved[4]; /* +0x0004 75 00 00 00 */ unsigned long long Min; /* +0x0008 */ unsigned long long Max; /* +0x0010 */ }; struct __midl_frag2_t { unsigned char frag1[24]; /* +0x0000 31 75 00 00 */ unsigned char frag2[16]; /* +0x0018 32 75 00 00 */ unsigned char frag3[16]; /* +0x0028 32 75 00 00 */ unsigned char frag4[16]; /* +0x0038 32 75 00 00 */ unsigned char frag5[16]; /* +0x0048 32 75 00 00 */ unsigned char frag6[16]; /* +0x0058 32 75 00 00 */ unsigned char frag7[16]; /* +0x0068 32 75 00 00 */ unsigned char frag8[16]; /* +0x0078 32 75 00 00 */ unsigned char frag9[16]; /* +0x0088 32 75 00 00 */ unsigned char frag10[16]; /* +0x0098 32 75 00 00 */ unsigned char frag11[16]; /* +0x00a8 32 75 00 00 */ unsigned char frag12[16]; /* +0x00b8 32 75 00 00 */ }; struct _NDR64_STRING_FLAGS { /* unsigned char IsSized[0]; +0x0000 94 26 00 00 */ /* unsigned char IsRanged[0]; +0x0000 95 26 00 00 */ /* unsigned char Reserved3[0]; +0x0000 96 26 00 00 */ /* unsigned char Reserved4[0]; +0x0000 25 2d 00 00 */ /* unsigned char Reserved5[0]; +0x0000 11 2d 00 00 */ /* unsigned char Reserved6[0]; +0x0000 98 26 00 00 */ /* unsigned char Reserved7[0]; +0x0000 99 26 00 00 */ unsigned char Reserved8[1]; /* +0x0000 9a 26 00 00 */ }; struct NDR64_STRING_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags[1]; /* +0x0001 fd 95 00 00 */ unsigned short ElementSize; /* +0x0002 */ }; enum RpcDeploymentOptions { RpcNone = 0, RpcForceApplicationShutdown = 1, RpcDevelopmentMode = 2, RpcRepositoryRecoveryMode = 4 }; struct _NDR64_BOGUS_STRUCTURE_HEADER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Alignment; /* +0x0001 */ unsigned char Flags[1]; /* +0x0002 11 76 00 00 */ unsigned char Reserve; /* +0x0003 */ unsigned char MemorySize[4]; /* +0x0004 75 00 00 00 */ unsigned char OriginalMemberLayout[8]; /* +0x0008 3d 11 00 00 */ unsigned char OriginalPointerLayout[8]; /* +0x0010 3d 11 00 00 */ unsigned char PointerLayout[8]; /* +0x0018 3d 11 00 00 */ }; struct _NDR64_NO_REPEAT_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Flags; /* +0x0001 */ unsigned short Reserved1; /* +0x0002 */ unsigned char Reserved2[4]; /* +0x0004 75 00 00 00 */ }; struct _NDR64_SIMPLE_MEMBER_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Reserved1; /* +0x0001 */ unsigned short Reserved2; /* +0x0002 */ unsigned char Reserved3[4]; /* +0x0004 75 00 00 00 */ }; struct _NDR64_MEMPAD_FORMAT { unsigned char FormatCode; /* +0x0000 */ unsigned char Reserve1; /* +0x0001 */ unsigned short MemPad; /* +0x0002 */ unsigned char Reserved2[4]; /* +0x0004 75 00 00 00 */ }; enum RpcDeploymentOperation { RpcInvalidOperation = 0, RpcAddOperation = 1, RpcRemoveOperation = 2, RpcUpdateOperation = 3, RpcStageOperation = 4, RpcDestageOperation = 5, RpcRegisterOperation = 6, RpcAllUserAddOperation = 7, RpcAllUserRemoveOperation = 8 }; struct _PATCH_BUFFER { unsigned short PointerIndex; /* +0x0000 */ unsigned short Fill1; /* +0x0002 */ unsigned short BufferSize; /* +0x0004 */ unsigned short Fill2; /* +0x0006 */ unsigned char Buffer[248]; /* +0x0008 80 96 00 00 */ }; struct _UNICODE_STRING { unsigned short Length; /* +0x0000 */ unsigned short MaximumLength; /* +0x0002 */ unsigned short *Buffer; /* +0x0008 */ }; struct _LARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ long HighPart; /* +0x0004 */ /* unsigned char u[0]; +0x0000 8d 96 00 00 */ long long QuadPart; /* +0x0000 */ }; struct _KUSER_SHARED_DATA { unsigned long TickCountLowDeprecated; /* +0x0000 */ unsigned long TickCountMultiplier; /* +0x0004 */ unsigned char InterruptTime[12]; /* +0x0008 29 35 00 00 */ unsigned char SystemTime[12]; /* +0x0014 29 35 00 00 */ unsigned char TimeZoneBias[12]; /* +0x0020 29 35 00 00 */ unsigned short ImageNumberLow; /* +0x002c */ unsigned short ImageNumberHigh; /* +0x002e */ unsigned char NtSystemRoot[520]; /* +0x0030 0d 21 00 00 */ unsigned long MaxStackTraceDepth; /* +0x0238 */ unsigned long CryptoExponent; /* +0x023c */ unsigned long TimeZoneId; /* +0x0240 */ unsigned long LargePageMinimum; /* +0x0244 */ unsigned long AitSamplingValue; /* +0x0248 */ unsigned long AppCompatFlag; /* +0x024c */ unsigned long long RNGSeedVersion; /* +0x0250 */ unsigned long GlobalValidationRunlevel; /* +0x0258 */ unsigned char Reserved2[8]; /* +0x025c cc 1f 00 00 */ unsigned char NtProductType[4]; /* +0x0264 90 96 00 00 */ unsigned char ProductTypeIsValid; /* +0x0268 */ unsigned char Reserved0[1]; /* +0x0269 d7 18 00 00 */ unsigned short NativeProcessorArchitecture; /* +0x026a */ unsigned long NtMajorVersion; /* +0x026c */ unsigned long NtMinorVersion; /* +0x0270 */ unsigned char ProcessorFeatures[64]; /* +0x0274 eb 18 00 00 */ unsigned long Reserved1; /* +0x02b4 */ unsigned long Reserved3; /* +0x02b8 */ unsigned char TimeSlip[4]; /* +0x02bc 45 1c 00 00 */ unsigned char AlternativeArchitecture[4]; /* +0x02c0 91 96 00 00 */ unsigned char AltArchitecturePad[4]; /* +0x02c4 d4 18 00 00 */ unsigned char SystemExpirationDate[8]; /* +0x02c8 0e 19 00 00 */ unsigned long SuiteMask; /* +0x02d0 */ unsigned char KdDebuggerEnabled; /* +0x02d4 */ unsigned char MitigationPolicies; /* +0x02d5 */ /* unsigned char NXSupportPolicy[0]; +0x02d5 de 26 00 00 */ /* unsigned char SEHValidationPolicy[0]; +0x02d5 df 26 00 00 */ /* unsigned char CurDirDevicesSkippedForDlls[0]; +0x02d5 e0 26 00 00 */ unsigned char Reserved[1]; /* +0x02d5 e1 26 00 00 */ unsigned char Reserved6[2]; /* +0x02d6 0c 21 00 00 */ unsigned char ActiveConsoleId[4]; /* +0x02d8 45 1c 00 00 */ unsigned char DismountCount[4]; /* +0x02dc 45 1c 00 00 */ unsigned long ComPlusPackage; /* +0x02e0 */ unsigned long LastSystemRITEventTickCount; /* +0x02e4 */ unsigned long NumberOfPhysicalPages; /* +0x02e8 */ unsigned char SafeBootMode; /* +0x02ec */ unsigned char Reserved12[3]; /* +0x02ed 52 19 00 00 */ unsigned long SharedDataFlags; /* +0x02f0 */ /* unsigned char DbgErrorPortPresent[0]; +0x02f0 53 19 00 00 */ /* unsigned char DbgElevationEnabled[0]; +0x02f0 e3 21 00 00 */ /* unsigned char DbgVirtEnabled[0]; +0x02f0 e4 21 00 00 */ /* unsigned char DbgInstallerDetectEnabled[0]; +0x02f0 68 26 00 00 */ /* unsigned char DbgLkgEnabled[0]; +0x02f0 69 26 00 00 */ /* unsigned char DbgDynProcessorEnabled[0]; +0x02f0 5a 2b 00 00 */ /* unsigned char DbgConsoleBrokerEnabled[0]; +0x02f0 16 27 00 00 */ unsigned char SpareBits[4]; /* +0x02f0 10 2b 00 00 */ unsigned char DataFlagsPad[4]; /* +0x02f4 d4 18 00 00 */ unsigned long long TestRetInstruction; /* +0x02f8 */ unsigned long Reserved9; /* +0x0300 */ unsigned long Reserved10; /* +0x0304 */ unsigned char SystemCallPad[24]; /* +0x0308 2a 35 00 00 */ /* unsigned char TickCount[0]; +0x0320 29 35 00 00 */ /* unsigned char TickCountQuad[0]; +0x0320 29 21 00 00 */ unsigned char ReservedTickCountOverlay[12]; /* +0x0320 fa 18 00 00 */ unsigned char TickCountPad[4]; /* +0x032c d4 18 00 00 */ unsigned long Cookie; /* +0x0330 */ unsigned char CookiePad[4]; /* +0x0334 d4 18 00 00 */ long long ConsoleSessionForegroundProcessId; /* +0x0338 */ unsigned char TimeUpdateSequence[8]; /* +0x0340 29 21 00 00 */ unsigned long long LastTimeUpdateQpcValue; /* +0x0348 */ unsigned long long LastInterruptTimeUpdateQpcValue; /* +0x0350 */ unsigned long long QpcTimeIncrement; /* +0x0358 */ unsigned long QpcTimeIncrement32; /* +0x0360 */ unsigned char Reserved8[28]; /* +0x0364 2b 35 00 00 */ unsigned char UserModeGlobalLogger[32]; /* +0x0380 2c 35 00 00 */ unsigned long ImageFileExecutionOptions; /* +0x03a0 */ unsigned long LangGenerationCount; /* +0x03a4 */ unsigned char InterruptTimeBias[8]; /* +0x03a8 29 21 00 00 */ unsigned char TscQpcBias[8]; /* +0x03b0 29 21 00 00 */ unsigned char ActiveProcessorCount[4]; /* +0x03b8 45 1c 00 00 */ unsigned char ActiveGroupCount[1]; /* +0x03bc 2d 35 00 00 */ unsigned char QpcTimeIncrementShift; /* +0x03bd */ unsigned short TscQpcData; /* +0x03be */ unsigned char TscQpcEnabled[1]; /* +0x03be 2d 35 00 00 */ unsigned char TscQpcShift; /* +0x03bf */ unsigned char XState[528]; /* +0x03c0 2e 35 00 00 */ }; struct _ULARGE_INTEGER { unsigned long LowPart; /* +0x0000 */ unsigned long HighPart; /* +0x0004 */ /* unsigned char u[0]; +0x0000 94 96 00 00 */ unsigned long long QuadPart; /* +0x0000 */ }; /* struct { unsigned long Flags; +0x0000 unsigned char s[4]; +0x0000 97 96 00 00 }; */ struct _TP_CALLBACK_ENVIRON_V3 { unsigned long Version; /* +0x0000 */ unsigned char Pool[8]; /* +0x0008 07 29 00 00 */ unsigned char CleanupGroup[8]; /* +0x0010 d3 41 00 00 */ unsigned char CleanupGroupCancelCallback[8]; /* +0x0018 d5 41 00 00 */ void *RaceDll; /* +0x0020 */ unsigned char ActivationContext[8]; /* +0x0028 e7 20 00 00 */ unsigned char FinalizationCallback[8]; /* +0x0030 d8 41 00 00 */ unsigned char u[4]; /* +0x0038 99 96 00 00 */ unsigned char CallbackPriority[4]; /* +0x003c 9a 96 00 00 */ unsigned long Size; /* +0x0040 */ }; struct _IMAGE_DELAYLOAD_DESCRIPTOR { unsigned char Attributes[4]; /* +0x0000 9d 96 00 00 */ unsigned long DllNameRVA; /* +0x0004 */ unsigned long ModuleHandleRVA; /* +0x0008 */ unsigned long ImportAddressTableRVA; /* +0x000c */ unsigned long ImportNameTableRVA; /* +0x0010 */ unsigned long BoundImportAddressTableRVA; /* +0x0014 */ unsigned long UnloadInformationTableRVA; /* +0x0018 */ unsigned long TimeDateStamp; /* +0x001c */ }; struct _DELAYLOAD_INFO { unsigned long Size; /* +0x0000 */ unsigned char DelayloadDescriptor[8]; /* +0x0008 ed 41 00 00 */ unsigned char ThunkAddress[8]; /* +0x0010 6d 61 00 00 */ unsigned char TargetDllName[8]; /* +0x0018 4f 10 00 00 */ unsigned char TargetApiDescriptor[16]; /* +0x0020 a0 96 00 00 */ void *TargetModuleBase; /* +0x0030 */ void *Unused; /* +0x0038 */ unsigned long LastError; /* +0x0040 */ }; /* struct { /* unsigned char Name[0]; +0x0000 4f 10 00 00 unsigned long Ordinal; +0x0000 }; */ struct _DELAYLOAD_PROC_DESCRIPTOR { unsigned long ImportDescribedByName; /* +0x0000 */ unsigned char Description[8]; /* +0x0008 a4 96 00 00 */ }; struct _EXCEPTION_REGISTRATION_RECORD { unsigned char Next[8]; /* +0x0000 3d 26 00 00 */ unsigned char Handler[8]; /* +0x0008 8c 96 00 00 */ }; struct _IMAGE_THUNK_DATA64 { unsigned char u1[8]; /* +0x0000 a9 96 00 00 */ }; struct _SCOPE_TABLE { unsigned long Count; /* +0x0000 */ unsigned char ScopeRecord[16]; /* +0x0004 af 96 00 00 */ }; struct _DISPATCHER_CONTEXT { unsigned long long ControlPc; /* +0x0000 */ unsigned long long ImageBase; /* +0x0008 */ unsigned char FunctionEntry[8]; /* +0x0010 6d 25 00 00 */ unsigned long long EstablisherFrame; /* +0x0018 */ unsigned long long TargetIp; /* +0x0020 */ unsigned char ContextRecord[8]; /* +0x0028 ec 1e 00 00 */ unsigned char LanguageHandler[8]; /* +0x0030 8c 96 00 00 */ void *HandlerData; /* +0x0038 */ unsigned char HistoryTable[8]; /* +0x0040 36 41 00 00 */ unsigned long ScopeIndex; /* +0x0048 */ unsigned long Fill0; /* +0x004c */ }; struct _UNWIND_CODE { unsigned char CodeOffset; /* +0x0000 */ /* unsigned char UnwindOp[0]; +0x0001 91 19 00 00 */ /* unsigned char OpInfo[-1]; +0x0001 92 19 00 00 */ /* unsigned char EpilogueCode[0]; +0x0000 b9 96 00 00 */ unsigned short FrameOffset; /* +0x0000 */ }; /* struct { /* unsigned char EHandler[0]; +0x0000 53 19 00 00 /* unsigned char UHandler[0]; +0x0000 e3 21 00 00 unsigned char HasAlignment[4]; +0x0000 e4 21 00 00 }; */ /* struct { /* unsigned char Bits[0]; +0x0000 bd 96 00 00 long CookieOffset; +0x0000 }; */ struct _GS_HANDLER_DATA { unsigned char u[4]; /* +0x0000 bf 96 00 00 */ long AlignedBaseOffset; /* +0x0004 */ long Alignment; /* +0x0008 */ }; struct _EXCEPTION_RECORD { unsigned long ExceptionCode; /* +0x0000 */ unsigned long ExceptionFlags; /* +0x0004 */ unsigned char ExceptionRecord[8]; /* +0x0008 64 19 00 00 */ void *ExceptionAddress; /* +0x0010 */ unsigned long NumberParameters; /* +0x0018 */ unsigned char ExceptionInformation[120]; /* +0x0020 65 19 00 00 */ }; struct FT { unsigned long long ft_scalar; /* +0x0000 */ unsigned char ft_struct[8]; /* +0x0000 0d 10 00 00 */ }; struct __dllonexit__ { unsigned char onexitbegin[8]; /* +0x0000 d8 96 00 00 */ unsigned char onexitend[8]; /* +0x0008 d8 96 00 00 */ unsigned char onexitsmall[32]; /* +0x0010 d9 96 00 00 */ unsigned long onexitsmallcount; /* +0x0030 */ }; enum _MODE { KernelMode = 0, UserMode = 1, MaximumMode = 2 }; enum _REG_NOTIFY_CLASS { RegNtDeleteKey = 0, RegNtPreDeleteKey = 0, RegNtSetValueKey = 1, RegNtPreSetValueKey = 1, RegNtDeleteValueKey = 2, RegNtPreDeleteValueKey = 2, RegNtSetInformationKey = 3, RegNtPreSetInformationKey = 3, RegNtRenameKey = 4, RegNtPreRenameKey = 4, RegNtEnumerateKey = 5, RegNtPreEnumerateKey = 5, RegNtEnumerateValueKey = 6, RegNtPreEnumerateValueKey = 6, RegNtQueryKey = 7, RegNtPreQueryKey = 7, RegNtQueryValueKey = 8, RegNtPreQueryValueKey = 8, RegNtQueryMultipleValueKey = 9, RegNtPreQueryMultipleValueKey = 9, RegNtPreCreateKey = 10, RegNtPostCreateKey = 11, RegNtPreOpenKey = 12, RegNtPostOpenKey = 13, RegNtKeyHandleClose = 14, RegNtPreKeyHandleClose = 14, RegNtPostDeleteKey = 15, RegNtPostSetValueKey = 16, RegNtPostDeleteValueKey = 17, RegNtPostSetInformationKey = 18, RegNtPostRenameKey = 19, RegNtPostEnumerateKey = 20, RegNtPostEnumerateValueKey = 21, RegNtPostQueryKey = 22, RegNtPostQueryValueKey = 23, RegNtPostQueryMultipleValueKey = 24, RegNtPostKeyHandleClose = 25, RegNtPreCreateKeyEx = 26, RegNtPostCreateKeyEx = 27, RegNtPreOpenKeyEx = 28, RegNtPostOpenKeyEx = 29, RegNtPreFlushKey = 30, RegNtPostFlushKey = 31, RegNtPreLoadKey = 32, RegNtPostLoadKey = 33, RegNtPreUnLoadKey = 34, RegNtPostUnLoadKey = 35, RegNtPreQueryKeySecurity = 36, RegNtPostQueryKeySecurity = 37, RegNtPreSetKeySecurity = 38, RegNtPostSetKeySecurity = 39, RegNtCallbackObjectContextCleanup = 40, RegNtPreRestoreKey = 41, RegNtPostRestoreKey = 42, RegNtPreSaveKey = 43, RegNtPostSaveKey = 44, RegNtPreReplaceKey = 45, RegNtPostReplaceKey = 46, MaxRegNtNotifyClass = 47 }; enum _INTERLOCKED_RESULT { ResultNegative = 1, ResultZero = 0, ResultPositive = 2 }; enum _MEMORY_CACHING_TYPE { MmNonCached = 0, MmCached = 1, MmWriteCombined = 2, MmHardwareCoherentCached = 3, MmNonCachedUnordered = 4, MmUSWCCached = 5, MmMaximumCacheType = 6 }; enum _DEVICE_WAKE_DEPTH { DeviceWakeDepthNotWakeable = 0, DeviceWakeDepthD0 = 1, DeviceWakeDepthD1 = 2, DeviceWakeDepthD2 = 3, DeviceWakeDepthD3hot = 4, DeviceWakeDepthD3cold = 5, DeviceWakeDepthMaximum = 6 }; enum _POOL_TYPE { NonPagedPool = 0, NonPagedPoolExecute = 0, PagedPool = 1, NonPagedPoolMustSucceed = 2, DontUseThisType = 3, NonPagedPoolCacheAligned = 4, PagedPoolCacheAligned = 5, NonPagedPoolCacheAlignedMustS = 6, MaxPoolType = 7, NonPagedPoolBase = 0, NonPagedPoolBaseMustSucceed = 2, NonPagedPoolBaseCacheAligned = 4, NonPagedPoolBaseCacheAlignedMustS = 6, NonPagedPoolSession = 32, PagedPoolSession = 33, NonPagedPoolMustSucceedSession = 34, DontUseThisTypeSession = 35, NonPagedPoolCacheAlignedSession = 36, PagedPoolCacheAlignedSession = 37, NonPagedPoolCacheAlignedMustSSession = 38, NonPagedPoolNx = 512, NonPagedPoolNxCacheAligned = 516, NonPagedPoolSessionNx = 544 }; struct _OWNER_ENTRY { unsigned long long OwnerThread; /* +0x0000 */ /* unsigned char IoPriorityBoosted[0]; +0x0008 53 19 00 00 */ /* unsigned char OwnerReferenced[0]; +0x0008 e3 21 00 00 */ /* unsigned char OwnerCount[0]; +0x0008 c0 22 00 00 */ unsigned long TableSize; /* +0x0008 */ }; struct _KDESCRIPTOR { unsigned char Pad[6]; /* +0x0000 c5 65 00 00 */ unsigned short Limit; /* +0x0006 */ void *Base; /* +0x0008 */ }; /* struct { unsigned long MinimumVector; +0x0000 unsigned long MaximumVector; +0x0004 unsigned short AffinityPolicy; +0x0008 unsigned short Group; +0x000a unsigned char PriorityPolicy[4]; +0x000c 16 97 00 00 unsigned long long TargetedProcessors; +0x0010 }; */ /* struct { /* unsigned char Port[0]; +0x0000 15 97 00 00 /* unsigned char Memory[0]; +0x0000 15 97 00 00 /* unsigned char Interrupt[0]; +0x0000 18 97 00 00 /* unsigned char Dma[0]; +0x0000 19 97 00 00 /* unsigned char DmaV3[0]; +0x0000 1a 97 00 00 /* unsigned char Generic[0]; +0x0000 15 97 00 00 /* unsigned char DevicePrivate[0]; +0x0000 1b 97 00 00 /* unsigned char BusNumber[0]; +0x0000 1c 97 00 00 /* unsigned char ConfigData[0]; +0x0000 1d 97 00 00 /* unsigned char Memory40[0]; +0x0000 1e 97 00 00 /* unsigned char Memory48[0]; +0x0000 1f 97 00 00 /* unsigned char Memory64[0]; +0x0000 20 97 00 00 unsigned char Connection[24]; +0x0000 21 97 00 00 }; */ struct _IO_RESOURCE_DESCRIPTOR { unsigned char Option; /* +0x0000 */ unsigned char Type; /* +0x0001 */ unsigned char ShareDisposition; /* +0x0002 */ unsigned char Spare1; /* +0x0003 */ unsigned short Flags; /* +0x0004 */ unsigned short Spare2; /* +0x0006 */ unsigned char u[24]; /* +0x0008 23 97 00 00 */ }; enum _SECURITY_OPERATION_CODE { SetSecurityDescriptor = 0, QuerySecurityDescriptor = 1, DeleteSecurityDescriptor = 2, AssignSecurityDescriptor = 3 }; /* struct { unsigned short Level; +0x0000 unsigned short Group; +0x0002 unsigned long Vector; +0x0004 unsigned long long Affinity; +0x0008 }; */ /* struct { unsigned short Group; +0x0000 unsigned short MessageCount; +0x0002 unsigned long Vector; +0x0004 unsigned long long Affinity; +0x0008 }; */ /* struct { /* unsigned char Raw[0]; +0x0000 2c 97 00 00 unsigned char Translated[16]; +0x0000 2a 97 00 00 }; */ /* struct { /* unsigned char Generic[0]; +0x0000 28 97 00 00 /* unsigned char Port[0]; +0x0000 28 97 00 00 /* unsigned char Interrupt[0]; +0x0000 2a 97 00 00 /* unsigned char MessageInterrupt[0]; +0x0000 2e 97 00 00 /* unsigned char Memory[0]; +0x0000 28 97 00 00 /* unsigned char Dma[0]; +0x0000 2f 97 00 00 /* unsigned char DmaV3[0]; +0x0000 30 97 00 00 /* unsigned char DevicePrivate[0]; +0x0000 1b 97 00 00 /* unsigned char BusNumber[0]; +0x0000 31 97 00 00 /* unsigned char DeviceSpecificData[0]; +0x0000 32 97 00 00 /* unsigned char Memory40[0]; +0x0000 33 97 00 00 /* unsigned char Memory48[0]; +0x0000 34 97 00 00 /* unsigned char Memory64[0]; +0x0000 35 97 00 00 unsigned char Connection[16]; +0x0000 21 97 00 00 }; */ struct _CM_PARTIAL_RESOURCE_DESCRIPTOR { unsigned char Type; /* +0x0000 */ unsigned char ShareDisposition; /* +0x0001 */ unsigned short Flags; /* +0x0002 */ unsigned char u[16]; /* +0x0004 37 97 00 00 */ }; struct _OBJECT_DUMP_CONTROL { void *Stream; /* +0x0000 */ unsigned long Detail; /* +0x0008 */ }; struct _SECURITY_QUALITY_OF_SERVICE { unsigned long Length; /* +0x0000 */ unsigned char ImpersonationLevel[4]; /* +0x0004 49 97 00 00 */ unsigned char ContextTrackingMode; /* +0x0008 */ unsigned char EffectiveOnly; /* +0x0009 */ }; struct _PAGED_LOOKASIDE_LIST { unsigned char L[128]; /* +0x0000 67 97 00 00 */ }; struct _TXN_PARAMETER_BLOCK { unsigned short Length; /* +0x0000 */ unsigned short TxFsContext; /* +0x0002 */ void *TransactionObject; /* +0x0008 */ }; enum _WHEA_ERROR_SEVERITY { WheaErrSevRecoverable = 0, WheaErrSevFatal = 1, WheaErrSevCorrected = 2, WheaErrSevInformational = 3 }; enum _KINTERRUPT_POLARITY { InterruptPolarityUnknown = 0, InterruptActiveHigh = 1, InterruptRisingEdge = 1, InterruptActiveLow = 2, InterruptFallingEdge = 2, InterruptActiveBoth = 3 }; enum _IO_ALLOCATION_ACTION { KeepObject = 1, DeallocateObject = 2, DeallocateObjectKeepRegisters = 3 }; struct _WHEA_PERSISTENCE_INFO { /* unsigned char Signature[0]; +0x0000 61 6c 00 00 */ /* unsigned char Length[0]; +0x0000 7d 97 00 00 */ /* unsigned char Identifier[0]; +0x0000 7e 97 00 00 */ /* unsigned char Attributes[0]; +0x0000 7f 97 00 00 */ /* unsigned char DoNotLog[0]; +0x0000 80 97 00 00 */ /* unsigned char Reserved[0]; +0x0000 81 97 00 00 */ unsigned long long AsULONGLONG; /* +0x0000 */ }; struct _KEVENT { unsigned char Header[24]; /* +0x0000 87 97 00 00 */ }; struct _SCATTER_GATHER_ELEMENT { unsigned char Address[8]; /* +0x0000 0e 19 00 00 */ unsigned long Length; /* +0x0008 */ unsigned long long Reserved; /* +0x0010 */ }; struct _KDPC { unsigned char Type; /* +0x0000 */ unsigned char Importance; /* +0x0001 */ unsigned char Number[6]; /* +0x0002 29 34 00 00 */ unsigned char DpcListEntry[16]; /* +0x0008 7d 1a 00 00 */ unsigned char DeferredRoutine[8]; /* +0x0018 9d 97 00 00 */ void *DeferredContext; /* +0x0020 */ void *SystemArgument1; /* +0x0028 */ void *SystemArgument2; /* +0x0030 */ void *DpcData; /* +0x0038 */ }; struct _KDEVICE_QUEUE { short Type; /* +0x0000 */ short Size; /* +0x0002 */ unsigned char DeviceListHead[16]; /* +0x0008 7d 1a 00 00 */ unsigned long long Lock; /* +0x0018 */ unsigned char Busy; /* +0x0020 */ /* unsigned char Reserved[0]; +0x0020 a0 97 00 00 */ unsigned char Hint[8]; /* +0x0020 a1 97 00 00 */ }; struct _SECURITY_SUBJECT_CONTEXT { void *ClientToken; /* +0x0000 */ unsigned char ImpersonationLevel[8]; /* +0x0008 49 97 00 00 */ void *PrimaryToken; /* +0x0010 */ void *ProcessAuditId; /* +0x0018 */ }; enum _DEVICE_USAGE_NOTIFICATION_TYPE { DeviceUsageTypeUndefined = 0, DeviceUsageTypePaging = 1, DeviceUsageTypeHibernation = 2, DeviceUsageTypeDumpFile = 3, DeviceUsageTypeBoot = 4 }; struct _DMA_OPERATIONS { unsigned long Size; /* +0x0000 */ unsigned char PutDmaAdapter[8]; /* +0x0008 b2 97 00 00 */ unsigned char AllocateCommonBuffer[8]; /* +0x0010 b5 97 00 00 */ unsigned char FreeCommonBuffer[8]; /* +0x0018 b8 97 00 00 */ unsigned char AllocateAdapterChannel[8]; /* +0x0020 bb 97 00 00 */ unsigned char FlushAdapterBuffers[8]; /* +0x0028 be 97 00 00 */ unsigned char FreeAdapterChannel[8]; /* +0x0030 b2 97 00 00 */ unsigned char FreeMapRegisters[8]; /* +0x0038 c1 97 00 00 */ unsigned char MapTransfer[8]; /* +0x0040 c4 97 00 00 */ unsigned char GetDmaAlignment[8]; /* +0x0048 c6 97 00 00 */ unsigned char ReadDmaCounter[8]; /* +0x0050 c6 97 00 00 */ unsigned char GetScatterGatherList[8]; /* +0x0058 cc 97 00 00 */ unsigned char PutScatterGatherList[8]; /* +0x0060 cf 97 00 00 */ unsigned char CalculateScatterGatherList[8]; /* +0x0068 d2 97 00 00 */ unsigned char BuildScatterGatherList[8]; /* +0x0070 d5 97 00 00 */ unsigned char BuildMdlFromScatterGatherList[8]; /* +0x0078 76 97 00 00 */ unsigned char GetDmaAdapterInfo[8]; /* +0x0080 da 97 00 00 */ unsigned char GetDmaTransferInfo[8]; /* +0x0088 df 97 00 00 */ unsigned char InitializeDmaTransferContext[8]; /* +0x0090 e2 97 00 00 */ unsigned char AllocateCommonBufferEx[8]; /* +0x0098 e5 97 00 00 */ unsigned char AllocateAdapterChannelEx[8]; /* +0x00a0 e8 97 00 00 */ unsigned char ConfigureAdapterChannel[8]; /* +0x00a8 eb 97 00 00 */ unsigned char CancelAdapterChannel[8]; /* +0x00b0 ee 97 00 00 */ unsigned char MapTransferEx[8]; /* +0x00b8 f5 97 00 00 */ unsigned char GetScatterGatherListEx[8]; /* +0x00c0 f9 97 00 00 */ unsigned char BuildScatterGatherListEx[8]; /* +0x00c8 fc 97 00 00 */ unsigned char FlushAdapterBuffersEx[8]; /* +0x00d0 ff 97 00 00 */ unsigned char FreeAdapterObject[8]; /* +0x00d8 02 98 00 00 */ unsigned char CancelMappedTransfer[8]; /* +0x00e0 e2 97 00 00 */ }; struct _KAPC { unsigned char Type; /* +0x0000 */ unsigned char SpareByte0; /* +0x0001 */ unsigned char Size; /* +0x0002 */ unsigned char SpareByte1; /* +0x0003 */ unsigned long SpareLong0; /* +0x0004 */ unsigned char Thread[8]; /* +0x0008 61 97 00 00 */ unsigned char ApcListEntry[16]; /* +0x0010 7d 1a 00 00 */ unsigned char KernelRoutine[8]; /* +0x0020 0c 98 00 00 */ unsigned char RundownRoutine[8]; /* +0x0028 0f 98 00 00 */ /* unsigned char NormalRoutine[-16]; +0x0030 26 23 00 00 */ unsigned char Reserved[24]; /* +0x0020 10 98 00 00 */ void *NormalContext; /* +0x0038 */ void *SystemArgument1; /* +0x0040 */ void *SystemArgument2; /* +0x0048 */ char ApcStateIndex; /* +0x0050 */ char ApcMode; /* +0x0051 */ unsigned char Inserted; /* +0x0052 */ }; struct _KSEMAPHORE { unsigned char Header[24]; /* +0x0000 87 97 00 00 */ long Limit; /* +0x0018 */ }; struct _ERESOURCE { unsigned char SystemResourcesList[16]; /* +0x0000 7d 1a 00 00 */ unsigned char OwnerTable[8]; /* +0x0010 ee 96 00 00 */ short ActiveCount; /* +0x0018 */ unsigned short Flag; /* +0x001a */ unsigned char ReservedLowFlags; /* +0x001a */ unsigned char WaiterPriority; /* +0x001b */ unsigned char SharedWaiters[8]; /* +0x0020 3f 97 00 00 */ unsigned char ExclusiveWaiters[8]; /* +0x0028 16 98 00 00 */ unsigned char OwnerEntry[16]; /* +0x0030 ed 96 00 00 */ unsigned long ActiveEntries; /* +0x0040 */ unsigned long ContentionCount; /* +0x0044 */ unsigned long NumberOfSharedWaiters; /* +0x0048 */ unsigned long NumberOfExclusiveWaiters; /* +0x004c */ void *Reserved2; /* +0x0050 */ void *Address; /* +0x0058 */ unsigned long long CreatorBackTraceIndex; /* +0x0058 */ unsigned long long SpinLock; /* +0x0060 */ }; struct _KPROCESSOR_STATE { unsigned char SpecialRegisters[224]; /* +0x0000 1a 98 00 00 */ unsigned char ContextFrame[1232]; /* +0x00e0 1c 19 00 00 */ }; /* struct { /* unsigned char InitialPrivilegeSet[0]; +0x0000 25 98 00 00 unsigned char PrivilegeSet[44]; +0x0000 44 19 00 00 }; */ struct _ACCESS_STATE { unsigned char OperationID[8]; /* +0x0000 90 1e 00 00 */ unsigned char SecurityEvaluated; /* +0x0008 */ unsigned char GenerateAudit; /* +0x0009 */ unsigned char GenerateOnClose; /* +0x000a */ unsigned char PrivilegesAllocated; /* +0x000b */ unsigned long Flags; /* +0x000c */ unsigned long RemainingDesiredAccess; /* +0x0010 */ unsigned long PreviouslyGrantedAccess; /* +0x0014 */ unsigned long OriginalDesiredAccess; /* +0x0018 */ unsigned char SubjectSecurityContext[32]; /* +0x0020 24 98 00 00 */ void *SecurityDescriptor; /* +0x0040 */ void *AuxData; /* +0x0048 */ unsigned char Privileges[44]; /* +0x0050 27 98 00 00 */ unsigned char AuditPrivileges; /* +0x007c */ unsigned char ObjectName[16]; /* +0x0080 c1 18 00 00 */ unsigned char ObjectTypeName[16]; /* +0x0090 c1 18 00 00 */ }; enum _WHEA_ERROR_PACKET_DATA_FORMAT { WheaDataFormatIPFSalRecord = 0, WheaDataFormatXPFMCA = 1, WheaDataFormatMemory = 2, WheaDataFormatPCIExpress = 3, WheaDataFormatNMIPort = 4, WheaDataFormatPCIXBus = 5, WheaDataFormatPCIXDevice = 6, WheaDataFormatGeneric = 7, WheaDataFormatMax = 8 }; struct _KPCR { /* unsigned char NtTib[0]; +0x0000 24 2e 00 00 */ unsigned char GdtBase[8]; /* +0x0000 2d 98 00 00 */ unsigned char TssBase[8]; /* +0x0008 2f 98 00 00 */ unsigned long long UserRsp; /* +0x0010 */ unsigned char Self[8]; /* +0x0018 31 98 00 00 */ unsigned char CurrentPrcb[8]; /* +0x0020 33 98 00 00 */ unsigned char LockArray[8]; /* +0x0028 be 29 00 00 */ void *Used_Self; /* +0x0030 */ unsigned char IdtBase[8]; /* +0x0038 35 98 00 00 */ unsigned char Unused[16]; /* +0x0040 d1 1e 00 00 */ unsigned char Irql; /* +0x0050 */ unsigned char SecondLevelCacheAssociativity; /* +0x0051 */ unsigned char ObsoleteNumber; /* +0x0052 */ unsigned char Fill0; /* +0x0053 */ unsigned char Unused0[12]; /* +0x0054 fa 18 00 00 */ unsigned short MajorVersion; /* +0x0060 */ unsigned short MinorVersion; /* +0x0062 */ unsigned long StallScaleFactor; /* +0x0064 */ unsigned char Unused1[24]; /* +0x0068 10 98 00 00 */ unsigned char KernelReserved[60]; /* +0x0080 2d 2f 00 00 */ unsigned long SecondLevelCacheSize; /* +0x00bc */ unsigned char HalReserved[64]; /* +0x00c0 29 2e 00 00 */ unsigned long Unused2; /* +0x0100 */ void *KdVersionBlock; /* +0x0108 */ void *Unused3; /* +0x0110 */ unsigned char PcrAlign1[104]; /* +0x0118 36 98 00 00 */ unsigned char Prcb[1648]; /* +0x0180 32 98 00 00 */ }; struct _MDL { unsigned char Next[8]; /* +0x0000 05 97 00 00 */ short Size; /* +0x0008 */ short MdlFlags; /* +0x000a */ unsigned char Process[8]; /* +0x0010 fc 96 00 00 */ void *MappedSystemVa; /* +0x0018 */ void *StartVa; /* +0x0020 */ unsigned long ByteCount; /* +0x0028 */ unsigned long ByteOffset; /* +0x002c */ }; struct _INITIAL_PRIVILEGE_SET { unsigned long PrivilegeCount; /* +0x0000 */ unsigned long Control; /* +0x0004 */ unsigned char Privilege[36]; /* +0x0008 41 98 00 00 */ }; struct _IO_DRIVER_CREATE_CONTEXT { short Size; /* +0x0000 */ unsigned char ExtraCreateParameter[8]; /* +0x0008 45 98 00 00 */ void *DeviceObjectHint; /* +0x0010 */ unsigned char TxnParameters[8]; /* +0x0018 47 98 00 00 */ }; struct _WHEA_ERROR_RECORD_HEADER_FLAGS { /* unsigned char Recovered[0]; +0x0000 53 19 00 00 */ /* unsigned char PreviousError[0]; +0x0000 e3 21 00 00 */ /* unsigned char Simulated[0]; +0x0000 e4 21 00 00 */ /* unsigned char Reserved[0]; +0x0000 f4 32 00 00 */ unsigned long AsULONG; /* +0x0000 */ }; struct _GENERAL_LOOKASIDE_POOL { /* unsigned char ListHead[0]; +0x0000 cb 30 00 00 */ unsigned char SingleListHead[16]; /* +0x0000 21 21 00 00 */ unsigned short Depth; /* +0x0010 */ unsigned short MaximumDepth; /* +0x0012 */ unsigned long TotalAllocates; /* +0x0014 */ unsigned long AllocateMisses; /* +0x0018 */ unsigned long AllocateHits; /* +0x0018 */ unsigned long TotalFrees; /* +0x001c */ unsigned long FreeMisses; /* +0x0020 */ unsigned long FreeHits; /* +0x0020 */ unsigned char Type[4]; /* +0x0024 4e 98 00 00 */ unsigned long Tag; /* +0x0028 */ unsigned long Size; /* +0x002c */ /* unsigned char AllocateEx[0]; +0x0030 53 98 00 00 */ unsigned char Allocate[8]; /* +0x0030 56 98 00 00 */ /* unsigned char FreeEx[0]; +0x0038 59 98 00 00 */ unsigned char Free[8]; /* +0x0038 21 11 00 00 */ unsigned char ListEntry[16]; /* +0x0040 7d 1a 00 00 */ unsigned long LastTotalAllocates; /* +0x0050 */ unsigned long LastAllocateMisses; /* +0x0054 */ unsigned long LastAllocateHits; /* +0x0054 */ unsigned char Future[8]; /* +0x0058 cc 1f 00 00 */ }; enum DEVICE_TEXT_TYPE { DeviceTextDescription = 0, DeviceTextLocationInformation = 1 }; struct _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_FLAGS { /* unsigned char Primary[0]; +0x0000 53 19 00 00 */ /* unsigned char ContainmentWarning[0]; +0x0000 e3 21 00 00 */ /* unsigned char Reset[0]; +0x0000 e4 21 00 00 */ /* unsigned char ThresholdExceeded[0]; +0x0000 68 26 00 00 */ /* unsigned char ResourceNotAvailable[0]; +0x0000 69 26 00 00 */ /* unsigned char LatentError[0]; +0x0000 5a 2b 00 00 */ /* unsigned char Reserved[0]; +0x0000 1b 38 00 00 */ unsigned long AsULONG; /* +0x0000 */ }; struct _FAST_IO_DISPATCH { unsigned long SizeOfFastIoDispatch; /* +0x0000 */ unsigned char FastIoCheckIfPossible[8]; /* +0x0008 5c 97 00 00 */ unsigned char FastIoRead[8]; /* +0x0010 0b 97 00 00 */ unsigned char FastIoWrite[8]; /* +0x0018 0b 97 00 00 */ unsigned char FastIoQueryBasicInfo[8]; /* +0x0020 60 98 00 00 */ unsigned char FastIoQueryStandardInfo[8]; /* +0x0028 f7 96 00 00 */ unsigned char FastIoLock[8]; /* +0x0030 ff 96 00 00 */ unsigned char FastIoUnlockSingle[8]; /* +0x0038 61 98 00 00 */ unsigned char FastIoUnlockAll[8]; /* +0x0040 8e 97 00 00 */ unsigned char FastIoUnlockAllByKey[8]; /* +0x0048 5f 97 00 00 */ unsigned char FastIoDeviceControl[8]; /* +0x0050 42 97 00 00 */ unsigned char AcquireFileForNtCreateSection[8]; /* +0x0058 fa 96 00 00 */ unsigned char ReleaseFileForNtCreateSection[8]; /* +0x0060 fa 96 00 00 */ unsigned char FastIoDetachDevice[8]; /* +0x0068 62 98 00 00 */ unsigned char FastIoQueryNetworkOpenInfo[8]; /* +0x0070 19 98 00 00 */ unsigned char AcquireForModWrite[8]; /* +0x0078 22 98 00 00 */ unsigned char MdlRead[8]; /* +0x0080 14 97 00 00 */ unsigned char MdlReadComplete[8]; /* +0x0088 10 97 00 00 */ unsigned char PrepareMdlWrite[8]; /* +0x0090 14 97 00 00 */ unsigned char MdlWriteComplete[8]; /* +0x0098 08 97 00 00 */ unsigned char FastIoReadCompressed[8]; /* +0x00a0 3e 98 00 00 */ unsigned char FastIoWriteCompressed[8]; /* +0x00a8 3e 98 00 00 */ unsigned char MdlReadCompleteCompressed[8]; /* +0x00b0 10 97 00 00 */ unsigned char MdlWriteCompleteCompressed[8]; /* +0x00b8 08 97 00 00 */ unsigned char FastIoQueryOpen[8]; /* +0x00c0 63 98 00 00 */ unsigned char ReleaseForModWrite[8]; /* +0x00c8 66 98 00 00 */ unsigned char AcquireForCcFlush[8]; /* +0x00d0 23 98 00 00 */ unsigned char ReleaseForCcFlush[8]; /* +0x00d8 23 98 00 00 */ }; struct _WHEA_ERROR_RECORD_HEADER { unsigned long Signature; /* +0x0000 */ unsigned char Revision[2]; /* +0x0004 76 98 00 00 */ unsigned long SignatureEnd; /* +0x0006 */ unsigned short SectionCount; /* +0x000a */ unsigned char Severity[4]; /* +0x000c 77 98 00 00 */ unsigned char ValidBits[4]; /* +0x0010 78 98 00 00 */ unsigned long Length; /* +0x0014 */ unsigned char Timestamp[8]; /* +0x0018 79 98 00 00 */ unsigned char PlatformId[16]; /* +0x0020 6b 10 00 00 */ unsigned char PartitionId[16]; /* +0x0030 6b 10 00 00 */ unsigned char CreatorId[16]; /* +0x0040 6b 10 00 00 */ unsigned char NotifyType[16]; /* +0x0050 6b 10 00 00 */ unsigned long long RecordId; /* +0x0060 */ unsigned char Flags[4]; /* +0x0068 7a 98 00 00 */ unsigned char PersistenceInfo[8]; /* +0x006c 7b 98 00 00 */ unsigned char Reserved[12]; /* +0x0074 d6 1e 00 00 */ }; struct _KPRCB { unsigned long MxCsr; /* +0x0000 */ unsigned char LegacyNumber; /* +0x0004 */ unsigned char ReservedMustBeZero; /* +0x0005 */ unsigned char InterruptRequest; /* +0x0006 */ unsigned char IdleHalt; /* +0x0007 */ unsigned char CurrentThread[8]; /* +0x0008 61 97 00 00 */ unsigned char NextThread[8]; /* +0x0010 61 97 00 00 */ unsigned char IdleThread[8]; /* +0x0018 61 97 00 00 */ unsigned char NestingLevel; /* +0x0020 */ unsigned char ClockOwner; /* +0x0021 */ unsigned char PendingTick; /* +0x0022 */ unsigned char PrcbPad00[1]; /* +0x0023 d7 18 00 00 */ unsigned long Number; /* +0x0024 */ unsigned long long RspBase; /* +0x0028 */ unsigned long long PrcbLock; /* +0x0030 */ unsigned long long PrcbPad01; /* +0x0038 */ unsigned char ProcessorState[1456]; /* +0x0040 7e 98 00 00 */ char CpuType; /* +0x05f0 */ char CpuID; /* +0x05f1 */ unsigned short CpuStep; /* +0x05f2 */ unsigned char CpuStepping; /* +0x05f2 */ unsigned char CpuModel; /* +0x05f3 */ unsigned long MHz; /* +0x05f4 */ unsigned char HalReserved[64]; /* +0x05f8 4b 26 00 00 */ unsigned short MinorVersion; /* +0x0638 */ unsigned short MajorVersion; /* +0x063a */ unsigned char BuildType; /* +0x063c */ unsigned char CpuVendor; /* +0x063d */ unsigned char CoresPerPhysicalProcessor; /* +0x063e */ unsigned char LogicalProcessorsPerCore; /* +0x063f */ unsigned long ApicMask; /* +0x0640 */ unsigned long CFlushSize; /* +0x0644 */ void *AcpiReserved; /* +0x0648 */ unsigned long InitialApicId; /* +0x0650 */ unsigned long Stride; /* +0x0654 */ unsigned short Group; /* +0x0658 */ unsigned long long GroupSetMember; /* +0x0660 */ unsigned char GroupIndex; /* +0x0668 */ }; struct _WHEA_ERROR_RECORD { unsigned char Header[128]; /* +0x0000 83 98 00 00 */ unsigned char SectionDescriptor[72]; /* +0x0080 84 98 00 00 */ }; struct _DMA_TRANSFER_INFO_V1 { unsigned long MapRegisterCount; /* +0x0000 */ unsigned long ScatterGatherElementCount; /* +0x0004 */ unsigned long ScatterGatherListSize; /* +0x0008 */ }; struct _DEVOBJ_EXTENSION { short Type; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned char DeviceObject[8]; /* +0x0008 f4 96 00 00 */ unsigned long PowerFlags; /* +0x0010 */ unsigned char Dope[8]; /* +0x0018 8e 98 00 00 */ unsigned long ExtensionFlags; /* +0x0020 */ void *DeviceNode; /* +0x0028 */ unsigned char AttachedTo[8]; /* +0x0030 f4 96 00 00 */ long StartIoCount; /* +0x0038 */ long StartIoKey; /* +0x003c */ unsigned long StartIoFlags; /* +0x0040 */ unsigned char Vpb[8]; /* +0x0048 90 98 00 00 */ unsigned char DependentList[16]; /* +0x0050 7d 1a 00 00 */ unsigned char ProviderList[16]; /* +0x0060 7d 1a 00 00 */ }; struct _SCATTER_GATHER_LIST { unsigned long NumberOfElements; /* +0x0000 */ unsigned long long Reserved; /* +0x0008 */ /* unsigned char Elements[0]; +0x0010 96 98 00 00 */ }; struct _SECTION_OBJECT_POINTERS { void *DataSectionObject; /* +0x0000 */ void *SharedCacheMap; /* +0x0008 */ void *ImageSectionObject; /* +0x0010 */ }; struct _POWER_STATE { /* unsigned char SystemState[0]; +0x0000 9d 98 00 00 */ unsigned char DeviceState[4]; /* +0x0000 9e 98 00 00 */ }; struct _NAMED_PIPE_CREATE_PARAMETERS { unsigned long NamedPipeType; /* +0x0000 */ unsigned long ReadMode; /* +0x0004 */ unsigned long CompletionMode; /* +0x0008 */ unsigned long MaximumInstances; /* +0x000c */ unsigned long InboundQuota; /* +0x0010 */ unsigned long OutboundQuota; /* +0x0014 */ unsigned char DefaultTimeout[8]; /* +0x0018 0e 19 00 00 */ unsigned char TimeoutSpecified; /* +0x0020 */ }; struct _MAILSLOT_CREATE_PARAMETERS { unsigned long MailslotQuota; /* +0x0000 */ unsigned long MaximumMessageSize; /* +0x0004 */ unsigned char ReadTimeout[8]; /* +0x0008 0e 19 00 00 */ unsigned char TimeoutSpecified; /* +0x0010 */ }; /* struct { unsigned char BaseMiddle; +0x0000 unsigned char Flags1; +0x0001 unsigned char Flags2; +0x0002 unsigned char BaseHigh; +0x0003 }; */ /* struct { /* unsigned char BaseMiddle[0]; +0x0000 49 19 00 00 /* unsigned char Type[0]; +0x0000 dd 36 00 00 /* unsigned char Dpl[0]; +0x0000 de 36 00 00 /* unsigned char Present[0]; +0x0000 df 36 00 00 /* unsigned char LimitHigh[0]; +0x0000 4c 19 00 00 /* unsigned char System[0]; +0x0000 4d 19 00 00 /* unsigned char LongMode[0]; +0x0000 4e 19 00 00 /* unsigned char DefaultBig[0]; +0x0000 61 2b 00 00 /* unsigned char Granularity[0]; +0x0000 62 2b 00 00 unsigned char BaseHigh[4]; +0x0000 e0 36 00 00 }; */ struct _KGDTENTRY64 { unsigned short LimitLow; /* +0x0000 */ unsigned short BaseLow; /* +0x0002 */ /* unsigned char Bytes[0]; +0x0004 a8 98 00 00 */ unsigned char Bits[4]; /* +0x0004 aa 98 00 00 */ unsigned long BaseUpper; /* +0x0008 */ unsigned long MustBeZero; /* +0x000c */ long long DataLow; /* +0x0000 */ long long DataHigh; /* +0x0008 */ }; struct _WHEA_ERROR_RECORD_HEADER_VALIDBITS { /* unsigned char PlatformId[0]; +0x0000 53 19 00 00 */ /* unsigned char Timestamp[0]; +0x0000 e3 21 00 00 */ /* unsigned char PartitionId[0]; +0x0000 e4 21 00 00 */ /* unsigned char Reserved[0]; +0x0000 f4 32 00 00 */ unsigned long AsULONG; /* +0x0000 */ }; struct _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR_VALIDBITS { /* unsigned char FRUId[0]; +0x0000 94 26 00 00 */ /* unsigned char FRUText[0]; +0x0000 95 26 00 00 */ /* unsigned char Reserved[0]; +0x0000 dd 27 00 00 */ unsigned char AsUCHAR; /* +0x0000 */ }; struct _KSPECIAL_REGISTERS { unsigned long long Cr0; /* +0x0000 */ unsigned long long Cr2; /* +0x0008 */ unsigned long long Cr3; /* +0x0010 */ unsigned long long Cr4; /* +0x0018 */ unsigned long long KernelDr0; /* +0x0020 */ unsigned long long KernelDr1; /* +0x0028 */ unsigned long long KernelDr2; /* +0x0030 */ unsigned long long KernelDr3; /* +0x0038 */ unsigned long long KernelDr6; /* +0x0040 */ unsigned long long KernelDr7; /* +0x0048 */ unsigned char Gdtr[16]; /* +0x0050 b3 98 00 00 */ unsigned char Idtr[16]; /* +0x0060 b3 98 00 00 */ unsigned short Tr; /* +0x0070 */ unsigned short Ldtr; /* +0x0072 */ unsigned long MxCsr; /* +0x0074 */ unsigned long long DebugControl; /* +0x0078 */ unsigned long long LastBranchToRip; /* +0x0080 */ unsigned long long LastBranchFromRip; /* +0x0088 */ unsigned long long LastExceptionToRip; /* +0x0090 */ unsigned long long LastExceptionFromRip; /* +0x0098 */ unsigned long long Cr8; /* +0x00a0 */ unsigned long long MsrGsBase; /* +0x00a8 */ unsigned long long MsrGsSwap; /* +0x00b0 */ unsigned long long MsrStar; /* +0x00b8 */ unsigned long long MsrLStar; /* +0x00c0 */ unsigned long long MsrCStar; /* +0x00c8 */ unsigned long long MsrSyscallMask; /* +0x00d0 */ unsigned long long Xcr0; /* +0x00d8 */ }; struct _IO_SECURITY_CONTEXT { unsigned char SecurityQos[8]; /* +0x0000 ac 62 00 00 */ unsigned char AccessState[8]; /* +0x0008 3a 98 00 00 */ unsigned long DesiredAccess; /* +0x0010 */ unsigned long FullCreateOptions; /* +0x0014 */ }; struct _DMA_ADAPTER_INFO_V1 { unsigned long ReadDmaCounterAvailable; /* +0x0000 */ unsigned long ScatterGatherLimit; /* +0x0004 */ unsigned long DmaAddressWidth; /* +0x0008 */ unsigned long Flags; /* +0x000c */ unsigned long MinimumTransferUnit; /* +0x0010 */ }; struct _OBJECT_HANDLE_INFORMATION { unsigned long HandleAttributes; /* +0x0000 */ unsigned long GrantedAccess; /* +0x0004 */ }; struct _DISPATCHER_HEADER { unsigned char Type; /* +0x0000 */ unsigned char TimerControlFlags; /* +0x0001 */ /* unsigned char Absolute[0]; +0x0001 94 26 00 00 */ /* unsigned char Wake[0]; +0x0001 95 26 00 00 */ /* unsigned char Coalescable[0]; +0x0001 96 26 00 00 */ /* unsigned char KeepShifting[0]; +0x0001 25 2d 00 00 */ /* unsigned char EncodedTolerableDelay[0]; +0x0001 92 19 00 00 */ unsigned char Abandoned; /* +0x0001 */ unsigned char Signalling; /* +0x0001 */ unsigned char ThreadControlFlags; /* +0x0002 */ /* unsigned char CycleProfiling[0]; +0x0002 94 26 00 00 */ /* unsigned char CounterProfiling[0]; +0x0002 95 26 00 00 */ /* unsigned char GroupScheduling[0]; +0x0002 96 26 00 00 */ /* unsigned char AffinitySet[0]; +0x0002 25 2d 00 00 */ /* unsigned char Reserved[0]; +0x0002 92 19 00 00 */ unsigned char Hand; /* +0x0002 */ unsigned char Size; /* +0x0002 */ unsigned char TimerMiscFlags; /* +0x0003 */ /* unsigned char Index[0]; +0x0003 bf 98 00 00 */ /* unsigned char Inserted[0]; +0x0003 99 26 00 00 */ /* unsigned char Expired[0]; +0x0003 c0 98 00 00 */ unsigned char DebugActive; /* +0x0003 */ /* unsigned char ActiveDR7[0]; +0x0003 94 26 00 00 */ /* unsigned char Instrumented[0]; +0x0003 95 26 00 00 */ /* unsigned char Reserved2[0]; +0x0003 c1 98 00 00 */ /* unsigned char UmsScheduled[0]; +0x0003 99 26 00 00 */ /* unsigned char UmsPrimary[0]; +0x0003 9a 26 00 00 */ unsigned char DpcActive; /* +0x0003 */ unsigned char Lock[4]; /* +0x0000 0f 1c 00 00 */ long SignalState; /* +0x0004 */ unsigned char WaitListHead[16]; /* +0x0008 7d 1a 00 00 */ }; struct _KIDTENTRY64 { unsigned short OffsetLow; /* +0x0000 */ unsigned short Selector; /* +0x0002 */ /* unsigned char IstIndex[0]; +0x0004 c4 98 00 00 */ /* unsigned char Reserved0[0]; +0x0004 c5 98 00 00 */ /* unsigned char Type[0]; +0x0004 c6 98 00 00 */ /* unsigned char Dpl[0]; +0x0004 3d 76 00 00 */ unsigned char Present[2]; /* +0x0004 3e 76 00 00 */ unsigned short OffsetMiddle; /* +0x0006 */ unsigned long OffsetHigh; /* +0x0008 */ unsigned long Reserved1; /* +0x000c */ unsigned long long Alignment; /* +0x0000 */ }; struct _VPB { short Type; /* +0x0000 */ short Size; /* +0x0002 */ unsigned short Flags; /* +0x0004 */ unsigned short VolumeLabelLength; /* +0x0006 */ unsigned char DeviceObject[8]; /* +0x0008 f4 96 00 00 */ unsigned char RealDevice[8]; /* +0x0010 f4 96 00 00 */ unsigned long SerialNumber; /* +0x0018 */ unsigned long ReferenceCount; /* +0x001c */ unsigned char VolumeLabel[64]; /* +0x0020 89 1f 00 00 */ }; struct _SLIST_HEADER { unsigned long long Alignment; /* +0x0000 */ unsigned long long Region; /* +0x0008 */ /* unsigned char Header8[0]; +0x0000 d1 98 00 00 */ unsigned char HeaderX64[16]; /* +0x0000 d2 98 00 00 */ }; /* struct { /* unsigned char MasterIrp[0]; +0x0000 3b 97 00 00 long IrpCount; +0x0000 void *SystemBuffer; +0x0000 }; */ /* struct { /* unsigned char UserApcRoutine[0]; +0x0000 66 72 00 00 void *IssuingProcess; +0x0000 void *UserApcContext; +0x0008 }; */ /* struct { /* unsigned char AsynchronousParameters[0]; +0x0000 d8 98 00 00 unsigned char AllocationSize[16]; +0x0000 0e 19 00 00 }; */ /* struct { /* unsigned char DeviceQueueEntry[0]; +0x0000 db 98 00 00 unsigned char DriverContext[32]; +0x0000 ef 30 00 00 unsigned char Thread[8]; +0x0020 9a 98 00 00 char *AuxiliaryBuffer; +0x0028 unsigned char ListEntry[16]; +0x0030 7d 1a 00 00 /* unsigned char CurrentStackLocation[0]; +0x0040 6d 97 00 00 unsigned long PacketType; +0x0040 unsigned char OriginalFileObject[8]; +0x0048 f2 96 00 00 void *IrpExtension; +0x0050 }; */ /* struct { /* unsigned char Overlay[0]; +0x0000 dd 98 00 00 /* unsigned char Apc[0]; +0x0000 07 98 00 00 void *CompletionKey; +0x0000 }; */ struct _IRP { short Type; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned char MdlAddress[8]; /* +0x0008 05 97 00 00 */ unsigned long Flags; /* +0x0010 */ unsigned char AssociatedIrp[8]; /* +0x0018 d6 98 00 00 */ unsigned char ThreadListEntry[16]; /* +0x0020 7d 1a 00 00 */ unsigned char IoStatus[16]; /* +0x0030 0b 19 00 00 */ char RequestorMode; /* +0x0040 */ unsigned char PendingReturned; /* +0x0041 */ char StackCount; /* +0x0042 */ char CurrentLocation; /* +0x0043 */ unsigned char Cancel; /* +0x0044 */ unsigned char CancelIrql; /* +0x0045 */ char ApcEnvironment; /* +0x0046 */ unsigned char AllocationFlags; /* +0x0047 */ unsigned char UserIosb[8]; /* +0x0048 b8 27 00 00 */ unsigned char UserEvent[8]; /* +0x0050 16 98 00 00 */ unsigned char Overlay[16]; /* +0x0058 da 98 00 00 */ unsigned char CancelRoutine[8]; /* +0x0068 73 98 00 00 */ void *UserBuffer; /* +0x0070 */ unsigned char Tail[88]; /* +0x0078 df 98 00 00 */ }; enum BUS_QUERY_ID_TYPE { BusQueryDeviceID = 0, BusQueryHardwareIDs = 1, BusQueryCompatibleIDs = 2, BusQueryInstanceID = 3, BusQueryDeviceSerialNumber = 4, BusQueryContainerID = 5 }; struct _WORK_QUEUE_ITEM { unsigned char List[16]; /* +0x0000 7d 1a 00 00 */ unsigned char WorkerRoutine[8]; /* +0x0010 21 11 00 00 */ void *Parameter; /* +0x0018 */ }; struct _WAIT_CONTEXT_BLOCK { /* unsigned char WaitQueueEntry[0]; +0x0000 db 98 00 00 */ unsigned char DmaWaitEntry[16]; /* +0x0000 7d 1a 00 00 */ unsigned long NumberOfChannels; /* +0x0010 */ /* unsigned char SyncCallback[0]; +0x0014 53 19 00 00 */ /* unsigned char DmaContext[0]; +0x0014 e3 21 00 00 */ unsigned char Reserved[4]; /* +0x0014 c0 22 00 00 */ unsigned char DeviceRoutine[8]; /* +0x0018 ab 97 00 00 */ void *DeviceContext; /* +0x0020 */ unsigned long NumberOfMapRegisters; /* +0x0028 */ void *DeviceObject; /* +0x0030 */ void *CurrentIrp; /* +0x0038 */ unsigned char BufferChainingDpc[8]; /* +0x0040 9a 97 00 00 */ }; struct _OBJECT_TYPE_INITIALIZER { unsigned short Length; /* +0x0000 */ unsigned char ObjectTypeFlags; /* +0x0002 */ /* unsigned char CaseInsensitive[0]; +0x0002 94 26 00 00 */ /* unsigned char UnnamedObjectsOnly[0]; +0x0002 95 26 00 00 */ /* unsigned char UseDefaultObject[0]; +0x0002 96 26 00 00 */ /* unsigned char SecurityRequired[0]; +0x0002 25 2d 00 00 */ /* unsigned char MaintainHandleCount[0]; +0x0002 11 2d 00 00 */ /* unsigned char MaintainTypeList[0]; +0x0002 98 26 00 00 */ /* unsigned char SupportsObjectCallbacks[0]; +0x0002 99 26 00 00 */ unsigned char CacheAligned[2]; /* +0x0002 9a 26 00 00 */ unsigned long ObjectTypeCode; /* +0x0004 */ unsigned long InvalidAttributes; /* +0x0008 */ unsigned char GenericMapping[16]; /* +0x000c 02 20 00 00 */ unsigned long ValidAccessMask; /* +0x001c */ unsigned long RetainAccess; /* +0x0020 */ unsigned char PoolType[4]; /* +0x0024 4e 98 00 00 */ unsigned long DefaultPagedPoolCharge; /* +0x0028 */ unsigned long DefaultNonPagedPoolCharge; /* +0x002c */ unsigned char DumpProcedure[8]; /* +0x0030 95 97 00 00 */ unsigned char OpenProcedure[8]; /* +0x0038 ce 98 00 00 */ unsigned char CloseProcedure[8]; /* +0x0040 55 97 00 00 */ unsigned char DeleteProcedure[8]; /* +0x0048 21 11 00 00 */ unsigned char ParseProcedure[8]; /* +0x0050 3d 98 00 00 */ unsigned char SecurityProcedure[8]; /* +0x0058 6c 98 00 00 */ unsigned char QueryNameProcedure[8]; /* +0x0060 e8 98 00 00 */ unsigned char OkayToCloseProcedure[8]; /* +0x0068 86 97 00 00 */ unsigned long WaitObjectFlagMask; /* +0x0070 */ unsigned short WaitObjectFlagOffset; /* +0x0074 */ unsigned short WaitObjectPointerOffset; /* +0x0076 */ }; struct _OBJECT_TYPE { unsigned char TypeList[16]; /* +0x0000 7d 1a 00 00 */ unsigned char Name[16]; /* +0x0010 c1 18 00 00 */ void *DefaultObject; /* +0x0020 */ unsigned char Index; /* +0x0028 */ unsigned long TotalNumberOfObjects; /* +0x002c */ unsigned long TotalNumberOfHandles; /* +0x0030 */ unsigned long HighWaterNumberOfObjects; /* +0x0034 */ unsigned long HighWaterNumberOfHandles; /* +0x0038 */ unsigned char TypeInfo[120]; /* +0x0040 ef 98 00 00 */ unsigned char TypeLock[8]; /* +0x00b8 f0 98 00 00 */ unsigned long Key; /* +0x00c0 */ unsigned char CallbackList[16]; /* +0x00c8 7d 1a 00 00 */ }; struct _KTSS64 { unsigned long Reserved0; /* +0x0000 */ unsigned long long Rsp0; /* +0x0004 */ unsigned long long Rsp1; /* +0x000c */ unsigned long long Rsp2; /* +0x0014 */ unsigned char Ist[64]; /* +0x001c 4b 26 00 00 */ unsigned long long Reserved1; /* +0x005c */ unsigned short Reserved2; /* +0x0064 */ unsigned short IoMapBase; /* +0x0066 */ }; enum _OB_OPEN_REASON { ObCreateHandle = 0, ObOpenHandle = 1, ObDuplicateHandle = 2, ObInheritHandle = 3, ObMaxOpenReason = 4 }; struct _WHEA_ERROR_PACKET_V2 { unsigned long Signature; /* +0x0000 */ unsigned long Version; /* +0x0004 */ unsigned long Length; /* +0x0008 */ unsigned char Flags[4]; /* +0x000c f7 98 00 00 */ unsigned char ErrorType[4]; /* +0x0010 f8 98 00 00 */ unsigned char ErrorSeverity[4]; /* +0x0014 77 98 00 00 */ unsigned long ErrorSourceId; /* +0x0018 */ unsigned char ErrorSourceType[4]; /* +0x001c f9 98 00 00 */ unsigned char NotifyType[16]; /* +0x0020 6b 10 00 00 */ unsigned long long Context; /* +0x0030 */ unsigned char DataFormat[4]; /* +0x0038 fa 98 00 00 */ unsigned long Reserved1; /* +0x003c */ unsigned long DataOffset; /* +0x0040 */ unsigned long DataLength; /* +0x0044 */ unsigned long PshedDataOffset; /* +0x0048 */ unsigned long PshedDataLength; /* +0x004c */ }; struct _WHEA_TIMESTAMP { /* unsigned char Seconds[0]; +0x0000 fd 98 00 00 */ /* unsigned char Minutes[0]; +0x0000 fe 98 00 00 */ /* unsigned char Hours[0]; +0x0000 ff 98 00 00 */ /* unsigned char Precise[0]; +0x0000 00 99 00 00 */ /* unsigned char Reserved[0]; +0x0000 01 99 00 00 */ /* unsigned char Day[0]; +0x0000 02 99 00 00 */ /* unsigned char Month[0]; +0x0000 03 99 00 00 */ /* unsigned char Year[0]; +0x0000 04 99 00 00 */ /* unsigned char Century[0]; +0x0000 05 99 00 00 */ unsigned char AsLARGE_INTEGER[8]; /* +0x0000 0e 19 00 00 */ }; struct _WHEA_REVISION { unsigned char MinorRevision; /* +0x0000 */ unsigned char MajorRevision; /* +0x0001 */ unsigned short AsUSHORT; /* +0x0000 */ }; struct _LOOKASIDE_LIST_EX { unsigned char L[96]; /* +0x0000 0a 99 00 00 */ }; struct _FILE_OBJECT { short Type; /* +0x0000 */ short Size; /* +0x0002 */ unsigned char DeviceObject[8]; /* +0x0008 f4 96 00 00 */ unsigned char Vpb[8]; /* +0x0010 90 98 00 00 */ void *FsContext; /* +0x0018 */ void *FsContext2; /* +0x0020 */ unsigned char SectionObjectPointer[8]; /* +0x0028 a2 98 00 00 */ void *PrivateCacheMap; /* +0x0030 */ long FinalStatus; /* +0x0038 */ unsigned char RelatedFileObject[8]; /* +0x0040 f2 96 00 00 */ unsigned char LockOperation; /* +0x0048 */ unsigned char DeletePending; /* +0x0049 */ unsigned char ReadAccess; /* +0x004a */ unsigned char WriteAccess; /* +0x004b */ unsigned char DeleteAccess; /* +0x004c */ unsigned char SharedRead; /* +0x004d */ unsigned char SharedWrite; /* +0x004e */ unsigned char SharedDelete; /* +0x004f */ unsigned long Flags; /* +0x0050 */ unsigned char FileName[16]; /* +0x0058 c1 18 00 00 */ unsigned char CurrentByteOffset[8]; /* +0x0068 0e 19 00 00 */ unsigned long Waiters; /* +0x0070 */ unsigned long Busy; /* +0x0074 */ void *LastLock; /* +0x0078 */ unsigned char Lock[24]; /* +0x0080 15 98 00 00 */ unsigned char Event[24]; /* +0x0098 15 98 00 00 */ unsigned char CompletionContext[8]; /* +0x00b0 0e 99 00 00 */ unsigned long long IrpListLock; /* +0x00b8 */ unsigned char IrpList[16]; /* +0x00c0 7d 1a 00 00 */ void *FileObjectExtension; /* +0x00d0 */ }; enum _DEVICE_RELATION_TYPE { BusRelations = 0, EjectionRelations = 1, PowerRelations = 2, RemovalRelations = 3, TargetDeviceRelation = 4, SingleBusRelations = 5, TransportRelations = 6 }; /* struct { /* unsigned char ListEntry[0]; +0x0000 7d 1a 00 00 unsigned char Wcb[72]; +0x0000 14 99 00 00 }; */ struct _DEVICE_OBJECT { short Type; /* +0x0000 */ unsigned short Size; /* +0x0002 */ long ReferenceCount; /* +0x0004 */ unsigned char DriverObject[8]; /* +0x0008 63 97 00 00 */ unsigned char NextDevice[8]; /* +0x0010 f4 96 00 00 */ unsigned char AttachedDevice[8]; /* +0x0018 f4 96 00 00 */ unsigned char CurrentIrp[8]; /* +0x0020 3b 97 00 00 */ unsigned char Timer[8]; /* +0x0028 b2 98 00 00 */ unsigned long Flags; /* +0x0030 */ unsigned long Characteristics; /* +0x0034 */ unsigned char Vpb[8]; /* +0x0038 90 98 00 00 */ void *DeviceExtension; /* +0x0040 */ unsigned long DeviceType; /* +0x0048 */ char StackSize; /* +0x004c */ unsigned char Queue[72]; /* +0x0050 16 99 00 00 */ unsigned long AlignmentRequirement; /* +0x0098 */ unsigned char DeviceQueue[40]; /* +0x00a0 17 99 00 00 */ unsigned char Dpc[64]; /* +0x00c8 99 97 00 00 */ unsigned long ActiveThreadCount; /* +0x0108 */ void *SecurityDescriptor; /* +0x0110 */ unsigned char DeviceLock[24]; /* +0x0118 15 98 00 00 */ unsigned short SectorSize; /* +0x0130 */ unsigned short Spare1; /* +0x0132 */ unsigned char DeviceObjectExtension[8]; /* +0x0138 19 99 00 00 */ void *Reserved; /* +0x0140 */ }; enum _WHEA_ERROR_SOURCE_TYPE { WheaErrSrcTypeMCE = 0, WheaErrSrcTypeCMC = 1, WheaErrSrcTypeCPE = 2, WheaErrSrcTypeNMI = 3, WheaErrSrcTypePCIe = 4, WheaErrSrcTypeGeneric = 5, WheaErrSrcTypeINIT = 6, WheaErrSrcTypeBOOT = 7, WheaErrSrcTypeSCIGeneric = 8, WheaErrSrcTypeIPFMCA = 9, WheaErrSrcTypeIPFCMC = 10, WheaErrSrcTypeIPFCPE = 11, WheaErrSrcTypeMax = 12 }; enum _MEMORY_CACHING_TYPE_ORIG { MmFrameBufferCached = 2 }; struct _CM_FULL_RESOURCE_DESCRIPTOR { unsigned char InterfaceType[4]; /* +0x0000 20 99 00 00 */ unsigned long BusNumber; /* +0x0004 */ unsigned char PartialResourceList[28]; /* +0x0008 67 65 00 00 */ }; struct _INTERFACE { unsigned short Size; /* +0x0000 */ unsigned short Version; /* +0x0002 */ void *Context; /* +0x0008 */ unsigned char InterfaceReference[8]; /* +0x0010 21 11 00 00 */ unsigned char InterfaceDereference[8]; /* +0x0018 21 11 00 00 */ }; /* struct { unsigned char SecurityContext[8]; +0x0000 71 98 00 00 unsigned long Options; +0x0008 unsigned short FileAttributes; +0x0010 unsigned short ShareAccess; +0x0012 unsigned long EaLength; +0x0018 }; */ /* struct { unsigned char SecurityContext[8]; +0x0000 71 98 00 00 unsigned long Options; +0x0008 unsigned short Reserved; +0x0010 unsigned short ShareAccess; +0x0012 unsigned char Parameters[8]; +0x0018 4b 98 00 00 }; */ /* struct { unsigned char SecurityContext[8]; +0x0000 71 98 00 00 unsigned long Options; +0x0008 unsigned short Reserved; +0x0010 unsigned short ShareAccess; +0x0012 unsigned char Parameters[8]; +0x0018 97 97 00 00 }; */ /* struct { unsigned long Length; +0x0000 unsigned long Key; +0x0008 unsigned char ByteOffset[8]; +0x0010 0e 19 00 00 }; */ /* struct { unsigned long Length; +0x0000 unsigned char FileName[8]; +0x0008 07 21 00 00 unsigned char FileInformationClass[8]; +0x0010 2d 99 00 00 unsigned long FileIndex; +0x0018 }; */ /* struct { unsigned long Length; +0x0000 unsigned long CompletionFilter; +0x0008 }; */ /* struct { unsigned long Length; +0x0000 unsigned char FileInformationClass[8]; +0x0008 2d 99 00 00 }; */ /* struct { unsigned long Length; +0x0000 unsigned char FileInformationClass[8]; +0x0008 2d 99 00 00 unsigned char FileObject[8]; +0x0010 f2 96 00 00 unsigned char ReplaceIfExists; +0x0018 unsigned char AdvanceOnly; +0x0019 unsigned long ClusterCount; +0x0018 void *DeleteHandle; +0x0018 }; */ /* struct { unsigned long Length; +0x0000 unsigned char FsInformationClass[8]; +0x0008 36 99 00 00 }; */ /* struct { unsigned long OutputBufferLength; +0x0000 unsigned long InputBufferLength; +0x0008 unsigned long FsControlCode; +0x0010 void *Type3InputBuffer; +0x0018 }; */ /* struct { unsigned char Length[8]; +0x0000 12 20 00 00 unsigned long Key; +0x0008 unsigned char ByteOffset[8]; +0x0010 0e 19 00 00 }; */ /* struct { unsigned long OutputBufferLength; +0x0000 unsigned long InputBufferLength; +0x0008 unsigned long IoControlCode; +0x0010 void *Type3InputBuffer; +0x0018 }; */ /* struct { unsigned long SecurityInformation; +0x0000 unsigned long Length; +0x0008 }; */ /* struct { unsigned long SecurityInformation; +0x0000 void *SecurityDescriptor; +0x0008 }; */ /* struct { unsigned char Vpb[8]; +0x0000 90 98 00 00 unsigned char DeviceObject[8]; +0x0008 f4 96 00 00 }; */ /* struct { unsigned char Srb[8]; +0x0000 46 99 00 00 }; */ /* struct { unsigned char Type[4]; +0x0000 49 99 00 00 }; */ /* struct { unsigned char InterfaceType[8]; +0x0000 96 1c 00 00 unsigned short Size; +0x0008 unsigned short Version; +0x000a unsigned char Interface[8]; +0x0010 4d 99 00 00 void *InterfaceSpecificData; +0x0018 }; */ /* struct { unsigned char Capabilities[8]; +0x0000 51 99 00 00 }; */ /* struct { unsigned char IoResourceRequirementList[8]; +0x0000 27 43 00 00 }; */ /* struct { unsigned long WhichSpace; +0x0000 void *Buffer; +0x0008 unsigned long Offset; +0x0010 unsigned long Length; +0x0018 }; */ /* struct { unsigned char Lock; +0x0000 }; */ /* struct { unsigned char IdType[4]; +0x0000 5a 99 00 00 }; */ /* struct { unsigned char DeviceTextType[8]; +0x0000 5d 99 00 00 unsigned long LocaleId; +0x0008 }; */ /* struct { unsigned char InPath; +0x0000 unsigned char Reserved[7]; +0x0001 52 19 00 00 unsigned char Type[8]; +0x0008 60 99 00 00 }; */ /* struct { unsigned char PowerState[4]; +0x0000 9d 98 00 00 }; */ /* struct { unsigned char PowerSequence[8]; +0x0000 06 98 00 00 }; */ /* struct { unsigned long SystemContext; +0x0000 unsigned char SystemPowerStateContext[8]; +0x0000 12 29 00 00 unsigned char Type[8]; +0x0008 67 99 00 00 unsigned char State[8]; +0x0010 e9 71 00 00 unsigned char ShutdownType[8]; +0x0018 68 99 00 00 }; */ /* struct { unsigned char AllocatedResources[8]; +0x0000 c3 18 00 00 unsigned char AllocatedResourcesTranslated[8]; +0x0008 c3 18 00 00 }; */ /* struct { unsigned long long ProviderId; +0x0000 void *DataPath; +0x0008 unsigned long BufferSize; +0x0010 void *Buffer; +0x0018 }; */ /* struct { void *Argument1; +0x0000 void *Argument2; +0x0008 void *Argument3; +0x0010 void *Argument4; +0x0018 }; */ /* struct { /* unsigned char Create[0]; +0x0000 26 99 00 00 /* unsigned char CreatePipe[0]; +0x0000 28 99 00 00 /* unsigned char CreateMailslot[0]; +0x0000 2a 99 00 00 /* unsigned char Read[0]; +0x0000 2c 99 00 00 /* unsigned char Write[0]; +0x0000 2c 99 00 00 /* unsigned char QueryDirectory[0]; +0x0000 2f 99 00 00 /* unsigned char NotifyDirectory[0]; +0x0000 31 99 00 00 /* unsigned char QueryFile[0]; +0x0000 33 99 00 00 /* unsigned char SetFile[0]; +0x0000 35 99 00 00 /* unsigned char QueryVolume[0]; +0x0000 38 99 00 00 /* unsigned char FileSystemControl[0]; +0x0000 3a 99 00 00 /* unsigned char LockControl[0]; +0x0000 3c 99 00 00 /* unsigned char DeviceIoControl[0]; +0x0000 3e 99 00 00 /* unsigned char QuerySecurity[0]; +0x0000 40 99 00 00 /* unsigned char SetSecurity[0]; +0x0000 42 99 00 00 /* unsigned char MountVolume[0]; +0x0000 44 99 00 00 /* unsigned char VerifyVolume[0]; +0x0000 44 99 00 00 /* unsigned char Scsi[0]; +0x0000 48 99 00 00 /* unsigned char QueryDeviceRelations[0]; +0x0000 4b 99 00 00 /* unsigned char QueryInterface[0]; +0x0000 4f 99 00 00 /* unsigned char DeviceCapabilities[0]; +0x0000 53 99 00 00 /* unsigned char FilterResourceRequirements[0]; +0x0000 55 99 00 00 /* unsigned char ReadWriteConfig[0]; +0x0000 57 99 00 00 /* unsigned char SetLock[0]; +0x0000 59 99 00 00 /* unsigned char QueryId[0]; +0x0000 5c 99 00 00 /* unsigned char QueryDeviceText[0]; +0x0000 5f 99 00 00 /* unsigned char UsageNotification[0]; +0x0000 62 99 00 00 /* unsigned char WaitWake[0]; +0x0000 64 99 00 00 /* unsigned char PowerSequence[0]; +0x0000 66 99 00 00 /* unsigned char Power[0]; +0x0000 6a 99 00 00 /* unsigned char StartDevice[0]; +0x0000 6c 99 00 00 /* unsigned char WMI[0]; +0x0000 6e 99 00 00 unsigned char Others[32]; +0x0000 70 99 00 00 }; */ struct _IO_STACK_LOCATION { unsigned char MajorFunction; /* +0x0000 */ unsigned char MinorFunction; /* +0x0001 */ unsigned char Flags; /* +0x0002 */ unsigned char Control; /* +0x0003 */ unsigned char Parameters[32]; /* +0x0008 72 99 00 00 */ unsigned char DeviceObject[8]; /* +0x0028 f4 96 00 00 */ unsigned char FileObject[8]; /* +0x0030 f2 96 00 00 */ unsigned char CompletionRoutine[8]; /* +0x0038 73 99 00 00 */ void *Context; /* +0x0040 */ }; struct _KDEVICE_QUEUE_ENTRY { unsigned char DeviceListEntry[16]; /* +0x0000 7d 1a 00 00 */ unsigned long SortKey; /* +0x0010 */ unsigned char Inserted; /* +0x0014 */ }; struct _WHEA_ERROR_RECORD_SECTION_DESCRIPTOR { unsigned long SectionOffset; /* +0x0000 */ unsigned long SectionLength; /* +0x0004 */ unsigned char Revision[2]; /* +0x0008 76 98 00 00 */ unsigned char ValidBits[1]; /* +0x000a 78 99 00 00 */ unsigned char Reserved; /* +0x000b */ unsigned char Flags[4]; /* +0x000c 79 99 00 00 */ unsigned char SectionType[16]; /* +0x0010 6b 10 00 00 */ unsigned char FRUId[16]; /* +0x0020 6b 10 00 00 */ unsigned char SectionSeverity[4]; /* +0x0030 77 98 00 00 */ unsigned char FRUText[20]; /* +0x0034 34 11 00 00 */ }; struct _AUX_ACCESS_DATA { unsigned char PrivilegesUsed[8]; /* +0x0000 45 19 00 00 */ unsigned char GenericMapping[16]; /* +0x0008 02 20 00 00 */ unsigned long AccessesToAudit; /* +0x0018 */ unsigned long MaximumAuditMask; /* +0x001c */ unsigned char TransactionId[16]; /* +0x0020 6b 10 00 00 */ void *NewSecurityDescriptor; /* +0x0030 */ void *ExistingSecurityDescriptor; /* +0x0038 */ void *ParentSecurityDescriptor; /* +0x0040 */ unsigned char DeRefSecurityDescriptor[8]; /* +0x0048 d5 41 00 00 */ void *SDLock; /* +0x0050 */ unsigned char AccessReasons[128]; /* +0x0058 42 19 00 00 */ unsigned char GenerateStagingEvents; /* +0x00d8 */ }; struct _WHEA_ERROR_PACKET_FLAGS { /* unsigned char PreviousError[0]; +0x0000 53 19 00 00 */ /* unsigned char Reserved1[0]; +0x0000 e3 21 00 00 */ /* unsigned char HypervisorError[0]; +0x0000 e4 21 00 00 */ /* unsigned char Simulated[0]; +0x0000 68 26 00 00 */ /* unsigned char PlatformPfaControl[0]; +0x0000 69 26 00 00 */ /* unsigned char PlatformDirectedOffline[0]; +0x0000 5a 2b 00 00 */ /* unsigned char Reserved2[0]; +0x0000 1b 38 00 00 */ unsigned long AsULONG; /* +0x0000 */ }; struct _DEVICE_CAPABILITIES { unsigned short Size; /* +0x0000 */ unsigned short Version; /* +0x0002 */ /* unsigned char DeviceD1[0]; +0x0004 53 19 00 00 */ /* unsigned char DeviceD2[0]; +0x0004 e3 21 00 00 */ /* unsigned char LockSupported[0]; +0x0004 e4 21 00 00 */ /* unsigned char EjectSupported[0]; +0x0004 68 26 00 00 */ /* unsigned char Removable[0]; +0x0004 69 26 00 00 */ /* unsigned char DockDevice[0]; +0x0004 5a 2b 00 00 */ /* unsigned char UniqueID[0]; +0x0004 16 27 00 00 */ /* unsigned char SilentInstall[0]; +0x0004 17 27 00 00 */ /* unsigned char RawDeviceOK[0]; +0x0004 18 27 00 00 */ /* unsigned char SurpriseRemovalOK[0]; +0x0004 19 27 00 00 */ /* unsigned char WakeFromD0[0]; +0x0004 1a 27 00 00 */ /* unsigned char WakeFromD1[0]; +0x0004 1b 27 00 00 */ /* unsigned char WakeFromD2[0]; +0x0004 5c 2b 00 00 */ /* unsigned char WakeFromD3[0]; +0x0004 5d 2b 00 00 */ /* unsigned char HardwareDisabled[0]; +0x0004 1d 27 00 00 */ /* unsigned char NonDynamic[0]; +0x0004 df 36 00 00 */ /* unsigned char WarmEjectSupported[0]; +0x0004 82 99 00 00 */ /* unsigned char NoDisplayInUI[0]; +0x0004 83 99 00 00 */ /* unsigned char Reserved1[0]; +0x0004 5f 2b 00 00 */ unsigned char Reserved[4]; /* +0x0004 84 99 00 00 */ unsigned long Address; /* +0x0008 */ unsigned long UINumber; /* +0x000c */ unsigned char DeviceState[28]; /* +0x0010 85 99 00 00 */ unsigned char SystemWake[4]; /* +0x002c 9d 98 00 00 */ unsigned char DeviceWake[4]; /* +0x0030 9e 98 00 00 */ unsigned long D1Latency; /* +0x0034 */ unsigned long D2Latency; /* +0x0038 */ unsigned long D3Latency; /* +0x003c */ }; enum DMA_COMPLETION_STATUS { DmaComplete = 0, DmaAborted = 1, DmaError = 2, DmaCancelled = 3 }; struct _POWER_SEQUENCE { unsigned long SequenceD1; /* +0x0000 */ unsigned long SequenceD2; /* +0x0004 */ unsigned long SequenceD3; /* +0x0008 */ }; struct _DMA_ADAPTER_INFO { unsigned long Version; /* +0x0000 */ unsigned char V1[20]; /* +0x0004 8f 99 00 00 */ }; struct _DMA_TRANSFER_INFO { unsigned long Version; /* +0x0000 */ unsigned char V1[12]; /* +0x0004 92 99 00 00 */ }; enum _WHEA_ERROR_TYPE { WheaErrTypeProcessor = 0, WheaErrTypeMemory = 1, WheaErrTypePCIExpress = 2, WheaErrTypeNMI = 3, WheaErrTypePCIXBus = 4, WheaErrTypePCIXDevice = 5, WheaErrTypeGeneric = 6 }; struct _DRIVER_EXTENSION { unsigned char DriverObject[8]; /* +0x0000 63 97 00 00 */ unsigned char AddDevice[8]; /* +0x0008 8a 99 00 00 */ unsigned long Count; /* +0x0010 */ unsigned char ServiceKeyName[16]; /* +0x0018 c1 18 00 00 */ }; struct _DRIVER_OBJECT { short Type; /* +0x0000 */ short Size; /* +0x0002 */ unsigned char DeviceObject[8]; /* +0x0008 f4 96 00 00 */ unsigned long Flags; /* +0x0010 */ void *DriverStart; /* +0x0018 */ unsigned long DriverSize; /* +0x0020 */ void *DriverSection; /* +0x0028 */ unsigned char DriverExtension[8]; /* +0x0030 48 97 00 00 */ unsigned char DriverName[16]; /* +0x0038 c1 18 00 00 */ unsigned char HardwareDatabase[8]; /* +0x0048 07 21 00 00 */ unsigned char FastIoDispatch[8]; /* +0x0050 ca 98 00 00 */ unsigned char DriverInit[8]; /* +0x0058 66 97 00 00 */ unsigned char DriverStartIo[8]; /* +0x0060 73 98 00 00 */ unsigned char DriverUnload[8]; /* +0x0068 1f 98 00 00 */ unsigned char MajorFunction[224]; /* +0x0070 9d 99 00 00 */ }; struct _FAST_MUTEX { unsigned char Count[8]; /* +0x0000 0f 1c 00 00 */ void *Owner; /* +0x0008 */ unsigned long Contention; /* +0x0010 */ unsigned char Event[24]; /* +0x0018 15 98 00 00 */ unsigned long OldIrql; /* +0x0030 */ }; struct _DMA_ADAPTER { unsigned short Version; /* +0x0000 */ unsigned short Size; /* +0x0002 */ unsigned char DmaOperations[8]; /* +0x0008 90 97 00 00 */ }; struct _IO_RESOURCE_REQUIREMENTS_LIST { unsigned long ListSize; /* +0x0000 */ unsigned char InterfaceType[4]; /* +0x0004 20 99 00 00 */ unsigned long BusNumber; /* +0x0008 */ unsigned long SlotNumber; /* +0x000c */ unsigned char Reserved[12]; /* +0x0010 fa 18 00 00 */ unsigned long AlternativeLists; /* +0x001c */ unsigned char List[40]; /* +0x0020 d9 6d 00 00 */ };